* Posts by Tom 38

4344 publicly visible posts • joined 21 Jul 2009

Software can be more secure, says NIST, and we think we know how

Tom 38

Re: Start by actually writing your own code!

It could also be totally WRONG, which is the point. You're placing your trust in a third party; that third party can betray you, intentionally or not. Ever heard the phrase, "If you want something done right..."

Nah, BS. If you code to a library and the library is shit, you can replace it. Better still, you have a fixed interface between your code and the library code making it explicitly clear what has to be replaced.

PS:

In software development, the full phrase is "If you want something done right use the same library that everyone else uses for doing that and don't dick around re-implementing it yourself".

Tom 38

Re: Start by actually writing your own code!

I would argue the exact opposite. Using a library means taking code that has been designed to do a purpose and using it for that purpose. The library will have a clear and sensible API to achieve the goal you are attempting (and if it doesn't, don't use that library, use another or adjust your mentality).

NIH is more of a problem to be honest. With NIH you get the same problems with wrapper libraries, except there is no well thought out interface there at all, and each wrapper of NIH code makes it increasingly more difficult to debug and determine what is happening. Worst, each wrapper will probably not be self contained in its own library, but inter-coupled with other code in your project.

Also, as the author of more than one wrapper library myself, the purpose of a wrapper library is to take a complex and powerful library API and condense it to the point where it does the few things you need the library to do in a concise and clear manner. It makes writing code simpler whilst using the power of the original library.

For instance, I have an application that has to sign, verify, decrypt and encrypt XML documents in a bunch of places. I wrote a small wrapper library around libxmlsec1 which provides the API needed by our application without needing to go in to the nitty gritty of how to make those calls solely using libxmlsec1. In fact, this is a great example as libxmlsec1 is itself actually a wrapper around openssl and libxml2.

Google proudly regards dented shovel as Flash lies supine on the floor

Tom 38
Facepalm

A few months back, Comcast "upgraded" and "improved" Xfinity web applications, which never before had the "benefits" of Flash.

Chillax, the use of Flash is just temporary whilst they get the Silverlight version fully working.

Local TV presenter shouted 'f*cking hell' to open news bulletin

Tom 38

Disappointed

All these posts, and not one mention of "Go Fuck Yourself, San Diego".

UK Parliament waves through 'porn-blocking' Digital Economy Bill

Tom 38

Re: VPN sales are going to skyrocket around the world.

Actually I go to Shanghai quite regularly, and don't fancy getting honeypotted by some charming young woman from the CPC who happens to know all my predilections...

Actually scratch that, sounds pretty good.

Tom 38

Re: VPN sales are going to skyrocket around the world.

Opera comes with integrated unlimited free VPN - you just tick the box in browser settings thereby rendering this legislation pointless.

Hmm, giving all my browsing information to the UK government vs giving all my browsing information to the Chinese government, decisions, decisions

Ofcom to force a legal separation of Openreach

Tom 38

Re: FTTP vs FTTC

BT are currently going through every possible avenue to rely solely on copper, because it is "good enough" for "enough" people. They are spending a lot of money on g.fast and FTTC, because that maximises their profits.

The investment doesn't come from thin air; mostly it came from us, either as subscribers or taxpayers. Should our investment go to propping up BT's profitability, or should we be investing in a fit for purpose network that improves the productivity and efficiency of the country.

It's like we are filling a lake by walking backwards and forwards to the river with a cup, and being pleased that we can now rent a larger cup, when we need to build an aqueduct. Building an aqueduct is not that appealing if you are the biggest cup rental company.

Tom 38

Re: FTTP vs FTTC

Well bully for you, but have you considered that not everyone lives as close to their cabinet as you do? My parents have suffered with less than 2 Mbps for years, but now are "blessed" enough now to get FTTC - they now get 9 Mbps.

Obviously better than 2, but still not even what our new USO will be. Was it really worth spending money upgrading rural areas to FTTC when the "solution" is not actually solving anything?

Tom 38

Re: Be careful what you wish for!

Ofcom requires 999 to work in the event of a power cut to the premises. POTS does this by having the pairs powered from the switch. How do we manage this with FTTP?

I have choice of BT FTTP or Hyperoptic FTTP, the BT FTTP has a battery backup unit attached to the optical modem.

Hyperoptic aren't required to provide USO, so their "phone line" option is a VOIP router with no BBU.

Hackers crack Liechtenstein banks, demand ransoms

Tom 38

Re: Same thing here.

The account data is leaked to the public. Everyone involved -bank and customers- is named an shamed, and prosecuted/heavily fined for tax evasion. Politicians involved get the boot.

Check out what happened to Hervé Falciani; after he leaked account data from HSBC in Switzerland, the Swiss sentenced him to 10 years in prison

'Data saturation' helped to crash the Schiaparelli Mars probe

Tom 38
Joke

Re: Bloody software...

worst of all [I] have an MBA

Master of Business Administration or MacBook Air?

Admittedly, both are pretty shameful

Emulating x86: Microsoft builds granny flat into Windows 10

Tom 38

Re: Baby... Bathwater?

Some of them, sure. Lucene is a single process kind of library though, and it is plenty fast enough.

I am/was being a bit disingenuous however - the one thing they all these high performance Java applications have in common is that they have no GUI. Java GUIs suck very very badly in performance terms, which makes ignorant people think that Java sucks very very badly in performance terms.

I don't mind; it's dead handy seeing who the ignorant people are.

Tom 38

Re: Baby... Bathwater?

Now ask yourself why no one writes a high-performance program in something like Java.

So things like Hadoop, Solr, Lucene, Hive, Pig, Spark, Sqoop....

HTC and OnePlus spruce up flagships for Santa's sack

Tom 38

Re: OnePlus pricing

A good chunk of that is due to the change in £:$ rate though. OnePlus 2 at launch was £290 / $399. This OnePlus 3T is $439, but £399 - the dollar price has gone up by just $40, but the sterling cost has gone up £109.

Make Britain Great Again!

LAKE OF frozen WATER THE SIZE OF NEW MEXICO FOUND ON MARS – NASA

Tom 38

Re: Units

Assuming I've got my maths right, Lake Superior is approximately 38,535 Windermeres

Superior = 12,100 x 10^9 m³

Windermere = 314 x 10^6 m³

UK.gov flings £400m at gold standard, ‘full-fibre' b*&%*%£$%. Yep. Broadband

Tom 38

Re: What are people doing that needs fibre?

As someone with lovely symmetric gigabit fibre (thank you hyperoptic), mostly what I'm doing with the connection is sweet FA. Every time I think of something to do on it, one click and it is already done. Its good.

For work it is good. I can be video conferencing with clear picture and no dropouts, regardless of what other people in the house are doing - gaming, streaming or torrents just don't affect it.

Happy days for second-hand smartphone sales

Tom 38
Joke

Re: The market for used phones is exploding

If the market for used phones is exploding, does that mean that Samsung is cornering the market?

TfL to track Tube users in stations by their MAC addresses

Tom 38

I understand basic analysis just fine, but I also understand that people do not all move at the same speed, urgency or efficiency. Nor can you always get on the first available train.

The error bars on transit time through the stations are sufficient to make it mostly not possible to identify the route a user takes. With your simplistic basic analysis, you cannot tell if someone took a slower route, had to wait for a train with enough space to board, requires assistance walking...

Tom 38

You use your card and start at point A and go to point B with a start and end time. [...] You can quite easily combine the above with train and tube times to work out the route take.

Utter bollocks.

Tom 38

Re: Why are they measuring?

What they want to know is how users are transiting the network. Currently, they could see a user got in to the underground in Liverpool St and got out at Paddington, but they have no idea whether they took "Circle Line clockwise", "Circle Line anti-clockwise", "Hammersmith and City", "Central to Oxford Circus, then Bakerloo", "Central to Notting Hill Gate then District", "Circle to KX, Piccadily to Earls Court, Circle to Paddington" (wouldn't recommend that one)...

Microsoft ❤️ Linux? Microsoft ❤️ running its Windows' SQL Server software on Linux

Tom 38

Re: Drawbridge

*QUICKLY*! *PORT*! *THEIR*! *WINDOWS*! *APPLICATION*! *FOR*! *LINUX*!!!

At some point bob, your brain is going to explode from all this random excitement that you feel for seemingly almost anything.

I don't mind, I just want to point out that I'm not cleaning it up.

Samsung flames out as Chinese march on

Tom 38
Thumb Up

Oppo

Love my OnePlus2, their only problem is that its good enough that I'm not remotely interested in a OnePlus3

AI gives porn peddlers a helping hand

Tom 38

Re: CFCM?

First find the definition for CFNM, that should make CFCM understandable.

And with one stroke, Trump killed the Era of Slacktivism

Tom 38
Joke

Re: One thing we can count on with Trump

It might be fun, seeing Carly as FCC chair... or in charge of the patent office... or running something ELSE that she'd be really knowledgeable about.

Yeah! Are there any federal enterprises that needs their employees to be made run down and demotivated and destroy innovation and value? Who has the popcorn!

Tom 38

Re: So true

My own take: we won't really know what a President Trump will do, or undo, until he takes office.

Which is funny, if you consider he has just spent the last 15 months and an estimated $795 million apparently telling voters what he would do if elected....

Harder, better, faster, stronger (apparently). The IronWolf goes Pro

Tom 38
Gimp

IRØN WOLF

https://iamironwolf.bandcamp.com/

Seems like a German metal band

Iron wolves and wooden horses

Creeping in fading light

Eating our young

Under Chronos' eyes

We are running with the black fang cult

We are running with the black fang cult tonight

We are running with the black fang cult

We are running with the black fang cult tonight

On global territory

We eat the rich

Crashing parties with nail bombs

We paint the town red

$10m of Bangladeshi SWIFT heist ended up in Filipino Casino

Tom 38

Re: Putting it on red

When it lands on black, you lose that stake, but when it lands on red you win it back again. If there were no "0" or "00" pockets, then P(R) = 0.5, and E(R) = 0*.

For a wheel with 38 pockets, P(R) = 0.47ish, E(R) = -0.05ish.

IE, if you had a million pounds, and made 1000 bets on red, each of £1000, you would expect to have £950,000 at the end of the process.

* In fact, this is true of every bet on the roulette table. With no nul pockets, every bet pays its probability in odds.

The Reg seeks online community manager

Tom 38

Re: Seems like a thankless job. Hope the Reg pays well...

Duties will involve getting the comment boards rolling on DevOps, Storage and HPE stories..

Microsoft's chaps slap Slack chat brats with yackety-yak app

Tom 38
Pint

Depressing or uplifting?

I can see why MS are trying this; MS do a full stack of business apps, fully integrated chat is missing. I can also see why this will fail - it only covers corps which have fully bought in to the MS ecosystem, whilst other offerings will support what you need to do regardless of what email server or version control your business decides to use.

This leads on to the title: as I was reading the article, I was thinking "Hmm, this isn't for me." I thought about it some more, and the reason is that there are no MS products that I use anymore for any purpose, work or personal. Whatever MS do now is entirely orthogonal to my existence. So is this depressing, because I've disappeared in to a niche ghetto of computing, or uplifting, because I never have to concern myself with the Empire again?

America has one month to stop the FBI getting its global license to hack

Tom 38

Re: Extradition Treaties

But they didn't have 12 trials, so why have 12 sentences? When the judge is totting up the convictions and determining the tariff, once you get to "Not until you are dead, no parole", you can't make that worse.

Exit through the Gift Shop? US copyright chief was assigned to shop till, tweeting

Tom 38
Thumb Up

Congress relies on the Register’s expert advice

... as do we all

Hard-up Brits 'should get subsidy for 10Mbps'

Tom 38

Why not cut that landline with some pliers, and see how much you "never use it".

He does have a slight point, the line rental charge is supposed to be used for maintenance of the line and provision of service, but has been steadily increasing to also be a base part of the telcos profits. Do you really think the costs of maintaining the network have increased 50% or more since 2008?

Tom 38

As an aside I (and doubtless many others) would be delighted (and probably amused) if you were to tell us just how much " fibre to every address" would cost.

Rough estimate, you could probably do it for around £20bn, roughly the same as Crossrail. Even if it cost double that, it would be less than the cost of HS2.

Cost depends a lot on how you do it; with enough political will it would become cheaper to do, eg legislating simple land access for telegraph poles rather than negotiating with each land owner.

I'd much rather that we invested in modern future proof network capability that benefit every household in the UK, and allowing more remote working rather than making the trains a bit better*. High speed, low latency, symmetrical internet connections transforms what the internet can be used for, and would place Britain at the forefront of the modern world. We have cheap government borrowing at the moment, we should use it.

* Crossrail is actually tremendously important, as London is pretty full and needs it. HS2 is a proper vanity project though, the problems with congestion on the railways outside of London can be fixed without the fapfest that is HS2.

Four reasons Pixel turns flagship Android mobe makers into roadkill

Tom 38

OnePlus 3. Does everything a Pixel does, but has dual SIM, SD card support, and only costs £329 quid instead of £699. It's a shame the battery isn't replaceable :(

Unlucky Luckey: Oculus developers invoke anti-douchebag clause, halt games for VR goggles

Tom 38

Trump is being falsely accused of "bigotry, white supremacy, hate". If you are going to accuse someone of those then you must support your accusations with evidence that he espouses those views. Do not let false allegations influence how to vote.

Trump provides the evidence almost every single time he opens his pie hole or fires up twitter.

Google's Chrome cloaks Pirate Bay in red screen of malware death

Tom 38

Re: Extra Torrent

Best one is google: "foo bar filetype:torrent"

Early indications show UK favouring 'hard Brexit', says expert

Tom 38

Re: "how we label our food"

I've even seen digital scales being used that weight, oh very small amounts, such a gramme or so.

They get dead touchy when you ask to see their calibration certificates though

Mac malware lies in wait for YOU to start a vid sesh...

Tom 38

Kind of ruins the whole video chatting experience though.

Londoners react with horror to Tube Chat initiative

Tom 38

Re: Urbanity

it's not cities or large towns in general; it's mainly bloody London. Glaswegians and Mancunians and Durhamites and Yorkers and Belfasters (Belfastians? Belfishers?) will happily chat with each other.

Cmon. This is about chatting on the tube - the main reason we don't talk on the tube is that it is almost fucking impossible to do so. When I get on the tube with friends, often we don't talk on the tube because you have to get intimately close to each other or shout extremely loudly.

Most of the times that we regularly take the tube (eg, for commuting), it's so crowded that the only thing you can get close to is someone else's armpit, because you are crammed in like sardines.

It's unpleasantly warm in summer; I wear separate travelling clothes of shorts and t-shirt and then get changed in to work gear afterwards otherwise I get to work dripping with sweat.

Pretty much the only way to cope with that crowdedness, noise and heat is to zone out and pretend you are somewhere, anywhere else. Music helps. Reading helps. Having an awkward shouted conversation - even with a friend, let alone some random stranger - does not.

Other cities in the UK simply aren't comparable. People don't really talk on the Paris Metro either.

Tom 38

Re: Ah, the French... Ou est le chat?

I only remember this because of the time it happened to my sister, she was having dinner with her French exchange's family, the mother asked if she wanted any more food, and she replied "Non merci, je suis pleine".

Now, stick that in to most translation tools, and it will say it means "No thanks, I'm full", however in more common usage it means "No thanks, I'm pregnant".

As she was 13 at the time, a little embarrassing...

Pokemon NO! Hospital demands ban on virtual creatures after addicts invade private wards

Tom 38

Re: pokemon

Yeah it's Nurse Joy (joi meaning woman doctor in Japanese, its a pun). Every Nurse Joy (Joy is their family name) usually has a Chansey pokemon.

Tom 38

There is no way in the game to see the distance nor direction of Pokemon listed as "nearby sightings". It's not like there is a radar that says "Walk this direction to see an Onix". If you can see one on the map, then you can already catch it from your current location.

So I really don't understand this argument. Are they wandering into gardens on the off chance there is a pokemon there?

Eric Raymond revisits his biggest mistake, updates 'Pilot' language after 20 years

Tom 38

Re: Software luminary?

"An article or two" is a curious way of describing The Cathedral and The Bazaar", which is the quintessential distributed open source manifesto that has shaped the open source world.

Bit like saying Marx, pfft, he wrote a few pamphlets.

USB-C is now wired for sound, just like Sir Cliff Richard

Tom 38

Re: I wonder how does electrocution through your ears feel like

USB-C has a max of 20 volts of direct current, I believe. If you think that will kill you

As my physics teacher used to say, its the volts that thrill, and the amps that kill.

British bloke bailed after 'hacker plunders Pippa Middleton's iCloud'

Tom 38

Re: Evil bloke

iphone + ipad user with little interest in technology asks "how can I see the photos I took on my phone on my tablet", 3 clicks later..

Samsung intros super-speedy consumer SSDs, 'fastest M.2s ever'

Tom 38

Re: Lovely for a micro server

If that's what you want, wouldn't you go for NVMe?

Opera debuts free VPN built into desktop browser

Tom 38

Re: An interesting move

I don't think that applies to all BBC content. For example Dr Who credits say "BBC Cymru"

Sadly most BBC shows these days are not produced like that, starting in the 90s the BBC increasingly outsourced production and show development to 3rd parties (particularly Saint Bob's Hat Trick), who then subsequently owned the format.

I think for some shows, they do buy the global rights, but then use BBC Worldwide to flog them as effectively as they can. I'm pretty sure GBBO is distributed by BBCW internationally.

Microsoft snubs alert over Exchange hole

Tom 38

Re: It's not about Microsoft WANTING to fix it ..

At $JOB, we (IT) maintain ~90% of our websites. The final 10% are those that other departments run because they don't want to go through our processes, eg Marketing want a WordPress site, so they use a WP hosting company, with us providing DNS. Similarly, some of our hosted SaaS providers, like our HR system, payroll etc, use our sub-domains for branding.

This kind of exploit means that even if you secure all your own servers, you are relying on third parties to not be compromised to prevent an attack on your mail server. Not good at all.

Admittedly, we don't use Outlook..

FBI overpaid $999,900 to crack San Bernardino iPhone 5c password

Tom 38

Re: Fragile evidence...

OK, I'll bite: IANALBIPOOTI?

I got as far as I Am Not A Lawyer But I

Play One On TV

Although I'm not sure about the final I..

Sorry Nanny, e-cigs have 'no serious side-effects' – researchers

Tom 38

Re: Addiction

I have no problem with smokers switching to vaping but I have plenty of problems when finding that there is a substantial vaping population who've never smoked - they were pulled in because of the "cool" factor.

How precisely are you finding this out, when numerous studies have shown that it simply isn't happening?