* Posts by heyrick

6637 publicly visible posts • joined 20 Dec 2009

UK ministers to push anti-encryption laws after election

heyrick Silver badge

Re: thoughts on future regulation of encryption

"Otherwise, it'll simply improve over time."

By what metric? The benefit of a computer playing Go, Chess, etc is that while the game is famously complex with incredible numbers of permutations, the rules are clearly defined, the objective that must be achieved to win is also fairly clearly defined (take/trap the King, etc). All a learning machine needs is to have a sufficient number of games to figure out the best way to get from a known starting position to a desired winning end when playing an opponent whose exact moves cannot be entirely predicted in advance. That's the skill, responding to a "random" behaviour of the human player to keep the best advantage (which probably requires tracking player moves to work out what the human is attempting to do).

Now let's turn our attention to a learning system for spotting terrorists. There's no defined starting situation. There's no defined end game. There's no defined list of behaviours that may occur in a message in order to indicate terrorist activity. "Don't forget to put the cake in to bake at three o'clock this evening" posted on Mumsnet could be a message from one scumbag to another - they're hardly going to say "Westminster, 3pm, bang" are they? So... We don't exactly have a start or an end or even a middle. Good luck getting a machine to "learn" that.

heyrick Silver badge

Fuck the level of threat. Fuck encryption, or not. Fuck the Tories.

$Person was known to police, was known to police, Was. Known. To. Police.

Want to quell the rising anger? Sort that out. We're all getting quite sick of hearing it.

IT firms guilty of blasting customers with soul-numbing canned music

heyrick Silver badge

Re: er - call holding in *2017*

"what kind of neolithic outfits are requiring their customers to hold ?"

Let me see. It's probably a premium number. You're on hold, to said number, waiting waiting waiting.

Ketching.

Kill Google AMP before it kills the web

heyrick Silver badge

Google's News app recently changed to use AMP.

For an ACCELERATED mobile service, it's funny how the adverts load first...

America's drone owner database grounded: FAA rules blown out of sky

heyrick Silver badge

The cops will shoot on sight.

Don't they already?

Dell BIOS update borks PCs

heyrick Silver badge

Re: Dell BIOS update may be a security fix

"And even then only after you have properly tested the floppy controller and the drive,"

WTF? It's too hard to load the data, then perform a CRC check to ensure it loaded correctly before trying to dump it into the Flash? What is this, the '90s?

heyrick Silver badge

"Wonder what they have to do to get zero stars?"

Indeed. Wonky update bricks the machine, won't boot, no sort of fix, may be expected to pay for a repair. And that gets two stars?!?

Why Microsoft's Windows game plan makes us WannaCry

heyrick Silver badge

"Would you really want a hospital where the many different machines ran many different OS's?"

Why is that a problem? A device running a specific piece of application software ought to present an easy to use UI that takes over the screen, so it will appear that only it is running. As long as the UI is clear and logical, it shouldn't matter what the underlying OS is. You're expected to use an MRI scanner to image people's insides, not run Solitaire in a corner of the screen...

Do we need Windows patch legislation?

heyrick Silver badge

Would we excuse the manufacturer and allow unsafe vehicles on the road?

I guess this rather depends upon what the defect actually is.

Oh, and note, Windows (various versions) did not "develop a defect" as the question posits. The defect was always there, just not noticed until it was possibly too late.

For my money, the bad actors here are the NSA. In keeping such vulnerabilities secret, and infinitely more so for the utter utter stupidity of getting their little wizzles ripped off.

For now, GNU GPL is an enforceable contract, says US federal judge

heyrick Silver badge

Re: One point of criticism though...

"the GPL pushes that all the way downstream."

Assuming the company bothers to pay attention. I emailed MCLSamar a while ago for the GPL code for my buggy-as-hell IP camera.

No response.

I'm not even remotely surprised...

PC repair chap lets tech support scammer log on to his PC. His Linux PC

heyrick Silver badge

Re: Answer the ringing doorbell, rescue the potatoes etc.....

"They would regularly waste hours doing this until they got bored doing this and reverted back to old fashioned mockery & abuse."

Dunno about you, but I think my free time is more valuable than that...

Crooks can nick Brits' identities just by picking up the phone and lying

heyrick Silver badge

Re: Bank security is a complete joke

"Worst of all, when calling back they expect you to provide your security details when they have offered no evidence that they really are calling from the bank. When challenged, they invariably seem utterly bewildered and refuse to provide any info, endlessly repeating the mantra of 'Data Protection'"

A few years ago my bank called me. After identifying themselves as such, I asked for the name and amount of any of my direct debits. They kinda freaked out so I politely said they had completely failed to verify that they were in fact my bank. I didn't wait for a response, I hung up.

Team Macron praised for feeding phishing spies duff info

heyrick Silver badge

Re: On fake news

I recently came across this, which if there's any truth in it, is pretty fucked up behaviour... https://www.theguardian.com/technology/2017/may/07/the-great-british-brexit-robbery-hijacked-democracy

Hackers emit 9GB of stolen Macron 'emails' two days before French presidential election

heyrick Silver badge

Re: So, just another day in the office...?

"If it does tilt the election and undo the 20 point advantage, that indicates that the French people happen to agree with the Russians about the candidates. There's nothing wrong with that."

Okay. Fair enough. Let's see a dump of Le Pen's data. Then the people can compare one with the other. Without equality, it's a blunt and obvious attempt to subvert the elective process. And while you're all pointing at Russia, to dump the data just prior to the media embargo suggests some inside information in the French process.

[Disclaimer: ex-pat living in France]

User loses half of a CD-ROM in his boss's PC

heyrick Silver badge

Working as an office nerd a billion years ago...

...there was an incident with a CD-ROM and sticky tape. Exactly as described. Even at the slow 4x speeds as was current back then, the disc came apart, the tape stuck to internal stuff while spinning and, well, I dunno what exactly happened but myself and the photocopy girl took the thing apart and that little plastic lens was nowhere to be found.

Amazon tweaks so-called 'assisted suicide' publishing contracts to ink EU deal

heyrick Silver badge

10% of Amazon's total annual turnover

1, Is this the figure they quote when not paying taxes everybody thinks they should, or the figure used to work out how much the upper management gets in bonuses?

2, Is that Amazon Amazon everywhere Amazon, or Amazon France vs Amazon Germany vs Amazon UK vs (continue until bored).

Apple fanbois are officially sheeple. Yes, you heard. Deal with it

heyrick Silver badge

Re: Couldn't be arsed. Elevenses.

"I'm bored of it and the SNP."

Eh? An independence referendum, an EU referendum, a local election, and an upcoming general election following the one two years ago?

In essence, you're complaining because you were expected to get out and vote for something five times in the last three years? No wonder democracy is screwed.

Drunk user blow-dried laptop after dog lifted its leg over the keyboard

heyrick Silver badge

Re: Meow

"First I picked up the frog and then the frog peed in my eye."

Second question - is "frog" a little green/brown animal, or a euphemism for a person of a certain nationality?

heyrick Silver badge

Re: Piss poor service?

"Thats pretty bad, what if someone else picks it up and gets to the data?"

Funny how so many people are having a go at Jim for tossing the thing. Maybe they'd like to consider the actions of a manager (hence has strings to pull) who did something solid and then hands a biohazard off to IT "to be fixed".

Touching that is more than he should be expected to do, telling the manager to stuff it is more than his job is worth. And being discreet be could hardly take it out back with a sledgehammer to ensure the drive is unreadable before binning.

Sorry. I'm with Jim. It's not *him* that created the mess, just him expected to sort it out.

Mastercard launches card that replaces PIN with fingerprint sensor

heyrick Silver badge

Just a little question...

... If we're expected to remember 11 digit phone numbers of family members and friends, why so much objection to a longer PIN? It seems ludicrous that payment codes are still but four digits long.

Trump's lips sealed on surveillance, complains EU privacy chief

heyrick Silver badge

Concern as to whether new administration will abide by Obama's promises

Oh come on. Trump doesn't even abide by his own promises, be just makes it up as he's going along...

Will the MOAB (Mother Of all AdBlockers) finally kill advertising?

heyrick Silver badge

Re: A stupid question

"Without it, El Reg (for example) is a mess. But I'd be happy to support El Reg."

I have Ghostery (Firefox on Android), and while I have no particular qualms about adverts on El Reg, they're still blocked because it isn't El Reg providing the content. It is doubleclick and addaptive and whoever is behind the scenes there. No matter how much I might want to trust the domain I'm looking at, that's not who serves the advertising content and... No. I don't trust random third parties. Just no.

heyrick Silver badge

A chrome plugin

So let's get this straight... In order to try out a widget that highlights advertising, I need to download a browser created by one of the biggest advert pushers around and then install it so god only knows what information can be sent back for analysis and tracking?

You're nineteen days late. Better luck next year.

Why Firefox? Because not everybody is a web designer, silly

heyrick Silver badge

Re: Chrome works better

"Usability and reliability trumps principles when you've got to get stuff done."

I stick with Firefox. If a site has trouble, I just go and don't come back. Their loss.

However a rear of these comments (stupid sound issues, compatibility, reliability, etc) perfectly illustrates why a browser monoculture is a bad thing. You can whinge about the bad decisions of Firefox, but more importantly you can choose something else. If there was only One Browser, you would be beholden to the whims and desires of the company that produce it, you would get the features they think cool and that's that.

Fixing your oven can cook your computer

heyrick Silver badge

Re: Firewall

"on its third motherboard"

There's your problem right there. It's a motor, a heater, a valve, and a pump along with various mechanical sensors.

Our machine gave up last weekend after a long life (bought in 1984). It was entirely mechanical and just worked. I'm dreading finding something useful to replace it with.

NASA agent faces heat for 'degrading' moon rock sting during which grandmother wet herself

heyrick Silver badge
WTF?

Degrading...?

The two hour humiliation was "degrading", but telling the world that your name is Joann Davis, you're 74, and you peed yourself while being interrogated by a power-happy jerk whilst trying to sell a bit of Moon (!) is not?

Leaked NSA point-and-pwn hack tools menace Win2k to Windows 8

heyrick Silver badge

What seems clear to me...

1, for all the talk of backdoored encryption, we simply cannot trust state actors to keep a secret secret; and encryption with a hole is only going to work whilst the hole is closed

2, while it may serve the state actors to keep an arsenal of ways to hack into things, the failure to report these problems becomes in itself an act of sheer negligence when these hacks end up being released to the public

3, way to go America, great job breaking it hero......

Back to the Future 2: Gasp! America's trade watchdog discovers the risks of 'free' movies

heyrick Silver badge

We recently downloaded movies from five sites that offered them for free

So he's basically admitting to downloading movies to see if they contained malware...

...can we all use that excuse too?

UK.gov cuts deal with Microsoft to avoid £15m post-Brexit price hike

heyrick Silver badge

A Govt body managing to negotiate a saving on an existing contract. :)"

Not really. Government pays -x% and we little people get to pay +x% to make up the shortfall.

FCC kills plan to allow phone calls on planes – good idea or terrible?

heyrick Silver badge

Re: Thank goodness.

"It could be the spouse with a sudden medical condition you're worried about"

It could well be, but the chance of that actually being that truth, as opposed to some blowhard who uses the phone like on The Apprentice (held on palm, shouted at) is going to be vanishingly small.

Machine vs. machine battle has begun to de-fraud the internet of lies

heyrick Silver badge

Who could possibly design a good fake news algorithm?

Brexit, that all the polls said would not happen...did.

Trump becoming President, that common sense says should not happen...did.

I'm beginning to wonder if the news is fake or if it is reality that is fake.

Forget Mirai – Brickerbot malware will kill your crap IoT devices

heyrick Silver badge

Re: telnet??!!?

"you can connect to a web server's port 80 and, knowing the right sequences, pretend to be a simple web browser."

Back around turn of the millennium, I used to use telnet to log into my pop3 server to check mail. A few simple commands, and it was often quicker than starting up the email software.

Now? Thwarted by encrypted connections and no longer necessary since mobile phones and tablets can do mail checking as a background task.

heyrick Silver badge

Re: @Doctor Syntax - make buyers more careful in future

"and many companies will buy them wholesale and brand them.

I am in the process of hacking my cheap IP camera and it seems that there are many "brands" that just take what I think is a Wancam and push in their own front end with branding - I've pretty much done that myself by changing the rubbish web UI to give me a 2K page instead of 160K with loads of pointless scripting such as ~90K of JQuery...

I wonder if the rebrand companies even have access to the source code, or is it a matter of patching in a few company specific details?

I dream that one day companies will be more open with regards the firmware (cough, isn't it basically hacked about bits of Linux with an even more hacked version of GoAhead baked in?, cough) but sadly I think that day will be a long time coming... so acceptable (if not outstanding) hardware will continue to be let down by half assed software that is barely touched beyond "it works enough to make an actual product".

US border cops must get warrants to search citizens' gadgets – draft bipartisan law emerges

heyrick Silver badge

then they may pick somewhere else for their holidays.

Already done. There are several places in America I'd like to see. There are several other countries with a better outlook. Sorry, but one doesn't start a happy holiday by bending over.

Europe supplants US as biggest source of child abuse hubs

heyrick Silver badge
Coat

Re: Hosted or placed on someone elses system

"and what the rest of the world sees based on their own subjectivity

Well, they could always publish their list of URLs so we can go make our own minds up...

BOFH: The Boss, the floppy and the work 'experience'

heyrick Silver badge

Re: Being on a placement myself...

"has not only learned to make tea but also to drink it"

I almost always make my own tea. Biggest mistake in life[*] is to have somebody else make your tea. It's never exactly right.

* - some exaggeration, maybe

Yee-hacked! Fired Texan sysadmin goes rogue, trashes boot business

heyrick Silver badge
Happy

"He was arrested shortly after the attack by the FBI"

Okay, I know what you meant to say, but really this would read so much better the other way around, like "The FBI arrested him shortly after his attack" or something. As it stands, it looks like the FBI performed the attack. Wait! Maybe they did? Maybe they're just using the admin as a fall guy?

...

div id="april_first_message" - cute!

Reg now behind invisible HTML5 Bitcoin paywall

heyrick Silver badge

The problem with El Reg is that half of the stories could easily qualify as April Fools.

I mean, wasn't there one just the other day about a bunch of countries on this side of The Atlantic demanding secure encryption with a convenient back door? <sigh>

PC survived lightning strike thanks to a good kicking

heyrick Silver badge

"There was an almighty thunderclap. I jumped out of my skin and kicked the case of the PC under the desk!"

Surely by the time the sound made it to his ears and caused a physical reaction, it'd be way too late for the computer if it was a direct strike?

New plastic banknote plans now upsetting environmental campaigners

heyrick Silver badge
Facepalm

Re: WTF?

"STOP PRESS; the world hasn't ended with A50." - I never said it did. I said that A50 would surely be of greater importance than whatever it is they make money out of.

"Have a cup of tea and then get on with the rest of your life." - as a Brit living in Europe, that'll require a lot of tea...

heyrick Silver badge

WTF?

Given that article 50 was just handed to the EU, and May is still making threats she can't sensibly back up, don't people think that right now there are much more important issues of concern?

Squirrel sinks teeth into SAN cabling, drives Netadmin nuts

heyrick Silver badge

Re: Squirrels. Mice. Rats.

Last year, lights went really dim at home. I popped open the junction box under the meter and found that there was only around 100V instead of 220ish on two phases, and 80V on the other phase. Phone call to ESC AND in a few hours they turned up, verified that it wasn't us. With the house out of circuit (something they can do by measuring before the meter), they confirmed that one or was dead.

Took them all day to fix it. The scenario - a large bird across the medium voltage lines (what is that, 22kV or something?) shorted which caused an arc powerful enough to sever the wire, which then caused the step down transformer to fail trying to run off only two phases (prob when milking equipment kicked in in nearby farms).

An animal in the wrong place can cause all sorts of havoc.

After London attack, UK gov lays into Facebook, Google for not killing extremist terror pages

heyrick Silver badge

"can and must do more,"

Exactly. But unlike blaming Google and social media, how about realising that the nutjob was, once again, "known" to the spooks and had already been linked to extremism?

How about, oh I dunno, instead of signing off on every idea to pillage citizen's privacy, the PM and HomeSec understand that the security agencies are clearly incapable of doing their job with their current level of staffing. Sort that out first.

FYI anyone who codes outside work: GitHub has a contract to stop bosses snatching it all

heyrick Silver badge

"sign away the intellectual property rights to any work created while employed, even on personal time."

Who would sign such a contract in the first place?

Why are creepy SS7 cellphone spying flaws still unfixed after years, ask Congresscritters

heyrick Silver badge

Re: replacing dangerous things

This presupposes that there are more capable politicians...

Tech titan pals back up Google after 'foreign server data' FBI warrant ruling

heyrick Silver badge

"arguing that since the suspects' data would be "searched" on US soil, there would be no "extraterritoriality"

Somebody please mail a link to this article to the EU. This is about as much as the Americans consider or care about anybody else's laws.

Yes, the data could be ransacked on US soil, but it isn't there. What "could" or "would" counts for nothing. Only what is. And what is is, yet again, some minor ranking judge listening to the three-letters and then ruling that US law applies everywhere. Again.

Naming computers endangers privacy, say 'Net standards boffins

heyrick Silver badge

Kiseki, Nozomi, Hiroko, Azumi...

Some of my device names. I can understand naming devices after the cast of Buffy, Lost, or whatever your favourite programme is...

...but naming it with it's descriptor after your own name, like "John's Fridge"? OMG.

MAC randomization: A massive failure that leaves iPhones, Android mobes open to tracking

heyrick Silver badge

Re: @bazza

"Still, I remain sceptical of this "GPS drains battery" meme.

Currently using a Samsung S7, but had similar behaviour with a Sony Xperia.

Using Google Maps navigation, I'm not sure if it is the GPS chip, constant chatter to the mothership, or a lot of graphics grunt, but the activity heated up the phones appreciably. In the case of the S7, I'd be tempted to say "dramatically". That much heat, you can imagine what that did to battery life...

So I use GPS only when needed and keep it off otherwise. Same with WiFi, that's only on when I'm at home. And Bluetooth is only on when required. It's common sense, surely?

Brit ISP TalkTalk blocks control tool TeamViewer

heyrick Silver badge

Re: Re : I wonder where the scammers got hold of their client telephone numbers from.. India?

"Talk Talk should have at least made this block controllable via a switch/optional-domain-white-list in the user account,

Doesn't that imply that they might have a clue what they're doing instead of, you know, turning everything off at one time...

Oops! 185,000-plus Wi-Fi cameras on the web with insecure admin panels

heyrick Silver badge

I have one of these cameras

I've managed to lock it down better by tweaking the startup file to write a new hosts file with stuff locked to localhost, iptables to nobble the UDP, and a new password pushed in after x seconds.

Not perfect but it's a start and anyway it is mostly a toy.

However - something to add to the disclosure. The service's DDNS lets the camera register itself so am address like abc1234@provider.com redirects to the camera. Well, it is configured with a cleartext HTTP request and the update password is banked into the camera's binary. I have used it to update arbitrary cameras (those marked as not being used) which means that it would be a doddle to hijack somebody else's camera.