* Posts by Velv

2756 publicly visible posts • joined 21 Jan 2010

London officials declare cabbie-bothering Uber is legal – for now

Velv

I've seen a lot made about the accusation about these apps being a "taximeter", but what is the license constraint on how a private hire vehicle actually charges for a journey.

Is it a fixed price agreed in advance? (guess not)

Is it based on time?

Is it based on an old fashioned ruler measuring a distance on a map?

Are there fixed fees between waypoints that gets added up?

Is it just the driver suggesting a figure off the top of his head (feels like it sometimes).

That is the crux of the problem. While the licence may say that "private hire cars cannot use taximeters", what does it say should be used instead? And an app on a phone is not a taximeter. A taximeter is a well defined calibrated physical entity that is hard connected to the vehicle, and that is covered by law.

TrueCrypt considered HARMFUL – downloads, website meddled to warn: 'It's not secure'

Velv
Boffin

Re: If you were the NSA...

Interesting concept, but I can see where this particular one is likely to fail - the crowd funded investigation into the integrity of TrueCrypt. Assuming the investigation finds (presumably 7.1a) to be good then everyone in the world can trust that the correctly signed version is safe, and you end up with a tool the NSA can never discredit.

Techies have long had a "toolbox" that often has older but known reliable tools in it. El Reg had just such an article this week,.

Authorities swoop on illicit Wolverhampton SPAM FARM

Velv
Trollface

Re: sizeable fine?

Nothing solves the problem of repeat offenders quite as effectively as execution.

Help. Mailing blacklists...

Velv
Joke

"I can't email my wife. Or reply to my wife"

Am I missing something here? What's the problem?

NOT APPY: Black cab drivers enraged by Hailo as taxi tech wars rage on

Velv
Boffin

Re: GPS is shite ....

@Conor Turton

Depends on what you consider the true purpose of the "Satnav". Is it to pick the "shortest" or "quickest" route to a destination, or do you consider its purpose is simply to get you to the destination using a reasonable route.

You've proven your own point - your 20 years of knowledge of routes will always beat someone with no knowledge no matter what map or tech you give them (for now). But we're not far from every vehicle constantly feeding its position and destination to a central control point that can then route vehicles across the available network. Works for planes today (well, mostly), so it is only a matter of time.

Velv
Boffin

Re: Monopoly

Totally agree it's time to change and move with technology.

And while not trying to defend the status of Cabbies and The Knowledge, The Knowledge is extremely large, being some 25,000 streets and 4,000 short routes joining waypoints, that each Cabbie (in theory) needs to memorise.

But it is all just knowledge. Data and logic. Something technology is particularly adept at handling.

So perhaps the London Taxi license needs to change - protect the Cabbies right to pick up fares on the street, and require both Cabbie and Private Hire to have a "London SatNav" with the logic built in. (Consider this my patent application)

Look, pal, it’s YOUR password so it’s YOUR fault that it's gone AWOL

Velv
Facepalm

Love the theory...

I have just this week done said, although with a different product.

My experience so far is mixed, not so much with the password manager but with the websites. I set the password manager to use 16 characters, and all four character types.

About half the websites I visited to set a new password wouldn't accept such a complex password.

eBay faces multiple probes into mega-breach

Velv
Pirate

There but for the grace of God go I...

The critical thing we in IT need to take from this is to review our own security and procedures.

There's been several high profile companies caught out in recent months. We're screaming and shouting because we expected better of them.

But are we sure our own house is in order?

No, I mean really sure - like go and check Mr CIO, it's your job on the line.

Chip and SKIM: How dodgy crypto can leave shoppers open to fraud

Velv
Boffin

Re: Absolute rubbish

"This paper is scaremongering..."

Like many academic papers this one is dealing in a large amount of theory based on observed facts. So while it may not be a widespread attack vector, it highlights that EMV has weaknesses and is therefore not 100% free from fraud.

OpenSSL was secure and verified by its open nature - until it turned out it wasn't. EMV is closed source, so who knows what vulnerabilities actually lie in the code.

iPhone-stroker-turned-fandroid sues Apple over iMessage text-slurpery

Velv

iMessage - taking a perfectly good service and screwing it up completely.

When you send a text message (SMS) you have come to expect it will be delivered in a reasonable time frame subject to connectivity.

If you install a messaging app (e.g. whatsapp), you expect it to deliver in a reasonable time frame subject to connectivity.

iMessage broke both models. It hooks into the interface for SMS giving the impression you are sending an SMS but is in fact sending a different type of message. In theory it falls back to SMS if it can't iMessage, but I found very quickly this was unreliable. So iMessage remains firmly switched OFF. Apple - please go away and rethink.

Welcome to Heathrow Terminal, er, Samsung Galaxy S5

Velv
Joke

Ha, you fell for it. Today is April 1st on the Chinese calendar.

Urinating teen polluted 57 Olympic-sized swimming pools - cops

Velv
Coat

Crime and Punishment

There was somewhere in the UK (think it was Leeds) that had a special Q-tank trunk that used to roam the streets at night. If the Police caught someone relieving themselves in an inappropriate place they called up the Q-tank and you had to clean up your own pee.

Why Q-tank? Because q follows p.

Velv
Boffin

Not having been in a chemistry lab for 20 years, what is the accepted principle these days for "flushing" a vessel.

It certainly wan't to simply empty it, since there would be a high likelihood of residue remaining. I seem to remember it required three fills to achieve a point where it was considered sufficiently "diluted" to have removed any chance of cross contamination.

And what is the specific gravity of urine since it isn't pure water, and wouldn't this lead to it either riding on the surface of the water (and thus would be dragged across the ground at the edges as the water receded out of the lake), or it would sink to the lowest point (and thus probably sink into a puddle before being drained, returning into the lake when refilled).

Apple updates OS X Mavericks, iTunes, Podcasts for iOS

Velv
Trollface

It's not an update, they're giving away free software!!!!!!

Surprise! Google chairman blasts EU's privacy ruling

Velv
Childcatcher

Re: So the attack has started

The paedophile and the dodgy politician are only asking for certain aspects of their history to be removed, not everything about them. In other words they are attempting to censure the truth.

If someone wants to be "forgotten" and have absolutely ZERO presence on the Internet, then perhaps there should be a mechanism. But to be permitted to selectively choose what's being listed - I don't think that's what the EU intended, and it opens the world to huge risk of misinformation.

Feature-phones aren't dead, Moto – oldsters still need them

Velv
Childcatcher

All we're missing to cover off all the Oldies is a mobile with a dial (and I realise there are readers here who haven't got a clue what I'm talking about).

Tick-tock, Jock: Dock schlock for mock-stock in ad-hoc shop squawk

Velv
Coat

Re: Nearly there already

Yeah, it's own mint, no, not really.

The Royal Bank of Scotland, the Clydesdale Bank and the Bank of Scotland have the right to issue their own notes, but must deposit an equivalent value of Sterling with the Bank of England.

The notes are "minted" by De La Rue in Basingstoke, which last time I looked wasn't in Scotland.

It's also interesting to note (pun intended) that Lloyds Bank now trade under the Bank of Scotland license and FCA approval because of the note issue, and technically there are more "Scottish" banks in the UK than "English" banks :)

<grin> In theory I agree about the poond just being a design change, but the reality is that all but one of the "Scottish" banks will need to move their registration to England before Independence.

<smiles> Just occurred to me though. If the Pavaroti is a tenner, which denomination is the Salmon(d) and the Sturgeon?

Silicon Valley bod in no-hire pact lawsuit urges court to reject his own lawyers' settlement

Velv
Facepalm

If you enter into a Class Action then you join the CLASS and you accept the result of the class action.

If you disagree with the settlement negotiated by the class action, then the only thing you can do is seek to take the class action to court, and if enough of you disagree then you start a class action against the first class action. But you'll probably find such action is prohibited by the terms of joining the first class action.

Presumably the plaintiffs lawyers get a percentage of the settlement, so given its in their best pockets to negotiate the best deal they've probably already reached that point and suspect the court would award a lower amount.

Cost-cutting Barclays bank swings axe on 5,600 IT and ops bods

Velv
Facepalm

6,400 staff times how many years average service each = an awful lot of SITE knowledge being lost. The one think bean counters never factor into "knowledge" - off the shelf IT stuff is easy, anyone can read google. It's the internal customisations that sting.

brrr, brrr. brrr, brrr.

"Hello, is that Barclay's Stockbrokers? I'd like you to sell my entire holding in Barlays please"

Danger, Will Robinson! Beware the hidden perils of BYOD

Velv
Boffin

Re: USB encryption

TrueCrypt in Traveller mode.

You load it on the unencrypted USB stick, then use it to create an encrypted container on the stick.

Biggest problem I usually find is that the client site has blocked the use of USB full stop, not that you can't run the encryption component.

Researcher says Apple fibs about crypto for iOS email attachments

Velv
Boffin

There's actually a very good Apple document on the security of iDevice hardware and iOS (various versions) which explains just what is and what isn't covered.

In summary, the device is encrypted using keys generated at user install (new, or after a factory reset) and the private keys are kept in a tamper-proof chip. So you cannot open an iPhone, strip out the chips and read the storage in another device.

Once you set a password, it's linked with the keys and grants you access to the content.

As always, if you've got the keys, you can get into the vault. If you then put a hole in the wall of the vault (e.g. jailbreak the phone) then don't be surprised if someone else can see in.

Microsoft puffs up OneDrive, now with 1TB per head for biz users

Velv

Re: Time Saver

There's programmers here, can we just use variables instead:

var_OS is crap. I hate everything var_OS_Vendor does. I love NOT_var_OS.

(Please copy and use in comments for any article about var_OS_Vendor and/or var_OS.

Yes, 99% of the comments will then be identical. But they are anyway, at least this way they'll look tidy.)

Reg hack hacked off by iPhone 5 repair notice

Velv

Re: I'm eligible.

It might be worth going through the paperwork to prove that you were eligible just in case it does break in the future.

Velv
Mushroom

And what about all the 3GS phones that have the same problem?

Everyone I know who still has their 3GS reports that the sleep/wake no longer works.

Dell charges £5 to switch on power-saving for new PCs (it takes 5 clicks)

Velv
Joke

Ah, see, you missed the point here. Dell is actually being run by Michael O'Leary :)

The base price is REALLY cheap. But to actually get something useful you need to pay for all the "add ons". And it works, because sadly there are bean counters out there who still see only the base price and not the TCO.

Look behind you, 'declining' sub-$5bn iPod. The iWatch has come... to EAT YOU

Velv

Watch sales have been in severe decline since invention of the mobile phone. There is a generation out there for whom receiving their first watch (and learning to tell the time) was not the big deal some of us older (ha!) generations had as a right of passage.

The iWatch will sell. Will it replace anything else in the line up? Given everything in the line up currently has its own uses, probably not.

Apple patent LOCKS drivers out of their OWN PHONES

Velv

So assuming the patent is actually granted, Apple has no option but to release it into the wild and let everybody use the technology covered by the patent for free.

Charging a licensing fee to competitors would be damaging to public safety.

So, just how do you say 'the mutt's nuts' in French?

Velv
Childcatcher

les caniches griffonnages

The Poodles Doodles - much more refined :)

Apple fanbois eat static as Beeb, Sky web stream vids go titsup on iOS

Velv
Trollface

Re: At the risk of being downvoted

Please don't feed the trolls...

A black box for your SUITCASE: Now your lost luggage can phone home – quite literally

Velv
Terminator

Loving the negative comments.

Think bigger picture.

This is a perfect example of the Internet of everything, and is a stepping stone to everything being connected.

SkyNet is not far away from self-awareness.

Commonwealth Bank in comedy Heartbleed blog FAIL

Velv
FAIL

I loved the front page news article from Cater Allen Bank (part of Santander):

"A number of news agencies and websites are currently reporting about the discovery of the 'Heartbleed Bug', a virus within software which is used by hackers as a way of compromising online security."

A virus. VIRUS. FFS.

Top Secret US payload launched into space successfully

Velv
Coat

Re: Isn't it funny...

American rockets. Russian rockets.

All the parts are made in Taiwan anyway.

It may be ILLEGAL to run Heartbleed health checks – IT lawyer

Velv
Headmaster

Authorised

And is there a definition of "authorised" scanning.

Just who in a business needs to engage with a third party and authorise them to run the scan. Is it the Head of IT Security. Is it the Head of IT? Is it the CEO who needs to authorise the scan? Is it actually agreed in writing in the job description of each person, or is there a gap which could leave the third party vulnerable to prosecution if it turns out it was the wrong person who request the scan?

France bans managers from contacting workers outside business hours

Velv
Coat

When has a law ever stopped a French person doing whatever they want?

Lycamobile launches 'unlimited' 4G for £12 a month. Great. Now where can I get a signal?

Velv
FAIL

"Three remains the best deal for fondleslabs"

I haven't read the T&Cs of this Three deal, but from previous experience of Three this might not be all it seems.

Three previously offered a SIM Zero - you only pay for what your use, no up front fee. Calls and texts were at a reasonable rate (if you made any, which you don't from a tablet), and you could buy a bundle of data (1GB was £5, good at the time).

Catch - you weren't actually allowed to use the SIM in a data device. It was for phones (not smartphones) only (Three's words). So while in theory it was great for fondleslabs (no calls), you weren't permitted by the T&Cs. I fail to see the difference - data is data, the device is irrelevant. But Three want your money for not providing a service.

Wanna attend Apple's June developers' shindig? Ask yourself, 'Do I feel lucky?'

Velv
Paris Hilton

"Who'd pay to got to an Apple Developer Conference?"

People pay $$$$$$$ every day to go to conferences. Not just IT, Sometimes they pay individually, sometimes their company pays, sometimes a vendor pays.

Just because you don't like the subject doesn't mean somebody else shouldn't have a party. Or more likely just because you're not on the gravy train doesn't mean someone else shouldn't enjoy the steak!

(And while Apple might not be highest on my preference list of conferences, if anyone wants to invite me for free I'll happily attend)

Dimwit hackers use security camera DVRs as SUPER-SLOW Bitcoin-mining rig

Velv
Boffin

"Mining BitCoins these days requires a specialist rig featuring graphic cards so using low-powered embedded systems is not terribly practical."

Mining BitCoins requires CPU cycles. End of story. Where you obtain those CPU cycles from is your problem, and yes if you want to do it in one "CPU" then a GPU is one place.

It's like the old urban legend of the guy who collected up all the fractional payments the company rounded down on its payroll. A lot of tiny amounts soon adds up.

UK cops: Keep yer golden doubloons, ad folk. Yon websites belong to pirates

Velv
Pirate

"The database will be available to brands and companies that buy ads"

I own a UK Registered Limited Company.

Google sent me a voucher for £75 worth of AdWords, I might think about using it.

How do I get access to the list?

(tee hee)

No, Minister. You CAN'T de-Kindle your eBooks!

Velv
Pirate

Interesting stance by some people here expecting to be able to move their purchased ebook from one format to another.

If you bought a good old fashioned dead tree book written in English, would you expect to be able to translate it into a dead tree version in French for free? I strongly suspect that would be in breach of copyright law.

Don't get me wrong - it would make sense that if I buy the right to read the text of an author (which is really what copyright is about) then I should be able to transfer my right to that text between different media as long as I only have one copy. But that's not the way any law is currently written.

ISPs' pirate-choking blocking measures ARE effective – music body

Velv
Pirate

Re: Dropped 11% in countries with blocking

Or alternatively, how much has it gone UP in countries without the blocking.

All those VPNs need to terminate somewhere ...

MPs blast HMRC for using anti-terrorism laws against whistleblower

Velv
Big Brother

This is a PERFECT example of why rushed laws are regularly seriously flawed.

Westminster are bad at it, but the Holyrood Scottish Parliament (under both leaderships) has been worse, banning "this" and mandating "that".

Whichever way Scotland votes this year, both Westminster and Holyrood are going to need to learn to write laws without pandering to the Daily Mail et al. Laws should only be there as a last resort for those people who cannot be part of a functioning communal society, not to shape the general "good".

Middle England's allotments become metric battlefield

Velv
Childcatcher

Re: 10' pole

"Spare the rod and spare the child"

<gulp!>

QUIDOCALYPSE: Blighty braces for £100 MILLION cost of new £1 coin

Velv
Coat

Re: £500 to update each parking machine?

Golden opportunity here, they should be upgrading the machines to take BitCoin at the same time

What kid uses wires? FCC supremo angry that US classrooms are filled with unused RJ45 ports

Velv
Childcatcher

Won't somebody please think of the children.....

What is all that wireless traffic doing to their brains and bodies. Studies have generally fallen on the side of "it's safe" to use a wireless device. But what if you multiply the dose by 30 people in a room. Then you up the power of the base station (and add more base stations) to handle the additional load.

I'm not a conspiracy theorist and I use wireless devices regularly. But I can see where this is going...

Bitcoin bust litigants fling sueballs at Japanese bank

Velv
Pirate

If you will insist on dealing outside the regulated currency markets then you're going to get stung when they collapse/walk off with your money.

The banks won't deal in fiddling small change, and nobody's ever owned enough Ningi's to have one Pu.

Morrisons supermarket hit by MASSIVE staff payroll data robbery

Velv
Headmaster

Re: Not one to ask BUT

"Why was the payroll data even linked / put on there website server?"

It wasn't.

It was "stolen and then uploaded onto a website"

Velv
Terminator

Re: Theft not hack

Doesn't matter if it was theft or hack, were sufficient measures put in place to attempt to prevent the loss of the data?

Since >80% of data loss incidents occur from inside, that is where the focus of protection should be.

It's hard to restrict the DBA of the HR system from accessing the data, but you wouldn't expect the web admin to have access. Edward Snowdon demonstrates that you can never prevent every loss, but only the ICO report will reveal if this was a leak through bad controls as well as bad people.

Velv
Coat

Re: A little thing that bugs me...

"Plate Glass Maintenance Engineer"

Err, Window cleaner

FANBOIS' EYES ONLY: United Airlines offers FREE MOVIES on iOS kit

Velv
Pirate

Given Android's open nature, surely someone has written an App/Browser/Driver that makes it pretend to the outside world to be an iOS device?

(and just in case there isn't, I hereby declare this to be MY intellectual property as of now, timestamped to me here on El Reg, despite Apple trying to patent it in four years time).

YOINK! Toyota reveals – then DENIES – Apple CarPlay by 2015

Velv
Big Brother

"Never believe a rumour until it's officially denied" - Sir Humphrey Appleby