* Posts by mevets

83 posts • joined 7 Mar 2012


Cocaine, psychedelics, DMT? They sure knew how to party 1,000 years ago: Archaeologists make startling discovery



is in the americas.

Apple, Samsung feel the pain as smartphone market slumps to lowest shipments in 5 YEARS



On a recent flight, the family in front of me included two school aged children. At one point the kids were bickering over two tablets; a Huawei (mediapad?) and an iPad. I was surprised that neither wanted the iPad. I assume he family were East-Asian/Canadians (it seems a bit odd to ask), and I wondered if the great pumpkins bellicose wanking is engendering the sort of devotion for Huawei that has served Apple so well. It may be that the gear is really great, but it felt like a "leafs vs sens"(*) thing.

(*) hockey reference, both teams are shit.

Double trouble for Lyft after share price drop sparks class action lawsuits claiming hype


Ride sharing.

I had a friend with the ambition of being a prostitute. To establish this as a proper career, they figured they should follow this business model: first give it away for free; once demand (ahem) rose, start charging an amount considerably less than the established industry to convert market share into cash flow; then finally to establish demand-based pricing to match the desires of their clientele and file a public offering.

Any guesses how this turned out?

No, Microsoft's not buying Adobe. ADBE is its edgy take on a smarter network storage gateway


A box?

They made a box? Is Jack Barker behind this? Please tell me the logo on it looks like a dick.

While this CEO may be stiff, his customers are rather stuffed: Quadriga wallets finally cracked open – nothing inside


A plane....

falling out of helicopters is the traditional Canadian fake death: https://en.wikipedia.org/wiki/Bre-X

Intel to finally scatter remaining ashes of Itanium to the wind in 2021: Final call for doomed server CPU line


Re: I remember...

Intel going to Sun to get a Solaris port for Itanium. Intel ended up running away in a huff, after Solaris had booted on it, because Sun wasn’t going to give up on SPARC. Weird people.


Many difficult questions lie ahead.

Will there be a farewell party for iTanic? With Pizza and balloons? Will one large do, or two mediums?

A few reasons why cops haven't immediately shot down London Gatwick airport drone menace


Re: Get another drone

Maybe this is a marketing stunt by the drone manufacturers -- how do you get rid of pesky drones; buy more drones. Clever.

In 2018, Facebook is the villain and Microsoft the shining light, according to techies


Re: MS is a shining light?

Is this the event you are referring to: https://www.zdnet.com/article/stop-the-lies-the-day-that-microsoft-saved-apple/ ? I can’t believe I linked a ziff-davis article; oh the humanity.

There are lots of reasons to slam apple, with their moonie like rituals and stuff, but this probably isn’t one of them.

And lo! Tim Cook becometh tech Jesus. But with more awards


Oh please...

Isn’t this getting a bit tired?

I know Apple’s PR pantomimes are more cringe inducing than Ricky Gervais feigning modesty, but at least they are trying to take advantage of the right things. In contrast, the slime oozing out of Google, Facebook, Oracle, Uber, Sherpa, 500, Transformation, .... can’t even pretend to know what the right thing is.

Leave Timmy Alone!

Tesla autopilot saves driver after he fell asleep at wheel on the freeway


Re: The question to ask is whether self-driving trucks will ever be a thing.

The primary goal of autonomous vehicles is to increase productivity by reducing employment in the transportation industry. There is no money to be made in making fewer cars, the sharing concept was naive (to be kind). Which innocent to kill is similar nonsense; they will kill indiscriminately and at their discretion ( although I liked Alastair Dabb's kill the country musicians first). If driverless cars flow down to the individuals, it is more likely to be driven by commercial interests forcing non autonomous vehicles to be illegal; so that a container full of steaks isn't wasted when one of Musks monsters flattens a family.

Thanksgiving brings together Apple's Siri and Google Assistant


A christmas wish...

Instead of “Hey Siri” or “Ok Google”, that all phones could wake up to their master crying “where is my f-ing phone!”....

3 is the magic number (of bits): Flip 'em at once and your ECC protection can be Rowhammer'd

Paris Hilton

Re: "researchers can claim a repeatable demonstration"

In defence of the OP, ( and to flog a dead horse), but in the original paper, Kim et. al. (978-1-4799-4394-4/14/$31.00 c 2014IEEE): Table 5 in section 6.3 shows up to 4 bit errors in a single word. This is called out as evidence that Single-Error-Correction-Double-Error-Detection is insufficient to mitigate this.

The OP's 'duh, yeah' was quite correct, and the follow-up criticism was quite wrong. The article here is sadly lacking -- I don't think basic math counts as "theoretically", and the proclaimed realization was realized in the original paper, 4 years ago.

PortSmash attack blasts hole in Intel's Hyper-Threading CPUs, leaves with secret crypto keys


Re: Is this just a non event?

I disagree, it probably has lots of use in the real world, and has likely been used a lot. The use of this research is to alert people that this ongoing vulnerability continues.

Deniers, clinging to ‘I can only see through the rear view mirror ,’ don’t really count as being in the real world, despite holding the keys to Downing St and the Whitehouse.

Cops called after pair enter Canadian home and give it a good clean


Canadian door locks....

I think it varies by where you live. When I lock my doors, it is to keep my friends and drunk strangers from wandering in. The latter happened to Justin Trudeau one year before he became our Prime Minister [https://ottawacitizen.com/news/national/update-on-trudeau-break-in-probe-expected-tuesday].

I suspect Nova Scotia is mainly the same; but some areas of Canada are more paranoid and prone to spontaneous violence.

Canadian security boss ain't afraid of no Huawei, sees no reason for ban


Re: Keep an eye on the bank account


Maybe we should ask Mr Jones whether Canada permits Cisco, Juniper, Dell, HP equipment in its networks...

You know all those movies you bought from Apple? Um, well, think different: You didn't



Does this apply to Music? Could the music that I’ve ‘bought’ from iTunes disappear because they lose the rights to it....

Boffins are building an open-source secure enclave on RISC-V


Re: Please no

ARMS trust zone is as broken. It effectively provides an all-in privilege boost for a given functionality, much like the supervisor bit (or EL1 if you prefer). That is an anti-pattern.

Gartner's Great Vanishing: Some of 2017's emerging techs just disappeared


Have I been asleep that long?

How did Gartner acquire a sense of humour? I hope The Reg helped them to learn something of the art of humility; now if only Wired could get its head out of its backside...

Here's why AI can't make a catchier tune than the worst pop song in the charts right now


Re: All known public AI algorithms are just a trick.. that is why!

Over the years thinkers have metaphorically and literally linked the human mind to the fantastic creation of the day. Flows, clocks, and steam engines have all served as models of the human mind by renowned thinkers like Hippocrates, Descartes, Freud. These devices were, at the time, the ultimate manifestations of human thought. That we think very fast matrix multipliers are the basis of thought is both a credit to the devices, and a dishonour to millions of years of evolutionary processes.

If such a metaphor helps to simplify the outline of such a complex field, that is all well and good, but remember how long it took to discredit Freuds theory of repression, which was really just a ‘back port’ of steam engine thinking.....


Re: I'm actually surprised that it works on raw samples at all

“cutting and pasting” -- that is very much what those recordings sounded like to me; a collection of vaguely similar phrases dovetailed together. If you concentrated this process on a single composer of mono-genre music (eg. Webber, Boston, Monkees, Sex Pistols :) it might come up with something novel. Feeding a travesty generator Liszt to Brahms seems destined to fail...

Cops suspect Detroit fuel station was hacked before 10 drivers made off with 2.3k 'free' litres


Smaller in the US.

Merkin gallons are 3.78 litres, thus 2260 litres, not 2700.

Git365. Git for Teams. Quatermass and the Git Pit. GitHub simply won't do now Microsoft has it


One name to rule them all....

That isn’t the microsoft way; the first thing it needs is to divide the exact same thing into multiple tiers at different prices.

1. Enterprise edition git: eegit

2. Internet developer git: idgit

3.Mobile app git: magit

4. Federated k8s git: fkgit

And to help guide you to the right git for you: gippy, your git assistant.

USB-C for Surface owners arrives in form of a massive dongle


Re: ?

Maybe behave like apple is the new strategy. They wouldn’t respond to the Reg’s questions either...

Hot new application for blockchain: How does botnet control sound?


How does botnet control sound?

Perhaps by twisting the knob?

OpenBSD disables Intel’s hyper-threading over CPU data leak fears


Re: A Kludge

Its a valid point, but border security is dead ( why else would Trump, eh, trump it ); the future is encryption everywhere, even between machines on a lan, which implies all machines need to be capable of ‘continent computing(TM)'.

The dispatcher should be able to identify two (threads, processes, actors) as privacy equivalent and permit intimacies such as smt without surrendering anything. Counter to that, the vendors have been deceptive about these attack surfaces, so at least somebody should be sceptically conservative in response.

GNOMEs beat Microsoft: Git Virtual File System to get a new name


Translucent File System

Wasn't this the cats ass in 1986?

Googlers revolt over AI military tech contract, brainiacs boycott killer robots, and more


ABCs of Death

The track record of tech suggests the best autonomous weapons are already deployed by Waymo, Uber and Tesla (with more to follow). Hitting the target is not a tech virtue, rather ‘disruptiveness’ is heralded as a deliberately vague goal.

Since Killing people is a more attainable outcome, it is more likely.

Slap visibility beacons on bikes so they can chat to auto autos, says trade body


v2x comms

Insisting on beacons everywhere has about the merit of painting “WARNING: TRUCK” on the sides of transports. Funny, yes; but mature?

How about a big bright blue rotating light on any autonomous or assisted driving technology, to warn everyone that a “special” vehicle is on the prowl? If you put yourself at its mercy, that is your funeral, but shouldn’t be a surprise. Would that poor Arizona woman have any clue what danger was lurking in the shadow?

Recording Industry Ass. says vinyl and CD sales beat digital downloads


how are the poets are doing...

Do the RAII break out how much money was paid to the artists by each of these pie slices?

Uber breaks self-driving car record: First robo-ride to kill a pedestrian


Ok, that is weird. Here (Canada) the speed limit is the maximum you are permitted to go, if, in your judgement the conditions permit. I didn’t realize that those signs in the UK (who else uses miles and meters?) were minimums. I am surprised you don’t kill more pedestrians.

You can't ignore Spectre. Look, it's pressing its nose against your screen


Re: Can anyone explain why we should consider SPECTRE a hardware fault

Spectre lets you read other processes address space; Meltdown lets you read a privileged address space. Where it gets confusing is that the privileged address space is in your map, you just aren’t supposed to be able to peek at it. Sadly you are.

Modern CPUs have branch prediction mechanisms which inform the speculative execution mechanism whether it is likely a given (conditional) path will be followed. The predictor works from virtual addresses, which I think is part of the mistake, they should work from virtual address + Address Space IDentifier. Since my process has virtual addresses, as does my victims, and we likely share code in a shared library (libc.so, {mumble}.dll, ...) I can choose an address in my mapping of this library, and poison the branch predictor to favour a particular path. Then, when my victim runs in the area of this path, the branch predictor will follow it, and dirty the cache based upon the data. I then measure the cache dirt, and voila, I know what that data was.

Seems like a lot, but with the use of decent analysis tools to find candidate paths and a little reverse engineering of some programs, and a pile of money or bitcoins as the payoff, you are away.

It strikes me that there is a readily available mitigation for OSes: don’t permit the same virtual address to appear in two address spaces. This means that libc.so would be mapped to unique locations in each process. Most binaries are relocatable [ needed for ASLR ] so it shouldn’t be a big deal for them; that leaves only ‘forked’ processes as potential victims, and only forked copies of them can be used to induce the predictor.

This would have been tragic in 32bit machines, but 64bit machines, even with lowly 47 bit VAspace can still offer 1024 unique address spaces of 140 GBytes...

Computer forensics defuses FBI's Clinton email 'bombshell'


Re: Man I hate

The irrelevance of the 95% is that the FBI are using them for cover. 35 000 emails could be checked in a few days by a hundred people, which shouldn’t be too daunting a task considering the stakes involved. Twenty times the effort offers the appearance of an excuse; but really isn’t.

This doesn’t take any real insight, and that, I think, is the point of the article. This isn’t about justice or security, this is a war. An unconventional war, where rather than soldiers fighting to the death, you have bureaucrats turning traitor to influence an outcome.

This election may realize Kissenger's dream of an war where everyone loses.

Calgary uni pays ransomware criminals $20k for its files back


Calgary, you say...

I wonder if they ever heard of openbsd?



odd turn of phrase...

"Having backed out of the deal once once, ...."

Is that the uk way of saying twice; like thousand thousand?

WIN a 6TB Western Digital Black hard drive with El Reg


Ok, Glass

Introducing MS Glass(tm). Innovation Forward.

Intel left a fascinating security flaw in its chips for 16 years – here's how to exploit it


Re: Is this a unique or surprising issue?

If you have the ability to reprogram the apic, you have the ability to reprogram the page tables, so this wouldn’t help.

Most OSes do not map 0; but kernel code certainly can, even in VMS.

BlackBerry vows to make even fewer phones


Chen quote.

The quote from Mr Chen:

“We are reducing jobs, but it is not so much as reducing; we are shifting it, so we are taking a lot of the hardware, hence that traditionally we make four phones a year or design, made, manufactured, whatever. We are not going to do that anymore. We are going to at least cut it down a lot; maybe two, maybe one, but not so many,”

really clarifies the challenge BB faces.

As he was talking to Fox, it isn't likely anyone noticed...

ps: Only BB utilizes trust mode? fact checker, we have a cleanup on aisle 5....

Dead device walking: Apple iPod Touch 6th generation


Re: Where's the market?

When Johnny grows up to be john, the Moto G (or any other device) will look like it was smashed by a steam roller.... at least if the teens I know are representative of normal. I cracked my 3GS so I could be a cool dad.

Google – you DO control your search results, thunders Canadian court


amicus pistorum, perhaps

Courts have a long tradition of viewing other jurisdictions as friendly, in that they apply similar principles and vigour in their processes. Perhaps Google should invite various countries to pledge themselves as friends of the chocolate factory; and in doing so would be able to have verdicts, such as this one, have a global rather than regional scope.

Canada is on the verge of a blindingly incompetent (or startlingly corrupt) bit of legislation to dilute most of our rights. It would be interesting to have a corporate interest be able to yank us in the right direction for a change....

Nobel bro-ffin: 'Girls in the lab fall in love with me ... then start crying'


Segregation isn’t the problem.

Maybe whats need are maturity segregated workplaces. That way, if Mr Hunt is uncomfortable working with the adults, there is a nice safe place for him and his ilk....

Let's kill off the meaningless concept of SW-defined storage


A useful distinction

The Prime Minister of my country has a habit of prefixing a jumble of lies with the introduction “let me be clear...”. It serves a useful purpose in priming you for the nonsense soon to follow.

Software Defined serves a similar purpose. For me, at least, it is an indicator that I am not the intended audience of whatever is to follow. I don’t say that out of conceit; I don’t have control of a enviable budget, nor should I.

I will never forgive whoever recycled ‘data sheet’ to mean ‘glossy brochure’. FWP, no doubt, but endlessly irritating.

Nest rival: Smartmobes will decide who survives the Internet of Stuff war


iot landfill

I love the idea of smart devices; it is a pity that so many are stuck in with an intermediary mystery server.

While it is impressive to control my heat settings from half way around the world, it should be noted that there were off the shelf devices for doing this 40 years ago which didn’t require intermediaries. They were quite popular in my area to prepare your cabin for a winter visit; but outside of that, the primary use case has to be playing pranks on your family. Truly a capability in search of requirement.

I would be more impressed with a modern thermostat which let me fondle it without leaving the comfort of my bed, and didn’t require an intermediary. I don’t know, exactly, why I am not keen on having my thermostat usage patterns bounced off a mystery server; but the inability of these companies to explain why it is necessary feeds my aversion.

WikiLeaks, er, leaks the Bundestag Inquiry into NSA naughtiness



I can't make heads nor tails of the document in that link. Has anybody cracked it?

Why don't you rent your electronic wireless doorlock, asks man selling doorlocks


a knob selling locks....

Most people have an occasional epiphany, a giddy moment of clarity and insight where they see the whole world entranced by their hobbyhorse. Often, it is between the Doritos and the Bruce Lee movies, and mercifully is lost to the cobwebs before sunrise.

I am sure there is ample opportunity in inventing new ways to fleece unsuspecting souls, but I doubt the indifference to <insert inane gadget here> is due to dull shears.

ARM wrestles analysts' guesses to floor after slurping IP Kool-Aid


crumpled napkins...

3.8 B per quarter is about 2 chips per soul per year. Is this meant to be sustainable?

It is reminiscent of when Lucent, in an earnings announcement, claimed that they were laying fibre at the speed of sound. It foreshadowed the great optical rout of 2001.

'Rowhammer' attack flips bits in memory to root Linux


Re: Re. RowHammer

Very interested in the travesty generator you used to generate your comment.

How much did you have to seed it with to get as close to this topic as you did?

iOS, OS X apps sent into infinite dizzy DoS by this one weird kernel bug


Your confusion is my fault?

"Confusing APIs are a security problem. If many users of your API get it wrong in a way that introduces a security bug, that’s a bug in your API, not their code."


Bell Canada pulls U-turn on super-invasive web-stalking operation


bell tolls

I likely misunderstand this, but I thought the concept of a ‘common carrier’ was rooted in not being liable for what you do not know about. For instance, the post office may deliver my libellous documents, but are not themselves party to the offence because they were simply the delivery agent. On the other hand, had they read and understood my documents, and then proceeded to deliver them, they would be party to the offence.

That said, would it not be better to leave these creepy ISPs alone, then drag them in as a participating party to every internet related crime?

My deep distaste for Bell Canada may be evident from this fantasy....

Samsung and BlackBerry: Coming together? Not at this price


sony attack

Wouldn't any externally managed network have worked for Sony? I don't want to take anything away from RIM, but it seems that the critical point was that anything managed by Sony was broken, rather than anything particularly secure about the BBs.


Biting the hand that feeds IT © 1998–2019