* Posts by Warm Braw

3354 publicly visible posts • joined 6 Sep 2013

Hey NYPD, when you're done tear-gassing and running over protesters, can you tell us about your spy gear?

Warm Braw

There's certainly a concerted effort to make them look like riots.

Easy to get the wrong impression if you follow the fake newsmongers.

Australian PM says nation under serious state-run 'cyber attack' – Microsoft, Citrix, Telerik UI bugs 'exploited'

Warm Braw

To inform and educate Australians

Risky strategy if he wants them to keep voting for him.

The incumbent President of the United States of America ran now-banned Facebook ads loaded with Nazi references

Warm Braw

Re: Eugenics - Sometimes a good decision - is what I think.

I've usually found that people who volunteer their IQ as a preemptive strike know there's no other reason anyone would take them seriously.

No surprise: Britain ditches central database model for virus contact-tracing apps in favour of Apple-Google API

Warm Braw

Re: No echo chamber here...

Actually don't answer that

It doesn't really need answering: NHSX is the government - there's no pretence of independence.

A more interesting question is whose interests the government serves.

Warm Braw

Re: If it has cost £108M that is more than the vaccine development program!

A later article suggests £108M between only 3 companies - and that's the figure that was widely reported in the press at the time.

The accuracy of the number, though, is rather less interesting than the number of times it gets reported as fact.

Warm Braw

Re: If it has cost £108M that is more than the vaccine development program!

AFAICT, the £108M is for the contract with Serco to provide the "human" infrastructure of barely-trained customer service agents. The contract was effectively given to Serco, it seems, as it seemed unlikely anyone else had the ability to roll out the required number of people quickly. The CEO of Serco said that the contract would help in cementing the position of the private sector companies in the public sector supply chain, so they've generously allowed themselves only a small profit margin.

Not to be confused with the £108M that went to a small pest-control company to supply large amounts of PPE.

Also not to be confused with the £108M spent on 3 contracts for Brexit ferry services, including the infamous firm with no ships.

It's curious that this figure comes up again and again in relation to "emergency" procurement that doesn't seem to go through the normal tendering process.

But we'll all be too busy admiring Boris's Union Jack sky-penis to notice any of that.

Hayfever in Haymarket, or has Windows sneezed out a BSOD?

Warm Braw

Re: Much like the inside then...

And we'll not even get started on the regions attempt at smart ticketing...

When the Metro first opened, there was an integrated, zonal ticketing system that worked across metro, buses and ferry (and the trains from Blaydon to Sunderland). That was all demolished as part of Thatcherite bus deregulation. The now-private bus companies compete with the Metro for passengers and there is no incentive for any real smart-ticketing system unless the transport operators are providing complementary rather than competitive services. I live on a bus route where different services operate at different times of day: sometimes you can get a through ticket to your destination, at others you have to buy two tickets and travel on a connecting service at a significantly higher price. And that's with the same bus company - they really have no interest in serving passengers.

Nexus (the PTE legacy body) tried to bring in a London-like system where bus companies operated under contract, but this was shot down by legal challenges from the bus companies. Boris has promised to give local areas more freedom to regulate and commission bus services, but the words "Boris has promised" render anything that follows meaningless.

Ah lovely, here's something you can do with those Raspberry Pis, NUC PCs in the bottom of the drawer: Run Ubuntu Appliances on them

Warm Braw

Isn't that only available around Christmas?

Has Santa promised to make 2020 the year of Linux on the Rooftop?

No Wiggle room: Two weeks after angry bike shop customers report mystery orders on their accounts, firm confirms payment cards delinked

Warm Braw

If you had an aerodynamically sculptured helmet, though, a figure-hugging bodysuit would allow its novelty to be better appreciated.

Ex-eBay security execs among six charged with harassing, threatening bloggers who dared criticize web tat souk

Warm Braw

Re: Rico anyone?

The linked affidavit also alleges:

When BAUGH, HARVILLE, Gilbert, Popp, Stockwell, Zea, and others learned that the NPD was making inquiries, they interfered with the investigation, either lying to the NPD about eBay’s involvement while pretending to offer the company’s assistance with the harassment, lying to eBay’s lawyers about their own involvement, or both. As the NPD and eBay’s lawyers began to close in on the truth, the Target Subjects deleted evidence that showed their involvement, further obstructing what had by then become a federal investigation.

Someone got so fed up with GE fridge DRM – yes, fridge DRM – they made a whole website on how to bypass it

Warm Braw

Re: My Toaster Tale

the single controller chip has clearly cracked in two

You got the wrong model...

Philippines government makes cloud-first a post-pandemic ‘new normal’ for all agencies

Warm Braw

The Judiciary and the Cloud. What could possibly go wrong?

Facebook boffins bake robo-code converter to take the pain out of shifting between C++, Java, Python

Warm Braw

Re: Based on language translation

The generated functions and production code have to be tested; they are not guaranteed to be correct.

That's not generally a characteristic you would welcome in a compiler. It's not as if there isn't open source code available* for parsing and lexically analysing COBOL and Python, so you just need to glue a code generator on the back end for the target language. You might not get a result that you can visually associate with the original (though you could put that in comments), but at least it would be functionally correct^.

I'm not quite sure how an enormous amount of effort to produce a flawed AI solution + unknown effort to correct the result actually saves time and money. Particularly when elderly code has a habit of working in mysterious and undocumented ways - usually the main reason it is preserved.

Edit: And given the world is supposedly moving towards container-based microservices, why convert stuff anyway if it's working?

*With the exception of proprietary language dialects.

^Assuming conforming data types for source and target

In Hancock's half-hour, Dido Harding offers hollow laughs: Cake distracts test-and-trace boss at UK COVID-19 briefing

Warm Braw

Baroness Hardup has at least got sufficient time to develop a world-beating performance for the pantomime season.

I wonder if she was subjected to the loyalty test or whether her background guaranteed that her compliance, if not her competence, could be relied upon.

Microsoft tweaks its 'New Outlook' for Mac – but no support for Exchange on-premises yet

Warm Braw

Re: No support for standard protocols like POP3 and IMAP etc

The "problem" with standard protocols is that the clients don't facilitate your monetization. I wonder how long it will be before Google's increasing contempt for "less secure apps" leads to their access being terminated.

California bigwigs rule Uber, Lyft dial-a-ride drivers are employees, not contractors

Warm Braw

Re: I know many people who work so-called "gig economy" jobs here in California.

nor do they want, multiple different "employers"

I'm struggling to understand what the objection might be, particularly if it then involves better terms of employment. Unless, perhaps, under the present arrangements it's left entirely up to the "worker" to declare their income for tax purposes.

An Internet of Trouble lies ahead as root certificates begin to expire en masse, warns security researcher

Warm Braw

Re: What problem are the certificates solving?

The difference between how something works and why it is used is the difference between mere knowledge and actual understanding.

Warm Braw

Re: What problem are the certificates solving?

the complexity involved in streaming an advert

Ironically, the need to insert ad breaks and overlay region specific (STV or ITV) DOGs actually makes is easier to grab stuff: once you intercept the RTMP stream you get the full uninterrupted programme - no ad breaks and no branding. Or rather, you could if you were so inclined...

Warm Braw

Re: What problem are the certificates solving?

In the case of a browser, it doesn't know, a priori, what it is likely to be connecting to and a third party attestation is useful.

However, iPlayer (or whatever) knows exactly what it should be connecting to and the third party attestation offers nothing over what iPlayer could check for itself. At its most trivial, the app could contain the necessary certificate chain rather than rely on the one provided by the underlying system and an update to the app could update the necessary certificates.

Of course you have the slightly circular problem that if the app store certificates expire, you can't update the apps, but that's a problem the third party service provider doesn't have to work around itself.

I'm assuming the issue is that the APIs for some of these "smart" TV systems are in fact pretty minimal and don't offer you much beyond "render this URL as an H.264 video stream".

Warm Braw

What problem are the certificates solving?

I can see you might need encryption to preserve the privacy of the user's choice of viewing, but you can do that without a certificate.

The domain name the iPlayer app connects to must be hardwired into the app itself, so presumably the certificate is acting as some form of identity check that the domain name hasn't been redirected somewhere else. But given that the iPlayer app has been provided by the BBC itself (or under its licence), you could perform the same check within the app without resorting to an external PKI service.

So is the PKI there to perform some other function, or is it just being used because the code is there already so it's easier than finding a domain-specific solution?

You know Facebook has an image problem when major nonprofits start turning down donations over political lies

Warm Braw

Re: stop using it

Not signing up doesn't stop you being used by it, unfortunately.

MacOS on Arm talk intensifies: Just weeks from now, Apple to serve up quarantini with Kalamata golive, reportedly

Warm Braw

Re: x86 Software

Bootcamp, VMware, Virtualbox, etc

And, of course, Parallels.

I think this is as interesting for what it says about Windows - there's always been that nagging problem that there would be some (especially business) software that wouldn't be available for Mac natively and having a route to use it without needing additional hardware was hitherto been seen as a positive.

It looks like Apple probably reckon that most of that market can now be satisfied either by web-based SaaS solutions or by cloud-based Windows virtual desktops. That's not a prediction that will come as welcome news to either Microsoft or Intel.

Smart fridges are cool, but after a few short years you could be stuck with a big frosty brick in the kitchen

Warm Braw

Smart appliances are essentially computers

Even the dumb ones have computer traits that limit not only the lifetime of the appliances, but potentially also their owners.

You really don't want to be turning these things on unattended.

Ooo, a mystery bit of script! Seems legit. Let's see what happens when we run it

Warm Braw

Eyeing up ... with a view to making a purchase

Presumably secured with a small deposit.

Franco-German cloud framework floated to protect European's data from foreign tech firms slurpage

Warm Braw

No global social network

At least wethey've got something right.

OK Windows 10, we get it: You really do not want us to install this unsigned application. But 7 steps borders on ridiculous

Warm Braw

Re: I thought containers were a thing now

Interesting, thanks, will take a look...

Warm Braw

Re: I thought containers were a thing now

That's precisely what I mean: it's not as if we haven't been wrestling with potential network-borne malware for more than a decade now, there's been plenty of time for evolution of this kind.

You could even make the dialog backwards compatible by creating a temporary ACL permitting access only to the named file identified by the dialog for the duration of the application's execution, though we should by now be beyond that point. We're using the add-ons and workarounds to justify the status quo, not as a short-term bridge to a better solution.

Warm Braw

I thought containers were a thing now

Most applications don't need to open files except the ones the user chooses through a standard dialog box, or access random internet addresses without user interaction, or create dubious constantly-running background processes and "auto updaters", or silently raise their priority or privileges.

Computer science long ago reached the point at which it should be possible to run random applications that meet those criteria in a safe and secure manner. And indeed, that it should rarely be necessary to run applications that don't meet those criteria.

You'd think modern operating systems (and I'm not just looking at Windows) might possibly have caught up with this by now rather than desperately trying to patch up their 1960s pre-network, timesharing model of "security" with anti-virus software and code signing.

Have I Been Pwned breach report email pwned entire firm's helldesk ticket system

Warm Braw

To be fair, the problem is using a database API that requires a human-readable SQL command which your code has to construct so that the command interpreter can parse it back into the component parts you originally assembled. That's just asking for trouble and it's not really a PHP issue.

If you use PHP with Oracle, for example, you could at least use oci_bind_by_name to assign values to named parameters in a template SQL command without having to worry about quoting and escaping.

Legal complaint lodged with UK data watchdog over claims coronavirus Test and Trace programme flouts GDPR

Warm Braw

Re: Conspiracy time?

The app has largely been abandoned, so the issue of Apple/Google etc is now moot.

Trace & isolate is now essentially a CRM system operated by home-based customer service reps - they get assigned a few people to follow up who've tested positive and attempt to get a list of contacts and their details. You can even enter your own information yourself.

There are a number of concerns about the data collection. One is that the data is shared with a significant number of organisations and stored for up to 20 years (the privacy statement seems to have been amended since I last read it which is a worry if it's dynamic). Another, possibly larger concern, is that local public health officials are not currently able to make use of the data for local outbreak control. By the end of the month, they expect to have access to the total number of cases/contacts in their local authority, but not the postcode-level information that would allow them to implement targeted lockdowns.

So although this information is being stored, it may, in fact, be of no use for the purpose for which it is being gathered. In other words, another knee-jerk reaction to accusations of poor preparedness with no real thought as to the practical implementation. We know Boris doesn't do detail - or indeed anything, but it seems none of the rest of them does either.

Barmy ban on businesses, Brits based in Blighty bearing or buying .eu domains is back: Cut-off date is Jan 1, 2021

Warm Braw

Re: The least of our worries

Westminster, we could have a problem...

Don't make the mistake of thinking they care about that. If you fail to make the most of the brilliant new trading opportunities that they have generously laid before you, it will be your fault, gloomster.

Staff in a huff, personal call with Trump, picking fights with Twitter, upsetting civil-rights groups – a week in the life of Facebook's Zuckerberg

Warm Braw

I cannot keep excusing Facebook’s behavior

The first time you excused it you became the problem you are now complaining about.

As anti-brutality protests fill streets of American cities, netizens cram police app with K-Pop, airwaves with NWA

Warm Braw

Re: "Yes, Anon activists are back."

clearly somethings wrong

I think people got that.

The man was already handcuffed. He didn't need restraining. The knee remained in place well after the man was dead.

It wasn't an unfortunate accident, it was deliberate. It wasn't "restraint", it was murder.

The problem isn't some unapproved restraint technique, it's that police offers can murder people in cold blood and, often, escape any sanction by making obviously fictitious excuses in which the criminal justice system is subsequently complicit. That's why crying "rule of law" in response to mass protests is a hollow sham.

UK.gov dangles £400k over makers of IoT Things: Go on, let's see how you'd make a security cert scheme

Warm Braw

"industry-led" assurance schemes

How about a consumer-led assurance scheme instead? Otherwise it will simply be the case that the slickness of the brand deceives the eye.

This'll make you feel old: Uni compsci favourite Pascal hits the big five-oh this year

Warm Braw

Re: I Remember...

in the second year as we had data entry terminals

There was a time at Newcastle - and I presume elsewhere - when you were expected to use mechanical calculators for work on numerical methods. I gather the exam halls echoed with the sound of whirring and pinging.

Visual Studio Code finally arrives on ARM64 Windows. No, you haven't woken up in 2017, sadly. It's still 2020

Warm Braw

To those developers wondering if ...

... that pricey Surface Pro X was really worth all that precious cash

Still a no, then?

Trump issues toothless exec order to show donors, fans he's doing something about those Twitter twerps

Warm Braw

FCC is an odd choice seeing as it cannot regulate...

... anything very much at all, apparently.

Given that Trump has an entire national TV station devoted to spreading his every lunatic utterance, his problem is not that he does not have the technical apparatus to communicate to the masses.

Gone in 9 seconds: Virgin Orbit's maiden rocket flight went perfectly until it didn't

Warm Braw

Re: Oh. Again?

being able to launch from pretty much anywhere, anytime and likely above any inclement weather

Shame the same can't be said for the Virgin Balloon Experience.

Made-up murder claims, threats to kill Twitter, rants about NSA spying – anything but mention 100,000 US virus deaths, right, Mr President?

Warm Braw

Re: But no one cares what Trump has to say

there is really almost no point at doing comparisons between countries on deaths per capita

It depends what inference you're attempting to draw.

That the UK has a higher per-capita death rate on any reasonable measure is pretty indisputable at this point and has been since the start of the epidemic since the US is a couple of weeks or so behind the UK curve.

All I wanted to point out is that at this specific moment in time, the UK government has a bigger public health failure to explain than the US government. I have no idea where the US and UK will end up in excess mortality terms and even then it's not clear that an overall number for the US is useful given the variation in the approach of different States.

One of the troubling signs in the latest UK analysis is that there's not much significant regional variation, suggesting that there had been a widespread geographic spread before the lockdown. That's a mistake the US government has, in principle, had the opportunity to avoid and possibly still could mitigate.

Warm Braw

But no one cares what Trump has to say

But they do care how he says it. His voters want him to "say it like it is" and as long as he keeps doing that, they'll ignore that he's now the person with most responsibility for the way things are. America got the government it deserves. See also Britain - whose per capita Covid-related death rate is (currently) significantly higher.

In Britain, Johnson was managing to ride the tide of criticism about deaths, PPE and care homes. It was the Cummings saga that made the government so pathetically ridiculous that only the most head-banging Brexiteers have been able to keep a straight face: Johnson is now a burst balloon. There's not much point attacking Trump on his record - voters aren't that interested. Given that he daily courts humiliation, it's difficult to suggest that as an effective alternative, though.

Twitter ticks off Trump with new 'Get the facts' alert on pair of fact-challenged tweets

Warm Braw

Re: Rootin' Tootin'

I, as President, will not allow it to happen!

A hundred thousand deaths, on the other hand...

Warm Braw

Re: Ooh, fun!

Can we also start seeing something similar on UK Govt & Tory tweets, and anything from Cummings.

The absence of the #mediascum hashtag is probably a sufficient marker.

I haven't previously paid much attention to Twitter and still don't have an account, but it's been quite fascinating to see the social-media-fuelled "culture war" eat itself over the last week or so.

Microsoft blocks Trend Micro code at center of driver 'cheatware' storm from Windows 10, rootkit detector product pulled from site

Warm Braw

Re: Hanlon's Razor does not apply today...

This is supposedly the product of an expert security company.

Uber plans to ride out of stable Singapore, move APAC HQ to high-tension Hong Kong

Warm Braw

The new headquarters will oversee nine countries

I don't think Uber will last long if they claim Hong Kong is a country, especially at this precise moment...

Microsoft brings WinUI to desktop apps: It's a landmark for Windows development, but it has taken far too long

Warm Braw

I'm not that bothered about the appearance, but the reason that people continue to write Win32 based software is that it works, it works on previous versions of Windows and if Microsoft stop supporting it in future, Windows will be dead anyway. There's really no point in writing a UWP app, it simply restricts the platforms on which it can run.

And, as you say, there have been so many abandoned futures; the only survivor has been the past. Legacy has become Microsoft's USP.

BoJo buckles: UK govt to cut Huawei 5G kit use 'to zero by 2023' after pressure from Tory MPs, Uncle Sam

Warm Braw

Re: Is it wrong to be in favour of this?

I don't think my personal data is at much risk from the Chinese government (at least for now) as it is from the Five Eyes, so I've not been terribly concerned about the data capture issue - the traditional telephone network is full of holes already.

What seems rapidly to have become a bigger risk is the use of economic sanctions to achieve political ends - and it's not just China we have to be concerned about: the US is behaving just as badly. It would be very unfortunate it the national communications infrastructure became degraded as a result of an embargo on spare parts, or suppliers being placed on "entity lists". If we were part of some larger economic alliance we might have a bit more clout but trying to practise market defence on our own is going to be quite tricky.

It wasn't just a few credit cards: Entire travel itineraries were stolen by hackers, Easyjet now tells victims

Warm Braw

The helpful "personal" message from CEO Johan Lundgren

As soon as we became aware of the attack, we took immediate steps to manage and respond to the incident, closing off the unauthorised access. We engaged leading forensic experts to investigate the issue and we also notified the National Cyber Security Centre and the Information Commissioner’s Office (ICO).

Which sounds remarkably like "as soon as we aware of the pandemic we took the right measures at the right time and followed the scientific advice". He even adds:

You do not need to take any action apart from continuing to be alert.

It's almost as if Dominic Cummings was moonlighting for Easyjet during his little sojourn at his parents' house. If so, he can credit himself on devising the universal platitude for all crises.

For the price tag, this iPad Pro keyboard better damn well be Magic: It isn't... but it's not completely useless either

Warm Braw

A pokey terraced house in Middlesborough for a month

Not even pokey, at least by London standards. And I suspect there will be cheaper examples when students decide they don't want to pay £9K a year for video lectures.

Just keep your parmo well clear of your £350 keyboard.

Apple, Google begin to spread pro-privacy, batt-friendly coronavirus contact-tracing API for phone apps

Warm Braw
Coat

Re: Batt friendly?

Expect Trump to charge them shortly.

UK's Ministry of Defence: We'll harvest and anonymise private COVID-19 apps' tracing data by handing it to 'behavioural science' arm

Warm Braw

Re: Quelle Surprise!

According to recent reports, the "people they've recruited" thought they'd been recruited for retail customer service jobs and the first time they realised they'd signed up for contact tracing was in shambolic video "training".

It's also emerged today that contacts, assuming they're identified, will likely not be tested but merely asked to quarantine regardless. And that there's some sort of turf war between PHE's contact tracers and local authority public health staff.

Meanwhile, the shelves are starting to look rather barer again in my local supermarkets - looks like the citizenry are already preparing for the government's "success".