* Posts by DrXym

5327 publicly visible posts • joined 18 Jul 2007

Oi. APPLE fanboi! You with the $10k and pocket on fire! Fancy a WATCH?

DrXym

Whatever the price it'll be too much

It's shiny. It says Apple. It's a prestige object. I'm sure the general public will weigh up the practical benefits of owning such a smart watch (few) and the disadvantages (many) and buy it anyway.

Filthy – but sadly frothy – five door fun: Ford Focus 1.5 Zetec

DrXym

I hate bad usability in cars

I used to drive a Nissan Almera which had a central dash with buttons numbered 1 to 6. Two buttons either side set the mode for what they did. If you were in radio mode they changed the radio station. If you were in air conditioning mode they controlled the fan speed. This meant at any given time there was a 50% chance they were in the wrong mode and it screwed up the action. Such a stupid system may have saved Nissan £1 for a couple of extra buttons and caused untold confusion and frustration for me.

IMO every basic function in the cabin space should be controlled with a button, dial or switch which are grouped sensibly with the most important functions closest to the driver's line of sight. If there is a computer / tablet interface, save it for the extraneous stuff. And make damned sure that it is predictable and navigable with only the briefest of glances.

Litecoin-mining code found in BitTorrent app, freeloaders hit the roof

DrXym

Whatever happened to uTorrent

I remember the first few versions which were lean and mean little clients for downloading. Then I used an update and it was laden down with crapware in the installer and ads in the client. Yeah they've got to make money but there is a line between making money and being obnoxious.

Anyway there are free and open source clients for this sort of thing - deluge is quite good although the GTK widgets look a bit weird on WIndows.

Choc Factory splatters 51 bugs, Mozilla bumps cert checker

DrXym

Re: I wish they'd fix the trust model

Yes there are problems but look at how it is now.

If I run a site and want secure communication I have to apply for and usually pay some nonentity to issue me with a "signed" cert. Not just once but every year. I don't gain anything from this process and neither do my visitors. It's just a tax on security to make a scary popup go away and to deter casual evil doers.

I should be able to roll my own cert. I could register the fingerprint with a lighthouse site if I wanted some protection from MITM attacks. Or I could get other sites to sign my key. e.g. maybe Amazon offers a key signing service for affiliates. Or I might know some other site owners and have a key signing party. Or I could pay a CA. Or all of those things according to my needs.

The more signatories the better of course but even none is protection from eavesdroppers.

DrXym

I wish they'd fix the trust model

Most root CA signatures aren't worth a damn for security or trust. My browser has several hundred root certs and I haven't a clue who most of them are, how seriously they take security or what "trust" they could possibly bestow on some random site. We already know some root CAs have been compromised or are compliant with their national government.

So why do we rely on them? Why in most cases do sites pay money and expend time / effort for a cert which does nothing buy make a scary icon go away?

I would FAR more trust a site if in addition to, or instead of a CA their cert was signed by their business partners, their competitors, their local chamber of commerce, their trade associations etc. So I go to Amazon and their site is signed by Google, Visa, Mastercard, Barnes & Noble, Microsoft, Mozilla etc. Recognizable names. It would also be far more secure - it only takes one root CA to be compromised and start issuing bogus certs. But if browsers cached certs and site certs had more than one signature, then it would be more harder to compromise them. The browser could warn you if a cert's fingerprint changed or signatories had disappeared.

A web of trust basically. It doesn't stop a site getting their cert signed by a CA and in some cases it still makes sense. But a web of trust model would be far more suitable for a lot of sites. And let sites use unsigned keys. It might not prevent man in the middle but it's still better than plaintext (which doesn't stop MITM either) and browsers could still store fingerprints to warn of changes.

If browsers can produce a new HTTP/2.0 or HTML 5, or EME or a raft of other things, then why not fix the broken trust model. Give sites a choice. They can still pay $$$ for a cert, or they can build a web of trust. Or both. Or nothing. It still more secure than what we have right now.

Nokia boss smashes net neutrality activists

DrXym

Re: Preposterous

"Why should connected cars be discriminated against on the information highway? "

They're not. It's a stupid analogy by some bigwig attempting to justify why net neutrality is somehow evil. They might as well have complained asking why factory safety systems have to contend with Netflix services. The answer of course is they don't and they never have. Safety critical stuff can run on a closed network or a network separate from other networks where its performance can be guaranteed. And if cars are ever automated then I assume that someone will buy out a chunk of radio spectrum or launch a bunch of satellites to ensure exactly that.

DrXym

Preposterous

There is no reason that "connected cars" need share the same network as someone streaming from Netflix. Indeed there is an extremely good reasons that would be a bad idea even without net neutrality.

Indeed, net neutrality doesn't stop ISPs from selling different speed, different contention, different download limit services even from the same service. What it DOES prevent them doing is gimping Amazon's streaming service because Hulu paid them a bunch of money to favour theirs. Or similar scenarios.

Oracle's piping hot new pot of Java takes out the trash (faster)

DrXym

"Hopefully it collects itself and deletes....Java is horrible, bloated and insecure mess."

Java in a browser is (or has been insecure). Java running from a service or command line is no more or less secure than any other compiled or interpreted language / runtime.

£280k Kickstarter camera trigger campaign crashes and burns

DrXym

Fools, money etc.

I'm sure there are some projects which are altruistic, charitable or otherwise worthy of funding but why does anyone fund a commercial product without receiving a stake of the profits?

Paying up front for some paltry discount off the final product is a terrible deal. The product doesn't exist and might not exist for months or years. It might never exist or be nothing like what was promised. Other products may appear which are better or cheaper.

What is the point of this? It's bad enough to pay for beta quality products but products that don't exist at all? Crazy.

Have it all: BlackBerry to port crown jewels to iPhone, Android

DrXym

Re: Should have made Android handsets in the first place

"Perhaps BB have already investigated and decided that Android just can't be hardened to BB standards. I would believe that."

I wouldn't because it's nonsense. If that were their opinion then why put an android layer in there at all?

Anyway Samsung has KNOX for Android so its clearly feasible to security harden Linux. In fact BB is already very chummy with Samsung to the point that I could see the things ending up in a buyout and BB becoming a brand of Samsung running over Android anyway.

DrXym

Re: Should have made Android handsets in the first place

"Only if they can reproduce the BB10 UI"

I see no issue with that.

The issue at present is they're basically maintaining two operating systems - their BB10 native OS which gets little love and an Android emulation layer which is basically all of the userland Android with thunks.

What's the point of this complexity? None. They could do the UI over android. They could security harden the kernel and do all the stuff which BB is known for but without all the overhead. And they'd sell a lot more phones.

DrXym

Should have made Android handsets in the first place

Blackberry already port and maintain an Android compatibility layer in BB10 because there are so few native apps. They might as well just go the whole hog and be running proper Android. They can still harden it, and skin it and use security / business friendliness as their unique selling point. But at least then people will be interested in buying it.

Bradley Horowitz on ailing Google+: Islands in the stream, that is what we are ...

DrXym

I don't see the point for it

Facebook and Google+ are basically the same thing - a wall to post stuff on and (assuming you're interested) follow other people and see their posts in aggregate form. The problem for G+ is that Facebook got there first and it doesn't really have a differentiator. It's just another social wannabe with a fraction of the content.

It also copies the most annoying and evil aspects of Facebook. It nags you to provide more personal info. It nags you to connect to people "you may know". It nags you to join groups. It doesn't provide options to stop nagging you. It throws the switch on all the security / privacy settings and ensures the settings are deliberately vague or confusing so you're never quite sure if you are secure or not.

If G+ were NOT evil, or had a simple to control privacy, or if it acted more like a traditional home page where I could add feeds and other things of interest then I might use it. But as it is, it's just an intrusive bore.

Elon Musk plans to plonk urban Hyperloop subsonic tube on California

DrXym

Re: Let's see how testing goes before coming to any conclusions

"Let's think about loading. With hyperloop the passengers will have to strap in, so that takes, what, ten minutes at least? Think how long it takes to load a 737... So that's one departure every ten minutes at best. I think they're planning something like 20 passengers per vehicle, so it's 120 people per hour."

Theme parks manage to process thousands of people on rides with more stringent passenger safety measures than this shuttle is likely to require.

So I don't see it follows that it's going to be slower, particularly since they could scale with parallel tracks and scheduling to put people with the same destination on the same shuttle. They could even scale the service according to demand, adding more shuttles in at peak periods. It's like one glorified bin pack - it could designed to ensure an efficient throughput according to the expected demands on the system.

It doesn't mean it's going to be queueless and it's entirely hypothetical how it would work in a developed system. I imagine the first hyperloop systems will be fairly rudimentary with a limited number of destinations and many of the problems will require a real system to manifest themselves.

I'd add that boarding is just one of many delays encountered with air travel - slogging to the airport, checkin, security, boarding and the disembarkation and more slogging at the other side. A hyperloop could potentially deliver people to or close to the actual centre of a city. Look at the Eurostar as an example of this - the train is slower than a plane but it actually to where people want to go and so is faster and more convenient than a plane.

Visa: One million bonks a month for Europeans from next year

DrXym

Hardly surprising

Many modern cards have contactless payment chips anyway so what's the point?

You wave the card and the payment happens. Conversely you wave the phone and F-all happens. So you turn the phone on, unlock it, swipe around a bit looking for the payment app, discover you've lost connectivity with the payment service and have been logged off, screw around enabling it, enter your login again etc. etc.

I would find it more useful if I could wave the card against a phone to get a balance statement or similar and use the card to pay when I'm in a queue.

LinkedIn values your privacy at ONE WHOLE LOUSY DOLLAR

DrXym

Re: Once again

This is LinkedIn you're talking about here.

It started off as a neat thing to keep track of people you worked with or went to school with. Then it was monetized and now it's just a cattle market. You're the cattle to be poked, prodded and inspected by anyone who pays LinkedIn to look at your info. Job agents, sales people, you name it.

I'm plagued by job agents to the extent I've unlinked the lot of them and restricted my privacy settings as much as I can. They think nothing of doing a skill search and indiscriminately spamming everyone who matches. The same job might result in multiple spams, none of which I've solicited. At least by unlinking they have to use one of their precious InMails if they want to contact me.

So long, Lenovo, and no thanks for all the super-creepy Superfish

DrXym

Stop lying Lenovo

"Superfish was previously included on some consumer notebook products shipped in a short window between September and December to help customers potentially discover interesting products while shopping,"

Er no Lenovo. It was included because you sought to profit by inflicting crapware / adware / spyware on your customers. You're not alone in doing this - vendors like HP, Dell etc. preinstall crap because a substantial percentage of users will never remove it. You just took it one sleazy step further.

It's very simple to fix. Do not install anything except Windows. If you absolutely must, put some programs in a single folder and allow people to electively install them. It's not hard.

Linux clockpocalypse in 2038 is looming and there's no 'serious plan'

DrXym

I really don't see the big deal

Redefine time_t as 64-bits. As it is already in some configurations.

The Order: 1886 – Round Table gaming's all right on the knight

DrXym

I don't mind QTEs

But they have to be used in moderation and the rest of the game should be something really special to justify them when they do turn up. I think the Order's problem is they focussed too much on the presentation and not enough on the actual content. Anyone paying to the preview footage would have probably guessed this already but it's still a shame.

Neither the XB1 or PS4 has produced a smash exclusive title yet which is kind of surprising. Both have tried (Ryse, Titanfall, Driveclub, LBP3 etc.) but nothing has quite gotten it right yet.

Amazon's delivery drones shot down by new FAA rules

DrXym

Re: It was a stupid idea to begin with

Well that's a pretty lame analogy. I don't recall from history books about the Wright brothers testing their aircraft over populated urban centres.

Secondly we're not talking of just one drone, or two or even 10. Potentially there could be hundreds or thousands of flights per day buzzing around at relatively low altitude. It is quite obvious and inevitable that they would be smashing into buildings, hitting birds, becoming entangled with phone / electric wires, hitting masts, getting tipped by wind / rain, getting shot down, getting hacked / jammed, operator error and suffering more mundane technical issues.

I could see the benefit of unmanned drones distributing tonnes of cargo between centres over mostly unpopulated areas (or areas they could route around). Basically small jets with no pilot. But not smaller drones over urban centres.

DrXym

It was a stupid idea to begin with

I doubt the drone has the range or endurance to fly very far so why not just send somebody out in a van on a delivery route? Same difference except of course it would be far cheaper for customers and there wouldn't be drones falling out of the sky.

Apple Watch 'didn't work on HAIRY FANBOIS, was stripped of sensor tech'

DrXym

People will still buy them

The Apple Watch will be hamstrung by the same limitations as other smart watches - a screen that turns off, a battery that barely lasts a day, proprietary functionality which requires an phone, and most importantly a lack of reason for being. And it'll undoubtedly cost a lot more too.

I'm sure it will still sell extraordinarily well putting paid to the idea that people in general have any sense.

Windows 10 to give passwords the finger and dangle dongles

DrXym

A fingerprint would be broken down into a biometric description which would then be hashed. Assuming there was enough uniqueness in this description the hash would no more or less secure than a strong password. Both would depend on the database properly salting the hash though to make it difficult to reverse lookup.

Of course the one disadvantage of a print is you can't change it. So if thieves did grab your print they could happily unlock all your devices and accounts that used it. Biometrics that capture more than the print, e.g. blood vessels are probably more secure. It would also be desirable to use 2-factor authentication so that to log on you must supply your print (something you have) and type a pin (something you know).

Got an Android Wear gizmo? Yeah, you and '719,999 other people'

DrXym

Re: "the Apple Watch will offer leading energy efficiency"

I doubt the Apple iWatch will be any different in terms of power draw to any other "smart" watch that insists on packing a CPU & OLED display into the form factor. People will be lucky if it lasts 30 hours between charges and probably less than that.

DrXym

Re: Apple who?

Hololens might gain some popularity as a console / PC gaming peripheral or for people who want to watch movies at home or certain job roles (e.g. order fulfillment in a warehouse).

But do you really think you'll ever see people taking to the gym, or walking around in public with them? If not you haven't been paying attention to the whole Google Glass debacle. Hololens may as well have "twat" written on it for the effect it conveys on the wearer. Walking around with one of these in public is an invitation to be punched in the face and/or have it stolen.

Cortana to form circle of life in Windows 10

DrXym

It's so soothing

You don't even feel the personal data being sucked out of you.

Samsung: Our TVs? Spying on you? Ha Ha! Just a joke of course

DrXym

Re: Is this at all surprising?

"Bitrotten - not so sure. "

Smart TVs have been a thing for 5 or 6 years now. If you look at the ones which have been knocking around for 3 years (for example) and note how crap they are - that's your TV 3 years hence. And 3 years is generous because I expect most people keep their TV for as long as it works or a new standard appears. The lifecycle of apps and OSes doesn't fit the lifecycle of a television.

Services get discontinued (e.g. LoveFilm, Blockbuster) or functionality is added to other platforms but not yours, or your TV doesn't get popular new apps at all. Or support ceases and security holes (opened by all that smartness) go unpatched.

At least if the smartness was in a box then you could get rid of the box or move it to a bedroom. When it's baked into the TV, you're stuck with it.

DrXym

Is this at all surprising?

It is not surprising at all that a TV with voice recognition will send audio off to be recognized. I expect there is an option to disable it. A better option is don't buy smart TVs in the first place - all that functionality will be bitrotten in a few years any way.

Bitcoin trade biz MyCoin goes dark, investors fear $387 MEEELLION lost

DrXym

Re: "We're not quite sure how that'll work"

Bitcoin is the ponzi. Buying contracts on a ponzi seems like a double dose of stupid.

Google, Amazon 'n' pals fork out for AdBlock Plus 'unblock' – report

DrXym

Taboola

Taboola is by far the sleaziest, scummiest "social" ad service in popular use on the web at the moment. If Ad Block Plus isn't blocking that shit out then it is not fit for purpose.

Death becomes it: Grim Fandango Remastered

DrXym

Still have the original in the cupboard

I must see if I can get it going in ResidualVM.

Smartphones merge into homogeneous mass as 'flagship fatigue' bites

DrXym

I don't know why anyone buys a locked phone

It's very rare for a "free" phone on 24 month contract to work out much better than just buying a phone and the SIM to go with it. As such I really don't why people would bother with the first option. It just means their phone is filled with network crapware, is locked to the network, firmware updates are few and far between and they're stuck on an expensive contract regardless of changes in their requirements or personal circumstances.

All to save a few quid. It's not worth it.

ZX81 BEATEN at last as dev claims smallest Chess code crown

DrXym

Our school had this RML-380Z which was a hulking CPM thing with elephant disks. It must have cost a fortune and nobody knew how to use it or was very interested. One day someone turned up with a ZX81 and 3D monster maze and everyone was crowded around to see it.

It's amazing now to think how this primitive, crappy little computer sparked more interest than a "proper computer". I got a ZX Spectrum soon after and was hooked.

The school didn't learn though. They more some RML480s which were sans floppy and booted off the network somehow. Nobody was interested in them. They switched to BBC micros soon after which at least had some games, colour, sound and enough other things for kids to find them interesting. I still preferred my Spectrum though.

Spartan on Windows 7? Microsoft is 'watching demand'

DrXym

Don't put it on Windows 7

Don't even bother. It would be far better that web devs learn to code their HTML to work with lots of different browsers across disparate operating systems and environments. If they code to a monoculture (in this case some browser engine called Sparta) then the same will set in that made IE4/5/6 so hard to get rid of.

Just leave Windows 7 alone.

Welcome to Spartan, Microsoft's persuasive argument for... Chrome

DrXym

I don't see that it should be a problem

Here's how you stop caring if IE uses Spartan / Trident or both - STOP CODING WEB PAGES TO BROWSERS.

For 99% of content it shouldn't matter a damn if the browser is IE, Firefox, Safari, Chrome, Opera or any thing else. Code to the standards and only write special cases if there is a rendering issue in a very specific browser you want to support. Make sure the special case is isolated and narrow as possible.

Coding to a specific browser is extremely short sighted no matter who makes it or what the requirements might say.

Windows 10: The Microsoft rule-o-three holds, THIS time it's looking DECENT

DrXym

Re: We will tell them it's free - Muuhahahha

"This is more than a one-time upgrade: once a Windows device is upgraded to Windows 10, we will continue to keep it current for the supported lifetime of the device – at no cost."

The problem with this should be obvious if you look at web sites which have introduced tiered service or paywalls. They begin gimping the free service to encourage people to pay for the ungimped service. LinkedIn for example started off free and then started crippling search and email to get people to pay.

Or look at game consoles - if you want multiplayer or a smattering of other features like cloud save on your console then you have to pay a subscription.

It's easy to envisage Windows going the same way. Maybe an ad tile starts appearing in your metro. Maybe backup/restore, antivirus, cloud storage, remote desktop etc. become "premium" features. Maybe the ability to have more than 4 users becomes a premium feature. Petty restrictions, adverts and limitations could peppered through the experience and only lifted for a low, low monthly price. Maybe they sweeten the deal by promising streaming music, apps or unlimited storage or whatnot but through a combination of carrot and stick they want your money.

Now I doubt any of this would be tolerated in the enterprise world where I expect we'll see a "pro" Windows which is the same as always. But it may well be what MS have in store for consumers, particularly the free download and whatever surprise updates you get in perpetuity.

I hope to be proven wrong, but Microsoft isn't a charity and it's clear from their statements where they see their money coming from.

DrXym

There'd better be a pay version

I really don't enjoy the idea of a subscription based Windows, if that's what they're hinting at.

LEAKED: Samsung's iPhone 6 killer... the Samsung Galaxy S6

DrXym

Re: And the price will be?

"If it's £200-£250 I might be interested. Pointless spending more than that on a phone."

Get a OnePlus One. I have one and it's proven itself to be very reliable and is plenty fast for my needs.

Google spent record cash lobbying Congress in 2014 – report

DrXym

16 mil is pocket change

I'm surprised the figure is so low to be honest.

Want a cheap Office-er-riffic tablet? Microsoft Windows takes on Android

DrXym

Re: I bought one of these for Christmas@ DrXym

My argument is that you get a year's worth of Office 365 thrown in. Doesn't mean you have to use it but it's still better than a kick in the nuts especially in a £80 tablet.

Doesn't force you to use it in perpetuity.

DrXym

Re: I bought one of these for Christmas

"My guess is that your network will be hacked in no time at all. As the bad guys will know your flight dates you can expect to be burgled as well."

My guess is you are totally wrong. I have this thing called a PASSWORD.

DrXym

Re: I bought one of these for Christmas

"How much will it be when you've renewed your Office 365 subscription for a couple of years? And with MS about to launch W10, there's a huge unanswered question about whether you'd need and want to pay again for the fixed version of W8."

The answer is my six year old doesn't care about Office 365 but there's nothing to stop someone from using LibreOffice. Using 365 for a year on free trial is not a pact for all eternity.

As for Windows 10, I have no idea. Worst thing comes to the worst, the device can carry on running Win 8.1.

DrXym

I bought one of these for Christmas

I bought a Linx 8 tablet for a 6 year old. Why? Because it was 80 quid and came with 32GB, a relatively hires screen, a quad core Intel processor, and ran Windows 8.1 which meant it's basically a PC with enough apps to keep the kid happy. There is Netflix, a bunch of Disney games and various other bits and bobs on the store. The storage means she can play music and videos that I copy onto it, or stream them. The app selection is terrible compared to Android but it's enough. Just. And of course you can run anything that runs on a desktop.

It also means if we go on hols or whatever I could borrow the tablet to print out boarding passes or attach a keyboard and type something in a proper word processor. I printed out a picture she coloured with an app the other day and it just found the printer on the network and printed to it. None of the BS faffing around that Android would make me endure.

Now onto impressions - it's actually a rather good tablet. It feels solid, the screen is bright, there's not too much bloom and metro feels incredibly responsive. The desktop is fast enough for basics though you wouldn't want to play games on the thing. There is wifi, bluetooth, microsd, micro usb, micro HDMI. You could hook this thing up to a keyboard and monitor and use it as a PC if you wanted. Tiny yes, but it's a PC. For 80 quid. It also has a year's sub to Office 365.

On the negative side, this is actually the *second* Linx since the first one went kaput soon after purchase. It wouldn't charge, the light started blinking and when I left it on charge for a few days and tried to start it, I got a message that firmware was corrupted. So I've replaced it and it's too early to say if it was an isolated fault in one unit or not.

The other negative is battery life isn't great. It's about 12 hours on standby or 4-5 hours with screen on. I would have expected it to sleep far more efficiently than it does. Maybe this is a driver issue.

But barring the problem that required a replacement it is a solid tablet. It is incredible to think that this is an £80 PC in effect. That's cheaper than even netbooks were in their time.

Firefox 35 stamps out critical bugs

DrXym

Re: In the future

No there will be no such thing as a bug free browser.

The number of (new and existing) standards it must implement, the number of real world web sites it must work against, the performance it must deliver and the finite resources like time and money always means it will have bugs. There are also tradeoffs between keeping the user safe from harm and delivering the best browser experience, e.g. disabling JS by default would be a good security move but it would break virtually every site in the world.

The best you can hope for is that the development process does it's best to catch and fix bugs (preferably before they end up in the software) and mitigates the potential harm for those they don't already know about by providing sensible defaults.

DANGER: Is that 'hot babe' on Skype a sextortionist?

DrXym

Some scams are deliberately stupid

I suspect that Nigerian scams and these sorts are obvious on purpose. As a scammer you don't people who have the sense to see the con coming, or calling the police so you make it as dumb and obvious as possible - it gets rid of all the timewasters. So make the con big, stupid and obvious and when you get a bite you know you've caught a very gullible person.

DrXym

Re: Did they...

Me wuv you wong time

This $10 phone charger will wirelessly keylog your boss

DrXym

Microsoft wireless keyboards have built in feature to defeat this

The range of MS keyboards is so bloody pathetic that you'd have to plug your charger in within a few meters of the thing. Otherwise it will only capture every other letter.

Remember Corel? It's just entered .DLL hell

DrXym

I have a Corel Linux CD sitting in a cupboard somewhere which was handed out a Linux users group a long time ago. Must see if I can find it.

Anyway it certainly wasn't the first Linux dist by any stretch but it was perhaps the first dist pitched at consumers. The idea was that they'd slap it on cheap PCs for next to nothing and then make money selling bundled up versions of software (most of which were free to begin with). Xandros and Linspire took the idea over but it didn't catch on.

DrXym

Brings back memories

I remember buying Corel Draw, mostly for the clip art. The software was always buggy as hell and not fit for purpose.

DAMN YOU! Microsoft blasts Google over zero-day blabgasm

DrXym

The problem with slippery slope arguments is they assume that some minor upset to the status quo will inevitably lead to the end of the world. If Microsoft had a fix and asked for extra 2 days (e.g. to align with some patch schedule) to roll it out then it is not unreasonable for Google to allow them that.