Posts by Pascal Monett

Intel's makeshift Kaby Lake Cores hope to lure punters from tired PCs

"Intel gave the entertainment giants what they wanted"

And I will not buy that chip on that basis. I am certain they will muck it up, it will be hijacked by hackers, used as a malware insertion point, prevent me from viewing my legitimate content locally, and so on and so forth.

DRM is not only evil, it is inherently stupid because it never considers all the use cases and defaults to "NO" if there is a doubt - meaning people can be cheated from their own content.

My house is my castle. What I do in it is nobody's business but mine, and I will not condone surveillance imposed by anyone, especially not Hollywood & Co.

This DRM malarky never ceases to annoy me to no end. I buy my films, and I have to put up with imposed trailers (that are laughable five years later) and those bloody FBI warnings I shouldn't even see since I BOUGHT THE DAMN DISK.

So I buy my content, thank you very much, and then I rip the hell out of it, put it on my NAS and watch it the way I want to see it.

They can stuff their DRM where the sun don't shine.

Li-Fi with my little eye … a vulnerability

Is this really an issue ?

"how many sysadmins have found rogue Wi-Fi access points in the businesses they work for?"

Not comparable issues in my mind. Bringing in a Wi-Fi thingy and hooking it in to the network is easy enough - they're cheap, rather easy to set up and also easy to keep inconspicuous. If the network admin is not whitelisting connected equipment, then anything goes anyway.

Climbing up to the ceiling to replace a light is not inconspicuous, and the hardware is less easy to get (won't stop a determined attacker, though). Obviously, once in place it'll be a devil to notice, but it still falls under whitelist control (if that is in place).

With a minimum of attention, network access shouldn't be possible, which would reduce the attack to DoS-levels - still a nuisance, but not really a security issue.

Facebook replaces human editors with McChicken romping, Fox News faking AI bots

I avoid it like the plague, but in all honesty it is rather useful in keeping all that stupidity in its own little pen.

There was a time when it would be my mailbox getting spammed with chain letters, so-called inspiring nonsense, bullshit warnings, stupid permutations on urban myths and all that moronic shite, and I would have to wade through it all and delete, delete, delete. Now it's all on Facebook, which I can just never go to.

So thanks for that, I guess.

VMware goes back to its future with multi-cloud abstractions

Cross-Cloud Architecture

Yeah, because I believe without reserve that AWS is going to play nice with Azure.

I do think it needs to happen.

I don't believe that VMware is going to make it happen.

But hey, kudos for trying.

Big data busts crypto: 'Sweet32' captures collisions in old ciphers

By my calculator that gives 1,123,835.93.

Still not comprehensible.

How is that counted ?

"2,000 requests per second in a single TLS connection. In our experiment, we were lucky to detect the first collision after only 25 minutes (220.1 requests)"

2,000 requests per second is 120,000 per minute, meaning 3 million in 25 minutes.

Could someone explain what 220.1 requests is supposed to be ?

Because if they managed to get their collision in only 220 requests, or even 220 100 requests, then this thing is more dangerous than they say.

Chinese CA hands guy base certificates for GitHub, Florida uni

"the company would 'do better'"

Of course they will.

They can't do any worse.

Apple is making life terrible in its factories – labor rights warriors

Re: "stop desperate workes from getting in"

And that is what needs to change before Apple (or anyone else) can stop cutting prices even more.

China is on its way to wealth similar to ours. They are fast-tracking everything we did before : pollution, work conditions, the works. Check out a film about our Industrial Revolution if you wish to learn more - in those days workers who got their hands crushed, mangled or cut off by unsafe machinery were just fired, no compensation.

We did those things. Now Chinese workers are experiencing the same. They will rise against it as well. Then it will be India's turn, then whatever else comes next.

Ultimately, as in everything international, it is up to the local population to decide if they accept a given set of conditions or not. We can tell them about what we think they should do, but only they can decide to actually go about doing it.

I'm all for Chinese workers to tell Apple & Co to stuff it and lock prices, but I know that then, Apple & Co will just take their business elsewhere (yay Capitalism!), so the workers will end up out of a job instead of having kept the little they had.

What I really wish to know is how exactly is Apple going about getting its cost cuts. Is it calling them up and saying "How much further can you diminish costs next quarter ?", or is it - more likely I guess - "Cut costs by 5% next quarter or we move to India" ?

It's the latter I would find disgusting - but not surprising.

Well, in his defense, he is using the Spawn of Satan icon.

It might be sarcasm.

NewSat network breach 'most corrupted' Oz spooks had seen: report

ISP's are the keyholders

They see everything going through their pipes, they can do what they will with it and you have no idea what they are up to, nor much of a recourse if you don't like it.

The least they can do is provide proper network security and functionality, and doing so for the customer means keeping the house in order.

The fact that an Australian ISP has government-issued surveillance equipment is not surprising these days, even if it is a bit disappointing. I'm sure it is just one of the many - although I'd be interested in a per-country comparison of how many ISPs do have such government surveillance on-premise. Maybe that could be one point of a Freedom Index chart ?

Our pacemakers are totally secure, says short-sold St Jude

"Muddy Waters, the Wall Street firm"

A Wall Street firm named Muddy Waters.

Are they actually trying to make people understand what a cesspit the whole Stock Exchange thing has become ?

Phoney bling ring pinged by Tolkien's kin

He represented himself over the phone ?

Is that some local specialty ? When you're summoned to court, aren't you (or your lawyer) generally supposed to be there ?

Daft as it sounds to me, I note that the general rule of self-representation has been respected (ie you lose). The phoning it in must really have tickled the judge's funny bone (in a "Ah so that's what you think of my court ?" way).

Personally, I wouldn't wait for the guy to "hand over" the relevant papers justifying how much he sold. With behavior like that, I'd send in the plods and have them tear the place apart to bring back every slip of proof they can get. I wouldn't trust that guy not to doctor the evidence (not that he seems smart enough to do it right in the first place).

But maybe that's the thing - the judge is handing him another length of rope, waiting to see just how he'll try to hang himself with it. Hmm, yup, sounds much more satisfactory in the long run.

New booze guidelines: We'd rather you didn't enjoy yourselves

Re: Only once it becomes frowned upon to get smashed on a night out

And that there is specifically the problem : confusing having a drink with getting smashed.

For fuck's sake, if you can't have a drink without getting full-blown tanked then by all means, don't drink. It is already socially frowned upon to be unable to speak coherently, piss one's pants and act like a bloody fool. That point is already a given, as is lying in a drunken stupor on the sidewalk. You're flogging a dead horse, is what I'm saying.

Responsible adults are talking about having a drink, with friends, in a pleasant, cultivated atmosphere of détente and cordiality.

Take your raving drunkenness elsewhere. You are not welcome here.

No safe level of drinking

No safe level of smoking either. And now we are being told that bacon sammies are even worse.

Shall we just lay down and die now ? Oh, silly me, of course not. That would deprive government of years of tax income. No, we should obviously live our lives in religious ascetism and die the day of our retirement - that way Gov gets all the revenue and pays none of the costs.

Well you can forget that idea. We're humans, not robots, and all the shit we take daily means we need to smoke and drink to not effing snap and murder the a-hole next door on a weekly basis.

Maybe if you eased up on the scare announcements we'd not need to drink so much ?

Bah, just kidding. We'd drink anyway.

Robot babies fail in role as teenage sex deterrents

Baby dolls not dissuasive enough

From the results of the study, it seems the participants went "so that's all it is ?" and went off to have a real one twice as often.

In other words, it was a training simulator that built their confidence that they could deal with it.

Well done, I guess.

In other news : teenagers still hormonally attracted to sex despite puritans' best effort.

I fart in your general direction! Comet 67P lets rip on Europe's Rosetta probe

A landslide ?

Comets can have landslides.

My mind is blown.

False Northern Lights alert issued to entire UK because of a lawnmower

Yeah, but our modern society has no time for checking data - it has to be spewed out ASAP, verification can come later.

"what had caused the huge anomaly"

The huge anomaly was actually caused by lack of common sense and non-existent correlation between local readings and solar activity.

In order for any sort of aurora to occur, the sun must have surface activity - activity which is at a low point at this time. So correlating whatever reading with current sunspot activity would have nipped that alert in the bud.

Plus : auroras in the UK night sky ? When was the last time that happened ?

Edit : by Jove, apparently it does happen, albeit rarely. My gast is flabbered.

French submarine builder DCNS springs leak: India investigates

I'm sure they're working on that.

Stop lights, sunsets, junctions are tough work for Google's robo-cars

Autonomous cars apparently have no difficulty in detecting other cars and measuring their movement vectors. If said whatever-your-pet-hate-is has a vector that puts the autonomous vehicle in danger, I trust that it will be able to avoid a collision by braking before entering the danger zone.

The major issue, apparently, is reacting properly to road conditions, not other drivers.

Nuclear fallout shelter becomes cloud storage bunker

Storage in Paris

Nice to know that the data will be stored in a nuclear bunker. Unfortunately, the bunker is in Paris, a city with a history of terrorist attacks and no end of Hollywood destruction.

I would think it would be a better idea to set up a data storage area just about anywhere else. From the extinct volcanoes of Auvergne to the livestock-infested areas of its center, there are many places in France to choose from where a terrorist would have zero chances of being interested in blowing something up, mainly because there's only cows or crops as far as the eye can see. And nobody would think of nuking crops - that's counterproductive.

Of course, most of those places are likely boring as hell because there's naught to do outside of work hours, but we're talking about data safety, not employee entertainment. Put a data center in that kind of area. With all the money put into rehabilitating an underground bunker in Paris, I'm sure you could have built a data center in the Meuse without any more trouble than occasionally having to wait for a cow to move out of the way.

Hacked hookup site Ashley Madison's security was laughable

No, but you're probably underestimating the number of desperate wankers, though.

No, we haven't found liquid water on Mars, says NASA

Grasping at water straws

Looks like we're going to have to face it : Mars only has some water at the poles - and not enough to sustain a planet-full of colonists.

That, along with the eternal issue of the thin, non-breathable atmosphere, is going to make a colony on Mars a very difficult endeavor.

Software exploits overrated - it's the humans you need to be watching

"Organizations should put controls and processes in place"

Indeed they should. Most companies of more than 100 employees do, because they have enough money to get an IT department in place that will properly prepare and configure the network to allow for it. Of course, sometimes said big companies will still spectacularly fail (eh, Target ?) and then everybody will point and laugh because everyone knows they had the means, they just didn't put the proper effort into it.

Nonetheless, most companies are less than 50 people, and most of those companies do not have an IT department because not enough budget. Or worse, the CEO thinks it's a good idea to appoint a family member as IT manager because various stupid reasons, so an incompetent twat is in charge, backed by the might of family ties.

Those companies are really at risk, because either the CEO is convinced he knows what to do because he can program an Excel formula, or his nephew knows all because of all those hours on Playstation instead of getting a degree. Either way, the only thing that actually saves them is their obscurity, until the day it doesn't because some PEBCAK downloaded a Locker and ended up encrypting the companies' sole file server (that has no usable backup, because obviously).

In the end, I think it's just Capitalism at work. The healthiest companies survive, those that cannot identify threats and define mitigations fail. Isn't that what Capitalism is all about ?

German minister seeks facial recognition at airports, train stations

Once again, our society rushes to abandon freedom at the first sign of panic

Independently of the fact that facial recognition in public areas has been demonstrated to be useless, I am tired of this immediate jump to more surveillance in our daily lives just because there is a hint of a threat.

Yes, terrorism is bad. Yes, loss of life is tragic. If, however, we are going to transform our society into a series of roadblocks with security checks at every corner and nightly curfews, then the terrorists have succeeded in destroying our way of life beyond their wildest dreams.

UK.gov depts in post-Mad Frankie Maude landgrab over IT spending controls

"Due to missing year-on-year spend figures"

For me, this is proof that the whole canoodle is nothing but a carefully orchestrated smokescreen to enable pork-barrel contracts and personality building.

A government branch simply cannot have "missing" accounting controls. They are ACCOUNTABLE.

The IT spend shambles starts right there. Somebody needs to bring that house back in order, and Brexit is NOT going to help.

Microsoft can't tell North from South on Bing Maps

In defense of the fat-fingered blunderer, let us not forget that Australia bites. Venomously.

New science: Pathetic humans can't bring themselves to fire lovable klutz-bots

Because Clippy wasn't cheery, it was effin' annoying.

And patronizing as well.

What I take from this article is that if you behave nice and communicate with enthusiasm, you'll have an easier time getting your mistakes forgiven.

Snowden files confirm Shadow Brokers spilled NSA's Equation Group spy tools over the web

"now that the exploits have been released, [..] ordinary criminals will use them [..]."

Too bad you didn't have such foresight when you created the tools in the first place.

That is why you do not create malicious tools to subvert common standards. That is also why you do not consider yourself above the hoi-polloi when it comes to the risk of being hacked yourself. Finally, that is why when, despite all the dangers, you do decide to go ahead and create such malware tools, you do not go and put files on an internet-accessible server.

But sure, it was more practical for the spooks to be able to readily download the latest version from whatever location they are at in the world. And yes, I understand that the tools need to be DevOpped super fast because of the changing nature of the target.

Unfortunately it was also more practical for the hackers. And now said hackers have offered it to the world, which means the basic scum are going to get access to nuclear-weapons-grade exploits way before they could code it on their own. So the NSA has given a booster shot to all the misguided, money-grubbing lowlifes of the world.

I guess you can call that job protection, in certain circles. Thank God it's all legal, right ?

Shopped in an Eddie Bauer store recently? Your card's probably gone. It's just gone

"we have fully identified and contained this incident"

And I'm sure you will "fully contain" the next incident as well.

Anybody else bothered by the fact that it took them 6 whole months to come clean ?

Windows 10 Anniversary Update completely borks USB webcams. Yay.

Re: Optional behaviour

Microsoft never "falls back". That would be to admit defeat and allow the errors of the past to continue. Microsoft will only boldly go forward, forging brilliant new errors along the way. And now everyone gets to experience them directly thanks to the ever-changing code base.

The calm before the storm: AMD's Zen bears down on Intel CPUs

Go AMD !

I still have my Athlon chip (on the shelf), and I'm proud of that little one. It's good to see that AMD is getting back to where it should be : toe-to-toe with Intel. Good for everyone, as we all agree.

But I am not ashamed of my current i7. I just want the best performance my money can buy for my gaming needs. And it has been a (long) while since AMD was in that picture. I do sincerely hope that my next CPU choice will be AMD.

Here's to looking forward to that.

FireEye warns 'massive' ransomware campaign hits US, Japan hospitals

Pain is the best teacher

Teaching users to be careful is a never-ending task. You can tell a person a hundred times to back up his data, one day he will still get it wiped and moan that he's lost everything. That, most of the time, is the day people become sensitive to the argument.

Here it is worse. Hospital staff are harassed all day, doing five things at a time and some of those can entail risk for life if done wrong. Asking them to beware of their tools in addition is really hard to do.

The scum that launch these mails should be found and shot for putting lives at risk.

If this headline was a security warning, 90% of you would ignore it

Anyone who boasts to me to be able to multitask gets asked to finish that report and converse with someone on the phone at the same time.

If said person can effectively hold a conversation while continuing to type the report, then I'll admit that multitasking is possible.

Haven't seen it yet.

Windows 10 needs proper privacy portal, says EFF

That EFF document is a solid gold reference

I am keeping the URL and saving a copy for offline reference.

I am quite happy that an organization with such clout is finally calling out MS on such shameful shenanigans.

On the other hand, I doubt anything real will come of it. MS is no longer an OS maker, it is an ad pusher. It will do anything to push those ads, including lying and obfuscating settings. Facebook is a splendid reference in that regard.

Tech support scammers mess with hacker's mother, so he retaliated with ransomware

Re: What really?

My good Sir, you really need to read up on how many file extension exploits have targeted Windows users.

It's as old as Moses' toes as just as corny.

@ Robert Helpmann??

No, it's just that the very concept of "hate crime" is specifically USAian.

It was an infected zip file. Windows opens it, displays the content and executes the code - because Windows is stupid like that.

The fact that a scammer fell for such a basic, elementary trick demonstrates without question that this kind of scum is really among the bottom-feeders of society.

Penetration tech: BAE Systems' new ammo for Our Boys and Girls

@Chris G

No, I don't think I have it backwards.

"It is particularly reassuring to know that the Death industry is very, very attentive to only bring death when it is specifically requested (by pulling the trigger)."

I do believe that covers your "go through all of that mistreatment and still go off when the operator requires it".

"I don't think Mr Apple does that all the time"

How cute. A weapons manufacturer trying to justify extensive testing by comparison with civilian, not-for-killing manufacturers. And that from a company producing a product that is guaranteed to sell, especially these days.

I'm glad to know that there are such stringent standards in place for ensuring that the rough transport conditions of deadly weaponry will not result in haphazard explosions and useless loss of limb or life. It is particularly reassuring to know that the Death industry is very, very attentive to only bring death when it is specifically requested (by pulling the trigger).

But really, guys, comparing with an iPhone ? Come on, Apple doesn't need such standards (nor does Samsung). A broken phone is one that will be replaced, so it's a business opportunity. That's the view. It's okay to have phones that break (from a manufacturer's point of view). It is not okay to have bullets that go off by themselves (from a soldier's point of view).

Microsoft to overhaul Windows 10 UI – with a 3D Holographic Shell

Not at all. Microsoft is expert in multitasking. They have a BreakingStuff Dept, a ShootingTheFoot Dept, and a WildNewIdeas Dept that all work at the same time.

Mostly at odds.

Web pests pour two exploit kits into one cup

Re: Do get used to it old chum.

Oh, so because the sodomy gangs are freely roving the streets I have to be happy about it ?

When something becomes a public menace, it has to be dealt with.

Now get off my lawn.

"which execute if users allow malicious Javascript"

As usual, NoScript FTW.

Javascript needs to die now, just like Flash. It is a nuisance, a stupid thing on 99% of the websites that use it, and an insult to HTML standards. The vast majority of websites that use Javascript do not actually need it anyway, it's just for making menus look nice and having a stupid slideshow on the home page. If HTML5 can take up that mantle, maybe we can start the process of ridding the Web of this malware-lugging donkey.

LinkedIn sues 100 information scrapers after technical safeguard fail

"[..] some of the security procedures [..] to stop just this sort of attack."

Ah, LinkedIn. What do you expect when security was the last bullet-point of discussion in the last meeting about specifications before coding this "social" monstrosity ? And it was punted to the meeting after beta, to be discussed when you had a product sucking the clueless in.

Security was never your focus, it's the add-on that you have to bolt on to the sides to make it seem worthy. Experience demonstrates that such an attitude fails regularly. And I don't see your new owner making the situation any better.

Intel's Optane XPoint DIMMs pushed back – source

Agreed, but at least IBM states that the tech is "in production". This is no longer a lab project - we will see product, just later than initially stated. I have no problem with that, product announcements are from Marketing, and Marketing always lies.

We're going to bring an asteroid fragment into Lunar orbit

Re: And ppl cursed china over Three-Gorges-Dam slowing down earth's rotation

And your point is ?

Let's not get things mixed up. Said rock is going to be pushed into lunar orbit. If anything goes wrong, it'll impact the Moon, and everyone agrees that there is no life there, so no problem. Worst case scenario is we get to study a fresh impact crater with before and after data. Simulations will be excruciatingly precise.

If Mankind is supposed to survive, we are going to need space-mining experience and technology. We have the basic technology, we might as well start now before it is too late. And using the Moon to park our experiences is just common sense.

Oculus Rift will reach UK in September – and will cost more than two PS4s

A 13-foot cord ?

The Wii rapidly tethered the controllers to their users after a number of smashed TV screens.

I wonder how many broken household heirlooms it will take before they shorten that cord down to 5 feet.

VeraCrypt security audit: Four PGP-encoded emails VANISH

"stemming from multiple independent senders"

Um, sorry, but how can 4 emails stem from more than 4 "independent senders" ?

It is tiring to see how even the brightest can get pwned by marketspeak. Four emails sent by four different people - is that so hard to say ? Is it really necessary to try to make things sound even more important than they are ?

You've got a brain, you're speaking to people who should have a brain. KISS, people.

Of course, if you're trying to do email security research and use Gmail for that, it's an instant FAIL.

Some Windows 10 Anniversary Update: SSD freeze

Don't go giving them ideas !

Re: I'm not sure if your angry at the grammar or the fact I used an MS product

They're just angry that you said something negative about the Holy Linux, May The Bearded One Ever Keep It From The Unwashed Masses.

Each side has a cult, and neither can accept Real World Experience. It's always because you're too dumb, can't spell, can't read, can't "get it". Never because it's hard to grasp for beginners.

Personally, for every "expert" laying in on a newbie, I would dearly like to introduce them to a (mandatory) one-hour session with a karate black belt, 7th dan. The object of the lesson will be preparing for the black belt. You can guess the penalty for saying "it's not easy" . . .