* Posts by Alan J. Wylie

646 publicly visible posts • joined 21 Aug 2009

Page:

'Biggest ever' Linux release

Alan J. Wylie

Wrong way round - it's big *because* it will be LTS

Torvalds says the release looks so substantial it's probably destined for Long Term Support status.

Greg K-H has already announced that he intends 4.9 to be the next long term stable. Linus commented on this in the 4th paragraph of his announcement linked to in the original article: people pushing to get their stuff ready

Como–D'oh! Infosec duo exploits OCR flaw to nab a website's HTTPS cert

Alan J. Wylie

Re: Trust?

The last paragraph of Comodo's report (linked to by the original article):

Comodo finds it regrettable that some registries choose to offer a port 43 WHOIS service which redacts information for all registrants which even the registry themselves would normally consider to be public. We find it even more regrettable that a sub-set of those registries refuse to consider offering unredacted access to that information even when contractual and/or commercial terms (including binding restrictions on the use of that information) are offered.

New measurement alert. The Pogba: 1,200Pg = NHS annual budget

Alan J. Wylie

Re: Monty Python reference

Ref the typing speed, was that an African sheep or a European sheep?

And would it be spherical?

SHA3-256 is quantum-proof, should last billions of years

Alan J. Wylie

Re: Hash functions

or do some other attack

Obligatory XKCD

Heads roll as Qihoo 360 moves to end WoSign, StartCom certificate row

Alan J. Wylie

Archived copy of Tyro's blog post about backdated SHA-1 certs

archive.org / bing

we made a decision to implement a temporary workaround to allow our small and medium-sized merchants to continue to transact. We reached out in good faith to certificate authorities to provide a few months runway to resolve this big challenge in a way that had minimal impact on merchants.

Hubble telescope spies massive 'cannonballs' of fire from dying star

Alan J. Wylie

Ringworld Engineers

It's obviously the Ringworld Meteor Defense System in action

Mozilla wants woeful WoSign certs off the list

Alan J. Wylie

WoSign has stopped issuing free certificates

https://twitter.com/rmhrisk/status/782838192944713728

https://buy.wosign.com/free/?lan=en

Sorry, due to some security consideration,

WoSign decide to close the free SSL certificate application temporarily. Sept. 29th 2016.

Alan J. Wylie

Apple's response

https://groups.google.com/forum/#!topic/mozilla.dev.security.policy/lWJ1zdUJPLI

In light of these findings, we are taking action to protect users in an upcoming security update. Apple products will no longer trust the WoSign CA Free SSL Certificate G2 intermediate CA.

Alan J. Wylie

Interesting messages from Tyro

First, an old announcement about problems with SHA-1:

http://www.newsagencyblog.com.au/2016/06/02/if-you-are-running-windows-xp/

and secondly a blog posting, now deleted, but still in Bing's cache: try this link to archive.org or search Bing for the text below

https://tyro.com/blog/merchant-security-is-tyros-priority/

Merchant security is Tyro’s priority

Sascha Hess

27/09/2016

To summarise: after a SHA-1 to SHA-2 upgrade, some merchants had obsolete Point of Sale systems that were unable to connect. Tyro "reached out in good faith to certificate authorities to provide a few months runway to resolve this big challenge".

Alan J. Wylie

What about the other browsers?

Unless Google, Apple and Microsoft follow, Mozilla stands to lose market share: users want things that "just work" and if Firefox starts giving error messages, they might move to an alternative.

Chris Siebenmann's blog

The web is past peak innovation: It's all negative returns from here

Alan J. Wylie

posting using w3m

Just for the hell of it!

Argos tech team updates iOS app with helpful info on 'eleventy-billion toilet seats'

Alan J. Wylie

Zombie Moore's Law shows hardware is eating software

Alan J. Wylie

The wheel of reincarnation

http://www.catb.org/~esr/jargon/html/W/wheel-of-reincarnation.html

[coined in a paper by T.H. Myer and I.E. Sutherland On the Design of Display Processors, Comm. ACM, Vol. 11, no. 6, June 1968)] Term used to refer to a well-known effect whereby function in a computing system family is migrated out to special-purpose peripheral hardware for speed, then the peripheral evolves toward more computing power as it does its job, then somebody notices that it is inefficient to support two asymmetrical processors in the architecture and folds the function back into the main CPU, at which point the cycle begins again.

Several iterations of this cycle have been observed in graphics-processor design, and at least one or two in communications and floating-point processors. Also known as the Wheel of Life, the Wheel of Samsara, and other variations of the basic Hindu/Buddhist theological idea. See also blitter.

Lenovo denies claims it plotted with Microsoft to block Linux installs

Alan J. Wylie

Re: "To improve system performance, Lenovo is ... adopting RAID on the SSDs..."

Matthew Garrett's take on this is that Intel's drivers give better power management than Microsoft's and forcing "RAID" mode stops the MS one from binding.

http://mjg59.dreamwidth.org/44694.html

Luxe cable crimper

Alan J. Wylie

Gillette invented this business model a long time ago

https://en.wikipedia.org/wiki/Razor_and_blades_business_model

Sell the holder cheaply, make your profit out of selling lots of small bits of steel/plastic.

End all the 'up to' broadband speed bull. Release proper data – LGA

Alan J. Wylie

"local data for local people"

Your *my* wifi now!

Microsoft thinks time crystals may be viable after all

Alan J. Wylie

Re: YBMM

Rule 34?

Intel pulls out hard cash to gobble virtual CPU upstart Soft Machines

Alan J. Wylie

Re: Transmeta

One of their vice-presidents was previously Executive Vice President at Transmeta: http://www.softmachines.com/john-ohara-horsley/

Alan J. Wylie

Transmeta

Reminds me of Transmeta and their Code Morphing Software: another company from Santa Clara that never reached profitability.

Typo made Air Asia X flight land at Melbourne instead of Malaysia

Alan J. Wylie

On the subject of typos

Instead of entering 15109.8 east (i.e. 15˚ 19.8' east)

That should be 151˚ east

Publishing military officers' names 'creates Islamic State hitlist'

Alan J. Wylie

"For security reasons we're apparently not supposed to say who they are."

But you did!

http://www.theregister.co.uk/2016/06/30/first_f_35b_joint_strike_fighter_lands_uk/

Lindsay Lohan's Grand Theft Auto V cartoon case kicked out of court

Alan J. Wylie

Original model whose image was used for the artwork

http://www.dailydot.com/gaming/gtav-grand-theft-auto-girl-bikini-model/

It's Shelby Welinder whose photo was used for the artwork

London's Francis Crick Institute will house 1,250 cancer-fighting boffins

Alan J. Wylie

Rosalind Franklin

Sir Francis Crick, a British molecular biologist who discovered the structure of DNA, along with his colleague James Watson

Don't forget Rosalind Franklin

OpenSSL 1.1.0 is out

Alan J. Wylie

Oops.

In the Changelog

https://www.openssl.org/news/changelog.html

*) Add support for Dual EC DRBG from SP800-90. Update DRBG algorithm test and POST to handle Dual EC cases.

[Steve Henson]

damn, that's a bug in the CHANGES file

Sealed with an XSS: Popular vulnerabilities probed

Alan J. Wylie

No, the VCR is not about to die. It died years ago. Now it's VHS/DVD combo boxes' turn

Alan J. Wylie

Philips Video 2000

https://en.wikipedia.org/wiki/Video_2000

I briefly contracted to PYE TVT in on Coldhams Lane, Cambridge in 1984 (a real-time video editing suite for the 1986 Mexico World cup). Pye was a sub-division of Philips and the company shop sold Video 2000 recorders at a substantial discount, so there was a significant number in the area. Later I heard tales of the stock management system of e.g. Dixons sending equal numbers of cassettes to each branch, and the manager of the Cambridge branch having to call around to get them sent on to his.

Microbe drives tropical butterfly species to a male-killing frenzy

Alan J. Wylie

Then we can start on genetically engineering a version that affects humans in order to be one step closer to triggering a zombie apocalypse

We already know of infections that cause an increase in risky behaviour[1]. The plot of the 1977 science fiction short story The Screwfly Solution[2] is based on a disease that causes increased male violence towards women,

[1]

https://en.wikipedia.org/wiki/Behavior-altering_parasites_and_parasitoids

[2]https://en.wikipedia.org/wiki/The_Screwfly_Solution

CloudFlare probes mystery interception of site traffic across India

Alan J. Wylie

"conducting infection of host headers"

conducting infection of host headers

Perhaps "conducting inspection"?

Wannabe Prime Minister Andrea Leadsom thinks all websites should be rated – just like movies

Alan J. Wylie

Better than watching paint dry: https://en.wikipedia.org/wiki/Spider_trap.

And would the spider respect robots.txt?

ICO smacks lying spammers

Alan J. Wylie

CHANGE AND SAVE LTD Company number 08995065

https://beta.companieshouse.gov.uk/company/08995065

A trip to the Twilight Zone with a support guy called Iron Maiden

Alan J. Wylie

Nobody called Lady Mondegreen though?

It's Friday afternoon - I'll get my anorak.

The best way to find oxygen on Mars? Friggin LASERS, of course

Alan J. Wylie

Not a green laser.

http://www.msl-chemcam.com/index.php?menu=inc&page_consult=textes&rubrique=86&titre_url=ChemCam

The green color of the laser depicted above is for illustrative purposes

Telia engineer error to blame for massive net outage

Alan J. Wylie

Cloudflare post-mortem on the Jun 20th incident

Also mentions one on the 17th

https://blog.cloudflare.com/a-post-mortem-on-this-mornings-incident/

Astroboffins discover rapid 'electric winds' blowing on Venus

Alan J. Wylie
Coffee/keyboard

"It's amazing and shocking,"

Groan.

Belgian brewery lays 3.2km beer pipeline

Alan J. Wylie

Even better than the vinegar pipeline over the A38(M)

http://www.cbrd.co.uk/motorway/a38m

End of an era as HP factory closes

[Reminisces] - 20+ years ago I worked on the functional specification for the lane control system on the A38(M).

Picture this: Live 'net congestion maps for sysadmins

Alan J. Wylie

Smokeping

There are already many SmokePing graphs out there, e.g. a quick google for "smokeping linx" returns

http://saturn.retrosnub.co.uk/cgi-bin/smokeping.cgi?target=london.be

which leads to

http://saturn.retrosnub.co.uk/cgi-bin/smokeping.cgi?target=london

MITRE fighter says CVE delays are no laughing matter, names bug ROFL in branding protest

Alan J. Wylie

Several people have recently left the CVE Editorial Board

Casper Dik

Matt Bishop

Panos Kampanakis

Gene Spafford

Casper and Spaf are, of course, very well known names.

Gillian Anderson: The next James Jane Bond?

Alan J. Wylie

Charlie Stross

The Jennifer Morgue

Spoiler alert: to say any more would be giving far too much away.

Loose lips sink ships.

Google still faces legal spat with SEO biz that claimed it was wiped from web

Alan J. Wylie

central London?

a company with five global offices including one in central London

http://www.eventuresworldwide.com/pages/contact-inquiries/contact-us

United Kingdom: 90 Long Acre, Covent Garden, London, WC2E 9RZ

http://www.regus.co.uk/locations/office-space/london-covent-garden

Again: 90 Long Acre, Covent Garden, London, WC2E 9RZ

http://www.regus.co.uk/products/virtual-offices/index.aspx

Virtual offices

A business address in the right place and a local contact number answered in your company name can make all the difference in business.

Our professional teams will manage your calls and handle your mail. You get a choice of prestigious addresses for your business and use of all Regus Business Centres worldwide.

Nuisance caller fined a quarter of a million pounds by the ICO

Alan J. Wylie

Re: Add

The Insolvency Commissioner's blog today has an interesting post on the subject:

Insolvency law – why rogue directors trying to avoid fines face a rocky ride

(some snippets)

The job of the insolvency practitioner is to review the conduct of a company’s directors before the business became insolvent. That investigation can look at the directors’ action as much as six years before the insolvency, and even further if there are criminal claims.

Following the review, the insolvency practitioner will prepare a director report which is to be filed with the Insolvency Services, and if the report demonstrates unfit conduct, the director can face serious sanctions:

...

Up to ten years imprisonment, a fine or both:

* Fraudulent trading ...

Up to 7 years imprisonment, a fine or both:

* Fraud in anticipation of winding up ...

Popular cache Squid skids as hacker pops lid

Alan J. Wylie

The bug has been fixed in an official release

A patch has been produced for daily versions but not yet distributed for regular builds, according to researchers.

It's Bug 4501, fixed in 3.5.18

http://bazaar.launchpad.net/~squid/squid/3.5/view/head:/ChangeLog

Changes to squid-3.5.19 (09 May 2016):

- Regression Bug 4515: interception proxy hangs

Changes to squid-3.5.18 (06 May 2016):

- Bug 4510: stale comment about 32KB limit on shared memory cache entries

- Bug 4509: EUI compile error on NetBSD

- Bug 4501: HTTP/1.1: normalize Host header

- Bug 4498: URL-unescape the login-info after extraction from URI

- Bug 4455: SegFault from ESIInclude::Start

- Prevent Squid forcing -b 2048 into the arguments for sslcrtd_program

- Fix TLS/SSL server handshake alert handling

Laser-zapping scientists will save the Earth from meteorite destruction

Alan J. Wylie

Solar flares

What we need is a method of generating magnetic fields to induce a solar flare which will then act as a gas laser and take out the asteroid.

Huge embarrassment over fisting site data breach

Alan J. Wylie

I'm waiting for the breech anal-ysis to be released.

Babycare e-tailer Kiddicare admits customer data breach

Alan J. Wylie

yet more dumbing down

"strongly encrypted passwords". I hope that they were strongly hashed (irreversible) rather then encrypted (reversible), but you need to use words that push-chair purchasers might recognise.

At last: Ordnance Survey's map wizardry goes live

Alan J. Wylie

I remember the days

When I installed a very early computerised digitising system at the Ordnance Survey in Southampton. My first job was at Laser-Scan (founded by Otto Frisch). It must have been about 1980 or 1981. There was a "Fastrak" laser scanner attached to a VAX 11-780.

Here's a scan of a photo of the later design of the operator's console. A map was photographed onto a A6 negative, which was then scanned, a square mm at a time, by a red laser, and straight lines were followed automatically. The operator could select which line to follow at junctions using a tracker ball and 16 buttons (which could also be pressed as chords!). When a line had been digitised, a blue laser wrote on a piece of photochromic film sandwiched against the negative, removing it from the display.

I can remember scanning 1:1250 maps (NZ2741NW, Prebend's Bend, Durham, which was our standard demo), contour lines, and a project for the Forestry Commission where we digitised the boundaries of all the woodland in the UK (the green overlay from 1:50000 sheets, all 204 of them).

There's more history at my ex-colleague Paul's page

Stross' new Laundry list

Alan J. Wylie

Concrete Cows

The concrete cows have been moved into the Milton Keynes museum.

http://www.bbc.co.uk/news/uk-england-beds-bucks-herts-36127712

Is this in preparation for CASE NIGHTMARE GREEN?

What a difference a year makes: ICO tele-spam fines break £2m barrier

Alan J. Wylie

But just how much of the fines has actually been collected?

that is all.

Britain is sending a huge nuclear waste shipment to America. Why?

Alan J. Wylie

Re: How is this waste?

> I believe, though I would like to see someone else do it first, that one can safely walk past a freshly manufactured fuel rod

When I was at school in the late 70's, someone from Sellafield/Windscale/Calder Hall came to our physics class and passed around a stick of Uranium, wrapped in polythene. It was very heavy, and rather warm.

Taking an artsy selfie in Stockholm? You might need to pay royalities

Alan J. Wylie

Ingress

Google / Niantic's Ingress does exactly the same thing. Lots of photos of monuments, etc.

Will they be next in the firing line? And where will it end?

Inflatable space podule set for orbital trial

Alan J. Wylie

"Podule is a great word"

The Acorn Archimedes used to have podules.

And here's a Not The Nine O'Clock News video of Rowan Atkinson and his "small translator podule"

Page: