Posts by Tom Paine

Giving Windows total recall of everything a user does is a privacy minefield

And according to the Reg, too. See the fine article.

UK lays down fresh legislation banning crummy default device passwords

* makes a note in 2029 calendar to heck back on how effectively this is enforced and what sort of sanctions follow (including crapware flogged on Amazon, eBay etc)

Can't see it, myself.

Security pioneer Ross Anderson dies at 67

A towering figure

I haven't much to add to the excellent obit (thanks Connor), except to +1 that Security Engineering is an absolutely essential book for the shelves of anyone with even a non-professional interest in infosec; and to note that one reasonable proxy for measuring his significance might be the number of times he was involved in stories reported here on the Reg.

(Sadly and inappropriately, I can't get DuckDuckGo to do the equivalent of the chocolate factory's "site:.." flag.)

https://www.google.com/search?q=%22Ross+Anderson%22+site%3Atheregister.co.uk

Attacks on UK fiber networks mount: Operators beg govt to step in

It's bit more complicated than that

https://www.gov.uk/government/statistics/police-workforce-england-and-wales-31-march-2021/police-workforce-england-and-wales-31-march-2021

(this chart only runs to 2022 but IIRC the trend has continued.)

Re: Root cause

Who are? Got a link?

In the books, Doctor Doolittle would put a brick through s police station window every now and then, because in a cell he could get peace and quiet snd settle down to write another treatise on how the Pushmipullyou defecated, or giant sea-snails as submarine transport, and so forth.

I doubt that tactic would work very well these days though.

Re: Hostile state action ?

There was a mini outbreak of such attacks in France in the first few months following the Russian invasion of Ukraine. Thd Nordstream gas pipeline sabotage happened around the same time. I saw a fair bit of speculation ftom people eho know a lit about OSINT, geopolitics and covert ops, */but not much about carrier-scale networking/*, that it was Russian-sympathasising or controlled actors. (This was before the incredible people on Bellingcat's public Discord server established that Nordstream was probably down to an independent op by a loose cannon Ukranian oligarch; see the Nordstream thread over there for far, far more than you ever wanted to know about AIS, webcams at German yacht clubs and the like.) Then again, the Hairy Ivans really *did* have people running round Paris spraying Star of David symbols around the place. Pef the NATO Handbook or Russian Information Warfare, one of their major strategies is to spread so much confusion that people give up trying to figure out what's true and what's not, and disengage from what some academics call "politics" (including caring, or even having an opinion about, anything much going on in society.)

ESA's Mars Express continues to avoid retirement home

Re: NASA, again, proves its worth

Also important to dudtinguish minimum mission success criteria from what the team think would be realistic, assuming a successful EDL. Eg for the MERs, the criteria was (among various other things) 90 sols of operation, but they'd have been hugely disappointed if they'd died after, say, 120 sols.

Re: No Martian would dare invade earth

Nof wanting to start a heated debate, or anything, but -- the very short lifetime (compared to the time required for sub-lightspeed interstellar travel) of unmanned spacecraft is, for me, one of the obvious showstoppers for any prospect of human travel beyond the solar system*. Yes, I know the Voyagers are coming up on 50, and Mars Odyssey and various other uncrewed machjneshave kept running longer than expected, but (a) that's without yhe gigantic overhead of providing life support that could be maintained for tens ov thousands of years -- which also implies a population size sufficient to produce replacement engineers able to not just keep things running, but to improvisecsolutions to the inevitable unexpected / major breakdowns that would inevitably occur in time. I seriously doubt we could design build launch and operate a non-trivial unmanned spacecraft designed to survive a century, let alone three orders of magnitude longer timespans.

Anyway, merry Xmas ya filthy animals!

https://youtu.be/BoLloFY_Zik?si=capt-hatstand-and-his-performing-jellyfish

Re: NASA, again, proves its worth

Ah, so you're a waffle man!

MarsCAM

The "Marscam" (VMC), which IIRC was tacked on as a last minute (light) payload purely to monitor Beagle's deployment, was an early win for the citizen space-science community. ESA accepted spacenerd demands to leave it running restart it after 3 years' dormancy, and although its not a science instrument, I'm sure I remember science results came from it at some point.

https://www.esa.int/Enabling_Support/Operations/About_the_Visual_Monitoring_Camera_VMC

Final Patch Tuesday of 2023 goes out with a bang

Re: "Don't any of these outfits test the software"

Heh. Billions of LoC will never be completely debugged, not if its supported for 100 years. Even OpenBSD still has bugs.

Comparison

So, Adobe software is 212 / 36 = 5.8 times more secure than Microsoft's!

* bowtie spins, buttonhole squirts, etc

NASA celebrates Perseverance Rover's 1000th Martian day with lakebed history lesson

Top banana

I have to admit I've always been sceptical about the sample return part*. Not that it can't be done, but with,what - eight successful landers, 4 being rovers, JPL (not NASA ;) ) has a lot of experience getting there, and none at all with coming back. It's a hard problem, and it would be pretty extraordinary if the whole architecture for MSR worked all the way through, first time.

Fortunately, Mars isn't going anywhere...

*Not as much as the insane idea of landing Starship on the moon (after 16 full-stack launches, no less, before leaving LEO. It'll never work, I tell you!)

Tesla says California's Autopilot action violates its free speech rights

Re: According to Musk, fraud is protected under the 1st Amendment

I'm still waiting for enlightenment on how that literal clown car is road legal, even in the wild and woolly US. Surely they *have* some form of mandatory testing and type approval system that requires crumple zones along with airbags, non-impaley steering wheels, bans Boadacia-style whirly knives on the wheel hubs and so on?

Re: Three Words

Clear and obvious...

Has Elon ever considered...

...entering this year's Mr Mad competition? I gather the incumbent is busy dealing with a particularly stubborn bloater.

Discord in the ranks: Lone Airman behind top-secret info leak on chat platform

And yet....

Despite one of the most sophisticated data control regimes in the world, the US military can't prevent this sort of thing happening again and again. Meanwhile, Acme Paperclips plc spend hundreds of thousands on DLP "solutions". And people wonder why security people either get jaded and cynical, or (even more cynically) go along with such nonsense. I suppose it gets mortgages paid...

Polish train maker denies claims its software bricked rolling stock maintained by competitor

Re: Disappointed

This comment has been delayed due to a shortage of drivers. We apologist for the inconvenience.

Seven, you say?

_Seven?!_

*hysterical mad laughter

https://twitter.com/DominoTree/status/1732794464027242618

Re: Hackers entering GPS coordinates of OEM repair shops to prevent trains from failing?

...also inserting an undocumented control combo that, when held down, resets the whole system. Gosh, those pesky hoodie-wearing kids, what WILL they get up to next? Perhaps they'll add code to brick the whole train once the next model comes out.

Re: or in this case

Don't encourage him, he'll only do it again.

Re: If you expect products to last, then products should come with warranties that you can use.

Where'd you get the parts for something that old?!

Bleep -- bleep THIS VEHICLE IS REVERSING -- bleep -- bleep

Airbrakes go TSHSHSHshshsh.

Cab door opens. Driver emerges with docket.

"Hi, got a 40 ton load of salt here, can you sign for it please?"

Hubble Space Telescope is back in the game after NASA fixes gyro glitch

...and they'll be considered alcoholics if they drink more than a single pint a month, too.

Re: Can't we just send a shuttle....

I suspect the problem there is a lack of suitable hard points for latches to, uh, latch onto. That said, it's a great idea for future science missions where the instruments could produce useful data for many decades as long as they're pointed accurately - fly a spacecraft bus designed from the getgo to eject the science instruments, comms, control systems etc for pickup by an independent, hot-swappable pointing and thrusting unit...

Hmmm, I don't remember ever hearing or seeing that concept before. This IS the internet, right? (What year is it? **Who's the President??** )

Live long and do science

I've a tenner here that says HST will still be kicking out data when JWST runs out of coolant and propellant.

Admittedly, by then a tenner won't buy you more than a few penny chews, but still.

NASA geeks code new tricks to model rocket plumes and avoid a lunar dust-up

Starship...

I have a strong suspicion that, even allowing for the beer mat doodle idea of mounting the Starship landing thrusters half way up, the huge mass of the thing will mean landing will kick up so much dust that the risk of serious damage will be too high -- even if they do figure out a way to get it to stay upright after touchdown, and assuming they can scope out a large enough flat area to avoid craters or rocks and land there without a big X target to aim at, *and* work out a way for it to take off again without a flame pit. (Which they won't.) The whole "Starship on the moon" idea was obvious, ahem, lunacy from the start, and I still can't understand what possessed NASA to go for it.

(Am I right that the first landing attempt will have a crew on board?)

Musk tells advertisers to 'go f**k' themselves as $44B X gamble spirals into chaos

Anyone remember the great Charlie Sheen meltdown of 2011?

This is better.

4,000 days of Curiosity: Rover still 'strong' despite worn joints, vision issues

2012??

Was it really? Wow, how time flies.

North Korea's Lazarus Group upgrades its main malware

Re: Why not share the source code?

May I gently suggest that some slightly deeper, more imaginative wondering might provide you with the answer?

Rackspace blames ransomware woes on zero-day attack

"Zero day exploit"?

Captain Pedant here.... Zero Day *vulnerability* - yes, that's a thing. But it makes no sense to use the expression for exploit code for a known vulnerability, presumably to imply that no blame should attach to an org popped by an exploit that hasn't been seen before, even if the vulnerability it attacks was known to the vendor and a fix or patch was available. Poppycock and bafflegab! Sig based IDS, EOR, AV and so on don't only look for the sigs of doecifuc exploit code, but for specific byte sequences that trigger the vulnerability, *whatever* the code that produces it looks like. Polymorphic malware is hardly new! If a patch was available but hadn't been applied, it's the victim who left themselves vulnerable. (OK there's wiggle room because it legit takes time to apply patches to prod systems; though figuring out how many corners to cut to get it done, depending on value of assets, probability of attack, risk if the update goes wrong, etc, is what risk management is for.)

JWST snaps first chemical profile of an exoplanet atmosphere

Trappist

JWST has indeed had several good hard stares at the exoplanets in the Trappist system. There's a Twitter* bot that just announces what it's observing.

Edit - just had a look to check the ac name (@jwstObservations) and as it happens it's observing Trappist-1 as I type. https://twitter.com/JWSTObservation/status/1597927843870261249?t=dzUJJFg9ld-_PzLwETMiWg&s=19

* (presumably soon to migrate to Mastodon along with everyone else who feels queasy giving and and comfort to the new Nazi-friendly regime over there. I'm still lurking but no longer interacting or tweeting, fwiw.)

Rolls-Royce, EasyJet fire up first hydrogen-fueled jet engine

No. Problem!

Liquid hydrogen takes up too much space and hasn't the energy density to get anywhere near jet-A and the like. Absent an entirely unexpected breakthrough in battery technology - well, physics trumps technology, so It's either 'sustainable aviation fuels' (problematic in their own right) or we need to pack in 95% of mass aviation. Or the earth is doomed. My money's on doomed, TBPH.

.

NASA awards $60m to Texas biz for 3D printing future Moon base

Right....

$10m a year for six years? Sure, that oughta do it.

World's richest man posts memes as $44b Twitter acquisition veers off course

Waah

I've been on plenty on/in online commumities that went south before - Slashdot and Full Disclosure, UMSF,.. but they all withered slowly on the vine, rather than going out with a bang. Today's mass goodbyes, REM filks, Toy Story 3 memes and the like is making me genuinely sad. Truly, you don't jnow what you've got until a gimp aquires it. (Register: please, never ever do that to us. You're the last place standing from the 90s.)

Tesla reports two more fatal Autopilot accidents to the NHTSA

Autonomous cars

And this is a perfect illustration of why the fully autonomous general purpose cars hype from 5 years or so back was never going to amount to anything. Just like AI, it was never anything but marketing BS and techno-utopianism.

Re: Another goat?

Well, up to a point. What's the point ANY automated control system if you have to keep your hands (and feet) on the controls and attention on the road and other traffic around you?

Worried about your datacenter carbon footprint? Why not put it in orbit?

Re: Low carbon?

Not that it isn't a ridiculous idea, but actually radiative cooling is a long-established technology for spacecraft, crewed and otherwise.

Why not?

Because it's a lunatic idea, for at least half a dozen very obvious reasons.

Elon Musk issues ultimatum to Twitter staff: Go hardcore or go home

Re: Waste El-Reg Space

It's also where the precise model of missile was first publicly identified (and reliably attributed to Ukraine, as Russia apparently don't operate that specific variant) by 11pm, roughly 12h before that news broke 3lsewhere. (@UAweapons, if you're into that sort of bang-bang trainspotting.)

Re: Easy choice Elon

Correct, but those aren't the people getting kicked off. Instead, out-and-out Nazis are being welcomed back.

RIP: Kathleen Booth, the inventor of assembly language

Excellent obit

...and the first, and so far only, mention I've seen of Booth or her work. Thanks, Registrarians.

SpaceX reportedly fed up with providing free Starlink to Ukraine

Just an observation

https://twitter.com/MacaesBruno/status/1579500448226357250?t=HzPmx8dzsRtNvJrf_JOudg&s=19 ...

How Wi-Fi spy drones snooped on financial firm

Re: I think we're reaching a point...

Amen. So glad I'd bailed out of infosec just before the first lockdown. My guess is that the opportunities that various bad actors took advantage of (from mass remote working) have only just started to show up in public.

Morgan Stanley fined $35m after hard drives sold with customer info still on them

Re: Data destruction is fun!

Ahhh, so they were looking fof the HDs then. Interesting....

Re: Haven't they seen Mr Robot

I once spent a relaxing afternoon verifying a few crates of old HDs were indeed going through a manually operated device rather like an inverted axle jack. Slow, but very thorough.

(MS have been owned by JPMorgan since the 2008 crash, though AFAIK they're relatively independent organisations below the levels in thd JPM buildings where you need an oxygen mask to survive.)

By Jove! Jupiter to make closest approach to Earth in 70 years next Monday

Re: Maybe its just me

Well, to be fair they're great for outreach - Dobson was the original, sidewalk astronomer, as well coming up with the design that bears his name.

https://skyandtelescope.org/astronomy-news/john-dobson-19152014/