Posts by Oninoshiko

Linux kernel maintainers pitch emergency killswitch after CopyFail and Dirty Frag chaos

Locke proved they can be at least as fast, in practice, as monolithic kernels ages ago.

Re: Sabotage?

Can't be Richard, he didn't mention GNU when saying Linux.

Ad blocking is alive and well, despite Chrome's attempts to make it harder

Unfortunately Chrome

Still lists invalid certificates as valid. That problem has been there for years. Chrome devs just don't care about security.

Google’s Gemini refuses to play Chess against the mighty Atari 2600 after realizing it can't match ancient console

Re: Improvement, but still more to go

Fair enough!

Improvement, but still more to go

If we can just get it to recognize that it's bad at everything and shut itself off we can move on.

SpaceX is behind schedule, so NASA will open Artemis III contract to competition

Re: Just like the Orangeman

There flat out isn't an option at all. The reality is the plan for Artemus 3 was based on the promised specs of Starship, and requires over a dozen launches at that... and it hasn't ever gotten close to those specs.

The reality is, Artemis 3 is a stillborn project.

VPN Secure parent company CEO explains why he had to axe thousands of 'lifetime' deals

They should be required to pay every one of these people back.

Microsoft updates the Windows 11 Start Menu

And in fairness...

Web designers for ad vendors need to learn this, too. I started using a DNS filter for ads on my phone to stop the ads that you can't click the close button on.

Downward DOGE: Elon Musk keeps revising cost-trimming goals in a familiar pattern

So effencency, much savings

Anyway, I just want to say thank you to El Reg for linking sources. There's so little of that in reporting.

Keep up the good work!

Judge says Meta must defend claim it stripped copyright info from Llama's training fodder

Re: What if ...

D

FYI: An appeals court may kill a GNU GPL software license

Re: There are a lot of legal weeds here

It's not just copyright either. Of the FSF has trademark on the name, that works in there to. It's the proper use of trademark for the name to mean the license you expect from the source you expect.

Court docs allege Meta trained its AI models on contentious trove of maybe-pirated content

Re: Doesn’t matter

I agree it's a derivative work. Derivative works require a license.

Meta knew what they were doing, they knew it was wrong. This is trivially provable, as they took steps to conceal it. Hit 'em with the largest permitted by law for wholesale commercial violations.

Re: But which copyright?

That would have been the Berne Convention of 1886, which the US altered its copyright laws to join in 1989.

I know facts are inconvenient, but they are still a thing.

Who had Pat Gelsinger retires from Intel on their bingo card?

Re: replaced ... by ... CFO

Depends on which principals. Don't murder people? I'd like to think I'd stand by that one... Don't steal from anyone, even evil mega-corps... I'll take the millions.

Apple hit with £3 billion claim of ripping off 40 million UK iCloud users

Can we talk about the most important thing here?

Who the hell names there organization as a one-wors question, including the questionmark. Is makes reading the news painful.

New Jersey man admits shipping sanctions-busting tech to Russia

Re: " ..military-grade spectrum analyzer."

I thought it was "designed by committee, made by the lowest bidder"

I hope they spend, at least, the entire time the Russian Federation occupies internationally recognized Ukrainian territory in prison.

Bitwarden switches password manager and SDK to GPL3 after FOSS-iness drama

Genuinely happy to see this

I've used Bitwarden for a while now, and wasn't particularly comfortable with what happened... but this response was perfect, they said "it's a mistake, and we'll resolve it." Then they proceed to resolve it pretty quickly. Good job, guys!

Japan's wooden cube-shaped satellite rockets to space

Re: What will they think of next

Here's the link if you want to go back and have a look again.

https://www.theregister.com/2010/11/05/paris_aerial_pics/

Amazon's nuclear datacenter dreams stall as watchdog rejects power deal

Re: There needs to be reckoning around this

...El Reg, etc.

Arm to Qualcomm: See you in court? Oh yes, please

Re: Imagine a popcorn icon here --->>>

If the settlement is significant we could see something in their financial filings and disclosures (both are publicly traded).

Tesla's big reveal: Steering-wheel-free Robotaxi will charge wirelessly

Re: Bit of an ableist design ?

Yeah, but that's the beautiful thing, none of it matters if you don't plan on delivering it anyway!

China calls for realtime censorship of satellite broadband

The real news

Is that China doesn't require this already.

Big brother because, China.

That doomsday critical Linux bug: It's CUPS. May lead to remote hijacking of devices

Does noone know how CVSS works?

CVSS ratings have nothing to do with how many instances of it are out there. They are a rating of how easy it is to exploit and what exploiting gets you:

In this case:

It can be exploited remotely

Without difficulty

With no user interaction

To run arbitrary code

As root

That's easily in the 9 - 10 out of 10 range.

As to how widely it is reachable on the open Internet (which again, is beyond the scope of the rating), he got around 400k Linux machines to happily run his benign payload. If I want to build a bot-net, that's not a bad one.

As to not waiting to disclose, he disclosed because someone had leaked it. Once it's out there for bad-actors, full disclosure is the only responsible thing to do.

Intel frees its Foundry biz – and that's just one of many major shake-ups today

Question

If you're, for example, AMD, would you trust the separation that's supposedly now here between Intel foundry and Intel design? I wouldn't.

This is useless unless it's a full, Global Foundries-esque spinoff, but Gelsinger wants to MAKE chips... I don't think he has it in him to really do what's required.

Pokémon GO was an intelligence tool, claims Belarus military official

Wait what?

Every military on the planet has issued statements about Pokemon GO, including all branches of the US military.

I'm not sure how the theory it's a CIA tool has been debunked. I mean, there's at least enough ties that if I where head of a non-US national intelligence agency I would be not permitting it.

John Hanke, founder and CEO of Niantic was the previous founder of Keyhole, Inc, which was invested in by In-Q-Tel a venture capital firm started by the CIA.

Gilman Louie, board member of Niantic, is on the President's Intelligence Advisory Board, U.S. Department of State’s Foreign Affairs Policy Board, and has been awarded National Geospatial-Intelligence Agency medallion, the CIA Agency Seal Medallion (twice), CIA Director's Award, the Director of National Intelligence Medallion, amongst others.

Does that mean it's a CIA tool? I'll leave that to the reader to decide, but that's some pretty heavy connections with US intelligence.. and of course, the CIA has never lied.

Of course the Internet Archive’s digital lending broke the law, appeals court says

Maybe because

Maybe because we don't allow child labor anymore?

Not completely true

During COVID internet archive stopped enforcing the 1:1 rule. Publishers were afraid to bring a case and get a ruling that 1:1 was legal, but once IA did 1:many, even briefly, the case practically writes itself.

IA should have known this was inevitable, but they misjudged what they could get away with.

Admins wonder if the cloud was such a good idea after all

Re: Cloud is a financial model not a technology

This is correct, if you need less then a full server then running on a cloud-providor can result in savings. Once you hit a certain point however, moving your baseline load to privately owned servers is beneficial, only using cloud-providor for peaking-load.

This also has the side effect of helping you stay more vendor neutral, allowing you to put that load on whoever's the cheapest at the time. This has been the case since before "cloud" became a buzzword for "someone else's servers."

Rust for Linux maintainer steps down in frustration with 'nontechnical nonsense'

Re: Microkernel

Actually, with a sufficiently well designed IPC system, you don't even need hand-coded assembly. Just take a look at what some of the L4 kernels accomplish.

Now, you have to be willing to unshackle yourself from the overheads of the Linux API / ABI. Of course, you can always run the Linux kernel as a usermode process, but trying to build a microkernel that is fully Linux compatible is a fool's errand. I mean, almost all of what Linux provides would have to be provided by user-mode daemons anyway.

AMD reverses course: Ryzen 3000 CPUs will get SinkClose patch after all

I'm glad they increased the range on this, I just wish it had been from the start.

Google is a monopoly. The fix isn't obvious

"That still leaves one company with a monopoly on Google Search and one company with a monopoly on those paid search ads."

I think it's slightly worse then that, let's say you do break search and ads, how does search make money at that point? Right now search is given away to drive the advertising behemoth, and the same can be said for much of Big G.

I can see splitting off Android, Fi, maybe YouTube (I think they are independently profitable on their own ads now), but the rest? I don't see how it works.

Intel, already adrift, now Armless too

Re: Selling their ARM shares for ~150 million ? What's the point ?

It's got to be more of a savings then what they got for dropping the fresh fruit from their campuses

Palo Alto Networks execs apologize for 'hostesses' dressed as lamps at Black Hat booth

Perplexing

I mean, I get "normal" booth babes... we can argue about if its a good idea, but I think we all at least *understand* it. What I don't get what the thinking behind the *ahem* "attire* in this case.

404 Boss not found — Bye bye ICANN CEO Chehade

Re: Up vote

Generally when something can't be found in DNS, the reply is NXDOMAIN.

Unfortunately many ISP have started hijacking this useful response (along with the useful 404).

£280k Kickstarter camera trigger campaign crashes and burns

Re: Risk?

KSes do not guarantee the project will accomplish it's goals, only that the backers will get their rewards. This becomes an issue when the reward is a copy of the product (the goal). The original intent was cases like the Reading Rainbow kickstarter, where almost all the rewards where things like tee-shirts and mugs, the funding goals where to get a reading-show produced and in the hands of children.

Robocalling Americans? That'll cost you $1.7m

Can't we just shoot them?

Feds: Bloke 'HACKED PLANE controls' – from his PASSENGER seat

Re: Why is this so hard to understand?

I can commit the perfect murder.

That doesn't mean I DID commit the perfect murder, or that I have murdered anyone.

Why is this so hard to understand?

Lightbulbs of the future will come with wireless extenders and speakers

Re: a light switch that cuts all power to the light...

Well I have good news for you! If you take a bunch of mono channels and put them together you get surround. then you just need the LFE channel.

Doesn't make it any less daft of an idea though (just like all the IoT garbage).

Don't look now: Fujitsu ships new mobe with EYEBALL-scanning security

Eye wouldn't be to worried about this if eye where the cops...

Eye will be going now.

Infosec bods demo GPU keylogger. Don't tell the NS... oh, wait

Remember

Linux doesn't get viruses.

Swedish Supreme Court keeps Assange^TM in Little Ecuador

Re: Little

They are talking about the embassy.

Can we get a clue-bat icon?

Massive police 'heavy equipment' robot drags out suspect who hid inside television

Re: Where's a frackin...

You don't really expect elReg to use that useless image for something useful do you?

Extreme community policing: West Virginia crook pepper-sprays HIMSELF mid-robbery

Re: picky error in headline

And to residents (I'm told) it's pronounced "West By God Virginia"

Smart grid security WORSE than we thought

I would say paranoia

but it's not paranoia when they are really out to get you!

Oculus Rift VR bucket will be seen on noggins near you in 2016

Re: You won't see people walking down the street wearing one

well, people won't see you when walking down the street wearing one.

Zuck'ed up: Facebook opens up free internet in India – but bans HTTPS

It might have taken less time to list what you CAN do on it.

Bruce Schneier's Data and Goliath – solution or part of the problem?

"Both justifications prevent Google and Facebook from exploring new, imaginative and mutually useful (to customer and provider) ways of doing business. Ways that don’t require data collection and hoarding."

I'm not sure this is a solid argument to Google that they shouldn't horde. While I can imagine many businesses that don't require hording, it's only VARY few that the hording actually precludes.

So, as the meme driven kids today say: "Why not both?"

(note: I'm not really suggesting that I want google to track everyone. Just that this argument is not something that they are going to find compelling)

Amazon boss Bezos' Blue Origins declares test flight 'flawless' ... if you overlook one snafu

Re: Twig minus berries

I suppose that makes it more (in)appropriate that I misread "blue origins" and "blue orgasms"

As the Americans say:

So, other than that, how did you enjoy the play, Mrs. Lincoln?