Posts by Tom Chiverton 1

Were telcos tipped off to *that* ancient Telnet bug? Cyber pros say the signs stack up

Because their job as a carrier is to move bits.

Oracle seeks to build bridges with MySQL developers

> Is it too little, too late

Only by about half a decade. Everything that can has moved to MariaDB already.

Gmail preparing to drop POP3 mail fetching

Support note is fine in FireFox here. uBlock Origin maybe helps.

Another bad week for SonicWall as SMA 1000 zero-day under active exploit

If it's good enough for Cisco...

Server prices set to jump 15% as memory costs spike

Re: AI laptops caught between a rock and a hard place

Local LLM doesn't need that much. You can run one on a stock Pi with room to spare

Apply here to win a Microsoft Ugly Sweater. It's uglier than ever

Pop

Google to allow Android users with high pain tolerance to sideload unverified apps

> a “dedicated account type” that will allow such users to distribute their apps “to a limited number of devices without going through the full verification requirements.”

Right, so a clone of Apple's TestFlight, which leaves Google (in this case) still in charge of what can be installed or not.

So no change.

Black Hawk chown: DARPA takes helicopter pilots out of the air for $6M

Re: BV-347

Crumbs that's ugly...

Carnegie Mellon team claims vector-based system can turbocharge PostgreSQL

Hil climbing, but called "AI"...

New Linux kernel patch lets you cancel hibernation mid-process

Re: "... hibernation support is a somewhat neglected area of Linux support"

That's because "things" breaking on resume-from-disk is down to the various subsystem and driver maintainers, and most drivers in the kernel don't have active developers (there are a lot of drivers !)

Ofcom fines 4chan £20K and counting for pretending UK's Online Safety Act doesn't exist

See https://www.ofcom.org.uk/siteassets/resources/documents/research-and-data/online-research/other/perceptual-hashing-technology.pdf?v=328806

The CSAM perceptual hash function, and list of matching hatches, are private. There are hash functions that are public, but you try asking OFCOM to publish the list of hashes in N different formats and see what happens....

So small web sites, FOSS etc are SOL.

AGAIN

Amazon grounds drone deliveries in Arizona after two crashed into a crane

Re: How to parse this?

Did yoy see that sad faced, slow moving, older gentleman ?

Slow Wi-Fi? Add houseplants to the list of suspects

Geez. Broadband speed != wifi speed. Who wrote this claptrap?

French jet left circling while Corsican controller caught Zs

Re: That tracks

Missing something.

He was asleep ? At the desk ? Didn't the phone wake him up ? If it didn't ring, why not ? If it did, why not ?

Forget disappearing messages – now Signal will store 100MB of them for you for free

Try Beeper, which acts as a client for SMS, Signal and a bunch of other networks

AMD Ryzen CPUs fry twice in the face of heavy math load, GMP says

Re: Ouch

You'd think they'd bother to use a correctly rated heat sink then...

Google kneecaps indie Android devs, forces them to register

Re: Adverts

Fx is also free, no ads

Honey, I shrunk the image and now I'm pwned

" we applied the default configuration for the Zapier MCP server. This automatically approves all MCP tool calls without user confirmation "

Default is *what* in the 21st century....

AWS pricing for Kiro dev tool dubbed 'a wallet-wrecking tragedy'

Re: Bubble finally bursting?

I think it's still the case OpenAI needs to x10 it's pricing to be profitable right?

May as well buy a high spec eGPU and Pi, run it all locally....

OpenAI's GPT-5 looks less like AI evolution and more like cost cutting

Re: Fasscinnating Bluebberries

There are 5 lights!

Latest Windows patches cause false alarm error to appear in event viewer

Re: Boundary issues

It's probably run by an AI

No more fake news: Google now lets you prioritize El Reg, others in search results

Geez. What a faff. Just don't use search engines that foist this shite ?

Kremlin goons caught abusing ISPs to spy on Moscow-based diplomats, Microsoft says

Re: How is an embassy not using a VPN?

If we could build a real quantum computer, with several times more bits than anything we can think of building today, then https://en.wikipedia.org/wiki/Shor%27s_algorithm allows fast finding of factors, which underminds older encryption systems.

"Post quantum" systems are already in use, in your TLS stack, that don't have this flaw.

Re: How is an embassy not using a VPN?

How is an embassy allowing users to install random apps from random popups displayed by a browser?

This seems the same old fail rather than anything new...

‘I nearly died after flying thousands of miles to install a power cord for the NSA’

Re: "told the software guy the machine ran fully validated production code"

To see if five eyes had changed it

Retailer Co-op: Attackers snatched all 6.5M member records

And.... Anyone going to jail?

Boffins devise voice-altering tech to jam 'vishing' schemes

Maybe they shouldn't have used Google to host that site, eh ?

The link to the audio samples goes to an error message on

https://admin.google.com/ServiceNotAllowed?application=142495531730&source=scrip&continue=https://sites.google.com/view/impulse-response-asr-attack/home

Deal to 'save' UK colleges £45M in Oracle Java licensing fees followed audit requests

Re: Oh FFS

Right, but those are licneced with the ERP or whatever itself

ISS leaks push Axiom Mission 4 launch to no earlier than June 19

Re: Hmmm

They inter-op, just like missile sub crew escape hatches.

The UK wants you to sign up for £1B cyber defense force

Re: "the new Command would protect all military networks from attacks"

Large "private security companies" aren't interested in the best. Security is a cost centre, they want to drive that down. So what if they leak some customer data now and again. Say "sorry", pay a small percentage of annual turn over as a fine, carry on.

Glitch hits kill switch on app web hosting, citing 'bad actors' and worse architecture

Re: “ the company's legacy architecture compared poorly with the competition.”

AFAIK the situation is unchanged from https://support.glitch.com/t/node-versions-on-glitch/71299 :/

Where do you go for free Node hosting now ?!?

Mars may have vast underground oceans and enough H₂O to make it a water world

Re: hmm

No, the KSR book trilogy: Red Mars, Blue Mars, Green Mars

AI training license will allow LLM builders to pay for content they consume

Look ! A horse !

I think it's bolted...

Bank of England flirts with offline digital dosh

Right, but the real reason for this is programmable currency. So benefits will only be payed in currency that can only be used in certain ways.

"No, you can't buy food for the kids, not till you've sent the rent money."

Microsoft hits Ctrl-Z after Teams trips over file sharing

Re: 90 days to upgrade

I blame Skype; this used to happen all the time in the Linux app, and the same file would work fine in the web version.

Maybe "integrating" the two broke it ?

Not that we care, we've moved to something not-Microsoft at 3 quid per user per month, and uninstalled Skype. That's how much people hate Teams, even though we have a 365 sub for Office that (probably) includes it.

Non-biz Skype kicks the bucket on May 5

Re: Teams? Forget it..

And you're trusting an LLM because why ?

Microsoft names alleged credential-snatching 'Azure Abuse Enterprise' operators

Re: Alan...

Umm, Turing?

Microsoft quietly erases Windows 11 TPM 2.0 bypass workaround from help page

Re: As long as they don't remove the workaround

Shouldn't the host's VM manager be providing a virtual TPM?

Mega city council's Oracle finance fix faces further delays

Careful. That comment's likely to be a problem under the Online Safety Act, for El Reg...

If you can go to jail for a Tweet about bombing an airport, how do you feel about advocating murder on a user-to-user communications service ?

Intel, AMD engineers rush to save Linux 6.13 after dodgy Microsoft code change

Re: Intel x86_64 is part of the problem

It is surprising when it skips all review and checks and just lands and ships though.

Did we lean nothing from xz ?

The winner of last year's Windows Ugly Sweater is ...

Re: Oh no

Ahh, you're a waffle man ?

Apple and Meta trade barbs over interoperability requests

Re: Metà are the scummiest

Well then, you won't be stepping through the high regulated, 2FA requiring, oAuth-like flow (that's why even mentioning 'passwords' is just Apple being a dick) to grant Meta limited access to some Apple APIs with your account then.

For other people, being able to do this wil be valuable.

British hospitals hit by cyberattacks still battling to get systems back online

You might want to go anonymous the next time you admit to breaching the CMA :)

Thought was more likely to be poorly secured VPN or remote desktop tbh

Arianespace's Vega C delayed after gantry throws a tantrum

Unless it was something moving when it shouldn't, then duct tape.

Perfect 10 directory traversal vuln hits SailPoint's IAM solution

CWE-66

That's pronounced "sea wee sixty six" right?

Re: Perfect 10 directory vulnerability

The ones that wear a 12?

Eurocops take down 'secure' criminal chat system known as Matrix

Re: In other news.....

Which is what the UK government will eventually ask for z and Signal have said is their red line for leaving.

Who had Pat Gelsinger retires from Intel on their bingo card?

replaced ... by ... CFO

It's the end when the bean-counters are in charge, right ?

#bofh

Mystery Palo Alto Networks hijack-my-firewall zero-day now officially under exploit

Re: Wonder how long before the US CISA stops issuing warnings and recommendations.

who do PA think they are, Cisco?