Posts by Tom Chiverton 1

'Cuddly' German chat app slacking on hashing given a good whacking under GDPR: €20k fine

Keeping it within the hash table space of TLAs...

Australia's 'snoop minister' wants crypto-busting law probe wound up, proposals back into parliament

Re: Hmm

Ahh, the Zimmerman method.

Re: There's an easy solution to this stupid law

Vs. quietly backdooring it and keep making money?

What do you trust Facebook or Microsoft to do with Messenger or Skype ?

It's likely they have traffic meta data which may be enough to prove conspiracy for instance, even without access to the content.

Signal just rolled out meta data encryption as a defence - "sealed sender".

Arm kit vendors snuggle up around the Windows 10 Autumnwatch bonfire awaiting supported OS

Re: License issues

How does a cock up on "a" single machine cause "major data loss"?

me thinks you just leant backups are worthwhile...

It's raining drones, but just one specimen: DJI's Matrice 200 quadcopter

Re: Damn batteries ...

Surely sensible LOS procedures would be to hover until contact is restored, or critical battery, in which case a slow descent to last-known-good zero height ?

Haunted disk-drive? This story will give you the chills...

Re: Put a heater in the safe then ?

Or just overpressure the safe and blow the bloody doors off

What could be more embarrassing for a Russian spy: Their info splashed online – or that they drive a Lada?

Re: The Spy Game is changing

You don't need to fake the passport biometric. Just the identity it's linked to. Hand matches passport, all is good.

NPM not tied in knots over Yarn rival project

alias yourprogram='npm install && yourprogram'

That wasn't hard now was it...

Microsoft adds Windows module support to PowerShell Core while Amazon unleashes it on Lambda

"Redmond is vague about what is in that data"

Breach of GDPR, right there....

Card-stealing code that pwned British Airways, Ticketmaster pops up on more sites via hacked JS

"not carry any third-party code"

And how do you enforce this ?

As soon as you start putting a red box in the address bar for 2nd or 3rd party access, or not showing a green tick, admins will be aliasing media.domain.com and/or domain.com/media to some.thirdparty.com...

Intel finally emits Puma 1Gbps modem fixes – just as new ping-of-death bug emerges

Re: Nice story

Users can't update their mobile phones. Almost all Android are locked (and all iOS ones)

Three more data-leaking security holes found in Intel chips as designers swap security for speed

Re: Going a bit overboard, El Reg

Maybe if RIM didn't hand over the BBM keys to any government who asked they'd still have a business

Space, the final Trump-tier: America to beam up $8bn for Space Force

Re: I don't understand why they need it

This weekend is the 12th as well...

TSMC chip fab tools hit by virus, payment biz BGP hijacked, CCleaner gets weird – and more

Re: Off means I opt out

Illegal not to in Europe...

Google unwraps its gateway drug: Edge TPU chips for IoT AI code

Hope Pi are getting a kick back for that base board design...

Prof claims Lyft did a hit-and-run on his ride-sharing tech patent

Prior art abounds in SciFi, as always.

Can I get Johnny Cab around here ?

UK.gov commits to rip-and-replacing Blighty's wheezing internet pipes

Re: Not wanting to state the obvious

Because you shouldn't have to be rich to be informed.

Outage outrage: TSB app offers users a TITSUP* encore

Well, I'm ready to go cashless. Anyone else? No? Really...

Google Chrome update to label HTTP-only sites insecure within WEEKS

Re: Idiots...

"What happened to critical thinking / analysis of what needs to be made secure and what doesn't?"

Lusers happened.

Israel cyberczar drops hints about country's new security initiative

"state-level cyber shield"

That's guaranteed to be used to restrict their own people from accessing parts of the Internet, of course. If the UK and China can do it...

Max Schrems is back: Facebook, Google hit with GDPR complaint

Re: Micropayments

Micropayments exclude the poor from (essential) services like news and search.

Whois is dead as Europe hands DNS overlord ICANN its arse

Gandi for instance

Container orchestration top trumps: Let's just pretend you don't use Kubernetes already

AWS Fargate

... Makes containers on ECS simples

Use of HTTPS among top sites is growing, but weirdly so is deprecated HTTP public key pinning

Re: I only just noticed...

"I'd like https a lot more if there weren't a potential "tollbooth" designed into the protocol (i.e. having to periodically pay a 3rd party for a cert)."

LetsEncrypt is free.

Chrome adblockalypse will 'accelerate Google-Facebook duopoly'

Tell me again why I can't pay ElReg ~1/month and skip the (blocked anyway) ads?

If you haven't already killed Lotus Notes, IBM just gave you the perfect reason to do it now, fast

Re: CVE-2018-1383

" extensive knowledge, priviledge and time "

Like governments

Exoplanets from another galaxy spotted – take that, Kepler fatigue!

Re: A dash of salt

"I expect this to be debunked shortly. 3.8 billion light years is just too far to see planets."

Which is why they didn't. RTFA

biohazard's were a brand new thing hardly anyone knew of when WOTW was written. Just another case of SciFi reflecting society.

Ugly, perfect ten-rated bug hits Cisco VPNs

Don't raise the spectre of that!

'WHAT THE F*CK IS GOING ON?' Linus Torvalds explodes at Intel spinning Spectre fix as a security feature

http://lkml.iu.edu/hypermail/linux/kernel/1801.2/05282.html

"Then there's Skylake, and that generation of CPU cores. For complicated reasons they actually end up being vulnerable not just on indirect branches, but also on a 'ret' in some circumstances (such as 16+ CALLs in a deep chain)."

Real excitement is where they mention RET is busted too.

That's new.

Probably embargoed vulnerability they are trying to address without saying so explicitly ?

Boffins split on whether Spectre fix needs tweaked hardware

Re: Interesting fix

And their goes energy efficiency and throughput.

Yahooooo! says! its! email! is! scrahoooo-ed!

Re: Surprised...

GMail supports plus addressing too.

Peak smartphone? iPhone X flunks 'supercycle' hopes

Re: Choose your phone with more care..

https://www.gsmarena.com/compare.php3?&idPhone1=8907&idPhone3=8756&idPhone2=8522#*,*,m700a

Nokia 7, or LG Q6 ?

GCSE compsci kids' work may not count after solutions leaked online

".. per cent of final 9-1 grades"

Wot ?

'Water on Mars' re-classified as just 'sand on Mars'

Re: but where were the spiders?

I knew a girl from Mars. I don't know if you knew that? Oh we'd stay up late playing cards!

Firefox 57: Good news? It's nippy. Bad news? It'll also trash your add-ons

echo "firefox hold" | sudo dpkg --set-selections

Wowee. Look at this server. Definitely keep critical data in there. Yup

"they are planted deep in a server's system data stores "

E_PHB.

What does this thing actually do ?

Leaky S3 bucket sloshes deets of thousands with US security clearance

So many of these recently. Has someone got a tool that scans for open S3 buckets somehow ? Is AWS leaking a global list of S3 bucket names somewhere ?

British snoops at GCHQ knew FBI was going to arrest Marcus Hutchins

Re: Rules

Everyone who upvoted: Your on The List now.

UK.gov to treat online abuse as seriously as IRL hate crime

Re: Slippery slope?

"protected characteristic" has a particular meaning.Paedophilia isn't one.

Game of Pwns: Hackers invade HBO, 'leak Game of Thrones script'

Re: To be honest,

But not on UK TV. Criminally.

Latest Windows 10 preview lets users link an Android to their PC

So I can't "continue this" from Windows Phone then ?

Ha ha.

Should you stay awake at night worrying about hackers on the grid?

If you rapidly switch a whole bunch of stuff off and on again quickly, the local sub will probably give up. Most are only a dozen electric cars away from brown out anyway.

Taiwan government to block Google's public DNS in favor of HiNet's

Re: Good News

" The only thing it doesn't work for is Android phones (should a visitor have one) as they have Google DNS hardcoded."

I've never seen an Android ignore DHCP DNS server settings ?

Leaked: The UK's secret blueprint with telcos for mass spying on internet, phones – and backdoors

Are you willing to go to jail for owning a compiler, or running Linux ? That's where this will end up...

Bankers to get 1Gbps free Wi-Fi in City of London deal

Money talks...

WWW daddy Sir Tim Berners-Lee stands up for end-to-end crypto

Re: Email this to your MP

Great idea !

You might want to join the Open Rights Group as well.

There may even be a local group in your area already - https://www.openrightsgroup.org/groups/ !

One IP address, multiple SSL sites? Beating the great IPv4 squeeze

Re: Doesn't a proxy defeat the purpose?

What dedicated IP ? TLS has SNI.