* Posts by toughluck

420 publicly visible posts • joined 22 Jun 2009

Page:

Linus Torvalds admits 'buggy crap' made it into Linux 4.8

toughluck

Re: Mouse bug ?

It's handling HID devices, and probably not in the kernel but in Xorg.

And it's not really subtle, it was annoying as fuck in my case.

I was able to perfectly reproduce it at will. In my case, the issue was caused by a Plantronics headset which are a dual device -- in addition to USB audio, it's also a USB HID device. The HID portion is responsible for responding to volume controls and headset button. Pressing the headset button immediately locked mouse focus to one window (I never cared enough to work out which window) and wouldn't release it.

When looking for others with the same problem, I came upon a workaround. It needed a certain key combination. IIRC, it was holding right Alt (maybe with Shift) and the middle mouse button. I can't remember now and I'm not bothered to look it up. Sometimes that fixed it, sometimes it didn't, and sometimes it appeared to fix it, but the issue reoccurred in a minute or so.

I realize it doesn't help you much, but yeah, Linux has lots of buggy code. And some developers also have an attitude that doesn't match the quality of their code.

Salesforce asks Europe to stop Microsoft buying LinkedIn after itself trying to buy LinkedIn

toughluck

Sour grapes

It doesn't apply in case of linkedin, but it's interesting to see how this plays out. If the EC agrees with Salesforce, it would mean that you could potentially run a company to the ground out of spite if they didn't let you buy them out before, or destroy your competition by preventing a merger where the resulting company would be a realistic threat.

Tesla to stop killing drivers: Software update beamed to leccy cars

toughluck

Inattentive twat behind the wheel

Do we know how the accident unfolded? How long did it take for the car to drive into the lorry? If it went relatively fast (like one second), the driver might not even have time to react, much less react properly and for the car to actually relinquish control (it doesn't see anything wrong, so there's no emergency to react to at that exact point in time).

If it took several seconds, then the lorry driver should have noticed something odd and blow the horn (unless he was on assisted cruise control, too).

I'm unconvinced that Tesla is at absolutely no fault here.

toughluck

Re: I'm waiting for...

No. It's possible not to crash assuming it's a reasonably straight road if you don't overdo your reactions. An autonomous vehicle might run into a problem if one or two wheels lose grip before the other do, since it will start correcting and can go into a runaway feedback cycle.

A reasonably experienced driver will recognize the situation.

It's also equally important to note that an experienced driver will drive defensively. Autonomous vehicles will either go too fast or too slow. It's easy to imagine them being so defensive that autopilot decides it's not possible to drive faster than 10 mph or ignoring tell-tale cues and going 70 mph because it doesn't see any risks.

Come in HTTP, your time is up: Google Chrome to shame leaky non-HTTPS sites from January

toughluck

Re: @Charles 9 Chinese Cannon

Do you execute untrusted code (which could be malware) from a http protocol site? I doubt it. If it were https, a lot of people would think it's legit and code would be executed.

So there's one point down for https.

As I pointed out, the attacker would have to control the edge router at either end. If they control the edge router at the website you're accessing, they presumably control the web server as well, and at that point they can inject whatever they please into the pages they serve or serve whatever they won't -- and it will all be HTTPS with valid certificates.

Same applies for the edge router at your end. SSL forwarding as much as they want and they can look into the content you're getting.

A MitM attack somewhere at a random point between edge routers has almost no chance of succeeding, unless the attacker controls all routers at which point you have a much bigger problem.

--

I was expecting you to mention Stuxnet. And let me repeat: The Iranian nuclear program had much bigger problems than Stuxnet if it was able to jump the airgap. Stuxnet only used a vulnerability that was already present.

toughluck

Re: @Charles 9 Chinese Cannon

If it's inline, it would also need to point at the same domain and I would need to be able to download it using exactly the same route, so the MitM attack would need to intercept all traffic, not just inject the link to malware.

In such a case, the attacker would need to control the edge router of either you or the site you're trying to access, in which case it doesn't make much of a difference whether the attacker is using HTTP or HTTPS.

Of course, your friendly oppressive dictatorship which controls every router might pull it off much easier, but for them, it's just enough to censor the content they don't want you to see, what's the point in spreading malware, and through a MitM attack of all things?

It's a theoretical attack in the same sense as saying it would be terrible if a hacker was able to put a USB stick loaded with malware in a computer at a nuclear power plant control room. Given that it requires physical access to the room, if somebody can access it, you've got much bigger security issues than that USB stick.

toughluck

@Charles 9 Re: Chinese Cannon

Oh? What if it gets MitM'd by something like the Chinese Cannon?

My local pizza parlor will no longer list pepperoni because somebody doesn't like it and doesn't want anyone to order it, of course.

The content is irrelevant: only that it's in the clear and therefore can be injected with malware on the fly.

I won't accept cross-site side loading, so the malware doesn't get displayed or executed. And if the site is hacked and malware is added at the point of origin, it doesn't matter whether it's HTTP or HTTPS and blindly trusting HTTPS to be safe and secure is even more dangerous.

toughluck

Re: This is proper and important step and I hope other browsers will do the same

Yeah, right. Instead of having three security states (secure/not secure/don't care) for the average user, they will now have two (secure/not secure).

The users were trained to see the green padlock as a security mechanism and to only expect it on sites where they do shopping, banking, e-mail, etc., and that they should only follow bookmarked sites and check the certificate.

This is going to train users to ignore the certificates completely and if they end up on their "banking" site, they will see a green padlock because the phishing operation used a free SSL certificate from Let's Encrypt.

Really a brilliant idea.

HTTP simply wasn't built for this -- it was devised to be one-way only. Two-way communication was strictly e-mail, Usenet, IRC, FTP or telnet, followed by transport layer security for them.

It's time for humanity to embrace SEX ROBOTS. For, uh, science, of course

toughluck

Lots of Anonymous Cowards posting here today, aren't there?

HDMI hooks up with USB-C in cables that reverse, one way

toughluck

@Charles 9, red and yellow ports

Red and yellow ports mean Sleep-and-Charge ports. They're powered up even with the laptop off or asleep, meaning they can be used for discharging your laptop.

There, FTFY

Latest Intel, AMD chips will only run Windows 10 ... and Linux, BSD, OS X

toughluck

Re: Disable the UEFI!! FOR WIN7!!

Not to be crass, but I already said I was able to boot that USB stick without any problems -- people here suggested to try with legacy boot enabled and secure boot disabled, which I did out of frustration during the process.

I didn't make any changes to the USB stick -- it wasn't corrupted (well, other than having Windows on it ;-) ), the same stick failed to boot every time, and it was a eureka moment when I thought I could try in one of the USB 2.0 ports in the docking station, at which point it ran as if there were no problems with it at all.

toughluck

Re: Disable the UEFI!!

I actually tried disabling UEFI and secure boot. The OS still failed to boot. I fiddled with other settings, and it finally booted. The Windows 10 corporate image installer told me it needs secure boot to be enabled for the installation to proceed.

I tried to get the laptop to boot that stick (on the USB 3 port) with the same settings again later (I thought I could maybe trick the installer or that there may be some advanced options), but it failed, and I couldn't get it to boot again until switching to the USB 2.0 port.

toughluck

I had a problem when trying to reinstall Windows on a laptop that only had USB 3.0 ports. None of them were accepted (the USB stick failed to boot on any of them). It seemed like UEFI limitation.

Luckily, I had USB 2.0 ports on the docking station and it booted without a hitch from them.

What I haven't tried is disabling USB 3.0 in UEFI setup. I suppose this has to be a potential solution, but it only occurred to me after I have already installed the OS, and I also haven't tried a USB 3.0 stick in a USB 3.0 port.

It failed to boot live Linux USB sticks as well, though, not just Windows.

toughluck

@Marty McFly: I disagree with that notion.

Android, Chrome, Google, OSX, iOS, et al, is all about selling YOU to someone else, too, and people will happily line up and spend a lot of money on these. Microsoft just joined the fray, and let me add, they joined it really late in the game.

Honestly, all other products sold you several times over by now.

toughluck

Re: Can you spell lawsuit?

People seem wed to the idea that Microsoft alternates good and bad releases, starting with Windows 95 (bad), followed by OSR2 (good), 98, 98 OSR2, Me, XP (conveniently forgetting that 2000 was better, even if it didn't have all that eye candy), Vista, 7 and it becomes a blur afterwards.

It was easy to hate 8, and 8.1 didn't help out much. I guess Windows 10 was overhyped, people were expecting it to be the new XP. It kind of is (it runs faster than 7 or 8), but overblown reports of failures (frequently at users' own fault) allowed haters to pile hate on it.

Now, a year ago I thought Windows 10 was shit based on all the articles I read. I was using Linux wherever I could, including on my work PC, until I was told in no uncertain terms that I have to switch to officially supported Windows. While I wasn't happy about it and I wanted to make life at corporate IT support as hard as I could and maybe try to claw back to Linux, I also came to Windows with an open mind and decided to give it a chance.

toughluck

Re: Slow, carefully planned suicide?

Really, he wasn't singling them out? This paragraph comes across as crass, then:

Seeing that Win 10 seems to screw up everything it comes into contact with, and that every "Windows" release (update) from now on will be essentially a beta at best - faults to be identified first by users?

Seems to be the case with Linux, OSX, Android and iOS as well. If this is standard industry practice, why point at Microsoft?

FWIW, I didn't have problems with upgrading to 10. Not on my phone, not on my wife's archaic netbook, not on my desktop, and not on the corporate laptop. I can understand user frustration, but other than some specialized corner cases, most of them should have no problems with Windows 10. And overblowing specialized uses to cover the entire market is silly.

toughluck

Re: Slow, carefully planned suicide?

I upgraded my wife's netbook (an Acer with AMD C-50 APU) to Windows 10. It was previously running Windows 7 starter and I upgraded RAM to 4 GB and replaced the drive with an SSD, but 7 felt sluggish, but I couldn't do anything about it, it just took a long time, but according to Task Manager, nothing took up too much resources.

I upgraded it to Windows 10, it still felt sluggish.

I could bash Microsoft, but I decided to check what caused it and found that Windows Defender defaulted to scan the drive on certain activities, such as connecting to a network. A couple of clicks later, I rescheduled Defender scan to once nightly, and performance went up, way up.

Non-functioning optical drive? In what sense? Didn't it work at all (doubtful), or didn't it play DVDs? In the latter case, install VLC, Microsoft decided to remove DVD support from Windows 10 (it was only ever present in 7 and 8, as other releases, including XP, didn't support DVD playback without 3rd party tools), since most new laptops are sold without optical drives and since free solutions are frequently better than proprietary. If it didn't work at all, it's probably a hardware fault, since SATA drives are totally generic. Either way, maybe a few clicks away from installing a driver from Toshiba.

To be honest, I don't sympathize with these girls. They imported their laptop from abroad and they seriously can't expect locals who don't know the language to be able to support them if they run into any issues.

And frankly, there are at least a few solutions for them if they were using a laptop with a UK or US keyboard layout (from the most lazy to the least):

1. Buy a set of keycaps for Japanese, and switch Windows language to Japanese (Windows 10 doesn't limit this to Ultimate editions).

2. Switch Windows to Japanese, but make your own keycaps. You'll need a printer, a sheet of printable stickers, scissors, invisible/magic/whatever tape (not ordinary scotch) and a free afternoon.

3. Switch Windows to Japanese and learn to touch type.

Optionally, you can leave Windows in English and install just the Japanese IME. Buying or making own keycaps is optional. For the more ambitious, download MS KLC and use it to make your own keyboard layout to have multiple language support without switching to Japanese.

toughluck

Re: Slow, carefully planned suicide?

Isn't that a bit harsh? Linux, OSX, Android and iOS are hardly bug-free, aren't they? You're singling out Microsoft as though they were the only ones to do this.

When Irish eyes are filing: Ireland to appeal Europe's $15bn Apple tax claw-back

toughluck

Re: Dyson

@Bob Rocket: But in that case, a total of 56 dollars in tax would be collected.

If your figures were applied to the Apple/Ireland situation, China would collect $1 of tax, Japan would collect 0 tax and UK would collect $0.01 of tax because why not.

What it works out to is:

1. A customer in, e.g., Germany, purchases an Apple phone for €1000. Apple Germany orders that phone from Apple Ireland for €1000.

2. Apple Germany makes 0 profit.

3. Apple Ireland orders the phone from China for €50.

4. Apple Ireland paid €10 lip service to Apple US for IP rights.

5. Their profit would work out to €940, but for some reason, Irish government decided that €939 was non-taxable and only charged them for €1.

It would be fair if Apple Germany originally ordered the phone for €61 and Apple Germany was taxed at €939 profit, but what happened is that the actual profit was not taxed anywhere. The effective tax rate of 0.[0-000000]5% was what Apple ended up paying. It's not the tax rate that Ireland chose to levy on them, it was probably 12.5% on profits made in Ireland, or spent on employee welfare/income tax, or whatever, but Ireland waived the requirement to tax profits made from international subsidiaries.

toughluck

It's not just Apple. I would bet Ireland provides this tax break to other companies. If it were just Apple, Ireland would happily welcome the extra money. Once the dam breaks, however, EU is free to pursue all other companies operating there, and Ireland might not be able to take it if those companies move out.

Nevertheless, it would have been epic if Samsung (or any other competitor of Apple) was not operating this way and could publicly argue they don't get this sort of tax breaks, thus putting Apple in a very uncomfortable position.

Making us pay tax will DESTROY EUROPE, roars Apple's Tim Cook

toughluck

Re: Actually...

I'm convinced by the argument that corporations should be taxed 0%, but all profits should be distributed to shareholders as dividend and taxed as personal income at that point.

The only reason corporations are taxed is because they're not doing that.

Got to dash out for some rubber johnnies? Amazon has a button for that

toughluck

Too many cooks...

Imagine a button for Kleenex:

1/09:

7 am, Husband: Oh, we're almost out of bog roll. [Presses button]

7:30, Wife: Oh, we're almost out of toilet paper. [Presses button]

8 am, Kid #1: Ugh, no more toilet paper. [Presses button]

8:30 am, Kid #2: Seriously, am I supposed to wipe my arse with my hand? [Presses button]

10 am, Dog: Woof, woof [Presses button]

1 pm, Dog: Woof, woof, growl [Presses button ten times]

1:10 pm, Dog: Woof, woof, woof [Gnaws on the button and presses it some more]

5 pm, Husband: Where's that button? Oh, there it is. Ew, what is that? Hmm, did I order toilet paper in the morning? Oh, well, better safe than sorry, at worst we'll have two packs [Presses button]

2/09, a dump truck pulls back and unloads a few hundred packs on the family front yard. The driver walks up the door, asks to sign and tells them that this is first part of the order since Amazon only stores 500 packs locally and they'll source the remaining 40000 packages as soon as possible.

Google 'Solitaire' ... Just do it

toughluck

Re: Seems...

I initially thought that Google purposefully chose to only deal unwinnable hands. My first two games were unwinnable.

Forget security training, it's never going to solve Layer 8 (aka people)

toughluck

Re: Links really clicked?

This is actually simple. Suppose you have a database of e-mail addresses. You hash each of them and include the hash in the link. For Bank Of America, the link could look like this:

H**PS://SECURE.BANK0FAMERlCA.COM/LOGIN?ID=hashofusernameandtimestamp

(For the love of God, DO NOT click the link above if it gets automatically converted! I hope the fake protocol name doesn't get auto-corrected.)

Once you click the link, the perpetrator knows exactly who* clicked the link and which e-mail compelled the user to click.

When you log in, you give away your password to the perps, but it appears you have actually logged into your account. What they will now try to do is guide you towards entering a token code or a one-time code (what they are really doing is they have a pre-filled form just waiting for you to type the code so they can funnel money out promptly).

There are lots of ways to do it. My bank started warning me to check if the pasted data is correct (apparently there is malware that monitors the clipboard to see if there is an IBAN account number copied to clipboard and as soon as there is, it will be replaced with the pre-programmed account number).

--

I partly blame banks for this. I usually type the URL myself or follow online payments to my banking site to authorize a money transfer, but my bank has disabled the use of the password manager on their site because it's apparently safer.

Well, I have no idea how it can be safer if the password manager used to check if the site is legitimate, if the certificate matches, and so on, and disables the managed password if it fails the checks.

Windows 10 Anniversary Update: This design needs a dictator

toughluck

Thanks for the tip

Firstly, let’s deal with the odd name. I’m still puzzled that this is officially the “Anniversary Update” for a few reasons. Was last year’s Windows 10 really some event worth commemorating, like the Battle of Trafalgar, or VE Day? The name does imply last year was more important than this year, which is odd.

I'll be sure to mention it to the missus if I ever forget my wedding anniversary.

Reminder: IE, Edge, Outlook etc still cough up your Windows, VPN credentials to strangers

toughluck

Is that limited to Windows?

A couple of Linux DE file explorers will let you browse the Internet from the same interface as they use for local files.

toughluck

Re: Interesting

Can't go back. It appears in a dialog: "Windows cannot find 'file://witch.valdikss.org.ru/a'. Check the spelling and try again."

Looking at this, I can't help but think it's just a default configuration issue that should have been disabled for all ordinary users and made available for corporate types that would/should simply block smb protocol on the firewall going out, but hey, nothing like a good rap at Microsoft to brighten the day, wouldn't you agree?

toughluck

Interesting

I tried it in IE 8 under Windows 7, I got this unhelpful bit:

No NTLM hash is leaked. Try to manually copy&paste file://witch.valdikss.org.ru/a to the address bar.

(Works only on Windows with IE/Edge/Chrome)

I tried to copy and paste the relevant bit, Internet Explorer says it can't be found.

What am I doing wrong?

Jovian moon Io loses its atmosphere every day

toughluck

So what's the news here?

A quick search for 'day length on io' got this page as the first result:

https://pattyjansen.wordpress.com/2012/11/14/jupiters-moon-io-some-facts/

The author quotes a 2006 book, "Io After Galileo, A New View of Jupiter’s Volcanic Moon" by Rosaly M.C. Lopes and John R. Spencer. It seems like the loss of atmosphere was known at least 10 years ago. So what's the news here?

YouTube now 97% secure

toughluck

So which protocol do they use? Telnet? Gopher?

FBI electronics nerd confesses: I fed spy tech blueprints to China

toughluck

Riiiight

I just love this part. I do understand that it's his attorney speaking, but seriously, this statement is an insult to all Americans:

The truth is that Mr Chun loves the United States and never intended to cause it any harm. He hopes to put this matter behind him and move forward with his life.

If it were barely 50 years ago, he'd be executed for treason (either officially, or would be found dead after committing suicide with a rifle to the back, firing three series of shots).

What's ordered in Vegas, doesn't stay in Vegas? $6.7m of printer ink 'stolen by office worker'

toughluck

Up to $1.5m for defrauding $6.7m

Yeah, I get that she will probably face forfeiture. She probably prepared for that and made sure to spread funds as much as she could. Plus, forfeiture might get knocked down in court and she might be ordered to pay just $1.5 million. Some lesson it teaches -- crime does pay if you do it right. Not to forget that if she stopped doing it in 2014, then pretended to be the perfect worker and retired in 2015, she could be well away from all the commotion. I guess people get greedy.

toughluck

Re: Honest guv!

Yeah, exactly what I wanted to post, I went through the posts to see if anyone spotted it before I did.

And yeah. What?

QLC flash is tricky stuff to make and use, so here's a primer

toughluck

Re: Bit value to level mapping

It probably is Gray code, since a single bit error will be caught by parity and corrected by ECC, while a two bit error would be undetectable by parity and detectable, but not fixable by ECC, and three bit errors would be detected by parity, but typically not detected or fixable by ECC.

It's also likely that data in a block is written using RLL algorithms to make sure there's as much variance as possible to feed to Maximum Likelihood and Viterbi algorithms, even though there's no analog to digital intermediate step controlled directly by the controller.

toughluck

What's the point?

I could understand the move from SLC to MLC -- twice the capacity without significant downsides (although SLC continued to be developed until it achieved 100,000 P/E cycles), as MLC wasn't that much slower.

Already with TLC the move seemed forced -- just 50% more capacity, but bit error rates went up, double digit percentage wise, so a lot of the extra capacity needed to be used for ECC, overprovisioning, etc.. It really felt like putting the cart before the horse.

And now, moving from TLC to QLC increases raw capacity by 33%. But nobody mentions what happens to error rate. I mean, if it shoots up by 40%, you're adding capacity that you can't even take any advantage of because you need to add error correction and even then you're unsure if it works.

Why bother with it at all? Where will it end up? 8LC that has barely twice as much capacity than QLC, but 0.01 P/E cycles per cell, which means you have 1% chance that the data was written correctly? And then it takes half a second to read data and a full second to write it? This sounds sooooo useful.

Cisco busts ransomware rodent targeting bitcoin, cryptocoin subreddits

toughluck

This fluffy text is very fluffy.

[i]A single actor could be responsible for multiple distinct variants in an attempt to maximize their profits, or as they refine their tactics in an attempt to maximize the amount of revenue they collect from victims.[/i]

How do the two parts of the sentence differ? Does having multiple variants lower costs, thus maximizing profits, or does it increase revenue, which basically means the same as the second half of the sentence?

If it reduces cost, how does it accomplish that?

VW's first US settlement nearly settled

toughluck

Re: Did they really cheat the EU tests or did they optimise the car for certain conditions?

If it's true that the car goes into low emissions mode when driven straight ahead at 40mph then that happens to fit half my commute to work on a good day.

If you happen to drive with your rear wheels on trolleys, then sure.

Cats, dogs starve as web-connected chow chute PetNet plays dead

toughluck

Re: Holy crap

There should actually be at least three failsafes:

1. Locally stored schedule (with an RTC) that continues to dispense food in the event that remote sync isn't working.

2. Battery backup.

3. A separate trapdoor mechanism that opens to release all remaining food if the main mechanism fails or becomes stuck, or if battery is low/critically low.

toughluck

A splendid idea for a business

Set up a company like "PetNet". Pay off RSCPCA/PETA/whatever. Get lawyers.

Sell your automatic feeder to thousands of gullible morons.

Turn off your servers.

Alert the RSPCA/PETA/whatever to owners that might potentially be cruel to their animals and disclose the customer list.

Wait for lawsuits to start.

Reap profits from lawyer services to whoever pays more (PETA/RSPCA/whatever or your own customers). Provide telemetry data favors the correct party.

Cortana expelled from Windows 10's new school editions

toughluck

Right up until you need an application from the store and you can't add it, so you have to go through the hassle of downloading, installing and maintaining it, and then find out that it can't work without the store and the developer will not bother with a non-store version since it's not designed for enterprise/education use and they don't want to violate that.

Get ready for Google's proprietary Android. It's coming – analyst

toughluck

They'll probably continue with what's available for a year or two and then give up?

Unless they find serious financial backing and are able to hire full time programmers, I doubt they can survive.

Wi-Fi hack disables Mitsubishi Outlander's theft alarm – white hats

toughluck

Re: It seems

I have an 11 year old Citroën that blinks its indicators for 20 seconds if it's locked and if I press the "lock" button on the remote. There's a third button to turn headlights on/off. Oh, and holding the "lock" button shuts the windows.

This problem was solved ages ago. What else would I want from a car remote?

Microsoft bans common passwords that appear in breach lists

toughluck

Re: One of my beefs with Microsoft "Exchange Online" things.

Here you go: https://xkcd.com/936/

iPhone 'Error 53' plaintiffs say Apple not giving reimbursements

toughluck

Re: Suing?

If nobody sued Apple, they wouldn't have backed down. It's as simple as that.

Modular phone Ara to finally launch

toughluck

What will it do?

to do for hardware what the Android platform has done for software

It will enable security holes, malware, advertising and OEM crap in hardware? No wonder they want it out so badly.

Airbus to build plane that's even uglier than the A380

toughluck

Re: Would you trust TSA (and other counterparts) while you're asleep?

@Message From A Self-Destructing Turnip: Really? I was led to believe that TSA are checking each and every bag for the fun of it; because they love inconveniencing people; because they are pervy and looking for stuff to get off on or because they are jerks in general.

And you mean to tell me they're normal people that are just doing their jobs?

Unthinkable!!!!111ELEVENTYONE

toughluck

Re: Would you trust TSA (and other counterparts) while you're asleep?

I flew to the US (FRA-EWR, EWR-DEN and DEN-FRA) last November and out just before Thanksgiving. It was during the elevated terrorism alert just after the attacks in Paris.

It was my first flight to the USA.

Either people working for TSA are meticulous and pedantic to a fault and managed to pack my bag exactly as I did, or they have not opened my bag. And I haven't even locked the bag in any way -- just tied a shoelace between the two zippers so that they don't accidentally open, but nothing else.

Am I missing something?

Destroying ransomware business models is not your job, so just pay up

toughluck

Re: It's not three choices for most businesses, only those run by idiots.

And nobody ever considers data theft and tampering. So you get "your" "data" back, but never consider if the crooks tampered with your payroll records and updated the bank account numbers with their own? Come payday, you pay them a second time.

What if the highly confidential documents you had were stolen? You wouldn't want your competition to go over them, would you? So you pay them again. Do you trust them enough that they never showed the documents to anyone?

toughluck

What happens if plods capture the perp before you pay?

Suppose your PC got infected with ransomware and you got the message, etc., but police managed to capture the criminal behind the ransom, but you didn't pay up yet? Do you have any chance to get your files back, or are they completely lost?

Revealed: The revolving door between Google and the US govt – in pictures

toughluck

Re: former Google staff occupy key posts in areas essential to Google’s

Hey look, your post still hasn't been taken down. 7 days and counting. Not even quoting the allegedly deleted posts has caused them to be taken down.

Page: