The Register Home Page

* Posts by Aitor 1

1602 publicly visible posts • joined 25 Jun 2009

Confidential computing's trust mechanism is broken. The fix may not exist

Aitor 1

Own servers.

Be aware that using your own servers doesn't save you from the us presidential ban issue.

You also need to not use proprietary software.

And not only US, but any proprietary SW (as EU companies will likely not sell to you or provide patches).

If you use open source, where are the repositories based? Because they will also ban you if based in the US.

It is vere, very difficult to survive a full blanket ban, chances are, you are going bankrupt.

Aitor 1

Re: its all bs

I agree with you.

If you want security, you must only trust your CA, and nobody else. This, of course, presents it's own problems if you are connecting to somebody else's servers, because by default they do trust at least the root CAs. And the issue is they can't be fully trusted.

You also have the blackbox inside the OS and processor/enclave, that you also can't fully trust.

Do basically you can have reasonable security, but bad actors with access to dodgy certs will be able to do MiTm attack, and depending on your paranoia it will be more or less difficult.

Of course the common attack won't work against you if diligent.

I am happy not to be the one responsible for security at a high stakes company because IMHO it is getting more and more difficult to manage.

As for the point of this article.. I think that if security worries you that much, just use your own servers.

That, of course, also has issues and a price to pay

Sovereign cloud is only possible if you’re Chinese or American: Gartner

Aitor 1

Re: I would look at it this way

Cisco is in fact know to have had backdoors in the past. And they could be forced by the US government to have backdoors and they couldn't tell you.

Same for Huawei, mind you.

In essence, if you don't trust the US you can't trust companies based there, same for China, etc.

UK gov pays public £550 to discuss Digital ID – then bans journalists from the room

Aitor 1

Fundamentals

From a fundamentals point of view, it is insecure.

Good security is something you have, something you know. This digital ID means something you know.

So it creates many problems, as what happens if you get hacked or someone steals your digital ID? You don't have a physical one that does the cryptographic signing, that would be an issue.

And you don't have the benefits of an actual card you can carry with you.

So less benefits, and more problems than an actual physical and digital id.

Mythos found 271 Firefox flaws – but none a human couldn’t spot

Aitor 1

Non explotable bugs

We aare already fixing non exploitable bugs, this will detect a lot of bugs that potentially cannot be exploited.. how many Strings having passwords have I fixed in Java, and none are exploitable.. or log4j, can't be exploited in our config yet we had to fix it, etc etc

AI-powered mainframe exits are a bubble set to pop

Aitor 1

I disagree

AI is excellent at translation.

It will be able to move from one language to another, particularly away from mainframes, if we consider COBOL.

Also, there will be few if any benefits, as this is translation, not migration. So no advantage taken from newer frameworks, objects, etc.

The only benefit will be running it on a cheaper but less reliable platform.

Shots fired – literally – over proposal to build datacenter in Indianapolis

Aitor 1

Croissants

Can I have croissants without the nasty parts of your list? I like croissants.

North Korea's 100,000-strong fake IT worker army rake in $500M a year for Kim Jong Un

Aitor 1

Actual work

Wouldn't it be better for NK to actually do the job correctly and not steal from the companies?

Like, they could run this as a legit business.

AWS says drones hit two of its datacenters in UAE, urges users to move resources to different regions

Aitor 1

Re: Armed data centers

Using ARM processors.. that was the pun!

Brussels urged to pay 'sovereignty premium' to narrow China battery gap

Aitor 1

Sovereign batteries

It is a great idea, until you know about the field.

The Chinese have better technology, and amazing integration, plus all the processes happen there.

€500 per car battery is not even close to make them in Europe.

They cost less than half in China and are better.

So we would need like 3000e per car battery for parity.

Of course, given to the campaigners that can't compete.

Not a terrible idea, because due to taxes we would recoup the cost, but maybe they should have invested for decades before?

Euro firms must ditch Uncle Sam's clouds and go EU-native

Aitor 1

Re: It is unfortunate, but true

The soviet union didn't go home. They occupied and controlled half of Europe.

Seven years later, Airbus is still trying to kick its Microsoft habit

Aitor 1

Re: 20 million cells?!

As much as I like jupyter, they aren't comparable.

And it is way way less stable.

SAP users still wrestling with business case for S/4HANA

Aitor 1

Re: genuinely who said this out loud?

Either go to mostly defaults (and that is terrible for most) or go custom software if you are big enough.

Windows 11 update breaks localhost, prompting mass uninstall workaround

Aitor 1

Re: Of course we all know the permanent fix

I have used Mint and Ubuntu for desktop quite a lot.

It also has bugs, and I frankly prefer the windows UI..

Most commercial software that I use is made for windows, some have versions for Apple, and only games can be played in Linux.. with caveats and tinkering.

I don't want to tinker, not anymore, I just want it to work.

And windows is making it less convenient as time passes by, it is at this point almost spyware, yet we still use it.

Aitor 1

Re: Maybe intentional

I would love to have clippy as their AI. It would be quite fun.

No account? No Windows 11, Microsoft says as another loophole snaps shut

Aitor 1

Re: "a number of ways to avoid the Microsoft account requirement"

Once I retire I will stop using windows, but I need to be current, such is life

Fire up the gas turbines, says US Interior Secretary: We gotta win the AI arms race

Aitor 1

Re: Fire them up?

Well, you could buy the turbines from China.. but yeah, that defeats the purpose.

Mysterious X-37B spaceplane flies again, this time carrying a quantum GPS alternative

Aitor 1

Re: IMU !!!

I wonder how precise inertial navigation cam be for a supersonic vehicle with this system. No doubt this is what is being tested.

OpenAI's GPT-5 looks less like AI evolution and more like cost cutting

Aitor 1

Re: That's when it shows how good it is.

Even on fields I am expert adjacent gpt5 is quite obviously bullshiting, but with confidence.

Java 25 puts 32-bit x86 out to pasture, adds 17 shiny new features

Aitor 1

Re: Version 25 and they're still doing "significant work" on performance ?

Java 1 was terrible.

Performance wise, 1.6, 1.8 and 11 is where you get the performance.

The constant change for the sake of change shenanigans they run today to seek rent m, I can't agree with.

Lord of the Rings director Peter Jackson backs plan to do a Jurassic Park on extinct birds

Aitor 1

Re: Not just Moas

So, could we then use the eagles as taxis? It seems only reasonable to ask...

Wolfspeed to file for Chapter 11 in deal cutting 70% of debt

Aitor 1

Loss leader

Yes, but because electric car sales are slowing down in the US, suddenly there are no growth expectations in the short term, yet losses remain.

And China has way more competitive manufacturers of the same products... probably cheaper and better even after tariffs.

Citrix finds new use for virtualization: Avoiding PC price hikes caused by tariffs

Aitor 1

Re: Citrix is done

In good part due to the cost of citrix AND windows licenses. Had it been cheap, VDIs would be the normal thing to have in offices and homes these days, along portable devices.

Raspberry Pi launches CM4 variant that laughs in the face of frostbite

Aitor 1

Re: Extended temperature

But how long would electrolytic capacitors last in those conditions?

Also, flash memory doesn't like high temps operation.

London's poor 5G blamed on spectrum, investment, and timing of Huawei ban

Aitor 1

Re: Pointless

More efficient use of frequencies, less power usage, reduced latency.. there are many benefits, not all need to be directly to the consumer.

In any case 5g and 4g coverage in the uk is poor at best.

Ampere bets on Arm to muscle into Intel's telco territory

Aitor 1

Re: heard of fpga ?

Fpga is not the present in these systems.

Quite a few use xeon platinum processors in specific configurations for SDN equipment.

These processors are very expensive and power hungry, but correctly use can process ungodly amounts of traffic in a flexible way.

A DSP will.process a lot of traffic cheaply... But is set on stone.

A fpga is expensive and way slower, but flexible.

What Ampere is trying to say is they are cheaper than Intel and less power hungry.

Why UK Online Safety Act may not be safe for bloggers

Aitor 1

Re: ...chances of Ofcom even discovering...

But they will have the capacity to investigate those that annoy/offend someone in power.

This is quite terrible.

Europe hopes Trump trumps Biden's plan for US to play AI gatekeeper

Aitor 1

Re: No limit for the Netherlands but for EU?

Precisely.

The European commission should reply with a ban to us interests of asml and lenses, and to Taiwan if they sell gpus etc to the us.

There, fixed.

AMD grabs a quarter of x86 market with desktop gains, but server growth slows

Aitor 1

Re: Who's still wanting Intel chips?

My company for example. They only buy Intel, and nobody would risk their jobs by suggesting amd or forcing the issue. So we have less for more.

Warren Buffett’s favorite insurer GEICO drops VMware for OpenStack

Aitor 1

Re: Hey Broadcom !

It is likely, but by then they will have probably extracted more money from their customers than the price paid for vmware, giving them a nice benefit, and will then decide to sell or keep the remnants.

Would you rather buy space broadband from a billionaire, or Communist China?

Aitor 1

Re: This seems unnecessary in China

With satellites all over, drones are incredibly useful both in military and civilian usages. Not to speak about other realtime comms for military.

I think that China had a look at Ukraine and wants Starlink, so they are trying to build it.

Faulty instructions in Alibaba's T-Head C910 RISC-V CPUs blow away all security

Aitor 1

Re: This is likely just the beginning

They also limit you in many ways, just ask Qualcomm, or look at changes in licensing.

They essentially own you, and can make "the Vader change in agreements" for newer isas, etc.

Still a good option, but not ideal.

SAP system gives UK tax collector a £750B headache as clock ticks on support

Aitor 1

Re: Programming in a c**p language

This is essentially buying a trailer home when you actually needed a cargo seaplane, and insisting on it being made to fly and float, and still be a trailer home.

Cold comfort to teachers who got paid late, but ERP software rollout had 'unrealistic' timeline

Aitor 1

Re: Why?

Elected officials should absolutely be able to override and run the day to day job in the council, otherwise it is pointless to elect anyone.

That being said, the bucket should also stop with the clls.

Oracle Java police start knocking on Fortune 200's doors for first time

Aitor 1

Re: In a word "Adoptium"

But of course that is the trick, want updates? New license.

China orders its telcos to rip and replace US chips with homegrown silicon by 2027

Aitor 1

Re: Expensive

It is going to hit hard companies like Cisco. AMD and Intel will be affected, losing sales, but won't be hard hit.

The government is also going out of us controlled processors.

The biggest consumers of processors are data centers, business and tertiary personal devices.

I guess that will come next.

More worrying is the timeframe. Looks like China is considering going to war with the us after 3/4 years, and they obviously can't do that with us made processors and sw everywhere.

Broadcom has willingly dug its VMware hole, says cloud CEO

Aitor 1

Logic

I disagree. It is immoral, but quite logical.

You have hostages (clients) and you buy for day 1 billion. Extract 2 billion in 2 years, and move on.

Amazing benefit.

Now move on and extract value from the next company.

This was done in the 80s repeatedly with terrible consequences for the economy, as it is essentially a hostage situation plus setting a company on fire. Value is overall destroyed and resources (money) plundered.

Aitor 1

Re: Alternative to Player with USB support?

And even how you install virtualbox used to be a legal issue.

I mostly used virtualbox to play dos and w95 games, but they removed the dx support, so no more dx passthrough for old games

Aitor 1

Re: Joke's on them

Increasing prices this much and removing training and certification will probably give them the benefits of 20+ years in a couple of years.

Of course it will seriously damage the long term value of vmware, but they are essentially strip mining the value of the asset they bought.

It is immoral, as it breaks the assumed agreement between partners (vmware and clients), but probably legal in most parts of the world.

Overall I find it quite damaging for IT and the world in general, but sadly this was to be expected.

Broadcom boss Hock Tan acknowledges 'some unease' among VMware community

Aitor 1

Re: Way to go : Tan

It also covers sound, and more critically remote desktop.

Broadcom ditches VMware Cloud Service Providers

Aitor 1

Oracle move.

As others have commented.. this is an Oracle move... The installed base will suffer, but revenue won't, and costs will plummet until all the value has been extorted from the clients.

Why Nvidia and AMD are roasting each other over AI performance claims

Aitor 1

Re: "benchmarking shenanigans"

Also, I remember how nvidia converted 16bit precission to I think 8 in certain assets of certain games. At driver level

The battle between open source and 'sort of' open source is as old as software

Aitor 1

Selling software

Monthly fees and "online dongles" is not selling software, but services.

It is terrible for many clients, as it also includes auto rolling of new versions. Change for change sake isn't good.

Aitor 1

Re: Most of these companies only exist because of OpenSource

I would pay per use for software.

For example. Photoshop.

If a license is say £20 a month, then a reasonable cost should be pennies per hour. But no, they just want rent.

Western Digital execs vote to split biz in two: HDD and flash

Aitor 1

Re: So the two new companies will be HGST and San Disk right?

Yes it was. I sold a few and the clients were impressed. In the wrong way of course.

From browser brat to backend boss: Will WASM win the web wars?

Aitor 1

Re: Our experience with Excel to WASM compilation for the last few years

FileMaker pro? 123? Dbase?

Criminals go full Viking on CloudNordic, wipe all servers and customer data

Aitor 1

Re: Offline backups??

That is the standard now.

On different vlans ordifferent virtual environments.

But looks like the miscreants still had c&c servers abke to access everything or it was a time bomb

Aitor 1

Re: Where are the backups?

Most of my big customers always had the backup network port and network, plus servers. Everything independent.

But it was expensive.

So they recreated that as virtual appliances.

Still expensive.

So they "went to the cloud" as it seemed less expensive. And threw caution to the wind.

Now it is more expensive than the initial situation and less resilient, but they are trapped.

Aitor 1

Re: Where are the backups?

It also makes it look like an insider job..

Aitor 1

Re: "their own backups as a contingency"

Constant backup on cloud premises is neither practical nor affordable.

The cost is huge, and makes the cloud difficult to justify.

Almost everyone that uses Amazon has the data in amazon. In another region as backup, yes, but still on amazon/azure/google.