* Posts by LDS

8252 posts • joined 28 Feb 2010

DevOps from above! US Air Force says upcoming B-21 stealth bomber will run Kubernetes

LDS Silver badge

Re: And the B52s?

Their bodies will eventually become too old to fly, and to keep them airworthy becomes more expensive and flight hours will need to be reduced. Moreover, B-52 can fly only when there's no real threat from the sky or ground.

B-2 an their successors are designed to attack when threats exist, and at larger distances. Otherwise you can just throw missiles, but those are less controllable than a bomber.

"maybe a world without functioning strategic bombers would be a better place."

You should also tell Putin and Xi, both working hard to design and deploy new weapons...

LDS Silver badge

Or we can discuss the fact their whole business is built on an ARPA/DARPA project.... even computers were first a military tool. And how many of the universities they attended got funded as well? "Gimme the money, just don't tell me where they are from"?

But we are talking about people who believe that profiling users and exploiting them is ethical... at least when you design and build a bomber you know it is designed to kill people - you could just hope it will be used when there's no other way to defend you.

Watchdog slams Pentagon for failing – for a third time – to migrate US military to IPv6

LDS Silver badge

They're sitting on the largest allocation of IPv4 addresses to a single entity, why should they move to IPv6? Addresses exhaustion is not a problem of theirs, and probably some of their systems are so old they probably barely work on IPv4....

LDS Silver badge

Re: NAT is not a firewall

I've seen gamers doing their best to lower their pants in front of the world trying to bypass NAT and UPnP because they believe it will lower their ping or whatever.

NAT does protect a large number of unaware users because it acts like a deny all rule which cannot be disabled easily, with enough technical knowledge and still for a limited number of endpoints. A gamer may put its PS4 in the DMZ or as the default host, but other system will be inaccessible still.

On the other end IPv6 will need a proper firewall and will need to avoid users disabling it because their ping "is too slow" or they can't access their NAS from their phone, etc. etc. Expect lots of users following advice to "disable the firewall".

It's a trivial job for those who understand how the internet works. For all those thinking that's a magic box where cat videos appear from, it's not.

I'm fully for IPv6 being deployed, but we can't simply ignore how it will impact users and what new risks it brings.

For example, I don't believe the DoD is unware that anybody able to monitor just its IPs with IPv6 will be able to identify how many different systems are behind the firewall, and which IP changes and which one stays the same. In turn it gives an idea of how many people could be there, etc. etc.

And at least most systems should not now send out their MAC addresses.....

LDS Silver badge

"but who actually needs every host in DNS?"

Most organizations, and even my house network. Do you really wish to monitor and access devices by their IPv6 addresses? Assign many options manually? What about reservations? You still need DHCP data even when the address is auto assigned. IPv6 didn't think t about DHCP because in 1996 DHCP was quite new as well, DNS records managed manually, and most systems where client-server ones, very few servers, and client usually unable or with no need to talk to each other. Today, it's quite different.

Only Google doesn't implement DHPCv6 in Android on an ideological stance, after all for Google Android is just a slurping endpoint, and they have all the data to uniquely identify each device and profile it. The less Android devices can be controlled by others, the better.

And how much more power would DHCPv6 need? You're not going to renew addresses every five seconds.

This'll make you feel old: Uni compsci favourite Pascal hits the big five-oh this year

LDS Silver badge

"the implementation was not standardised"

The ANSI/ISO standard was quite useless, as nobody really cared for it.

One of the problem was Wirth went on designing new languages instead of evolving one, without someone leading Pascal evolution was left to companies writing compilers and selling them - and when the main ones were Apple, Borland and Microsoft you could see how easy it would have been to put them in a room and came out with a standard. With BASIC happened the same.

With DOS and Windows coming without an OS compiler, there was much more competition to sell them compared to Unix. Being able for example to call into DOS without having to buy an external expensive assembler could bring more customers.

Microsoft applied its own extension to C, C++ and Java as well, before having to capitulate to the standard for the first two, and being sued by Sun for the latter.

LDS Silver badge
Facepalm

"to another RECORD named for the new link"

You didn't even need a typecast. Just declare a single type and then two vars referring to the same record type, It looks some Pascal written by C programmers unaware of the Pascal typing system. The "Type" section of a Pascal program is not irrelevant. In Pascal you can alias even native data types to different types so a wrong variable won't be accepted by the compiler just because it has the same size.

Anyway, any decent Pascal implementation supported typecasting, in Borland Pascal is as easy as Type(Variable).

Also everybody hails Rust today - and it is a strongly typed language - it avoids many of the programming errors that made C programs full of vulnerability holes.

LDS Silver badge

"Easy to enforce in C [using fwrite()] but quite difficult in Pascal."

Not in any version of Pascal I know since smartphones exist.... looks to be more of a problem between chair and keyboard.

Dude, where's my laser?

LDS Silver badge
Alert

Well, they made some progress, eventually....

Beware, drone owners!

https://news.usni.org/2020/05/22/video-uss-portland-fires-laser-weapon-downs-drone-in-first-at-sea-test

Wanna force granny to take down that family photo from the internet? No problem. Europe's GDPR to the rescue

LDS Silver badge

"a grandmother posting a picture of her grandchild is personal use"

Is posting anything into a commercial site designed to gather and analyze contents (and you're giving them very broad usage rights on anything you upload), and then monetize that, "personal use"? It's not showing the picture privately to friends on a tablet, especially when the image is accessible publicly. Is actually licensing an image to a commercial third party "personal use"? That doesn't need to imply an exchange of money.

I believe a better definition of "personal use" is needed, because "social" networks have been designed exactly to turn "personal" data into a revenues stream - using them well beyond any personal interest. Especially when other people beyond the user are involved, and no explicit permission was given.

PS: the "the fair and lawful use of personal information" is exactly what a "privacy law" ensures - including when the law forbids the use.

ALGOL 60 at 60: The greatest computer language you've never used and grandaddy of the programming family tree

LDS Silver badge

"notions like beauty and elegance in mind for the language"

You can still see that difference in languages from Europe compared to languages from US...

Now there's nothing stopping the PATRIOT Act allowing the FBI to slurp web-browsing histories without a warrant

LDS Silver badge

Re: "No it won't"

The problem is the defense can't be technical, can be only legal. There's no way to protect your privacy and freedom as long as the law itself does not protect it. Maybe a wholly decentralized system would make much harder to gather those data when heavily encrypted, but the direction instead is towards a heavy centralization - few services handling most of the user data, most systems in a (relatively) few datacenters controlled by a few companies, most US based - so CLOUD Act subjects - and the competitors being Chinese.

LDS Silver badge

Re: Really?

For tracking web histories, end points are known. It's the DNS queries, HTTP traffic, web browsers and the OS themselves. Encryption means Eve can't know the message as long as Alice and Bob themselves don't tell her, and Eve has no way to force them. It's clear that if Eve can seduce, bribe, jail or torture Bob, the best encryption and strongest key is useless.

If Cloudflare has your DoH queries - it needs the plaintext to resolve the address - and the the FBI has the power to ask those data, DoH is useless to protect you from this specific threat.

Your provider will still see what IP you access even if the traffic payload is protected by HTTPS and the DNS query by DoH (it can't tamper with the DNS query, though).

A VPN would solve it (as long as the FBI can't ask them too), but if your Chrome browser sends your whole browsing history to Google for profiling, any VPN encryption is useless. When Windows 10 does the same, any VPN is again useless. What about Android? What about all the beacons in a web page, i.e. from Facebook? Can you trust your endpoint, and the remote one?

Maybe the spooks don't have access to any endpoint, but Google & C. often does. The spook just need to ask them. You need to be really paranoid and competent to browse without being tracked.

LDS Silver badge

Re: 1st Amendement

The First Amendment never protected anyone about false and misleading statement aimed at causing damage to someone.

LDS Silver badge

DNS-over-HTTPS will take care of that

No, it won't. FBI & C. will simply ask the DoH provider to deliver the data. Nor VPNs will help when the browser or OS itself slurp the data and send them to Microsoft, Google & C.

Encryption is useless when you can't trust the other endpoint.

Also, interesting to see a Democratic senator from Washington State NOT voting against that.

Vint Cerf suggests GDPR could hurt coronavirus vaccine development

This post has been deleted by a moderator

Google says it'll pick up the tab – and stick it in a lovely colour-coded Chrome group

LDS Silver badge

IE did it a while ago...

... it wasn't bad, but it didn't stick.

India says its brains saved the world from the last colosso-crisis – cough, Y2K – proving it can become self-reliant

LDS Silver badge

Re: "...we have the best talent in the world"

Modi prefers "Make India Hindu Again" - don't know how it translates in any of Indian languages or dialects.

LDS Silver badge
Devil

Great. Send back to India all those "brains".

Guess IT will become again a better place with better applications.

Nine in ten biz applications harbor out-of-date, unsupported, insecure open-source code, study shows

LDS Silver badge

Frankestein development, thanks to Stackoveflow, Github & C.

More and more developers no longer write applications. They glue together code sourced from somewhere - usually without checking how many people maintain it, the quality of the code itself (just how many other fools use it), the license, its security. Just look at the packages without a maintainer because the single developer was jailed. Or those removed on a whim. Most of them have nothing in place to ensure each library is vetted and upgraded when necessary. Yet, the more code comes from outside, the more difficult to manage it all.

This survey doesn't surprise me at all - I've seen this trend for years now. When you had to spend money to license library, that very money made you much more careful about what you bought and how well it was supported. It was true that scroogey companies for that same reason often avoided to pay for upgrades, and kept on using outdated and risky code.

Software development took the wrong path, and one day it will become much clearer, at our expenses.

Mad dash for webcams with surge in videoconferencing has turned out rather nicely for Logitech

LDS Silver badge

Re: My actual webcam costs $5000...

Right now a C920S is for sale by Amazon.it at 286 euro... available by the end of May. A used C920 at 219 from a seller... I wonder how much is pricing them Logitech.

I guess I'll keep on using my DSRL for a while...

LDS Silver badge

Re: My actual webcam costs $5000...

There are other tools, some free, IIRC, that allow to use the USB video feed from a camera. Frankly, never tried them before because at work I had both a decent webcam, and web conference rooms with specific equipment when needed. But my webcam at home was really an outdated model, without a decent wide-angle field of view, and low quality video - bought about 15 years ago, IIRC. Never used it much.

With something less than webcams were costing these weeks you could also get a converter from the HDMI output and obtain a very high quality video - from HD to 4K depending on the camera model.

Still with webcams hard to find and prices doubled. I tried the Canon utility, works well enough and even if the resolution is not that great from the USB port, the lens/sensor combo still delivers better video than a plain webcam.

LDS Silver badge

Re: long-term secular trends driving our business

Poor lads - when could they show me anything in the commercial or stock market able to keep a trend for more than a century?

LDS Silver badge
Devil

My actual webcam costs $5000...

I was looking to replace my old Logitech which delivered bad video, and installed some nasty filter drivers in the whole USB/audio stack causing some issues - but decent webcams were or too pricey, or not available.

Then Canon was nice to deliver a small utility to allow using most of its cameras as webcams. It was fun to see the effect of my video taken with a tripod-mounted DSLR and 24-70/2.8 lens compared to those from most monitor-mounted webcams... only caveat it can burn trhough batteries quite quckly, an AC adapter is useful.

Uncle Sam courting Intel, TSMC to build advanced chip fabs on home soil – report

LDS Silver badge

Despite Trump and other issues, NATO countries and not only see USA a more reliable ally than China.

If Trump is not the exception but the new normal, such thought will need to be reviewed....

DBA locked in police-guarded COVID-19-quarantine hotel for the last week shares his story with The Register

LDS Silver badge

Re: Perfect example...

Sometimes, you should read or listen to something more than local news. By the middle of March a lot of countries were already or entering lockdowns or were about to start it by closing some public places and limiting gatherings - and it was happening in Europe too, much far away from China than Australia and Japan. The Diamond Pricess cruise ship full of ill people were already in front of Japan by the end of February. South Korea was already heavily hit (it worked hard to contain it, true).

My company stopped all travels to Asia by the end of February, and put us working from home by the beginning of March. In the same days I cancelled a personal travel in the first days of April because it was clear to me that the situation would have only become worse, would not be under control in a month, and I didn't want exactly to find myself blocked abroad even if I could afford a $7000 ticket in an emergency, although it would put a dent into my finances.

Taking any trip in the middle of March was playing roulette. Governments did ("hey look at the sentiment analysis from Facebook and Twitter, we can't do this and that!!! Let's drink some cholirine, maybe?"), and people as well.

LDS Silver badge

Perfect example...

... of lack of situational awareness. It looks we can't really blame governments only for having underestimated and mismanaged the crisis for far too long.

The point of containers is they aren't VMs, yet Microsoft licenses SQL Server in containers as if they were VMs

LDS Silver badge

Because it impacts directly how many licenses you need. In the past the hardware put an upper limit. You could not scale a database server enough to sustain more than x applications on each, you needed separate physical systems, and a license for each. Then hardware began to grow much more than software needs, so you could scale the hardware only and put more workloads on each. To protect revenues companies needed to find a new license mode. Like it or not, companies exist to make money, and some of those money are also paid to employees and suppliers.

Think if a single computer in the office would let several employee work at once with the same license of Word - it's clear the license model will be changed.

Do you remember how mainframe time was licensed and paid?

LDS Silver badge

That has nothing to do with licensing a database server. For the matter, many database servers where "containers" because you did run the database and nothing else from that machine if you wanted to achieve decent performance, since but for trivial applications usually the database used all the available RAM, CPU and I/O. Some databases even bypassed the OS file system and take direct control of the disks. Really, the OS was just there to start the database server software. Later the hardware became big enough to allow to run full instances into VMs or containers.

So if you deploy a physical system, a VM, or container for the same workload why should it be priced differently? The fact one or the other could be easier to manage is not a concern of the software maker.

Maybe not a good way to create microservices - but if each microservice needs a separate database instance, IMHO you will have bigger problems in the future than the database licensing.

LDS Silver badge

"Next thing we know, they'll be increasing licensing based on the speed of each core"

Oracle did it already years ago. IIRC right before speeds where increasing again quickly between Pentium II and Pentium III. or the latter and Pentium 4, don't remember exactly now, should check. If you needed to change the hardware, and were no longer able to source the slower processors, you had to pay for the new CPU speeds...

If you miss the happier times of the 2000s, just look up today's SCADA gear which still has Stuxnet-style holes

This post has been deleted by a moderator

If it feels like the software world is held together by string and a prayer, we don't blame you: Facebook SDK snafu breaks top iOS apps

LDS Silver badge
Devil

"tend not to pay much attention"

Especially when the library pays them....

The iMac at 22: How the computer 'too odd to succeed' changed everything ... for Apple, at least

LDS Silver badge

"They were actually very niche"

They were nice consumer devices for the era, or for desks where showing off was more important than using a computer. One was brought in in our office - but in those years we were moving from 15" monitors to 17" ones, and 19"-20" for some few lucky ones - so, really, an all-in-one with a 15" monitor looked old despite its design. Plus the mouse was horrible. It was used only to test our early web sites worked on Apple too. Soon the first gigabit switches made it even older without being able to update the NIC.

Microsoft puts dual-screen devices and Windows 10X in the too-hard basket

LDS Silver badge

Re: X like in Chrome...

How do you read "we will share how we will enable developers to build applications that seamlessly enable cloud-powered virtualization""?

And "pivot our focus toward single-screen Windows 10X devices that leverage the power of the cloud to help our customers work, learn and play in new ways."

LDS Silver badge

X like in Chrome...

Expect a Windows which can't run almost nothing locally and always needs to be tethered to a cloud something to work - while slurping more data than it does now.

Next, they will connect you to the cloud as well, don't know if in a Borg or Matrix-like way.

Gmail and Outlook sitting in a tree, not t-a-l-k-i-n-g to me or thee

LDS Silver badge

No, of course you can let that single provider access all of your mail accounts and put its long pointy nose into them too....

I got rid of third party email server even for my personal use years ago.

As Brit cyber-spies drop 'whitelist' and 'blacklist', tech boss says: If you’re thinking about getting in touch saying this is political correctness gone mad, don’t bother

LDS Silver badge

"how ingrained our prejudices are from our cultural upbringings"

Probably more an evolutionary association - the dark of the night, of a cave, etc. was dangerous, and especially in the Western wold,. but not only, connected with death and afterlife, especially any cultural variation for Hell. Oh sorry, I should not have said "Western" which is also a cultural heritage - should we how speak about longitude? Oh no, again why 0° is at Greenwich? Time to make it wholly relative again as it was in the past. Should we also stop to connect red with fire and warmth, and blue with water and cold, and say red-faced, because someone in the past centuries called another ethnicity "redskins"?

The association of "black" as a pejorative term related to skin colors came much, much, much later and was kept alive in the only state to keep slavery legal till 1860 - and segregation for another century, and still today full of people trying to assert "white" power.

Maybe the only wrong cultural association is Freedom and USA, if it's still full of people thinking freedom is not for everyone.

LDS Silver badge
Facepalm

Please repaint Darth Vader in different color

But avoid the not gender neutral pink or blue.

Florida man might just stick it to HP for injecting sneaky DRM update into his printers that rejected non-HP ink

LDS Silver badge

Re: HP printers

There is already the Mopria standard for that which is not controlled by Apple.

LDS Silver badge

If entities like the EFF settles and run away with the money, instead of getting a ruling if those behaviours are legal or not, companies like HP will just rinse and repeat.

'Didn't spot that'? 'Learn a lesson'? I can't believe they would be so naïve, c'mon.

LDS Silver badge

Why the EFF settled? Just because they got enough money?

Guess which cloud giant Zoom picked to handle millions more video calls? Bzzt, wrong answer: It's Oracle

LDS Silver badge

Or maybe he was just in one of his smaller boats transferring to a larger one... or from a plane....

Microsoft decrees that all high-school IT teachers were wrong: Double spaces now flagged as typos in Word

LDS Silver badge

'that's what books use'

Because books never used monospaced fonts like typewriters did. Another habit born out of necessity because limitations of the era, which no longer makes sense today, and even yesterday.

FTP is crusty and mostly dead, right? AWS just started supporting it anyway

LDS Silver badge

Re: Update it not kill it

Have you ever tried VoIP? Same issues. You'll need to open the SIP and RTP ports.

And even when you try to use HTTP only it will have to multiplex that single connection via websockets or the like to achieve anything useful - and you don't really know anymore what travels on port 80 and even more so 443.

NAT is going away as IPv6 becomes more and more needed as IPv4s are scarcer and scarcer. On firewalls you can configure FTP access on a range of ports for the required host as small as you like - of course it will impact the number of concurrent access. Of course a good IDS will help to keep an eye over them.

Of course lazy admin will hope just to manage 80 and 443 - but see above, today almost anything can go through them, so thinking you're safe just because you have only two ports open is quite naive.

LDS Silver badge

Nor you need to give someone who doesn't need them SSH credentials. There is far less they can do with FTP only ones.

Guess who's back, back again. SE's back, tell a friend: 2020 reboot looks like an iPhone 8 and even shares components

LDS Silver badge

"There's been a trend towards mobiles getting larger and larger"

Sure, especially in the consumer market - but there's still demand for *smaller* phones by those who use them as a pure communication device and don't watch movies nor play with them, and find the smaller form factor easier to keep in a pocket.

Work from home surge may work in Wi-Fi 6's favour, reckons analyst house

LDS Silver badge

Re: Only problem with new Wifi Standards

It may allow more clients transmit/receive at the same time - you may not see an increase in the top speed, but less issues when many devices are connected and communicating. Think about the difference between an hub and a switch (although it's not exactly the same thing, and there are more constraints on radio channels).

If you use many wifi devices at the same time you could see improved performances even with older devices.

LDS Silver badge

I'm happy my work machine at home are all connected to 1Gb Ethernet network through cables...

.... but then all they hit the 20/1Mb ADSL router because a fight between telcos led to a stop of the FTTH rollout...

I bet my ac wifi will still be usabe for a while...

Wake up, Neo: Microsoft mulls using your brain waves or body heat to mine crypto-currency while viewing ads

LDS Silver badge

I would like to know which kind of brain waves...

.... produce such ideas. Then I'd look for a method to neuter them.

Keen to go _ExtInt? LLVM Clang compiler adds support for custom width integers

LDS Silver badge

"No point wasting time processing unused bits"

Only if the system architecture (CPU. memory, ecc.) supports it.

When you have fixed size registers, the CPU will act on the whole register size regardless of how many bits you define as "used". Sometimes using the smaller registers (like the 8-bit ones in the Intel architecture) may mean slower performances. Actually if say you define a 11 bit integer, the compiler will need to add more instructions to properly work on them, as CPU native instruction will expect a different format.

It may use less memory (remember the "packed" specifier in Pascal?), but once again most modern architectures have a performance hit when data are not aligned along some boundary - and CPU caches will anyway move blocks of some size anyway.

I fully understand the value of saving bits in architectures like FPGA where resources are contrained - on others it may just lead to new "Y2K" problems in the future, without any real saving.

SUBSCRIBE TO OUR WEEKLY TECH NEWSLETTER

Biting the hand that feeds IT © 1998–2020