Posts by Evan Essence

The fork? Node.js: Code showdown re-opens Open Source wounds

Re: FSF

Looks as though you didn't actually read the criteria.

FSF

I'd just like to put up a little reminder of this article:

GNU releases ethical evaluations of code-hosting services.

UK govt: No, really, we're not banning cryptography

Re: Exercise in futility.

Indeed.

BTW, a couple of typos: should be encrypted and nefarious.

Brown kid with Arab name arrested for bringing home-made clock to school

Wired

Nice story from Wired (linked from the Guardian's report): How to Make Your Own Homemade Clock That Isn't a Bomb.

Re: He kept maintaining it was a clock

The police officers kept maintaining they were police officers. There was no broader explanation.

True Stupidity

For true stupidity, you need Real, True American stupidity.

Samsung's spying smart TVs don't encrypt voice recordings sent over the internet – new claim

Dumb, dumb, dumb

"Smart TV" is an oxymoron. My TV is dumb, and will stay that way.

Still using Adobe Flash? Oh well, get updating: 15 hijack flaws patched

Re: BBC News

@nematoad: There's an open post on the BBC's Internet blog here. You could ask them there, too.

'Boutique' ISPs: Snub the Big 4 AND get great service

Re: Where is Zen Internet in this advertorial?

Where is Zen's IPv6 service?

The firm that swallowed the Sun: Is Oracle happy as Larry with hardware and systems?

Re: 2001 called

Nice photos of the graphs, though. I guess they used a drone, as they were all taken from different positions.

Hominid ancestors beat humans to the drinks cabinet, say boffins

Ig Nobel

Never mind the serious point. I see an Ig Nobel in the offing!

Chromecast video on UK, Euro TVs hertz so badly it makes us judder – but Google 'won't fix'

Re: WontFix

WontBuy

MI6 oversight report on Lee Rigby murder: US web giants offer 'safe haven for terrorism'

Re: MI5 disinformation.

Repellent finger-pointing shits.

Google's Chrome to pull plug on plugins next September

Re: Wow, I'm way out of touch...

The UK parliament uses Silverlight.

Patch Bash NOW: 'Shellshock' bug blasts OS X, Linux systems wide open

Re: Not in 4.3.11, dating from April

Yes, I've just posted to that effect (before seeing your reply here!)

Re: Not in 4.3.11, dating from April

Ahahaha! I didn't read the comment immediately above mine before posting! With the correct test, I see I really am vulnerable.

$ env X="() { :;}; echo busted" bash -c "echo stuff"

busted

stuff

Not in 4.3.11, dating from April

My Ubuntu system uses bash version 4.3.11(1)-release (says "bash --version"). My executable dates from April 23 (says "ls -l `which bash`).

Yet the test in the article shows my bash (from April) isn't vulnerable to Shell Shock.

The advisory says bash through 4.3 is vulnerable. I'm not entirely clear what "through" means, but evidently some time after 4.3.0, there was a fix released such that 4.3.11 is not vulnerable.

The advisory makes it clear that the recent bug discovery was really made only recently, so I'm very puzzled as to why 4.3.11(1)-release isn't vulnerable.

Was the Shell Shock bug fixed accidentally, somehow, before April 23? Or did someone spot the exposure and quietly patch it over? Who made the fix? Someone at Bash Central, or Debian, or Canonical? Which versions, exactly, after 4.3.0 are not vulnerable?

Re: Always been there or new?

Article says it's been present since 4.3.

No, the article says The vulnerability is present in Bash through version 4.3, which is somewhat ambiguous, but means basically up to 4.3. The article also says the bug is 22 years old.

Captain Kirk sets phaser to SLAUGHTER after trying new Facebook app

Re: "Khaaaaaan-

I can't get behind that!

Re: Not hearing a word against Shatner as a singer....

I bought the album!

BBC goes offline in MASSIVE COCKUP: Stephen Fry partly muzzled

Re: Perhaps the BBC might want to come clean about the full extent of the problems?

The News site was unaffected.

Re: Perhaps the BBC might want to come clean about the full extent of the problems?

I think the amount of information given out during and after an outage is inversely proportional to the size of the organisation concerned. Expect nothing from the Beeb, even assuming they know, or will know, the reasons themselves, considering there are practically no in-house techies.

Listen: WORST EVER customer service call – Comcast is 'very embarrassed'

Re: Amazing patience

The story says he only recorded the last eight minutes or so. There's nothing great about the quality – you can hear from the room echoes the phone was on speaker and the recording was made with a microphone. Giving the rep some rope? Hardly, when the rep repeatedly interrupted him.

Re: This is NOT an aberration...it is how these people do business

@BlueGreen - Exactly why I avoid shopping in Holland & Barrett...

Entertaining

Maybe Comcast is embarrassed, but I found it hilarious! At one point, Block asked sarcastically if it was a joke. I thought he was remarkably even-tempered (though we don't know what occurred before he started recording).

Re: Just refuse to discuss it

You clearly haven't listened to the recording.

UK Parliament rubber-stamps EMERGENCY data grab 'n' keep bill

Re: Is their a list ?

There's a list now on the Open Rights Group blog.

I confess I hadn't heard of most of them, but there was no great surprise about the ones I had heard of. David Davis, of course, and – yet again – Caroline Lucas is a national hero.

The only surprise to me was Nadine Dorries, but I suppose she's nothing left to lose, really.

Super-snoop bid: UK government hits panic button on EU data retention ruling

Re: Help!

I'd never thought I'd say this but "Help us Nick Clegg, you're our only hope."

Backed up by, god help us, David Davis.

NHS slammed for MAJOR data blunders as scale of patient info sell-off is revealed

Re: Technical solution

I think they have a purely financial agenda

That's not true. From http://www.hscic.gov.uk/dles:

The HSCIC is publicly funded and we therefore operate on a cost recovery basis. We do not charge for data itself but do apply charges to cover the costs of processing and delivering our service.

Check out the charges. They're not going to make a profit on this.

Technical solution

That the HSCIC actively pursues a technical solution to allow access to data, without the need to release data out of the HSCIC to external organisations.

This. It should be right up at the top of the list of recommendations. Do this, and the other recommendations become less vital, or even irrelevant.

All "clearly identifiable", "anonymised" or "pseudonymised" data should be held strictly on HSCIC premises and equipment, and only processed at arm's length, with incoming queries and outgoing reports strictly vetted by the HSCIC.

All truly aggregate data can be openly published, in accordance with the government's welcome commitment to open data.

There's a prevailing tacit assumption held by many bureaucrats and politicians, which should be challenged, that the only way to handle data is to pass it around on USB sticks, or DVD discs, or something, and process it with Excel. It's this kind of ignorance that leads to unencrypted laptops full of sensitive data being left on trains.

Still using e-mail? Marketers say you're part of DARK SOCIAL

Re: For added irony, on the story's page

I have ABP turned off for El Reg so I can help pay my way.

I just had a look at The Reg with ads on to see what it's like. Yep, full of blinking and animated, in other words distracting ads. Sorry, the ads stay blocked for me.

Scientists warn of FOUR-FOOT sea level rise from GLACIER melt

Re: "Scientists warn of four-foot sea level rise as West Antarctic glaciers melt"

Maybe people, like, stuck their fingers in their ears the first time?

Privacy bods win court battle: UK HMRC must 'reconsider' silence over FinSpy spyware probe

Re: Ha ha ha

Ha ha ha, indeed.

There's still time to sign the 38 Degrees petition before it's handed in to HMRC tomorrow. Over 250,000 signatures!

NHS patient data storm: Govt lords SLAP DOWN privacy protections

Wired

Data's not being sold

The article you reference says:

Who can access the data?

Information from your Care.data record will be made available to organisations within the NHS (such as commissioning bodies) but also outside of the NHS, potentially (subject to approval) to pharmaceutical companies, health charities, universities, hospital trusts, think-tanks and other private companies.

So it can be sold.

Re: Please share my medical details, far and wide.

So for me, If I'm mangled in an accident, I want any hospital in the Country to be able pull up my records and see this. I also want my record out there being used in any studies that may help to find medications that bypass my condition.

care.data and the Summary Care Record (SCR) are two entirely separate projects.

Your first sentence quoted refers to the SCR; the second to care.data.

Re: Talking to Patients

See also medConfidential, as mentioned in the article.

UK.gov data sell-off row: HMRC denies claims it'll flog YOUR private info

Data Sharing is not Open Data

@open_paul

The similarly-named, but independent, Open Data Institute makes the point:

One of the disturbing trends that we’ve noticed over the past year is the government justifying data sharing as if it is part of satisfying wider open data policy.

Data sharing is not open data.

Maybe you should have "reached out" to them. Or to the also similarly-named, also independent, Open Rights Group.

Re: Daily Mail?

@pepper -

I wonder if he's made any edits on Wikipedia?

Re: Ahem

That makes it all right, does it?

Petition

I suppose it's just a coincidence they've made this announcement when there are currently over 170,000 signatures on the 38 Degrees petition calling on HMRC not to sell off our tax details. Hmm?

Up to 500 GP practices to test plans to share patient data

Fume cupboard?

Fume cupboard, my arse. The only correct approach is total remote control: researchers submit queries, which are examined and scrutinised and vetted, and then receive the results of these queries, after they've been similarly vetted.

select * from PatientData

would be right out.

Re: 500 - How many!!!

And the "trial" will proceed at the same time as the "consultation".

BBC hacks – tweet the crap out of the news, cries tech-dazzled Trust

Re: Disappointed by the BBC recently

"Are you affected by the return of the dimpled pint glass? Write and tell us."

Re: How to make news popular?

Have you seen the BBC News page recently? I can't believe you have. Most of the space is "Features", "Magazine", "Most Popular", and other dumbed-down stuff. What's "Most Popular" right now? The Return of the Dimpled Pint Glass.

One good thing - they block people in the UK from looking at bbc.com, because that's even more dumbed down.

DeSENSORtised: Why the 'Internet of Things' will FAIL without IPv6

Re: is this what.....

Co-existence is kinda tricky...

I'm running on a dual-stack machine right now – all modern machines are. I can talk to IPv6 hosts, and equally talk to IPv4 hosts (such as The Register).

Re: Networking's answer to Windows Vista

If it's non-routable IPv6 addresses you want, you want unique local addresses.

IPv6 Forum

What's up with the IPv6 Forum site? Many of the pictures are squashed down or squeezed in and the home page is tediously long. And was there supposed to be a link there to the UK IPv6 Council?

Think-tank to infosec: You're doing it wrong

Re: "I can feel it coming in the air tonight"

... outsourcing...

WTF happened to Pac-Man?

Bonobo playing Pac-Man

https://www.youtube.com/watch?v=IaMFRV9_EXw

The bonobo is called Kanzi.

OpenSSL bug hunt: Find NEXT Heartbleed, earn $$$ – if enough people donate cash

Re: Too good to be true...

Ouch indeed, if true, but the Campaign Description says (also quoted in the article):

100% of the proceeds will be offered to security researchers. Any leftover funds will be passed on to the OpenSSL Software Foundation. Bugcrowd will administer the bounty at it's [sic] own expense.