Posts by Adam Inistrator

Cloudflare: Someone tried to pull the Twilio phishing tactic on us too

Re: Am I missing something ?

Strange comment ... Google Authenicator and other 2FA apps provide TOTP and TOTP are exactly what the article explains would have allowed the attack to be pulled off. Downvoted.

Log4j doesn't just blow a hole in your servers, it's reopening that can of worms: Is Big Biz exploiting open source?

"At the end of the day, companies are responsible for ensuring the code they ship to production is safe, secure, and reliable,"

Open source maintainers dont ship to production. They ship to repository. The users of those repositories ship to production and are therefore responsible to ensure the code is safe and secure. Since open source has many advantages over closed source make this a value judgement. Is the poor chain of responsibility in open source worth it or not? There is no way to force the big open source users to connect with the open source producers but finding new ways to fund open source like patreon etc. could improve the situation.

The Rust Foundation gets ready to Rumbul (we're sure new CEO has never, ever heard that joke before)

Re: C Memory Issues

What would it take to incorporate the memory safety of sappeur into c++?

China's hypersonic glider didn't just orbit Earth, it 'fired a missile' while at Mach 5

Re: a limitation of hypersonics

Hypersonics are scarcely maneuverable and even if they were, they are dead, dumb and blind while hypersonic. That is the point.

Re: a limitation of hypersonics

Said object cant see at hypersonic speeds. That is the whole point. And a miss is as good as a mile unless nuclear which is a different game. Carriers will have moved many miles in unpredictable directions during even a hypersonic flight time. They are not at all fixed objects. If hypersonic was an advantage then existing rockets could easily achieve it. But they dont, presumably because of the final targeting requirement. Hypersonics advantage is arriving in the area quickly, and at relatively low altitude compared to ex atmosphere ballistics, so detection time is far later. Their weakness is in the targeting stage. Everybody is flapping around assuming that they are just faster versions of existing tech, which isnt true.

a limitation of hypersonics

While hypersonic they are deaf, dumb and blind due to the speed induced plasma around them. Think space shuttle during re-entry. They can arrive in the area quickly which, for mobile targets like ships, considerably assists in targeting, but they would need to slow down before being able to find or receive the final targeting. Then they would be vulnerable to existing anti-missile technology. Not exactly the "carrier killer" bragged about or feared.

Foundation thrillogy: Rust programming language gets new home and million-dollar spending account

Fu

I think that Rust is just a very successful experiment but its lessons will be borged into the main stream languages eventually. It's main problem is the bolt on parallelism due to its initial establishment as a single threaded css processor within Mozilla. Go has the parallellism built in far better but will also be borged in the long run. The reason is that languages like C++'s problems are unavoidable if you want to deal with the breadth. The alternative is that we will no longer have main stream languages but separation into niches.

youtube rust comedy

Cue up obligatory youtube rust developer comedy https://www.youtube.com/watch?v=OUgKU2One5g

Don't scrape the faces of our citizens for recognition, Canada tells Clearview AI – delete those images

It looks more like a list of words that would not come up in school plus all anatomical words like penis and vagina. Banning the word "escort" and "undressing" seems a bit much. How are adults supposed to discuss all the banned items?

auto erotic, autoerotic, bastard, bdsm, beastiality, bimbos, bitch, bitches, bollocks, bondage, boob, boobs, busty, butt, buttcheeks, butthole, cialis, circlejerk, clitoris, clusterfuck, cock,cocks, darkie, date rape, daterape, dick, domination, ejaculation, erotic, escort, eunuch, fingering, gay sex, genitals, girl on, grope, hard core, hardcore, hooker, hot chick, huge fat, incest,intercourse, kinky, lovemaking, menage a trois, negro, neonazi, nipple, nipples, nsfw, nsfw images, nude, nudity, orgasm, orgy, panties, panty, pedophile, penis, playboy, porn, pussy, rape, raping, rapist, rectum, sadism, semen, sex, sexy, sexual, sexually, sexuality, slut, smut, snowballing, spastic, spread legs, strip club, suck, sucks, swastika, tit, tits,titties, titty, topless, undressing, vagina, viagra, vibrator, voyeur, vulva, xx, xxx

In wake of Apple privacy controls, Facebook mulls just begging its iOS app users to let it track them over the web

Apple just inviting FB's offer

FB will of course offer a share of the income to Apple eventually.

China showing signs of brewing IPv6 eruption

IPV6 stamped on you at birth

Tin foil I hear you say ...

In Rust we trust: Shoring up Apache, ISRG ditches C, turns to wunderkind lang for new TLS crypto module

Re: FTFY

cue up the hilarious youtube rust satire "ex rust dev interview leaked"

25 years of PHP: The personal web tools that ended up everywhere

Laravel

Things like Laravel somehow manage to make an old tart sexy again.

Thunderbird is go: Mozilla's email client lands in a new nest

Re: flexibility and agility

Thunderbird have never done that. Maybe in the distant future, but we can easily move off it, so they wont ... or we will. What is your problem BTW?

Re: "Around 0.5% of emails opened in the 'bird today, apparently"

% share is more important than the absolute number. Of what importance is the absolute number to us in this news article?

Up from .1 to .5 would be explosive growth so I doubt that.

I donate monthly a small amount and am delighted to hear donations are doing so well.

It's been one day since Blighty OK'd Huawei for parts of 5G – and US politicians haven't overreacted at all. Wait, what? Surveillance state commies?

E2E anybody?

We could use any shiiity kit if we have E2E broadly used. UK and US politicians are all on Signal now I think. They might not even get much of the metadata if onion routing takes off.

UK Supreme Court unprorogues Parliament

So in the final analysis Boris broke a common law that was just created by the judges.

Lets move on.

Node.js version 12 is now out: Let's pop the hood and see what's inside this JS runtime

"Griggs and Dawson note that Node 12 switches its default parser for reading HTTP messages written in C ..."

wut? o, right .... written in a hurry no doubt.

This is the Send, encrypted end-to-end, this is the Send, my Mozillan friend

Nextcloud

You missed out Nextcloud which offers end to end encryption and 100% open source for server, 3 desktop and 2 mobile clients. An ideal solution. It is also a broad platform offering much more than simple file storage.

On the eve of Patch Tuesday, Microsoft confirms Windows 10 can automatically remove borked updates

Install. Uninstall. Reboot. Repeat. Is that a play on the rave mantra? Eat. Sleep. Rave. Repeat.. Eat. Sleep. Rave. Repeat.. Eat. Sleep. Rave. Repeat.. Eat. Sleep. Rave. Repeat.. Eat. Sleep. Rave. Repeat.. Eat. Sleep. Rave. Repeat.. Eat. Sleep. Rave. Repeat.. Eat. Sleep. Rave. Repeat.. Eat. Sleep. Rave. Repeat.. Eat. Sleep. Rave. Repeat.. well, you get the idea.

Canonical brings some bling to the Internet of Things with Snap-happy Ubuntu Core 18 release

Re: Linux is irrelevant

There isnt any smartphone running KDE yet and one can be skeptical there ever will be.

Docker invites elderly Windows Server apps to spend remaining days in supervised care

Re: Nothing is new

We are still using a huge DOS backend to serve http to the users. "On the internet, nobody knows you are a dog" https://en.wikipedia.org/wiki/On_the_Internet,_nobody_knows_you%27re_a_dog#/media/File:Internet_dog.jpg

UK networks have 'no plans' to bring roaming fees back after Brexit

Re: Hit the nail on that one.

around 8% more leave voters than remain voters. do the math as the yanks say.

The vote was approximately 13 to 12 for leave. ie 8% more voted to leave than to remain. 8% more is nor marginal especially when we are talking 17.4 million leave voters.

Im a leaver. Doubly so having seen the shenanigans from Brussels since the vote.

User experience test tools: A privacy accident waiting to happen

Re: Login and payment sessions? “Use these and you should be fine”

RequestPolicy and Noscript are all far better handled all in one addon, "ublock origin". It isnt instantly obvious how to use it but once you get the hang of it, it is an almost perfect solution for the picky individual.

Ubuntu sends trash to its desktop's desktop

Yes you are missing something. It takes precisely two very obvious clicks! One, click Files icon in always visible toolbar. Two, click the eject icon to the right of the USB listed on the right along with other usual locations. Snowflake?

Mozilla to Thunderbird: You can stay here and we may give you cash, but as a couple, it's over

Rerouting my monthly Mozilla contribution

Firefox get 10USD/month from me but I think I will reroute this to Thunderbird ASAP

Google's Grumpy code makes Python Go

Re: Calling BS

Memory leakage has never been a problem for C++ programmers unless they use continue to write C in C++.

Get ready for Google's proprietary Android. It's coming – analyst

Re: Orealy?

Wileyfox Swift and Storm (100/170GBP) both get cyanogenmod nightly updates including security. Having been used one then the other for around 9 months. Works well, moved on to Marshmallow whereas phone as sold is still on Lollipop.

Software snafu let EU citizens get referendum vote, says Electoral Commission

Re: Anti-competitive?

UK is a considerable net importer of goods and services from Europe. They have more to lose than us. Negotiations will be tedious but no reason why they should fail.

Ubuntu 16.04 LTS arrives today complete with forbidden ZFS

"Btrfs is *not* a stable filesystem & shouldn't be used for critical data."

Spouting nonsense I guess. You are way out of date. It is the DEFAULT fs on SUSE and well supported on Debian/Ubuntu just for the lulz?

Re: Priorities?

zfs isnt as flexible as btrfs IMO eg Cant remove physical extents and rebalance. btrfs is the default fs in suse. and apt-get automatically snapshots every upgrade and you can rollback or co-exist even version upgrades although it requires command line to do so. I doubt ZFS even comes close on that score. Pretty awesome.

HTC 10: Is this the Droid you're looking for?

Re: Personally

"Probably the best near-vanilla experience would be something like Cyanogenmod. "

wileyfox 5" comes with lollipop CYANOGENOS the oem version for 130GBP. the CYANOGENMOD official nightly builds of marshmallow are available too if you want to root or enhance privacy even more.

Bundling ZFS and Linux is impossible says Richard Stallman

Re: Simpler solution.

btrfs has been the default file system for SUSE for a few years now. Those Germans know what they are doing. I find btrfs is much more flexible than ZFS which I used to use before.

Microsoft cracks open Visual Studio to Linux C++ coders

still twitching here

Visual Studio was indeed nice but the thought of having to go back to Windows from Linux gave me an involuntary shudder closely followed by a feeling of nausea!

Mud sticks: Microsoft, Windows 10 and reputational damage

Re: Don't blame users for the UI

I changed one user from Windows to Ubuntu experimentally and about a month later I heard that the other four users in the office were miffed they "hadn't been upgraded".

hive mind informs climate change believers and sceptics

Re: We have a problem

"It would be prudent to take action"

or just foolish to allocate resources to some stupid mass hysteria. what about putting the same resources into getting to Mars for example. climate obsession might be just navel gazing.

anything with the word "science" tacked on the end ... isnt!

that thought always makes me chuckle ^_^

GCHQ: Crypto's great, we're your mate, don't be like that and hate

fig leaves

I guess he is really trying to stiffen the moral of the more hard-line mandarins and provide some cover against their more moderate colleagues. The way he sees it, any reason, however implausible, for the mentality of mass spying is becoming a dire necessity, but I think they are trying to hide behind their fingers.

Windows 10 claimed another point of desktop share in February

Re: Windows Server?

"Anyone know why Server 2003 is included, but not the more recent releases? Do they masquerade as a desktop OS, or is the data so limited, that one hobbyist has entered the stats on his own?"

because IE's "user agent" string identifies itself as running on 2003 but running on server 2008 and Vista cannot be distinguished ... so the Vista numbers will be including Server 2008.

I guess the vertical axis is labelled wrong. It should be market share FRACTION, not percentage

We suck at backups. So let's not have a single point of failure any more

"I have seen the enemy

... and he is us."

and I mean we need to view ourselves, as admins, as the true enemy, somewhat like Apple purportedly protects its users from itself or the idea of "who will protect us from the protectors?" so to speak.

Hands on with Xiaomi's Mi 5: Great smartphone, but when do we get it?

Re: Dual SIM

"What I need is to maintain two (useful) data connections - so I need is a phone with *TWO* UMTS capable MODEMs." What is the value in that? Like dual network adapters with load balancing or routed? Or choose one over the other at any one time?

Rumor: IBM gobbles Bruce Schneier, Resilient for $100m

schniers monthly email

a nice round up of his monthly observations and activities. good that he has some money behind him ... gives him independence to speak his mind.

Dutch govt says no to backdoors, slides $540k into OpenSSL without breaking eye contact

love 'em

love the dutch in all their forms and always reminded of "There are two things, I can't stand .. cultural intolerance ... and the DUTCH!"

Who's right on crypto: An American prosecutor or a Lebanese coder?

Re: Misses the point

""You do not have to say anything, but it may harm your defence if you do not mention when questioned something which you later rely on in court. Anything you do say may be given in evidence.""

"BUT IT MAY HARM YOUR DEFENCE"

this was added about 10 years ago I believe

very slimey

smartphone ARE bugs

Everybody is willingly carrying around a personalised bug now. Public sector type's wet dream. Now they want to use the bugs legally of course. It was courageous to demand free speech in the past since it could be used for evil purposes that we . Likewise I perhaps we have to be courageous enough to grant evil paedo-terrorists privacy although it seems nuts. I despite your ideas but will defend your right to speak them ... could become I despise your ideas and actions but I will defend your privacy to the death.

Top Android app devs found exfiltrating mystery stealth packets

Re: No root firewall

It installs a dummy VPN disabling any existing running VPN, so no use to many.

Re: @Chris 125

Good privacy guards provide faked contacts, faked imei etc so no problem.