* Posts by Nick Kew

2841 publicly visible posts • joined 16 Jan 2007

UK getting ready to go it alone on Galileo

Nick Kew

@Phil O'Sophist

So tell me again why it's better to have a central political government like the EU controlling R&D? Apart from a large unaccountable taxpayer-funded budget, I suppose.

Compared to what? The total EU budget for 28 countries - including all that agricultural nonsense, as well as waste[1] - is a drop in the ocean of Sir Humphrey's empire, and it's focussed. Science being one of those focuses.

[1] Both real waste and the product of 30+ years of often-false news from Murdoch et al.

Lawyers sued for impersonating rival firm online to steal clients

Nick Kew

@Mark 85

Nope. If the vortex generates more work, that in turn will feed more lawyers.

If it were the UK, they'd get themselves a ruling that the taxpayer should fund the extra work through one of those feed-the-beast systems like legal aid. AIUI though the system is different, the US parasite has no shortage of hosts, either.

Experimental 'insult bot' gets out of hand during unsupervised weekend

Nick Kew

Re: Where is that window?

D*** you tim, I remember being on the wrong end of that wheeze.

Can't remember what revenge I took. It may have been sending some mail from "you" to people less techie than ourselves.

Nick Kew
Unhappy

Re: When I was eighteen...

Bit later than that (and at a "should've known better" age), but I still recollect with mild regret the time when things like "cat fart.wav >> remote:/dev/audio" got tightened up. Not so far off the time xhost ceased to be permissive by default.

Intel rips up microcode security fix license that banned benchmarking

Nick Kew

@LeeE

the problem is that the clause was unenforceable

No. That would be for lawyers (ultimately a court) to determine, and will inevitably vary between jurisdictions.

This actually means that anyone who distributes the updated microcode can only do so if they are in a position to enforce

"Enforce" in this instance meaning that you alert your users, by distributing Intel's notice. Putting it in an abandoned cellar behind a "beware of the leopard" sign (or perhaps something like in /etc/legalese/notices/intel/CVE-whatever-2018) should be fine, so long as they have it.

Use Debian? Want Intel's latest CPU patch? Small print sparks big problem

Nick Kew
Pint

Brilliant response

From a Debian team member on his blog.

Nick Kew

Re: Section 3

There may be a reason for that: namely, benchmark tests are often propaganda and spin. Nevertheless, it should be obvious that a clause like that can only make things worse.

Perhaps governments could pick up on that. Declaring such clauses unenforceable would have limited effect, but banning the sale of goods with such onerous restrictions - or requiring such sales to be approved by a licensing authority through an onerous process including public consultation - would surely cause vendors to stop and think what's reasonable.

Redis has a license to kill: Open-source database maker takes some code proprietary

Nick Kew
Flame

The naming of names

We may argue over what kind of a case Redis has here.

But one thing seems to me pure evil. Their new licence has some serious potential to confuse, and to p*** all over two valuable trademarks:

(1) It's already been spotted "out there" referred to as "Apache Common Clause". If Redis themselves sanction such use it's a clear violation of the Apache trademark.

(2) "Common Clause" and the inevitable abbreviation CC have obvious potential for confusion with Creative Commons.

I honestly don't know what we who value those trademarks can do about it. Any lawyers lurking here?

Nick Kew
Headmaster

Apologies if you're already well-versed in the dynamics of forking an open-source project ...

If your "I" there really means a potentially-viable developer community interested in working together on it, then that could be an interesting effort. Go ahead and see how much momentum you can build. And trawl github et al for folks already doing related work.

On the other hand, if it's just you scratching your own concurrency itch in isolation, you'll soon end up with something that falls behind redis and may become ever harder to maintain.

Somerset boozer prepares to declare its inn-dependence from UK

Nick Kew

Re: The Republic of Whangamomana

Are you sure the wild boar wasn't just a scapegoat? Siegfried would be a fine precedent for a hero whose murderer tried to blame his death on a wild boar.

Apple web design violates law, claims blind person

Nick Kew

Since when is a private firm producing goods and services for the commercial market required to produce items for disabled people?

You could reformulate that in a more historic context. For example, "No blacks, no dogs, no irish". Or if you're not familiar with British history of about the 1950s, substitute your own example, perhaps involving another group like Jews or Mexicans.

This is just one of many anti-discrimination laws. We may argue at length over details, but I think most of us firmly support at least the basic principle, don't we?

(Besides, this isn't about Apple's products, it's their website that's the issue).

Nick Kew
Pint

2000 Sydney Olympics

Is this universally known, or should the article have mentioned it?

A famous precedent here is Bruce Maguire, the blind man who successfully sued the Sydney Olympics and IBM over the inaccessibility of the Olympics website and was awarded $20k compensation.

Nick Kew

@Charles 9 - Dynamic content is inherently easy. You build accessibility into the content generation software.

@Various commentards - Accessibility is designed right in to HTML, and is much cheaper and easier to get right than to screw up 1998-deezyner or modern-deezyner style. The situation is not remotely comparable to the compromises that sometimes have to be made in the physical world.

Techie's test lab lands him in hot water with top tech news site

Nick Kew
Joke

Has elReg bought a 3rd server yet?

No, but they've upgraded from the original 640K RAM.

Self-driving cars will be safe, we're testing them in a massive AI Sim

Nick Kew

Re: Does it include

If you can enumerate those things then I expect so can someone paid to do so. So yes, it will include them, and many more. It needs to learn principles, not situations. Principles such as "people, animals and vehicles all have the capacity to do something silly, so anticipate". And "where there is no clear line of sight, something might emerge".

Having worked with and on simulations for UK government clients, I would see this as largely an irrelevance. It won't damage the AI, but neither will it do much to help it that the Industry hasn't been doing much better for years already. Though it might become a box to tick in the red tape.

I guess the most positive precedents are things like the simulators used in pilot training. The pilot doesn't go straight from the simulator to being in charge of something critical: it's just one stage of training.

I wish I could quit you, but cookies find a way: How to sidestep browser tracking protections

Nick Kew

Third-party cookies and El Reg

Debating point: does El Reg not implicitly preach what it manifestly fails to practice?

Anecdote: I recently ordered a "big-ticket" item of furniture, from a big-shed retailer on a big retail park. As part of that, I checked online, including a visit to the retailer's website from my 'phone.

That was using plain ol' Chrome. Given my very limited use of the web from the 'phone, and the fact I don't expose anything of value on it, I've never been arsed to fine-tune it against ads and such nonsense.

Sometime after, I visited El Reg from the phone. And found that every bloomin' ad on the Reg pages is now that same furniture retailer! If I visit the Reg front page, more than one ad. will appear as I scroll down, and it's always the same: the retailer whose page I visited! Click to another page, it's the same ad. OK, enough, this is just annoying: delete effing cookie!

Brit banks must disclose outages via API, decrees finance watchdog

Nick Kew

"uncharitable techies ... yes you Reg readers"

Now there's a phrase to remember. And to remind you of, next time the Reg urges its readers into any kind of charity.

Arm debuts CPU roadmap for the first time, sort of

Nick Kew
Pint

Re: ARM not Arm

We already have it. A full-fledged Barmy Army of commentards.

Kids are more likely than adults to submit to peer pressure from robots

Nick Kew
Flame

U wot?

Come on now, El Reg. I know we get inadequately-presented studies here, but talking "critical" vs "neutral" tests without even a hint at your terms really is pushing it!

Nick Kew

Re: RTM is well on its way, but not here yet

Robot Team Member?

Robots *are* useful around the house, and if you're old enough to have lived without use of a washing machine you really know it!

Mozilla-endorsed security plug-in accused of tracking users

Nick Kew

How big is the global blacklist? Could add long delays for users on slower connections, and perhaps overload the server's pipe.

Boffins get fish drunk to prove what any bouncer already knows

Nick Kew

University of Portsmouth?

I guess they have a tradition to maintain. If it's good enough for the sailors and tarts, why not the fish?

Nick Kew

Now you have the reply ready ...

... for next time some annoying person tells you there's lots of good fish in the sea.

Here's a fab idea: Get crypto libs to warn devs when they screw up

Nick Kew

Wood for the trees

This looks like classic deprecation warnings. And yes, warnings are a useful tool: don't you always use at least -Wall with gcc and insist it builds cleanly? A policy that can make life more difficult when faced with a third-party or legacy codebase that generates reams of warnings, especially when combined with a PHB who insists you treat it as a 'black box'.

But it's a narrow focus. And when it makes a programmer's life more difficult, it risks being counterproductive, by causing the programmer to take his eye off the ball and risk introducing other errors that should be obvious. Perhaps the next experiment should test whether the warnings are productive when the programmers are presented with a legacy codebase that generates a gigabyte of them?

When's a backdoor not a backdoor? When the Oz government says it isn't

Nick Kew

Re: PGP ?

Actually orthogonal to the legislation (as I read the article).

It'll mean you can't sell gnupg in Oz. And if you sell a tool that implements PGP, you'll have to be prepared to cooperate with the stasi.

Basically what it seeks to prevent is not unbreakable encryption, but rather making unbreakable encryption available to the Great Unwashed.

Those of us who can use gnupg are the tech equivalent of people capable of manufacturing drugs or weapons. You don't wipe us out, but you come down heavily on a person who supplies them to anyone else.

Ironic that it was an Aussie (Eric Young) who originally wrote the software that later became OpenSSL, back in the days when that would've been illegal in the US.

Prank 'Give me a raise!' email nearly lands sysadmin with dismissal

Nick Kew

The security hole isn't really what's claimed: ability to forge a From: address is baked in to SMTP, and it relied on Damian having sysop privileges.

It's the mail system that first accepted the message then bounced it. Anyone who's suffered a Joe Job knows the hard way how inexcusably broken that is - and has been for the last 20 years or so (since mail abuse went from prank to spam). Either reject it or accept it; don't bounce!

Now boffins are teaching AI to dial up chemo doses for brain cancer

Nick Kew

Looks to me like a perfectly routine use of AI. The expensive Quack will do the high-level stuff, while the AI takes the technician role.

Experiments with AI in such roles help determine whether it's competent, either in an absolute sense or compared to human workers. Hopefully the AI can do a good job of avoiding some traditional problems, such as mistakes of boredom.

Australia on the cusp of showing the world how to break encryption

Nick Kew

Re: bad legislation

The paragraph quoted in the article doesn't imply breaking crypto (nor of course does it imply the contrary). It *could be* a perfectly realistic bill dealing with situations like the FBI-Iphone row.

Flat-earth George has now moved on: wikipedia tells us he's now Aussie High Commissioner to Blighty. Damn, he should be a Barry Humphries character!

You won't believe this but... everyone hates their cable company: Bombshell study lands

Nick Kew

Re: Obviously Not American But...

Any technical fault may takes repeated visits to get fixed,

That's hopelessly over-optimistic.

It assumes you can contact them in the first place. And their customer service is inspired by Kafka.

Google Spectre whizz kicked out of Caesars, blocked from DEF CON over hack 'attack' tweet

Nick Kew

Re: Where To??

They cannot move the conference to the UK because the visa issuing department will reject most of the applications.

... which would be a big improvement for unfortunate victims like Sklyarov or Hutchins.

Not sure where to suggest. There are a few countries with more liberal track records re: the 'net, but such things are subject to change (e.g. Oz, Germany). Perhaps a venue with a well-developed hospitality industry but busted government might suit. Greece, for instance?

Nick Kew

Are you suggesting he'd abuse his position?

Surely better just to get the kind of publicity this story has brought it. When I was a lad we used to associate this kind of incident with Soviet-empire communism.

Say what you will about self-driving cars – the security is looking 'OK'

Nick Kew

Re: Boot full of IT kit

Erm, different markets there. People who need help with wheelchairs or luggage are orthogonal to the question of who drives them.

My infirmity is my eyesight. I think I'd be reasonably safe (though not legal - despite holding a full, clean licence) driving in good conditions, but lethal in the dark and wet. No problem lugging a heavy load. The fact that self-driving doesn't solve every problem doesn't mean it's not a potentially-excellent solution for some disabilities.

Nick Kew

Re: "Know where every tree, curb and stop sign is"

Damn. Can we do anything to curb this illiteracy?

Brain brainiacs figure out what turns folks into El Reg journos, readers

Nick Kew
Pint

@Phil O'Sophical

There's a time and a place for pessimism. A bit of mundane optimism over the immediate weekend is neither here nor there. It's not as if he'll enjoy the shallow pleasures of a beer: it just focuses the mind on ultimate futility.

Space, the final Trump-tier: America to beam up $8bn for Space Force

Nick Kew

Re: Which raises the question

That's easy. A formal launch now becomes a legacy for the people currently in charge. Consider Hollywood blockbusters of a generation or two hence:

Thanks to the Space Force, founded by Trump, we have space dominance.

Nick Kew

Re: What are the five existing armed forces?

Wot, no cyberforce heading among them? What are those folks at NSA? And come to that, also CIA?

And will they now have to replace the Pentagon with a Hexagon?

Kaspersky VPN blabbed domain names of visited websites – and gave me a $0 reward, says chap

Nick Kew

Is this a bug at all?

Doesn't rather depend on what the VPN product claims for itself? The app store page you link isn't specific enough to tell that.

When I've used a VPN Client, it has nothing to do with hiding my identity. It's just a means to connect to an employer's or client's network. A higher-level (and much more scary) alternative to ssh, and providing less privacy than ssh, in that it gives the relevant BOFH a lot of audit trail if I do anything so frivolous as read El Reg on $work time.

In a product aimed at the employers and clients for whom I've used one, DNS lookups outside the VPN would not be an issue at all.

America's top maker of cop body cameras says facial-recog AI isn't safe

Nick Kew

For what purpose?

OK, quoting your actual words from the opening paragraph:

today's facial recognition technology is not safe for making serious decisions.

Is anyone seriously trying to claim otherwise? There's a world of difference between making a serious decision and flagging something for human attention.

A couple of years back, I had a nasty incident with police, who thought I was someone else (who I've never met, let alone know why they wanted to arrest him) and wouldn't accept I'm me[1]. Facial recognition technology might have helped there, and - crucially - couldn't have made things worse!

[1] Their evidence? I opened the door at my home, where the man they wanted had previously lived. I had never thought an estate agent could be so useful as the one who manages this place and eventually was contacted to confirm my identity - and when the occupant had changed - in a manner they'd accept!

Nick Kew
Alert

Re: Wow!

Good on Axon for being honest and realistic!

No possibility they might've had a vested interest? Perhaps in implicitly discrediting a competitor who makes claims for facial recognition?

Revealed: El Reg blew lid off Meltdown CPU bug before Intel told US govt – and how bitter tech rivals teamed up

Nick Kew

Re: and?

If they told the government, then within hours they'd be exploiting it themselves, for who knows what nefarious purposes!

Speaking from ignorance here. But I'd've thought that, as with any big organisation, there's both good and bad. Not everyone in the US government would have a clue what you were talking about, let alone exploit it.

I'm sure there's someone they could've told who would just have filed it.

Bank on it: It's either legal to port-scan someone without consent or it's not, fumes researcher

Nick Kew

If the client side javascript can scan localhost, I guess that NAT firewall isn't too much use against browser-based attacks.

Verily, it has come to pass. The world has routed around misguided security.

Nick Kew

@Ian Emery

I get VERY grumpy at etailers that try to introduce 3rd party scripts at the final stage of a payment process

If that's the abomination called "verified by visa" you have in mind, these days my transaction seems to go through just fine if I just back out of it. I presume that's Just One More inexplicable aspect of its brokenness.

Internet overseer ICANN loses a THIRD time in Whois GDPR legal war

Nick Kew

@DJV

Not like SCO. SCO was undead. Long-drawn-out undead. Lots of cases, and a lingering bad smell.

ICANN has, by contrast, picked a no-nonsense jurisdiction and opponent, and is getting through the process remarkably quickly. Seems to me like looking for a quick, clean loss.

Uptight robots that suddenly beg to stay alive are less likely to be switched off by humans

Nick Kew

Re: H2G2

Indeed, H2G2 - and some of those truly annoying robots - are what sprang to mind as soon as an example of "chatty" was given. Of course people wanted to shut it up.

Think tank calls for post-Brexit national ID cards: The kids have phones so what's the difference?

Nick Kew
Pint

Re: Not this crap again

@Chloe Cresswell

Last time this came up, I was told I would need 2 ID cards, with different names and genders on them.

So you're ideally set up for a life of crime and depravity as Mr Hyde, while maintaining Dr Cresswell's status as an entirely upright and respectable member of society.

Grad sends warning to manager: Be nice to our kit and it'll be nice to you

Nick Kew
Pint

Rebecca++

That's two weeks of On Call, and two vintage columns. A definite thumbs-up to the change of editorship here.

(Yes of course it could just be coincidence, but I wonder if Simon had done it for long enough to have lost some of his initial spark).

Nick Kew
Thumb Up

Nudge

Hats off to your printer, for the nudge towards thinking before you print

Basic bigot bait: Build big black broad bots – non-white, female 'droids get all the abuse

Nick Kew

Presenting as?

Any time we get one of these "look at the hate" articles, it leaves one crucial question unanswered.

Are the "victims" themselves (or researchers, in the case of those whose funding depends on Outrage) Making an Issue of their "group identity"?

Consider

Person: "I'm a straight white male and proud of it"

World: "So?"

Person: "I'M A STRAIGHT WHITE MALE AND PROUD OF IT!"

World: "Shut up, idiot. We heard you the first time."

--- vs ---

Person: "I'm a black lesbian and proud of it"

World: "So?"

Person: "I'M A BLACK LESBIAN AND PROUD OF IT!"

World: "Shut up, idiot. We heard you the first time."

SJW Army: "WAH WAH HATE SPEECH"

DEF CON plans to show US election hacking is so easy kids can do it

Nick Kew
Facepalm

The Solution

Blighty has a foolproof solution to voting security.

Just have none in the first place. No checks whatsoever on $person turning up to vote, nor on stuffing electoral registers. No security to break.

UK comms revenues reach all-time low of £54.7bn, as internet kills the TV star

Nick Kew
Flame

All-time low of £54.7bn?

A quick google finds as a data point[1] our entire GDP was around £52.7bn in 1970. A phone (let alone a phone call) may have been a somewhat-expensive luxury back then, but I doubt they consumed more than 100% of the entire economy!

I'm not even being pedantic when I say claims like "all-time low" need to be qualified! There is genuinely no clue in the article WTF the claim is supposed to mean!

[1] Or rather two data points: GDP $130.672bn, and exchange rate 0.4033.