* Posts by a_yank_lurker

4138 publicly visible posts • joined 16 Nov 2013

Oracle ordered to admit on its website that it lost the plot on Java security

a_yank_lurker

Re: To fix this problem...

@James O'Shea "May the fleas of ten billion camels infest Larry Ellison's crotch." - You are too kind for Leisure Suit Larry. While users of Linux and Solaris are generally technically literate and can figure out how to uninstall older Java versions, With Linux, one should know how to use your distro's package management tools. I suspect most Apple users are not.

a_yank_lurker

Re: It should be obvious, really (not entirely or always)

Your points are all valid. But I think the FTC was more concerned about Grandpa and cousin Bubba who can barely turn on a computer. The software they have installed is likely to be consumer oriented not business oriented. And they are not likely to understand that nuances of updating something like Java or the JVM. At best they would be lucky to know they Java on their systems.

Who would win a fight between Cortana and Android?

a_yank_lurker

Another Problem

Android phones already have a voice activated system which apparently most users are satisfied with if they even use it. So why would they consider installing Cortana or any other similar app. This functionality is consider a core feature of the system so the developers will try to tightly integrate it into the system.

Chicago cops under fire for astonishingly high dashcam, mic failures

a_yank_lurker

@moisty - It was/is Chicago. I do not know if it the operation is actually shutdown or has been quietly moved to another venue.

a_yank_lurker

How Many Work?

It's Chicago which is a notoriously corrupt city. I am actually surprised that the percentages for working equipment are not in the low single digits.

Facepalm time: MS Office update wipes custom Word autotext

a_yank_lurker

Re: Maybe ...

@Cynic 999 - If so, I would say it is an incredibly stupid strategy when the unwashed masses really do not need a specific OS or application set. If the technically literate migrate to Linux for example, they can assist their family and friends in their migration. Would you trust family member who has been running Linux for about a year or so successfully when they suggest Linux?

My take is W10 will have poor market traction and in a couple of years there will a noticeable uptick to Linux/BSD/Apple as people evaluate their options and get advice from their informal IT department.

Security industry too busy improving security to do security right

a_yank_lurker

Too Hard?

Let's see, the POS terminals are provided by a vendor, the software is provided by a vendor, most likely the install ans set will be done partially using vendors. So the problem is it is too hard to talk to your vendors or is it you are too lazy and cheap to fix your kit.

To the retailers who are having problems: May you go out of business before destroying innocent customers' finances by your laziness and greed. Better yet, if any hack is traced to you, the owners and CEO's go to prison for aiding and abetting fraud.

Hillary Clinton says for crypto 'maybe the back door is the wrong door'

a_yank_lurker

Others say Hildabeast is Clueless

Quoting the Verge :

http://www.theverge.com/2015/12/19/10628208/hillary-clinton-back-door-debate

"Democrats have strange ideas about the internet, too. At tonight's ABC News presidential debate, candidates offered a number of vague, borderline-illiterate thoughts about technology, especially Hillary Clinton. It all started when ABC gave her an inane prompt, characterizing encryption as a "terrorist tool used in the Paris attacks." In response, Clinton suggested that, instead of breaking encryption, the US should launch a "Manhattan-like project" to "bring the government and tech communities together" so that law enforcement can "prevent attacks."

It seems anyone moderately knowledgeable about encryption is saying Hildabeast is a loud-mouthed moron proving Mark Twain's observation - "It is better not to speak and have people think you are a fool than to speak and remove all doubt."

a_yank_lurker

Re: Clueless is an understatement

That solution sounds good but the weakness is there must be a centralized storage of encryption keys for that to work. If one completely encrypts one's hard drive then one must provide a password, key file, etc. to decrypt the data. This is something that the presumably only the user knows. For a spookhause to decrypt a drive in this scenario they either guess the unlock information or brute force decrypt. Either could be time consuming.

About the only solution that might actually pass any reasonable muster is for the user to be served a warrant to unlock the drive so the police can rummage around. Any other system risks crippling security.

a_yank_lurker

Clueless is an understatement

Any weakening of security via backdoors or weakened encryption is a dare to others to find the weaknesses. They are likely to find weaknesses, whether the deliberate ones or others. Either you allow strong security, state of the art security techniques or all communications is essentially send plain text.

Remember we are talking about someone who rolled their own "secure" email server.

Juniper 'fesses up to TWO attacks from 'unauthorised code'

a_yank_lurker

Questions

There are numerous questions about were did the code come from. Rummaging around it appears the licensing is a mixture of proprietary and BSD. So the question was which part was corrupted. Also, who did it; fingers seem to point to China. But as stated, one should be wary about this since many spook agencies would love to have this kind of back door.

The spooks are very good at bending people to do their will. Also, the bit about a skilled attacker would not leave any trace in the log files of their presence tends to point a spookhaus doing this. But which spookhaus?

Newspaper kills 'what was fake' column as pointless in internet age

a_yank_lurker

Re: Pot Meet Kettle

The real problem in the media is it tends to be an echo chamber. When one is knowledgeable about a subject it is relatively easy to spot the bogus stories. However, most of us are only really knowledgeable about a few areas - professionally and personally. Thus we all rely on the integrity of the media to get the story right; a task they generally are very dismal at. If the media as a whole is obviously failing in these areas then what does that say about other areas and their overall accuracy and reliability.

This is on Cracked.com were they found many bogus, well known stories in the media worldwide:

http://www.cracked.com/photoplasty_1864_the-29-biggest-news-stories-2015-that-werent-true/

a_yank_lurker

Pot Meet Kettle

The dead tree media is notorious for spreading lies, rumors, and outright fiction as news just as much as the Internet. Physician heal yourself!

North Wales Police outsourcing deal results in massive overspend

a_yank_lurker

Dumbsourcing

If the function is internally critical it must be done in house. Working for a multi-national company, we learned this lesson years ago. My colleagues out of country ultimately report to the same manager as my group. If resources need to be used on a critical internal project some of us can be readily assigned. Also, routine matters will be handled by all in timely manner because there is no third party who has a more critical contract managing the staff. In reality there probably is less management direct interaction because there less to manage. Routine matters get handled by the staff internally without fuss and important matters get management's attention it deserves.

New bill would require public companies to disclose cybersecurity credentials

a_yank_lurker

Congress Critters at Work?

While the issue of corporate cyber security is important, I doubt Congress critters collectively have enough grey matter to write plausible, workable law that would actually improve this. I fear a Titanic mentality of meeting the letter of the law but not the intent of the law by companies.

Sanders presidential campaign accuses Democrats of dirty data tricks

a_yank_lurker

DNC Panic Perhaps

Many believe the DNC wants Hildabeast to be the Donkey's nominee. Assuming the details are correct, something says the DNC was looking for something to hobble Bernie.

Windows 10 won't come to old WinPhones until some time in early 2016

a_yank_lurker

Which is worse

Which is worse, Winbloat 10 for PCs or phones? 10 is making Bob smell like roses.

Sneaky skimmer scam stings several Safeway supermarkets

a_yank_lurker

How was it installed?

How did anyone install a skimmer in grocery store? It sounds like the staff was asleep or it is an inside job. To install a skimmer requires physical access to the POS.

'Unauthorized code' that decrypts VPNs found in Juniper's ScreenOS

a_yank_lurker

From 2008?

It has been awhile, I wonder how many have been quietly using this bug.

Press Backspace 28 times to own unlucky Grub-by Linux boxes

a_yank_lurker

Re: Scare story?

It is a legitimate concern since grub2 is used by many distros for multi-boot configurations. Just how critical it is depends on the distro and how it is configured. I will be watching for a some updates in the next couple of days and installing them.

Also, the bypass appears to require physical access to the box to hit enter 28 times in a row.

a_yank_lurker

Re: This explains why ....

It will probably be upgraded after more testing. Mint is cautious about these kinds of updates.

Microsoft Trusted Root Certificate program getting a lot less trusting

a_yank_lurker

Wells Fargo?

I noticed Wells Fargo is on the list. I assume this the major US bank which should make one nervous if one has an account with them (I do not).

'Powerful blast' at Glasgow City Council data centre prompts IT meltdown

a_yank_lurker

Re: No IT system probably boosted productivity

Even better, the truly essential services are maintained. Anyone for shrinking the government?

Oracle, looks like your revenues were down. 'Cloud! Cloud! Look at the cloud!'

a_yank_lurker

If the cloud offerings were really taking off the declines would have been completely offset by gains in the cloud. Leisure Suit Larry may be late to the party. Also, many cloud vendors do not use or promote Oracle.but various open source datastores.

Philips backs down over firmware that adds DRM to light

a_yank_lurker

Yea right

They did not expect people to want to buy a light bulb from someone else. Bloody idiots.

Congress strips out privacy protections from CISA 'security' bill

a_yank_lurker

Congress Critters living down to their reputation

Let's see Congress critters have been called "America's native criminal class", accused of subtracting from the sum total of human knowledge when they open their mouths, being idiots, and being dumber than a flea. They all fit here.

a_yank_lurker

Re: What fucked up approach to democracy

The game in the US is to attach the bill to something President wants and dare him to veto it. He has to veto the entire bill not parts.

At least 10 major loyalty card schemes compromised in industry-wide scam

a_yank_lurker

Some information is available, legally, through various directories such as residence. Some is probably available by peruse a person's posts on Facebook. Now one is left with getting SSN/national id, credit card data, etc. that should be available.

Another thing a customer loyalty cards, the initial information is accurate but how often is it updated. Some of mine, the address, phone, and email are totally wrong - they are that old.

In-flight 3G arrives, promises aerial internet at mobile roaming prices

a_yank_lurker

It will be used

I have not doubt people will use the service but somehow it feels like squandering money.

Lower video resolution can deliver better quality, says Netflix

a_yank_lurker

I may have missed something but it sounds like Netlix is trying to match the screen size and maximum resolution of the stream. In photography, size of the photo is directly proportional to the maximum size it can be printed before artifacts become noticeable and annoying. Not strong on video resolution and screen sizes.

Samsung appeals to Supreme Court to bring patent law into 21st century

a_yank_lurker

A Take

I doubt the Nine Seniles will take this case. I am not sure how many of them can use a computer or smartphone. The real problem is the design patent on phone is ludicrous because there really a few very similar ways to design a phone. This is due to human anatomy which the last I heard was not changing. All smartphones will strongly resemble each other, human anatomy and functionality forces this.

Microsoft steps up Windows 10 nagging

a_yank_lurker

Re: We don't know the same people

Truthfully, most "upgrades' are trouble free. It is the ones that bork a driver or an application that cause noise. How many are there - no one really knows. The other issue is clean are the W10 updates. Slurp says they are rolling out new features, etc. which means it is functionally a rolling release. Weird things will break and most users do not have the skills to fix them over time. That may be the rest of the ice berg Slurp is attempt to side swipe ala the Titanic.

a_yank_lurker

Re: When the trust is gone

Nah Ford Pinto moment, Pintos had a bad habit going up in flames when rear-ended. Or GM Vega aka Vaguely moment - a car so badly designed and built that you could vaguely see it through the smoke screen it produced. VW is barely low minor leagues compared to those two.

a_yank_lurker

Re: I don't understand

Give it time, basically someone has to have judge break the EULA in the US (difficult but impossible) or it has to occur in Europe. When it happens, it will be popcorn time to those of us who have migrated permanently away.

a_yank_lurker

Respectable?

Respectable is not an adjective I would use to describe Slurp; criminal is better. The problem with foisting an update on unsuspecting users is many wonder what broke particularly if some important application fails to work. Not good for customer relations but great for a few weeks of extra cash while moonlighting to upgrade to W7 or Linux.

The proper strategy is not to foist it on the masses but make it available to users at their convenience it obtain.

Facebook arrives at commonsense 'real names' policy

a_yank_lurker

70's

Which 70's 18 or 19?

Windows XP spotted on Royal Navy's spanking new aircraft carrier

a_yank_lurker

Re: certified until 2025 or something equally ridiculous

Try the B-52, it is still in service. I believe the last ones were built in the 60's so the ones flying are ~50 years old.

Apply online to go to Mars. No, seriously

a_yank_lurker

Age Limit

Is this open to Americans this side of John Glenn on his last space fligtht?

FAA introduces unworkable drone registration rules in time for Christmas

a_yank_lurker

Re: Interesting

Big problem with discharging a gun in a neighborhood not dropping peeping drone.

Windows' authentication 'flaw' exposed in detail

a_yank_lurker

Ouch, same Slurp different day.

I can turn Yahoo! around claims hedge fund manager

a_yank_lurker

Pump and Dump

This smells more of a Pump and Dump scam so he can get out with tidy profit. The SEC should be watching.

The Putrid Purple does have lots of problems and I am not sure anyone can turn it around.

Dell to offload Perot Systems for $5bn: report

a_yank_lurker

IRS Lurking

Ah the most criminal of the feral TLAs is in the background. Dell better tread very carefully to avoid a nasty for the ferals.

Microsoft extends Internet Explorer 8 desktop lifeline to upgrade laggards

a_yank_lurker

Facing the music soon

I will be facing the music with Imbecile Explorer 11 soon as corporate IT announced we will be "upgraded" by the end of the year. I suspect there will much wailing and gnashing of teeth company wide when that happens.

Samba man 'Tridge' accidentally helps to sink request for Oz voteware source code

a_yank_lurker

Re: Is source code necessary to validate correctness?

If the application is critical to public's trust in something, elections in this case, then the code must open sourced for anyone to inspect. Test cases only mean for those cases the code appears to give the correct result. By extension, it is assumed the code will always give the correct result. If one knows the test cases, one can game the system, ask VW.

Alibaba buys South China Morning Post, Hong Kong's top newspaper

a_yank_lurker

Probably because what the Putrid Palace thinks right now is irrelevant.

Assange inquisition closer after Sweden, Ecuador sign pact

a_yank_lurker

One Swedish Charge left

It appears there is one Swedish charge left, statute of limitations expires in 2020 according to Wikipedia. However, given the Manning leaks there has always been a nagging suspicion that the Swedish charges were more a means to get him custody until some feral TLA figures out what charges would stick. Assange is an Australian citizen and the US may not have any charges that would stick. Ecuador did grant him political asylum which implies some in the Ecuadorian believed the Swedish charges at best were a serious stretch and probably politically motivated. Many Latin American and South American governments have a love-hate relationship with the US and like embarrass the US when they can.

Electrician cuts wrong wire and downs 25,000 square foot data centre

a_yank_lurker

Re: Risk and Impact in IT are usually seen diminished by Bussiness

Compound this with the PHBs do not want to know anything about IT. After all, the bits are ephemeral right?

a_yank_lurker

Re: As an ex industrial Sparky, I have to agree.

I remember talking to a store manager while they going through a remodel. One of the major problems was none of the electrical drawings were remotely correct unless by complete accident. And the plumbing drawings were almost as bad. So it is possible for the sparkys to be very competent but be totally misinformed about the actual wiring.

Microsoft to OneDrive users: We're sorry, click the magic link to keep your free storage

a_yank_lurker

Re: Fear the clear sky

What Slurp has done is make ordinary people more wary of the cloud. I can not recommend a service like Slurp's to anyone when I can set them up with 1 or 2 TB drive easily and relatively cheaply.

a_yank_lurker

Re: The Problem Seems To Be Both Simple And Predictable.

I suspect Slurp PHBs never bothered to consider that the usage would follow a Weibull probability distribution. Most users would be clustered in the low usage end by there would be a large tail of users who would use much more than the average. The Weibull distribution was developed/discovered when monitoring the length of customer phone calls. Most cluster around an average but there is large tail of calls that take much longer than the average.