* Posts by sev.monster

583 publicly visible posts • joined 9 Apr 2020

Page:

Firefox 91 introduces cookie clearing, clutter-free printing, Microsoft single sign-on... so where are all the users?

sev.monster Silver badge

Brave phones home consistently, and they are as much focused on marketing and ads as Google is for Chrome, just in a different way and with different funding sources. People arguing it's somehow superior to Chrome need to look into what the browser actually does, and the privacy policies of their various partners (eg. to make their BAT work). The few features Brave has over stock Chrome can be solved just as well if not better by extensions.

The problem I personally have with it is the same problem I have with Mozilla: positing themselves as pro-free-web, anti-tracking, bastions of free speech, and significant market disruptors, while not actually doing any of it [well].

Sure it "works pretty good" but so does Chrome. And I say this as somone that doesn't like Chrome. What is it even do that makes it so impressive over, say, Chrome with uMatrix/uBO/etc? Or The Kitchen Sink Master known as Vivaldi? What besides the malnourished BAT does Brave bring to the table that other browsers and extensions do not?

Guntrader breach perp: I don't think it's a crime to dump 111k people's details online in Google Earth format

sev.monster Silver badge
Joke

Sorry, I must have forgotten this --->

My comment was tongue-in-cheek, and in itself overgeneralized social commentary, for a bit of irony. It expounded in what the poster above me initially stated, in a way that I felt would add humor to the situation while still providing thoughtful stimulation.

Truly, while I do not fully understand where I have err'd, I hereby and formally apologize to those grievously offended by my shameful post. I will send myself to the gallows.

sev.monster Silver badge
Megaphone

Re: denying their actions amounted to a criminal offence

You're a [fox] baby-killer with your murder-stick, you rat bastard! May your life be filled with misery and pain, obviously!

—The perps

sev.monster Silver badge
Gimp

Re: denying their actions amounted to a criminal offence

You must be incredibly offended and vitriolic about some grand yet generalized point in order to be accepted by your peers, here on The Internet.

3 years, 17 alphas, 2 betas, and over 7,500 commits later, OpenSSL version 3 is here

sev.monster Silver badge
Coat

Re: So does this mean

You're not my friend, pal.

After reportedly dragging its feet, BlackBerry admits, yes, QNX in cars, equipment suffers from BadAlloc bug

sev.monster Silver badge

Many of them likely didn't have microprocessors, or at least didn't utilize a complex instruction set, so that's likely :)

My point was just that OP should have quantified what kind of vehicle-bound computer he wasn't fond of. I assume I would get an agreement with the statement that infotainment, wireless connectivity, and other such gubbins have no place in a car, but that critical low-level stuff like timing control modules (and similar modules that handle and are only able to handle one specific task) are good.

sev.monster Silver badge

Even 20 years ago, manufacturers were already using computers for fuel injection, timing, dual-clutch transmissions, lights, locks, and more. In fact ECMs were standard in most higher-end cars by the 70's and most cars in general by the 80's, at least here in the States. Of course, things like power locks and windows would not become more common until later since they were a "luxury feature" for a time.

Might want to check your manuals and confirm what ECUs your automobes actually contain, I'm sure you'd be surprised.

Another big year for tape as ... oops. 2020 sales dropped 8% thanks to 'global shutdowns'

sev.monster Silver badge

Re: Ransomware

Errrrr, no, because any system that allows you to decrypt a file naturally posesses the decryption key, which means you can just decrypt it yourself later as long as you have the backup. I can't think of any ransomware solution out there right now that works like this.

And backup restores don't have to be on a live system. Just restore from backup, decrypt the files using the known decryption key(s), and clean the bits from the executables. It will be tedious yes but I imagine entirely automatable with some work. At that point the entire scheme is thwarted and even after being "encrypted" no data is truly lost from that time period. Alternatively just restore from earlier backup.

You also can't tell me that major AV vendors will not have a decryption tool ready in like a day or two after the first in-the-wild samples are analyzed.

sev.monster Silver badge

Re: Ransomware

This is why you air-gap your backup network where possible. I remember reading about some guy that removed the routes to the backup server from the switch's routing table when the backups were finished, probably just as effective while retaining some usability and automation.

sev.monster Silver badge
Joke

Re: But Why...?

Here, I think you need one of these. --->

Apple's bright idea for CSAM scanning could start 'persecution on a global basis' – 90+ civil rights groups

sev.monster Silver badge

Re: Naked babies

It was certainly very common here in the States. We also used to leave our doors unlocked... Now many of us don't even go outside unless absolutely required and have stay-at-home jobs. How times change.

sev.monster Silver badge

Re: Naked babies

Care to reference the exact wording? Because as far as my IANAL brain knows, problems come from creation, posession, and transferring to someone else. I vaguely remember a case where a man unknowingly downloaded lots of CP when he visited a shady site, and investigators pulled it off his drive—he was not charged since it was transferred to him without his express consent or knowledge, and he made no attempt to further transfer it to anyone else. Unfortunately I am not getting any hits else I would link it.

sev.monster Silver badge
Childcatcher

Re: Naked babies

As far as I can deduce hash matching is for "known CSAM", and the AI is only for the child protection scheme where parents are informed if their kids are taking nudes—which is surprisingly common, and something I am in favor of informing parents about (as long as the picture doesn't get back to Apple).

Do some digging and sites like Omegle were apparently once rife with those of questionable age using their iThing to record theirThings when strangers asked them to. If there were a way to inform parents about that, we could save a lot of kids from future regrets, and hopefully from future contact with potentially dangerous sexperverts asking to come over when mommy and daddy are on vacation...

sev.monster Silver badge
Childcatcher

...Because human beings are [/have the capability to be] monsters? I'm sorry to tell you this, since it seems like you didn't know.

sev.monster Silver badge

Re: What if say Ford or Toyota...

Are you even paying attention to the outside world? As we speak your ISP is likely tracking your every page visit and selling that information to advertisers, and depending on your locale that data may be linked to your full name, email address, etc. It's 100% legal in the USA to track complete web history for I believe up to 3 months, ever since Ajit Pai wrecked the place and got rid of Net Neutrality.

And it is more than trivial to buy a matching record from yet another completely legal information broker, which contains not only your name but any past/married names, all the addresses you've ever lived at (i.e. registered with your governace), your family and their information, your pets, your job history, employment status, tax bracket, and who knows what else. I know this for FACT because I used to work for a company that had unlimited access to Acxiom's databases, and it had EVERYONE and I mean EVERYONE I ever searched for.

Your very life is just another record in a database, and that should scare you. Giving companies even more power to track us is not what we need. Of course your government likely has plenty of dirt on you, but at least there's some assurance that they probably don't want to share that trove of data with the likes of say Apple. God help us if there were a leak of that data and it got merged with other databases of information—millions of people would have their entire identity and history up for grabs, from top to bottom.

sev.monster Silver badge

Re: It cannot protect anyone at all

That is actually a really good point. Make the usual stuff harder to find by busting the low-level consumers and possibly distributors, and there will be someone out there driven enough to fill the power vaccuum. I wonder if there is any research on that?

sev.monster Silver badge

You are prompted when first setting up your phone. An Apple ID is required to set up an iPhone as far as I remember, and syncing everything to iCloud is provided as a yes/no option. You can toggle it off later.

Also not an iThings user so I could be wrong.

sev.monster Silver badge

I downvoted because, while it's terrible that that happened, "think of the children" is not a valid excuse to allow private corporations such power. They already have enough as it is.

Pray tell, what would Apple's setup here provide? Again, I very much doubt that the perp would have uploaded the content to iCloud or similar, and even if he did, if the hash isn't indexed it won't be detected. In either case, there are other, less incriminating places to store such things that I would think someone daring enough to pimp out their own child would opt to use. And on that note I don't see how Apple's technologies are going to help stop face-to-face pimping of children.

I can't speak for Germany on what they need to do to help curb such behavior, but it ain't this. And no matter what one does, there will always be those that break the rules and get away with it long enough to commit atrocities. It is a part of life and we should not let emotional reaction to sensational incidents guide us to making poor decisions that affect a large percent of the populace.

sev.monster Silver badge
Childcatcher

Coming at this from the angle that Apple is pushing, I think everyone with a functioning, modern moral compass can agree that harming innocents—children or otherwise—is a Bad Thing. But I personally do not think it is or should be Apple's responsibility to become the Arbiter of All that is Good. Companies and governments should stay well away from private citizens, even if it means that Bad Things can potentially occur. In addition, I believe the protection of our youth should be the responsibility of the parent(s) and the community around them, not a faceless international megacorp using proven less-than-reliable automated detection methods.

I also have reservations with the idea that someone dumb enough to store such unmentionable, illegal files on their iCloud would also be the type to actually produce such content. How will it help law enforcement find and capture active producers? Will their technology even help stop the harm of children? Given the sensitive nature of the matter, I doubt we would ever know should the technology be utilized for real. And that makes it even less trustworthy.

UK's Surveillance Camera Commissioner grills Hikvision on China human rights abuses

sev.monster Silver badge
Holmes

Re: To be fair though...

...About what in particular? The cameras? I no longer use them.

Here's a nice intro to the rabbit hole, apparently they discontinued some of their cloud junk so I don't know if what I said is still relevant.

https://ipvm.com/reports/hikvision-home

sev.monster Silver badge

Re: To be fair though...

You say that, but many of their products phone home. I purchased one of their PoE cameras and caught packets flowing back to a server in China. I was unable to tell what their use was but they were pretty sizeable. Depending on what that data is, then it could be enough to argue that they could be able to tell what their cameras were being used for if prompted about it, since deniability is the whole concern here. And since, yes, they have been shown to install and manage their own products before unlike what they released to the regulator in their statement, it's entirely possible they had a hand in installing the cameras in the camps in the first place.

And about your comparisons. CPUs don't phone home (supposedly), though the software that comes recommended by the vendors might. And legislators/car companies are already installing breathalizers in their cars, with some wanting to make it mandatory (at least here in the States).

Un-carrier? Definitely Unsecure: T-Mobile US admits 48m customers' details stolen after downplaying reports

sev.monster Silver badge

Re: What's the problem?

I remember it being less than transparent with a number of hidden fees (I read the fine print), add-on packages, and multiple plans with conflicting objectives. It's been a while since I last looked, and it does seem like they've minimized and consolidated their plan offerings since then. That's great, but if we are comparing companies directly, then I'm perfectly happy with Mint—again, same service as T-Mobile without dealing with them directly.

I'm not interested in buying a locked phone or leasing, so I have no reason to investigate any further.

The site is also still not very good.

sev.monster Silver badge
Coat

Whew, so glad I didn't sign up with these folks. I was turned off by their disgusting website and confusing pricing models. It seems MVNOs were not affected either, so anyone using T-Mobile service without actually being signed up for T-Mobile is safe... Gotta love how that works.

See that last line in the access list? Yeah, that means you don't have an access list

sev.monster Silver badge

I ran into an issue where this PHP installation running on Windows Server (there's your problem) ran incredibly slow if you left the database address to the default localhost, because on Windows localhost DNS lookups are painfully slow. I'm not joking.

sev.monster Silver badge
Gimp

Re: Legally, they can't avoid paying them

Oi you, shut your mouth and lookit my Wadd!

...Is this public indecency?

Before I agree to let your app track me everywhere, I want something 'special' in return (winks)…

sev.monster Silver badge

One site I visited used those godawful mobile app sliding switches for its cookie notice, and the color scheme was bright baby blue as the disabled color, with a grey as the enabled—and they slid to the left when enabled. And of course, all the switches were by default enabled. The only way to tell the switches' true settings was to look at the barely-visible "on/off" text on the button that changed with state, in tiny font with a similar color to the switch knob.

Suffice to say I bailed so fast I don't remember what I visited it for.

Scalpel! Superglue! This mouse won't fix its own ball

sev.monster Silver badge

Re: Ball crud

Our entire office is powered by them. We've got sticks, half-moons with the crystal bezel-covered button in the middle, rackmounted... All 15+ years old.

sev.monster Silver badge
Coat

Re: Ball crud

You ever check those scrotes' pockets for mice balls?

Tired: What3Words. Wired: A clone location-tracking service based on FOUR words – and they are all extremely rude

sev.monster Silver badge
Pint

Re: useless f*cking w*nkers

Genius. Please take this.

Facebook and Amazon take over Philippines-to-USA sub cable after China Mobile quits

sev.monster Silver badge
Gimp

Re: Subverted by US (tm)

"Oh, Bryan, where are you right now?"

"Ah yes, I'm approximately 5 feet away from amazon.facebook.cock.vore"

"I don't want to know what you do in your spare time, I want to know where you are."

sev.monster Silver badge
Gimp

Re: Subverted by US (tm)

Amazon cock vore? Never thought I'd see that in an elreg comment.

Biden warns 'real shooting war' will be sparked by severe cyber attack

sev.monster Silver badge

Re: Not really news, Biden

Are you sure about that? I'm not.

Dell won't ship energy-hungry PCs to California and five other US states due to power regulations

sev.monster Silver badge
Boffin

I'm very confident that Epic Gamers would be able to take a Gaming Laptop(tm) and crank up their CPU, GPU, and RAM overclocking, turn on all pointless rainbow RGB LEDs on every single component and set brightness to max, increase the already blinding brightness on their HDR 4k 240 fps screens (despite using dark themes 24/7 and playing casually), turn up the shitty built-in speakers to 100% volume with a +10dB compressor for added pump, turn off all thermal throttling with fans at max, and be able to make full use of a 1000W charger.

Remember the bloke who was told by Zen Internet to contact his MP about crap service? Yeah, it's still not fixed

sev.monster Silver badge

Re: Opencircuit

And then the neighborhood dog comes up and takes a chomp... Dead Internet and likely Fido as well, if glass fibers in the stomach are any indication.

sev.monster Silver badge

Re: Not just Zen

At least you have choices. Up here in the States you often have one ISP servicing any specific area, with the only alternatives being having a business line installed by that same ISP (need the proper paperwork and 10-50k USD sitting around for that) or satellite. Last-mile with 5G or etc. isn't an option either, since it's really only done out in the boonies, and not in built-up suburban/residential areas.

For a true display of wealth, dab printer ink behind your ears instead of Chanel No. 5

sev.monster Silver badge

What do they put in the stuff to validate this insane cost, the blood of virgins and a spot of 1953 Chateau Lafite Rothschild?

sev.monster Silver badge

Re: Even Worse…

Soon enough your petrol will have RFID nanobots a-swimmin' that will self-destruct and neutralize it should your 5G-enabled automobile be found to have an expired subscription to Motorhead Monthly.

BOFH: You say goodbye and I say halon

sev.monster Silver badge

Re: I'm curious

We have it on ours. It's as old as the servers that once inhabited it (SPARCservers if you're curious) and as far as I know has never been used. I doubt it works, and if it does, the halon has likely already vented into the atmosphere at some point over the 20-odd years it's been in the building.

sev.monster Silver badge
Joke

Re: England, I believe

Fish'n'chips, a pip-pop tip-top cheery-oh!

sev.monster Silver badge

Re: Hmmm...

The pressure changes suck all the oxygen away from the combustion source, instantly putting out the fire.

You do now however have to deal with the result of a massive explosion required to do such a thing.

A good tradeoff if I've ever heard one.

In a complete non-surprise, Mozilla hammers final nail in FTP's coffin by removing it from Firefox

sev.monster Silver badge

Re: fond ftp memories

I hear you about SharePoint and SMB. Utterly terrible to administrate, and despite it being a Microsoft invention Windows always seems to have strange errors and hiccups when connecting to SMB shares. Of course, we're in it for the long haul now, no reason to even investigate alternatives. The higher ups want to use SharePoint for everything now, but we'll end up using both at the same time, likely with tons of needless duplicates and fragmentation.

As much as I would like to use Palemoon, I still refuse to due to Moonchild's behavior. It's getting a bit long in the tooth and harder to maintain as well, so that surely doesn't help things.

Can't seem to find a browser nowadays thst doesn't suck eggs through a garden hose.

sev.monster Silver badge

Re: Fine advice, but not relevant to the article or browser

I think his point was that FTP was so resilient despite being an aged protocol is because all major browser and system vendors supported it. If all major browsers had built-in SFTP support, I'm sure that would be much more common around the web, too. But with our luck, Google will bake their NaCl terminal emulator into Chrome, replete with coreutils, SSH, SCP, et al. They do so like to show it off. If I recall it's already built into Chromebooks(?)

(Of course, if I had my way the web browser would be for nothing other than that, and everything else would be its own interoperable but entirely seperate application. I understand cross-platform applications are a pain without some kind of common base, but HTML/CSS/JS are certainly not the first choice I would make if I were given the chance to do it from the ground up. Nor would they be very high up the list.)

sev.monster Silver badge
Boffin

Re: Using FTP in a browser

Because people like the new shinies, including webdev monkeys that require the latest and greatest new JS features to power their incredibly streamlined and fancy Angulareact Vuenode Gruntygulp 10.3b—now requiring only 12GB of memory to function, a 10% decrease from the alpha.

Oh, you want to log in to your Internet banking? Sorry, we require the latest Firefox Nightly or Chrome Canary build to use some silly function that could be backported with a single line of Mochacoffeescriptachino, but our web framework doesn't support it so we can't. Oh also, your browser must support and allow us to use your camera for our cheque scanner, and the site will mysteriously break should it not be allowed to do so.

sev.monster Silver badge
Unhappy

Re: Fine advice, but not relevant to the article or browser

Unfortunately for your worldview, the bog-standard web browser is no longer just something to "get files over certain protocols and [display] them to the user." It is a platform to which the entire rest of the system is exposed on, and whole applications are developed for. At this point the web browser is an abstraction layer to the rest of the system, utilized to make cross-platform applications.

Not saying I like it, but that is the world we live in now.

sev.monster Silver badge

Re: fond ftp memories

It really is a shame that torrenting gets such a bad rap due to its decentralized nature allowing nasty nancies to go wild—same with any cryptocurrency no matter how beneficial. Just because miscreants misuse it doesn't mean everyone has to. I can't even use it on my home ISP without them complaining, no matter what the content of the torrent is.

DEF CON offers beginner-level Spot the Fed this year: He'll be on stage giving a keynote

sev.monster Silver badge

Re: Re Twitter users and low 2FA take up

Tweeting twits will tweet tits in what t'was twit-for-twat.

Open-source dev and critic of Beijing claims Audacity owner Muse threatened him with deportation to China in row over copyright

sev.monster Silver badge

Re: This was a clear and unambiguous threat to his life

Absolutely. Ultimately Muse Group will have 0 involvement on whether or not Tang is deported to China or not. Ray has made it very clear by now what his intentions were with his posts, and rather than call him a corporate shill, I think it's worthwhile to see his words and take them at face value. I've had my eye on Muse Group for a while and I have not seen enough to tell me that they are deliberately acting in a malicious manner, both the company itself and the included individuals in this particular incident.

If there were any hidden words at all, I think they would be Ray trying to spin Chistyakov's obvious second-language word salad from his original email to Tang in a better light; either that, or there was some intended malice/threatening there on Chistyakov's part.

But as far as I'm concerned none of this really matters. At the end of the day Muse Group is a corporation and they are beholden to the licensing agreements and contracts they have signed with the music groups that have agreed to upload their sheet music on the platform. Whether or not Muse Group or its representatives come off as malicious or not, it is still their job to protect those agreements, and it has been said that they are responsible for acting on behalf of the licensors to protect their intellectual property. Every company with IP to protect works this way. Muse Group is not somehow special for doing the same thing everyone else does. If anything, they are an outlier, since this whole thing has been made public and they are still continuing that public discussion, where other, larger groups would likely force things into the shadows with as much legal grunt they can muster, as we have seen in the past.

Something undeniable is that there is a clear legal threat from Muse Group to Tang that action will be taken if he does not rectify the situation, either by Muse Group themselves or by one or more of the licensors of the sheet music that Muse Group is offering. It is also undeniable that Tang is acting in a manner that results in the violation of the intellectual property rights of said licensors, and that he is doing this knowingly and willingly. However, we armchair Internet users are, if I can assume, not lawyers, and it should be left up to a court to determine his fate for his actions. If the court deems it so, then he will be charged for his actions. If he is charged, there is also a chance he will be deported. That is not anything Muse Group has any control over.

Additionally, Muse Group (specifically Ray) has been hesitant to push the envelope, and has given Tang multiple opportunities to take down his repositories and cease his actions, without resorting to litigation. I can tell you for a fact that Disney, the MAFIAA, BMG, and other such pond scum would not have given so many chances. That in and of itself is worth something in my eyes... even if it's possible that the reason they have not acted legally yet is because it came to light publicly. But even then, why would they sit on it for a year and change without filing? Would it just be too much of a hassle?

I think it should also be stated that the understanding of this situation does not equate to a lack of symapthy for Tang, despite his actions, and it does not somehow validate the actions of the CCP. We should attempt to separate the two. Fuck the CCP, fuck their cronies, and if I had my way no one would ever be deported back there. But it isn't my decision, it's the court's, and based on their actions so far, it's clearly it's not something that Muse Group (or at least Ray) want to put Tang to—for publicity reasons or otherwise.

Smuggler caught with 256 Intel Core processors wrapped around him in cling film

sev.monster Silver badge

Yes, but what I'm saying is as long as the load was constant (and in a mining setup I don't see why it wouldn't be) then the fact that it ran consistently hot is going to put less of a strain on it in regards to thermal expansion. Nothing is melting even at higher operating temps; what ends up doing damage to components when placed under such a load is either not dissipating heat with crusty paste or constantly stopping and starting that loaf and causing large changes in temperature, the latter of which is not very often observed when mining 24/7. Sure, some of the components still might end up getting a good cooking if the temps get too hot and that can lower their lifespan, but at that point the card is being throttled or shut down, and any miner worth their salt will tune their performance to not allow this to maintain maximum hashing speed—even if that means lowering the OC a little.

I have a tad bit of experience in the mining arena and know some people that do it professionally, and this is the kind of thing I've seen in almost every shop I've looked at. Anecdotal, but there you are.

If you've mastered Python 101, you're probably better at programming than OpenAI's prototype Codex

sev.monster Silver badge
Boffin

Re: A small snag.....

Absolutely not. One look at the disgusting state of IoT devices coded by malignant monkeys to the tune of 10,000 typewriters and you will see that the choice of arena has nothing to do with it. I, a hardware buffoon, could go out and buy any popular SoC and code it to talk on GPIO and do whatever I need it to, and the code required to do so can be in whatever language or paradigm I like. Sure, but what about more more deeply embedded projects that don't use off-the-shelf SoCs? In my experience, shitty industrial products come to mind that despite the hardware costing you tens of thousands of dollars, the software ends up sucking massive donkey foot innit? Stepping away from the embedded world exclusively, what about development team size and resources? Surely the more devs the better the product? No, because now look at how many millions in funding is poured into various government projects and see how many of them turn out good. Remember the healthcare.gov scandal where the site didn't even work properly for weeks after release?

Just because you CAN download ten Node.JS libraries and you CAN easily staple together a disgustingly hacky, bulky single-page webapp that takes 10 years and 500MB to load on a smartphone doesn't mean you SHOULD. Just because you CAN outsource the development of your code to a cheap software house that has the collective knowledge of a three year old and a piece of moldy toast doesn't mean you SHOULD.

Unfortunately so much of modern society have been inundated and desensitized to this way of thinking, both consumers and developers.

Dutch Queen, robot involved in opening of 3D-printed bridge in red-light district

sev.monster Silver badge

Amazing to see that the places with legalized prostitution and dedicated red light districts have less rape and happier citizens... hoodathunk?

https://huffpost.com/us/entry/us_58c83be1e4b01d0d473bce8a

This is only the first search result. Many more like it.

Page: