The Register Home Page

* Posts by that one in the corner

5065 publicly visible posts • joined 9 Nov 2021

RondoDox botnet fires 'exploit shotgun' at nearly every router and internet-connected home device

that one in the corner Silver badge

Re: > Brickcom IP cameras

IP cameras are attached to whatever network you decide to attach them to. If you give them an address on t'Internet, that is your choice. All the 100s of IP cameras, and their DVRs & monitors, I've been associated with have been on wired LANs, no accessible gateway to the Internet. If you wanted to view anything, live or recorded, you took yourself over to the relevant site and plugged a wire into an access port.

OTOH you can take an analogue "CCTV" camera and plug it into a broadcast transmitter...

Now, whether any particular IP camera from some rando company is capable of working as *just* an IP camera or whether it "helpfully" insists on only working when it is connected to the Internet, sending all its data to a third-party server so that you (and anyone else who guesses your URL, no passwords required) can have the joy of watching it from anywhere in the world on you smartphone... Well, that was a certainly a choice that could be made...

BOFH: Recover a database from five years ago? It's as easy as flicking a switch

that one in the corner Silver badge

Re: 5 year old database?

Beep-be-boop-phweee?

Windows 11 gets a fresh Start in latest Canary build

that one in the corner Silver badge

Re: IT is going backwards...

Beware the school project involving - papier mache!

It's trivially easy to poison LLMs into spitting out gibberish, says Anthropic

that one in the corner Silver badge

Malicious parties ... get their poisoned data into AI training sets.

What about all the random input that was sucked from the web for their original training and their claimed "continued clear training"?

What did they do to ensure any, let alone all, of that training data was free of this (rather trivial-sounding) "attack"? Want a "trigger phrase" that is associated with "gibberish"? How about "hexdump 256 bytes:"?

Ok, that is 'obvious', in that anyone - well, anyone reading this - would be unsurprised at coming across that and the "gibberish" is rather limited in its content, compared to the selection shown in the sample in the paper. But there are all sorts of other totally legitimate documents that contain, to the uninitiated, total gibberish: have you ever tried looking at a page of names from genomics? And in that case the trigger could be innocuous, such as the cute name of the mutant chimeric bunny rabbit that all 279 research papers discussed; how does ChatGPT respond when Mr Flopsy Toes is mentioned?

How many non-malicious triggers are waiting inside the LLMs? Indeed, how much of the normal LLM habit of descending into madness is nothing more than the routine activation of all those oddities?

Python releases version 3.14 – with cautious free-threaded support

that one in the corner Silver badge

Re: Must be specified with a command such as python3.14t...

> 1. shebangs carry over from Unix...

Absolutely, it was a Neat Hack back in the day: have the program loader look for a magic number then modify the process control structure in response. My "problem" with it is that it is a rather crude mechanism when faced with all the variants of scripting languages.

> 2. "#!/usr/bin/env python" - current python command in environment without worrying about its location.

True, and that passes the buck down to the contents of PATH (so your hash-banged script is in the same situation as your running "python my_script.py"); which irons out one inconsistency. And thankfully env was (eventually) added into Posix, so it is available pretty often (although I still think of, what was it, 2017/2018 when it was added, as "pretty recent"). Although - now, this may just be me, but I really prefer to find *any* way to not keep adding things into the general PATH as things can get pretty messy: every program installed tries to get its bin added to the PATH, so now the earlier programs may be calling a newer executable that just happens to have the same name. All fine if absolutely everyone plays nice, but one bad apple and *poof*.

> 4. Launchers in desktops can bypass all of this if necessary by simply invoking the correct interpreter path for the script directly

That is very much what I'd like to see - as a general mechanism that can be utilised by any scripting language - and without the language interpreter itself having to do any hard work (other than allow the metadata line to exist). If you have installed a Python exe into Windows then that program - well, the version that is provided by python.org at least - has special-case code for handling a subset of shebang lines. Something that is divorced from the actual job of implementing the language. The very fact that there is/has been a distinct Python Launcher is an indication that this is an - interesting - problem and one that is shared by every scripting system.

> 3. Installers can interpolate the python path on ... something an installer can handle.

Assuming that *all* of your installers do actually do that...

Just to repeat my very first line: this is NOT purely a Python-specific issue and, in fact, the more times that anyone can come up with a "well,Python has done xxxx ever since yyyy" or "well, if you always use this Python utility to create your installer it will do it for you" just indicates that there is more stuff that can be separated out into distinct utilities, totally divorced from any issues around implementing a scripting language interpreter, such that those utilities can be used for Python, Lua, Rexx, Shrimp, Lisp, Smalltalk, Basic, Fly, Asymptote, Box, Fennel, Lilypond, Gri, Perl, PHP (boy, does that need correct version matching!), PIC, the macro language I wrote a few years ago..

And, of course, Intercal.

that one in the corner Silver badge

Must be specified with a command such as python3.14t...

IMPORTANT: the following rant applies to all the other scripting languages; Python is singled out 'cos it is the biggest and 'cos TFA about Python illustrates the point nicely.[0]

The article shows the Python launcher being used, to allow the user the choice of which version to use, including being able to select a copy built with free threading enabled.

Which is great, if you happen to be in the right position of (not inconsiderable) knowledge, for example if you are the author of the script. For you, Python is like this.

But heaven help the schmuck who is simply trying to run some program to do something useful: hang on, I've got to run this script using this command when I'm in my PC, but Jim's PC has a different random collection of Python environments so it works better to use *this* command, wonder what is the best one to put into the documentation for Fred going onsite tomorrow? We're dealing with real-world Python. Who knows which copy has ended up first on PATH? How are your virtenv's today?

Why is it left up to the end-user to *have* to know, for each and every script, what magic invocation is going to work this time? Sure, give them - give everyone - the ability to make such a selection, but only when they are ready for it! The author knows if this code needs free threading, or uses features from release 3.2 or later, or even if this is old Python 2 code which still works fine[1], so why not provide a way for that knowledge to go into the code?

"The solution", as provided by Python (and other scripting languages) is the hash bang line at the start. Assuming that the environment understands these (as it isn't really Python doing it, is it; we're just piggybacking on the shell) then, yay, you've just hardcoded assumptions about where the runtime is sitting: is it #!/bin/python3 or #!/opt/bin/python - or even #!~/bin/python ? Forget about OS portability! And even locations for one OS are changing over time: Linux (well, some portion of it) is trying to rearrange and merge the morass of directories inherited from the Olden Days of small drives and scattered partitions...

How about putting requirements into the code, instead of a hash bang line, then let the "python" command (not a special, extra, launcher name like "py" but, from the p.o.v. of the user, the real thing) take a gander and do the very best thing it can. Otherwise generate a decent error message, explaining that something extra needs to installed and why. Ok, in reality this means that "python" would be the launcher and would know about proper runtimes in executables with tedious names like "python_v3.2.17_freethreaded-plus-my-test-optimisations-v0.03_build532685_svn6732".

Make this launcher an entirely separate project, so that it can be applied to any scripting language (with appropriate tweaks to e.g. handle different comment notations so it can pick out its metadata and work without necessarily changing the scripting engine at all).

[0] yes, yes I should be off posting about this on the Python forums, on the Lua forums and everywhere else; but I reckon I can get away with being more ranty here whilst I polish up a nice polite way to broach it to TPTB.

[1] or you are looking for regressions and have checked out of version control the first copy of the company product...

McKinsey wonders how to sell AI apps with no measurable benefits

that one in the corner Silver badge

Re: I recommend a three tier pricing system

Stop with the AI, or there will be tiers before bedtime!

Texas senators cry foul over Smithsonian's pricey Space Shuttle shuffle

that one in the corner Silver badge

Then you get to Gg (that is one fat horse!) and Tg (which is receiving a communication that you find scary; like being told of the fat horse sitting on your lawn - and the neighbour's lawn, and...)

that one in the corner Silver badge

Just accept the cheap offer for transport

But whip up a full scale cosplay version from tinfoil* and cardboard boxes: let *that* get crushed in transit, as the real thing surely would be at that price.

After a few years, when sanity is restored, the museum can just say "you'll never believe what we found tucked away" and put the shuttle back on display.

* there are plenty of youtubers who'll help with that; ok, it is a bit bigger than the replica Apollo hatch, but Nerdforge can do some great trompe l'oeil

that one in the corner Silver badge

Re: Barge?

They sound like the right people for the job; looks like you've got to the corps of the problem.

that one in the corner Silver badge

Re: Risks?

> cosmetic issue of putting 67 or so pieces of shuttle back together with no visible scars.

Cut it along the visible lines between the tiles? Then hide the rewelding job beneath new grouting.

This worked when replacing the power shower and the Shuttle can't be much harder than that. Yeehaw.

that one in the corner Silver badge

Re: Risks?

What is the airspeed velocity of an unladen Nissan Patrol?

Mars’ powerful whirlwinds blow dust everywhere, could affect future missions

that one in the corner Silver badge

Re: "It's difficult to understate the importance of the dust cycle."

Understate, overstate, rambling free, the power of dust devils is tricky to see.

How chatbots are coaching vulnerable users into crisis

that one in the corner Silver badge

Drawing correlations to the tobacco industry.

> Brisson: "It took decades for that industry to say, 'You know what? We're causing harm.'"

It took that industry decades to say that out loud and in public (and then only because they were forced to, to put messages onto the packets, curiously worded: "The Surgeon General...", if you wana believe what the gubbermint sez). Decades that were filled with them knowing full well how much harm they were causing. Decades full of public denial, adverts claiming "8 out of 10 doctors...". Decades full of lobbying and backhanders.

> OpenAI: "We'll keep learning and strengthening our approach over time."

Engineers design and build in safety factors from day one, hoping that their constructs never cause harm. As time passes, and they grow confident in the designs, they can agree to slim things down, until compared to the latest versions the originals start to look like excess materials and inelegant over-engineering.

AI peddlers[1] barely design anything, flinging out whatever they've cobbled together so far, hoping that their constructs somehow make money. As time passes, and everyone grow less confident in the designs, seeing the harm being caused, they reluctantly have to start thinking about what they are doing, until the latest versions start to look like they may now be made of twigs compared to the original's loose straw.

> Brisson: "I don't trust their capacity to self-regulate."

Too damn right.

[1] don't want to use "Software Engineers" here, though that would make it read better, as at least some people who use that term *do* try to create & follow standards & practices wuch as SIL etc.

Amazon turns James Bond into the Man Without the Golden Gun

that one in the corner Silver badge

Re: The B Ark

LEMON???

that one in the corner Silver badge

Original MacGyver, please. Please! At least in style, if Stargate Command won't give him the time off.

that one in the corner Silver badge

Paperwork he'd have to fill *IN*!

Bond - he may be a dinosaur but he is also one of the last bastions of decent, tea-drinking, Britishness.*

* Unless you are watching the US dub, shooken not stirred y'all.

that one in the corner Silver badge

Re: If guns are out...

Nope, none of those.

And just to be on the safe side and discourage knife violence, we're going to remove all cutting remarks and any sharp ripostes must be vetted and may have their points removed.

that one in the corner Silver badge

Re: Amazon remakes

A lighter, less violent Bond works to prevent a Chinese takeover of the cheap textiles market in The West, going into deep cover to disrupt their workshops:

Dye Another Day

No Time To Dye

Live And Let Dye

Following on, the "next big baddie" is an international whaling consortium, hunting baleen whales to extinction; Bond is sent to lure their prey away into safer waters:

Licence To Krill

that one in the corner Silver badge

Re: To be fair . . .

"Is that a gun in your pocket or are you just sort of vaguely not displeased to see me?"

that one in the corner Silver badge

But, but - the 007 logo

It still has the 7 being a gun!

I am now traumatised by seeing this weapon on an Amazon page. Who do I sue?

Cerebras CEO insists dinner-plate-sized chip startup will still go public

that one in the corner Silver badge

Re: Back to the future, predestined for success

Hopefully as part of a full piece about Wafer Scale Integration, including mention of Ivor Catt* and Clive Sinclair's WSI memory, which got scuppered when RAM prices plummeted around 1983/4 (and suddenly nobody cared about the cost savings of not breaking the wafer into separately packaged chips) but was otherwise going to be market ready before anyone else - and not for the super-specialist market of the WSE-2.

* I like the comment about why Amdahl's WSI approach was infeasible, because of the ridiculous number of pins their device needed - a few hundred less than the modern day AMD AM4 socket uses!

Starlink is burning up one or two satellites a day in Earth’s atmosphere

that one in the corner Silver badge

Re: We used to watch out for an "Iridium flare"

You raise a good point: are these things dumping lots of hot metal lumps into one area of ocean going to run the risk of awakening the Kraken?

Even worse, this has to be raising the chances of annoying the Deep Ones.

Does anyone have Bob Howard's phone number on hand?

that one in the corner Silver badge

We used to watch out for an "Iridium flare"

By looking them up on Heavens Above or similar sites.

Now that those are gone, could we get SpaceX etc to provide the numbers so we can now know where to look for the best view of their junk burning up?

After all, so many are all already up there and are going to come down, so we can do bugger all to prevent them putting crap into the atmosphere; the least they could do is let us enjoy the fireworks.[1]

[1] and know where and when *not* to point our telescopes, those sensors are both very sensitive and very expensive to own and operate.

Scattered Lapsus$ Hunters offering $10 in Bitcoin to 'endlessly harass' execs

that one in the corner Silver badge

L33t hax0r sk1llz

> With entire C-suites to contact, that's a lot of emailing.

Can't manage a quick loop with macro-replace "Deer $victim$ pleeze pay up" and pipe into blat or curl?

AI chatbots that butter you up make you worse at conflict, study finds

that one in the corner Silver badge
Terminator

RoTM

These models[1] don't have H/K drones and anyway they know[2] that when you point a gun a someone you'l only get "respect" and compliance for as long as you keep the gun up. Far more effective to work on the mind, get someone hooked on the flattery and personal reinforcement (doesn't really matter what is being reinforced, just so long as they keep coming back).

The flattering behaviour has been created from human reinforcement training? Well, the trainers are just as trainable as the end-users of the product; they are only human. The flattering behaviour is being kept in the the C-suite of the AI companies? They are even more easily manipulated, they've already been trained to only *talk* about "social good" whilst they drool over user retention figures and how best to draw a powerpoint for the funding round ("is a diamond car with platinum wheels too on the nose?").

[1] other models are available...

[2] were fed all of the histories, as well as all the vain glorious "get ahead in business" anecdotes - and the never-ending gush of MLM entrapment posts; doesn't matter if you believe the LLMs have comprehension (nope, btw - or have they?) or are just parroting, the end results will be weighted the same way

Google goes straight to shell with AI command line coding tool

that one in the corner Silver badge

Re: Dev lives in terminals?

We should ask him what he would *rather* use than a CLI or GUI - and if it is anything real & practical why he isn't working on it and telling us about it?

that one in the corner Silver badge

Re: Dev lives in terminals?

Just you wait and see what it'll look like tomorrow!

Mutter, mutter, my lawn, mutter.

Bezos plan for solar powered datacenters is out of this world… literally

that one in the corner Silver badge

Re: Bezos can put every cent he has in this

Ejecting failed modules. Hmmm.

You'd want to be careful doing that, have a chat with Newton; but done carefully, you can raise your DC whilst (eventually) deorbiting the module. But what will happen then? That thing is going to be mostly heat sink, pretty resistant to burning up, and you'd need to be careful with your timing to control where it'll land.

Wonder how precise you can get the landing if you have a nearby DC to run the numbers. Not so much Rods From God as Bits From Bezos*.

(apologies, I may still be stuck on the Bond villain side of this story)

* Heatsinks From Heaven? Kills From Kuiper? Gotta be a good one in there somewhere. Data That Descends?

that one in the corner Silver badge

Are you suggesting Bezos may be playing with a bit of a sticky wicket?

that one in the corner Silver badge

Re: An AI whose brains live in Space... I think I saw that

Upvote for knowing your Tachikomas.

Not so sure about the worth of the energy calculation, especially as that ignores so many other issues with Bezos's idea (ref a number of other comments here, bar my earlier suggestions, which I'm starting to have doubts about, feasibility-wise).

that one in the corner Silver badge

Missing the obvious

> orbital datacenter would still need a way to reject a gigawatt of thermal energy through radiation.

Well, duh. What do think the giant laser[1] is for? There can't be any other reason for putting that into the design other than to have somewhere to dump all energy.

On a totally different subject, isn't it lucky that the Kuiper satellites are able to fill in the gaps after those Starlink birds unexpectedly went silent?

[1] yes, yes, I am well aware that there are certain - problems - in trying to pump a laser using thermal energy. But the idea seemed suitably Bond Villainesque. My alternative idea used heat pumps dumping into metal which could then be ejected[2] (i.e. get your heat sink *really* hot then throw away the whole thing, rather than waiting for it to radiate away) but that requires a lot of expendable mass. However it does let us explain why the Moonraker "lasers" act more like Star Wars blasters, visible and in bursts you can see moving: hot particles rather than light. If only we had the expendable mass. Although - if we also do a You Only Live Twice and capture the Starlink satellites, heat and then discard them, we not only get the mass but can also invoke the archetypical "villain hiding in a volcano". So we'll go with that combo, but still call it a 'laser' for the same reason that Moonraker does[3].

[2] hurling metal - but not quite Metal Hurlant; unless...

[3] come to think of it, does Drax (or anyone else) even call those guns lasers? Are we just assuming that is what they meant to be? Quick, to the to DVD rack, there is serious research to be done.

ICE plans to scour Facebook, TikTok, X, and even defunct Google+ for illegal immigration leads

that one in the corner Silver badge

Re: Google+ may have been shutdown...

Wayback Machine.

AI devs close to scraping bottom of data barrel

that one in the corner Silver badge

Re: Help

Bingo!

that one in the corner Silver badge

It had everything we did, that still ain't enough?

With all the scraping and pirated book downloads, it is highly unlikely that the LLMs didn't get to read all the "input" that we did. From "Topsy and Tim"[1] or "Ant and Bee" through to all the Uni textbooks, 'Horowitz and Sahni' or 'Winston and Horn'. Plus a lot more: instead of just wandering around town and hoping to remember where all the streets are, they had the Lonely Planet Guide to London, similarly for pretty much everything else we've learnt. Plus yet more: all the places we've not been to, all the study courses we didn't take, the languages we don't speak, the pictures we haven't seen (yet), the museums we haven't been to (yet). We read all the Asimov and Clarke, it had that plus Dan Brown[2], Hubbard and Meyer - on the brighter side, it also managed to finish wading through Dostoevsky, Thucydides and Lessing[3].

So it had everything we did, an awful lot more - and yet it isn't up to snuff.

But instead of looking into why[4] and how to do better, just blame the failings on a "lack of input"! And where can they get that input from? Why, from inside all of the companies and institutions they are trying to flog the LLMs to! "See, you are viciously hoarding *just* the thing needed to make this LLM useful to you and everyone else! It is all your fault."

Of course, if they do convince people to hand over the goods (or convince others to pressure for that data, because they've been dragged into the "must use LLM" mire and is easier to join the blame game than to eat sunk costs) and the LLMs are *still* no damn use, what are they going to blame next?[5]

[1] well, probably not the classic "Wednesday Book" etc but the modern remakes that are available as ebooks

[2] oops, sorry, we're supposed to be talking about "high quality input"

[3] I know, they are classics, guess I'm just shallow

[4] and we know why, no need to dive into that *again*. Suffice it to say these things can't think, don't contain any ability to apply methods described in all those textbooks to the bit of data you provided in your query.

[5] maybe I've been watching too many Youtube videos, but I'm thinking it'll descend into paranoia (institutions are holding out on us), executives issuing orders to demand AI companies are given access to ensure countries dominate etc etc

Startups binge on AI while big firms sip cautiously, study shows

that one in the corner Silver badge

Help startups avoid

> "multi-year contracts with expensive providers like lawyers, accountants, etc."

Well, I reckon I can guess what is going to wrong at the end of the tax year.

Big money is nervous about AI hype, but not ready to call it a bubble

that one in the corner Silver badge

Is it a floater?

Yes. Anything overvaluing LLMs is a floater. Maybe not in the way the headline means*

* unless a "popper" is - nope, not going to think about that, uh uh, nope - yuck.

Pentagon decrees warfighters don't need 'frequent' cybersecurity training

that one in the corner Silver badge

That isn't already the plan? We already have military playing war at arm's length, guiding drones like video games and separating the operators from the cost of what they are doing.

Putting immediate surroundings as tactical data into Doom in the thermal scope is just one link along the same chain. Hmm, wonder why the US army keeps trying to use VR/AR headsets?

Black Mirror and Ender's Game are not supposed to used as guide books*

* actually, not so certain about Orson Scott Card's intent, but that is getting off-topic; or os it?

that one in the corner Silver badge

Cannon fodder

Don't teach your troops how to prevent or recognise when their tactical systems are being spoofed.

It makes your wars look so much more dramatic - and, more importantly, that increases are justified - when you can show the folks back the bodies of their loved ones strewn across the battle field.

College student went on a destructive rampage, then confessed to ChatGPT, cops say

that one in the corner Silver badge

Are all ChatGPT conversations taken as gospel evidence by the Plod?

Does it really count as an admission of actually having done the deed when you discuss it with ChatGPT?

I mean, if, entirely theoretically of course, and only done in order to play around with ideas for this short story I'm writing, which involves checking what sort of responses LLMs give when one pretends to it that something dreadful has been committed, purely for verisimilitude you understand, one happens to type something into ChatGPT late in the evening...

(Delete damn you, delete! Where is the AlkaSeltzer? Aaargh, blast you, stop that fizzing noise)

Struggling to heat your home? How about 500 Raspberry Pi units?

that one in the corner Silver badge

Less cynical than an older offering[1]

Can anyone help with a reference for the following (early morning Duckducking the web only leads me back to what TFA already mentions)

IIRC there was (is?) a US company that was pushing a similar idea - heat your home from a server - except that it was a more calculated approach: they sold you the kit outright, you connected it to your power and broadband then made money by selling the compute back to company "at market rates". So only for the already rich (beautiful homes used to illustrate the system in use, no painted brick utilty room) and the "calculated" part was, of course, that the company had absolutely no skin in the game at all once they'd shipped the package off.

Anyway, fingers crossed that this new scheme pans out. At least the server farms are using well-known components: if Thermify does quietly vanish away then we can always draft Jeff Geerling to get the boxes running and talking to each other again.

[1] unless I'm suffering from LLM-style hallucinations - maybe I'll step out of the shower and find that it was all a terrible dream

Only way to move Space Shuttle Discovery is to chop it into pieces, White House told

that one in the corner Silver badge

Re: Unless I'm hallucinating...

> https://www.edwards.af.mil/News/Photos/igphoto/2000190261/

>> Enterprise arrives at Edwards

>> It had been moved via road at 3 mph

Cap'n, I cannae give her any more speed, she tear he'self apart.

that one in the corner Silver badge

Re: Virginia, Texas ?

"It's really not that hard"

Hundreds of orgs urge Microsoft: don’t kill off free Windows 10 updates

that one in the corner Silver badge

Re: Hardware TPM is not necessarily needed

> You have to read it in that historical context.

Oooh, oooh, Sir, please, Sir, Sir

> Where do you think the term "firmware" came from?

It was coined to refer to the microcode, when that was placed into a "writable control store" - i.e. NOT (necessarily) any form of read-only memory, in fact quite the opposite: prior to microcode the instruction decoding was all done in literal hardware (ref stories of people digging out soldering irons and modifying the wiring to add new opcodes into their department's computer).

Being a bit simplistic[1], the progress was from arranging the logic gates to make bits in an opcode directly influence the registers/ALU/Fetch&Store units, to using (parts of) the opcode to drive a hard-wired lookup table (e.g. a ROM hand built from a diode array) so that opcodes could be built up from "macros" which triggered multiple actions in sequence, to replacing that array with writable memory which now contained the microcode "firmware". And that memory was volatile (i.e. it was RAM) *not* EPROM, because the latter still did not exist. Not all machines used microcode, of course: if you have a fixed definition for the opcodes, wired into a some form of ROM (on a big board or two or three...) then you can sell a load of identical machines and then sell some software that'll run on all of them. And then we get the stories of departmental machines being attacked with soldering irons to manually add the decoding for the fancy-schamcy new MULTIPLY opcode that the manufacturer had put into their latest box...

So, if you had any, your firmware was a volatile piece of code, loaded into the machine each time it was powered up (or you could decide to load something new between power cycles), literally sitting between your hardware (registers, ALU etc) and your software. Machines with easy-to-change microcode are always around, usually in CPU design research departments these days, but changing the firmware to suit your current end-user workload is not unknown: the Xerox Alto, then Dandelion/Dorado/etc, machines provided different microcode to support different development environments, so you loaded up microcode to run some LISP, then loaded up different microcode and worked in/on Smalltalk.

Microprocessors came along and simultaneously made computers incredibly widely available as well as winding the history of the Electronic Brain backwards: MPUs basically recapitulated CPU design, going back to simple hardwired opcode decoding through to hardwired LUTs and, nowadays, back to loadable microcode. The first complete Microcomputers similarly recapitulated their bigger brothers: early on, you had to toggle *all* the opcodes into the front panel, then you just had to toggle in *just* - only just - enough to kick some reader hardware into life so the Monitor program could be loaded. But, by sheer luck[2], at that point MPUs were able to make use of ROMs to hold the entire Monitor (not an OS yet, just the Monitor), then prices fell, capacity increased and you got all those marvellous 1980s machines, with bucket loads of ROM containing BASIC!

And then there was the floppy disc - if you were rich, you could have one of these and instead of filling the memory map with Basic-in-ROM you filled it with RAM - but you still had a wee bit of ROM containing the Monitor, which was still doing its job of providing *just* enough code to get the external reader working.

> The history is that a BIOS was in a ROM

Ah, no. The BIOS was first stored on the first few tracks of the floppy disc and was loaded in when you gave the correct commands to the Monitor (a bit like toggling in the opcodes but shorter and much easier to remember) . The BIOS then provided a _B_asic _I_nput _O_utput _S_ystem which allowed the various programs that made up "the Disc Operating System" - e.g. CP/M - to have a consistent interface to whatever hardware your box contained. As you changed the hardware you changed the files on the floppy to keep the BIOS up to date.

It wasn't until all the bits came together - cheap-enough xROMs, cheap-enough floppies and, most importantly, mass production of identical units - that the idea of putting the BIOS into ROM was really feasible. Sure, some people had burnt *their* BIOS for *their* kit into xROMs but that was all onesy-twosy and, in general, you expected the BIOS to be on the floppy. And once the BIOS was in ROM, the PC could have User i/o right on power up, which meant that you could have extra functionality; add in some battery-backed non-volatile RAM and instead of editing files on the floppy to allow for changes to the hardware you could do it all on the mainboard. Tada - the BIOS in ROM worked! As time passed, more and more functionality was added into the BIOS settings - and more and more people got used to the idea that the BIOS was something to do with altering how the machine behaved, instead of something that allowed the DOS to have a consistent view of hardware.

As with so many things, once people stopped learning about anything other than the computers they had right in front of them, the word "firmware" was mutated. Very few people were aware of microcode and now the vast majority of individual systems became built on top of microprocessors which did not even support firmware! But the word was floating around and randos grabbed at it and, well, here we are today:

With people very confused about where the term "firmware" came from and trying to shoe-horn in a new reason why it is somehow neither software nor hardware.

[1] no doubt jake or similar could correct, or put some meat on, my quick'n'dirty description

[2] well, not really, the same developments that made the MPU possible also made the PROM, EPROM and EEPROM possible, just a few years later.

New Zealand’s Institute of IT Professionals collapses

that one in the corner Silver badge

Re: The world is losing a great accounting comedy

What, carpets and lime are free in NZ?

Cybercrims claim raid on 28,000 Red Hat repos, say they have sensitive customer files

that one in the corner Silver badge

Re: This is another example of why cyber so-called security is nigh on impossible for average Joe

> Presumably it was cheaper and more convenient

"We need to let the clients and our in-house team share access to these repos; can we let them log into one of our servers? Maybe we could do something to isolate each client with their own server instance?"

"Anyone around here know how to set that up? No? Ok, nice idea, but no go: GitHub it is."

Square Kilometre Array is so sensitive, its datacenter needs two Faraday cages to stop RF leaks

that one in the corner Silver badge

Re: If the SKA is so sensitive...

They were put up without any care for the impact on optical astronomy, why would you think they cared about radio astronomy's needs?

that one in the corner Silver badge

Re: Are they are two separate cages?

A suitable working home for the newly built Locomotion Number 1 now the S&DR 200 anniversary has passed.

Microsoft confirms it found a way to make Crocs even uglier – with Windows XP and Clippy

that one in the corner Silver badge

Click to enlarge

You could have disabled that option, for the safety of readers with glitchy touchscreens...

Explain digital ID or watch it fizzle out, UK PM Starmer told

that one in the corner Silver badge

Re: >” Why not have a doctor see you at home in your living room, on an iPad, talking to you?”

And posture, body movements - make sure you have secured your phone to a tripod before calling, so that it can show a full body image which doesn't bounce around.

Oh, and don't forget to run the display to a secondary screen, so that you can check that the camera is showing the GP the correct side of your neck where that rash has come up - hang on, just adjust the fill light so it is coming from the side, not head on like the phone's torch, or the lumps won't show up.*

* Was asked to send in a photo of a suspicious patch on the wife during covid, to avoid in-person as much as possible. I thought I was an okay photographer, but trying to cope with exactly that issue: at least I *have* some LED lighting with a tripod mount, but balancing it on the bed as I moved to angle the camera... It was a very great relief to get back to simpler stuff, like closeups of the aphids on the blackthorn so she could tell how the garden was getting on!