The Register Home Page

* Posts by fg_swe

1478 publicly visible posts • joined 20 Nov 2021

Oracle's Java pricing brews bitter taste, subscribers spill over to OpenJDK

fg_swe Silver badge

Nobody Got Properly Nurtured

...by Socialism. See Cuba and Venezuela.

Oracle meanwhile provides 170 000 well-paid, solid jobs for their employees. These people can afford good apartments, good and plenty of food, health insurance and at least one yearly vaction.

It is always amazing how supposedly well-educated engineers and technicians can be stubborn 1di0ts.

fg_swe Silver badge

FALSE

SUN gave away Java, after having sunk serious money into its development. While sinking even more money into the continued maintenance and improvement of Java. They destroyed the Delphi business in that process, because many developers got accustomed to this socialist model of technology development.

Then SUN had to be rescued from bankruptcy by Oracle.

Oracle is a well-functioning business, which in turn provides 170 000 employees solid and well-paid jobs.

You can argue all day about the specifics of payment for software products, but "totally free" is not an economic model, it is Marxist Stupor. See Cuba, Venezuela where they suffer hunger now.

How did a CrowdStrike file crash millions of Windows computers? We take a closer look at the code

fg_swe Silver badge

Insane Architecture

We only need this cr4ap because Windows does not have a modern sandboxing concept.

A single exploit in Outlook or a Word macro can hose the entire user's fileset plus all of the user's ODBC connections.

Little wonder we see encryption attacks left and right.

fg_swe Silver badge

"config files"

It transpires these are in fact similar to Java bytecode or UCSD p code. This bytecode is then interpreted inside kernel mode. Evading MSFT quality control processes.

The interpreter will crash on bad bytecode, as we have witnessed.

What a polish turd.

fg_swe Silver badge

FALSE

CS is used in thousands of enterprises. One of them will be penetrated by criminals or other enemy actors.

fg_swe Silver badge

Bingo

Cybernetic attackers will analyze patches in order to attack not yet updated systems.

Patches should be thoroughly tested by the authoring company.

Also, they should be ditributed/staged encrypted on all affected computers and only after that the key should be broadcast and patch actually applied.

fg_swe Silver badge

LSM Linux Security Modules

LSM also uses kernel level code to control and intercept potentially ALL userspace-to-kernel calls.

Yes, some security things must be done in kernel mode. But with that comes extreme duty of diligence by the "plugin" author. A config file error must never generate a bad pointer, but simply ignoring said config file.

CrowdStrike has a very bad quality assurance in place. The government should fine them for neglicence.

How to maintain code for a century: Just add Rust

fg_swe Silver badge

Re: Myopic UNIX View

My opinion is that C should be taken down a notch or two. Some commenters depicted it as a forever-standard.

That was the objective of my post.

fg_swe Silver badge

Algol Use

https://stackoverflow.com/questions/1463321/was-algol-ever-used-for-mainstream-programming

fg_swe Silver badge

Myopic UNIX View

A thorough study of computer history will reveal that C, Unix and Windows are by no means the only "basis" of systems programming.

Rather, C and Unix (and Windows) can be seen as the Hamburger of computing. Quick and dirty, unhealthy creators of the Cyber War Domain.

Algol was already a memory safe alternative to C and Unix in the 1970s. It contained a lot of solid European technology. The beef steak with hand made noodles and a proper salad, in the meals analogy.

Unlike C and Unix, Algol mainframes were not given away "for free" though.

Indonesian government didn't have backups of ransomwared data, because DR was only an option

fg_swe Silver badge

Re: Double edged sword of Damocles

I am sure the big boys on this planet will want you to collect all your eggs into one basket. Then it is superconvenient for these foxes to clean out your nest thoroughly. Or rather, they have to bring the X Ray machine into only one place.

fg_swe Silver badge

Could be Worse

Now they know their network is completely insecure. Encryption is not the worst thing to happen. Imagine what more cunning attackers could have done. You know, folks like "equation group"...

fg_swe Silver badge

Re: "Authorities are instead attempting to decrypt the data"

Of course not. They will call Canberra and London for help. Then they will find out that there is something called "strong cipher".

AI query optimization in IBM's Db2 shows you can teach a tech dinosaur new tricks

fg_swe Silver badge

Re: Any True DB/2 Experts Around ?

Again, I strongly assume IBM only allows the ANN AI to perform "safe" transformations of the original Query Plan. Worst outcome is bad runtime, but still correct results.

I am also quite sure all the transformations done by "conventional heuristics" are proven to be safe.

After all DB/2 and Oracle run billions of bank accounts !

fg_swe Silver badge

Re: Optimistic AI

Then you will have slow runtime. Still correct results.

fg_swe Silver badge

Application ?

Elaborate.

fg_swe Silver badge

Other Approaches

Safely Transform Query Plan by

+Monte Carlo

+Genetic Mutation

+Simulated Annealing

fg_swe Silver badge

Re: AI optimizing SQL err well

You can still run EXPLAIN to see the generated plan, I guess.

The AI will not be fully freewheeling...

fg_swe Silver badge

Re: DB2 has included "DB2" since 1983!

1.) If the AI is only allowed to perform "safe" transformations of the query plan, there is limited worry regarding AI "correctness". No sane software engineer would grant an AI "full authority query plan transformation". AIs are "mostly correct", not "perfect".

2.) ANNs might indeed be a new type of heuristic for query plan optimization. Much more "rule of thumb based" than "statistically, logically based". It will prolly work nicely on standard scenarios and will prolly fail badly on special, extreme cases.

fg_swe Silver badge

Elaborate

According to your terminology, an optimizing compiler also includes "AI" ?

fg_swe Silver badge

1.) My understanding is that the query plan mangling will never change end result, but only runtime/resource consumption. AI can only be used for heuristics, similar to existing heuristics in traditional optimizers.

2.) I have seen large enterprises where they run convoluted queries and still wait for hours in queue to get results. The business questions are similar to "how many millions did we lose in winter, in the US, because a component was not that great ?". There exist corporations who really need large scale relational databases to better understand their core business. Much more than just a funny CMS.

fg_swe Silver badge

Re: Query Plan Optimization Details

Now, if these flimsy web 2.0/key-value/graph "databases" contain 1/1000th of DB/2 query optimizer technology I would be surprised.

Again, relational databases are modern day wonders. They continue to be improved by scientists and engineers, as they are still far from perfect. Most users, including software engineers, never really cared about this technology. They just assume "it works" and only complain when the optimizer fails on an especially convoluted SQL query.

SQL database are on par with the latest jet engines, 3nm semiconductors, metal 3D printing, gas chromatography !

fg_swe Silver badge

"Obvious"

To your wet computer of 100E9 Neurons and 100E13 Synapses there exists an "obvious" query plan. But for the dumb CPU there might be Billions of alternatives and each of them must be "rated"/"estimated" and then the best one chosen. In reality, the dumb CPU will use some sort of heuristic to boil the billions down to 10000 different plans. Works often, but not always, well.

The premise is that the AI is essentially a novel heuristic for find a good query plan. Any experience from the real world ?

fg_swe Silver badge

Query Plan Optimization Details

https://www.tridex.org/wp-content/uploads/Db2-Query-Optimization-101.pdf

fg_swe Silver badge

Well

SQL Database Servers are "as old" as Unix kernels such as Linux, MacOS X and later, iOS.

I am quite sure there are serious teams at IBM, Oracle, MSFT developing incremental improvements of their SQL engines. I would not be surprised to learn that serious percentages of code are not older than five years.

fg_swe Silver badge

Regarding "Dinosaur"

I fully disagree with this notion. Advanced SQL Database are some of the most advanced systems in existence. As complex as a modern operating system. Critical for almost ANY business operation from accounting to inventory to sales statistics to analytical processing etc.

Relational databases continue to lead the field of databases due to solid theory, good performance, good query plan optimizers and so on.

The "new" key-value databases are merely useful for building massive collections of cat picture sharing systems for teenagers.

fg_swe Silver badge

Any True DB/2 Experts Around ?

So far I can only read generic nonsense in this forum.

What I can say:

1.) Query Plan Optimization is a Hard Problem. MySQL fails badly in this aspect for complex queries.

2.) For many queries it would be too runtime-expensive to evaluate all possible solutions; heuristics are used.

3.) Maybe AI can add "novel heuristics".

4.) Any query plan, runtime-efficient or not, will produce the same result. AI is not messing with results.

5.) Adding further indices to a DB schema will quickly be a double-edged thing, as index maintenance will also consume serious runtime.

Microsoft answered Congress' questions on security. Now the White House needs to act

fg_swe Silver badge

Repost

"The most expensive thing that can happen to a government agency is to lose sensitive data to a competing government.

For details, you can ask Karl Dönitz and Isoroku Yamamoto.

Windows must be banned from processing any secret government information, as they are at least 20 years behind the state of the art."

fg_swe Silver badge

Corruption

Open Source does not have the bribery infrastructure in place. Unlike the $corporation.

Also, good people avoid the government, as it cannot pay competitive wages. Instead they hire armies of losers.

When push comes to shove, a college-dropout oligarch will be the Effective Surgeon General, as we have seen with COVID.

A dark world full of corruption.

fg_swe Silver badge

Or Is It ?

Maybe they know all the backdoors and how to effectively plug them ?

Outside the Pentagon+NSA, everybody else is a victim to be pwned.

Or(more likely) they are simply corrupt and MSFT pays best.

Microsoft bigwig says the Feds catching Chinese spies in Exchange Online is the cloud working as intended

fg_swe Silver badge

Oligarchy Disinformation Operations And Malgovernance

Oligarch bribing newspapers: https://www.berliner-zeitung.de/news/gates-stiftung-unterstuetzt-den-spiegel-mit-weiteren-29-millionen-dollar-li.194183

Oligarch buying goverment:

https://www.infosperber.ch/wirtschaft/konzerne/who-geraet-immer-mehr-in-abhaengigkeit-von-bill-gates-co/

https://www.welt.de/politik/deutschland/plus209247817/Umstrittene-Finanzierung-Das-Gates-Dilemma-der-WHO.html

Of course this is absolutely, never, ever related to his Pharma Investments !

fg_swe Silver badge

Secure Government Email

Postfix

GNUpg

DeltaChat (also uses GNUog)

But alas, no kickbacks possible !

fg_swe Silver badge

CISA - Censorship America

CISA coordinated with Facebook, Google, youtube, Apple and others in order to squelch any anti-Covid messages of ordinary NATO citizens.

https://judiciary.house.gov/media/press-releases/new-report-reveals-cisa-tried-cover-censorship-practices

https://eu.usatoday.com/story/money/2023/10/03/fifth-circuit-cisa-ruling-biden-first-amendment/71051110007/

https://www.theregister.com/2023/10/04/cisa_barred_from_coordinating_with/

It was essentially a CIA-NSA-ARMY operation designed to facilitate illegal censorship. They seconded their operatives into CISA, so they could avoid legal trouble.

This backfired big time, as people simply used TELEGRAM, provided by Mr Durov "out of Dubai" (believe this at your own cost).

Yes, that's true. Free speech provided by Russia because CIA censors the h3ll out of American services.

US Space Force wanted $77M to reinforce GPS – and Congress shot it down

fg_swe Silver badge

Alternative Navigation Means

That GNSS is rather brittle has been known for a long time. Not really expensive or complex to jam.

It's time to develop other means. Often this is just a software upgrade of an existing sensor processing chain.

fg_swe Silver badge

Not Completely Correct

You can do "fancy" things with waveforms, you can use redundancy in the coding, you can use secret waveform creation(depending on a key) and you can use directional antennas.

All of which helps massively against jammers.

But in the ideal case for the jammer (being very close to the receiver), this does not work. That's true.

A tale of two missions: Starliner and Starship both achieve milestones

fg_swe Silver badge

Too Reasonable

Your post contains too much reason. Next you will refer to the dozens of faiiled A4/V2 launches !

Von Braun was such a loser, I tell you !

Databricks' $1B Tabular buy raises questions around table format wars

fg_swe Silver badge

Re: Can Somebody Translate From Gibberish

I realize I am behind the bullshit cycle.

It's actually a useful concept: https://www.coursera.org/articles/data-lake-vs-data-warehouse?utm_medium=sem&utm_source=gg&utm_campaign=B2C_EMEA__coursera_FTCOF_career-academy_pmax-multiple-audiences-country-multi&campaignid=20858198824&adgroupid=&device=c&keyword=&matchtype=&network=x&devicemodel=&adposition=&creativeid=&hide_mobile_promo&gad_source=1&gclid=EAIaIQobChMIjb-ii-TEhgMVCbRoCR0qyBAxEAAYBCAAEgLQCvD_BwE

fg_swe Silver badge

Can Somebody Translate From Gibberish

"Data lake" ?

Codd almighty! Has it been half a century of SQL already?

fg_swe Silver badge

SQL As Turing Complete Language

Apparently it is a factor of 100 slower than LISP for general purpose computing tasks like Prime Number calculation. SQL was never intended as a general purpose language, so that's OK for me.

In the imagined "SQL/LISP" environment, SQL would be used for "data reading and writing from permanent storage" while LISP would be used for "complex computation".

There would be at least three software engineers who could make good use of this approach ;-)

fg_swe Silver badge

Query Cache

"Modern" (1995 or later) RDBMS will cache the query and (importantly) the query plan derived from the query.

That reduces query reading+preparation to e.g. murmurhash on the query string. Or just crc32 built into cpu.

fg_swe Silver badge

"Turing complete"

Similar to C++ templates, m4 or brainfuck ?

fg_swe Silver badge

PL/SQL: Imperative Language

Isn't PL/SQL an imperative/procedural language running inside the Oracle query executor?

It would be surely interesting to have LISP/SQL in the same setting, though. Lisp is functional.

See this page for language classification:

http://sappeur.di-fg.de/classification.html

Stifling Beijing in cyberspace is now British intelligence’s number-one mission

fg_swe Silver badge

Dear GCHQ

First clean up the SSL/TLS abomination. It is designed to be very hard to implement securely. For a long time it was effectively an open front door. There exist much better alternative concepts from Europe.

Then proceed to smoke out C in the kernels, go for microkernels. Have a look at Oberon, its ingeniously compact.

But do you really have the will, the minds and the money ?

AWS to pump billions into sovereign cloud for Germany

fg_swe Silver badge

Klaut

The latest U.S. nonsense, too complex to secure. See recentt Office365 hack.

Great sales scheme, though.

Microsoft's Brad Smith summoned by Homeland Security committee over 'cascade' of infosec failures

fg_swe Silver badge

Secure Instant Messenger

I suggest using DeltaChat for that purpose. It employs GNUpg for end to end encryption.

Probably 100x more secure than the TEAMS contraption.

fg_swe Silver badge

Dump CloudCr4ap

The tools for secure comunications are already part of Linux:

+ end to end GNUpg encryption. Never trust a $hitty email server.

+ AppArmor Sandboxing of all apps from Firefox to LibertyOffice to Thunderbird.

+ Dump Microsoft, as they are easily 20 years behind the state of the art. Sandboxing for starters. This is the only language they understand.

+ Never trust the cloud for anything sensitive or more. Rather, run ssh/scp based file servers INSIDE your network.

+ Monitor all traffic at the firewall, maybe AI can detect unusual patterns there.

Alibaba Yitian 710 rated fastest Arm server CPU in the cloud (for now)

fg_swe Silver badge

"small increase in clock speed"

First and foremost, a CPU must run reliably. Only if that is true, you can fiddle with runtime.

IBM and LzLabs to clash in UK court over Software Defined Mainframe

fg_swe Silver badge

Please Explain

How does this work on the OS and database level?

Do the Swiss also emulate MVS, DB/2, CICS and so on ?

Or just the S/390 CPU ?

Microsoft teases deepfake AI that's too powerful to release

fg_swe Silver badge
Go

The FIX

Cryptographic Signing of all Multimedia Material. Similar to digital software signing.

Existing tooling+organizations such as CAs can be used for this purpose.