The Channel logo

* Posts by A Non e-mouse

732 posts • joined 30 Jan 2010

Page:

Third patch brings more admin Shellshock for the battered and Bashed

A Non e-mouse
Silver badge

Re: And I thought that I would never see a bit of bash scripting on a mainstream site

But really, if this "allows remote code execution" is only applicable if you have open web services that spawn bash to serve remote requests, most desktop systems are unaffected

Oh boy no! This is what the fuss is about. Bash is used in *lots* of places in a *nix system and is exploitable in numerous ways because of it. There's a proof of concept here for attacking clients via DHCP.

2
1

Ellison: Sparc M7 is Oracle's most important silicon EVER

A Non e-mouse
Silver badge

Re: Lot of ignorance from the IBM crowd here

trying to trash talk and spread negative rumours of the SPARC M7 cpu. For instance, say that the M7 memory protection new functionality is nothing more than an ordinary MMU. Well, if you read the released information, instead of speculate, you would see why it is not an ordinary MMU:

http://www.enterprisetech.com/2014/08/13/oracle-cranks-cores-32-sparc-m7-chip/

https://blogs.oracle.com/ask-arun/entry/in_memory_query_acceleration_of

The second link has no mention of memory protection that I can see. It just talks about the hardware decompression.

The first link has this to say:

On the Java front, the Sparc M7 has new memory protection features and virtual address masking that will make Java garbage collection easier and more deterministic, according to Fowler. [snip]

The S4 core, for instance, has special instructions to ensure application data integrity, which is done in real-time and which safeguards against invalid or stale memory references and buffer overruns for both Solaris running C and C++ applications and the Oracle database.

Which says bugger all more than the El Reg article.

I'm not trying to bash (pardon the topical pun) Oracle or you, MadMike. I'm genuinely interested in what Oracle (claim to) have done to improve security.

1
0
A Non e-mouse
Silver badge

Re: Nice

the licence fee is only 150 BEELION dollars

Or one new yacht for poor, hard up Larry...

2
0
A Non e-mouse
Silver badge

Memory Protection

Larry appears to have made a song 'n' dance about memory protection being baked into the silicon.

But hasn't memory protection been around for years in CPUs with MMUs? What's different between the features a standard MMU has and Larry's new toy?

5
0

Mine Bitcoins with PENCIL and PAPER

A Non e-mouse
Silver badge

Re: Prediction

Isn't the output totally predictable, if you know the hash function and the input data

You'd hope so, otherwise the output would be random, and comparing two hashes to see if their input was the same is pointless.

5
0

Business is back, baby! Hasta la VISTA, Win 8... Oh, yeah, Windows 9

A Non e-mouse
Silver badge

Re: Autocorrect?

corrections@theregister.co.uk ?

2
0

Rackspace to hit GLOBAL CLOUD REBOOT button to flush out Xen security nasty

A Non e-mouse
Silver badge

Re: Do they not have the capacity or capability...

I believe the cloud providers give you resilience by having servers spread across regions & data centres - which are supposed to be isolated from one another in every way possible.

0
0

That glass of water you just drank? It was OLDER than the SUN

A Non e-mouse
Silver badge

Re: Panic!

I'd have thought Dihydrogen Monoxide would sound even scarier.

11
0

Apple nurses HealthKit apps back to life, discharges iOS 8.0.2

A Non e-mouse
Silver badge

Battery Life?

When are they going to fix the killing of battery life they introduced with iOS 8.0?

1
4

Google hits back at 'Dear Rupert' over search dominance claims

A Non e-mouse
Silver badge

*So* confused...

...as to who to side with on this one. I want to hate them both.

16
1

Supercapacitors have the power to save you from data loss

A Non e-mouse
Silver badge

Re: Very interesting

Or at least a way for us to tell if our SSDs have supercapacitors onboard.

9
0

Range Rover to fit trendy new SUV with FRIKKIN' LASER HUDs

A Non e-mouse
Silver badge

Still not as cool as their transparent bonnet.

1
0

Microsoft vs the long arm of US law: Straight outta Dublin

A Non e-mouse
Silver badge

Re: Will the German government be sensible?

@Ross & @Steve Todd

The EULA CANNOT remove rights and legal obligations under criminal law

In the UK, a contract cannot override any law. But I believe in America this isn't the case. A quick google shows this page www.law.cornell.edu/wex/contract

"[The contract] may override many of the rules otherwise established by state law."

0
0

Soundbites: News in brief from the Wi-Fi audiophile files

A Non e-mouse
Silver badge

Re: why use a proprietary one when the are free open standards available

Er, but isn't FLAC free and open source? Or have I missed something?

5
0

Who.is does the Harlem Shake

A Non e-mouse
Silver badge

Repeat after me:

"Never trust input"

6
0

Exercise-tracking app not QUITE fit for purpose

A Non e-mouse
Silver badge

It's a sad state of affairs when a company quickly fixing a security hole (and thanking the person who discovered it) makes the headlines.

3
0

Why Oracle CEO Larry Ellison had to go ... Except he hasn't

A Non e-mouse
Silver badge

Re: Not a fan of Ellison.

I would take it a step further, and say any kind of leader (not just CEO) needs to have passion and vision for what they're doing.

3
0

iPhone 6: The final straw for Android makers eaten alive by the data parasite?

A Non e-mouse
Silver badge

PC Market

I feel the mobile market has become like the PC market. The money is made by the software companies (Microsoft/Google) and the hardware companies are in a suicidal race to the bottom for cost, hoping wafer-thin margins will mean something if they sell enough of them.

0
0

Stray positrons caught on ISS hint at DARK MATTER source

A Non e-mouse
Silver badge

Re: Pedant alert

It's a pity we have lost genuinely useful words like "disinterested"

I've just found mine hiding down the back of the sofa. I'm going to take a lot more interest in my disinterest.

7
0
A Non e-mouse
Silver badge

Re: Pedant alert

It seems this is a case of the English language changing before our very eyes:

www.theguardian.com/news/datablog/2010/jul/16/data-plural-singular

blogs.wsj.com/economics/2012/07/05/is-data-is-or-is-data-aint-a-plural/

0
0

Get ready for another HYPEGASM: New iPADs 'in October'

A Non e-mouse
Silver badge

Bonking with Apple has POUNDED mobe operators' wallets

A Non e-mouse
Silver badge

Third Party

I think it's needed someone independent of the banks & mobile operators to focus their thoughts. They were too interested in protecting their own turf rather than providing a service that the person on the street wanted.

Apple (for better or worse) have the muscle to say to the banks & operators: This is how it's going to be done. (And the operators seem to have lost)

All we can hope for now, is that the specs for this are opened up and other people can implement it.

4
0

Oh noes, fanbois! iPhone 6 Plus shipments 'DELAYED' in the UK

A Non e-mouse
Silver badge

Re: Nintendo Wii mania

This is standard Apple operating practice, restrict initial supply and announce delays due to unexpected high demand.

The problem is, no-one has any hard facts to prove or disprove this theory. I tried a quick Google, and I ended up with facts from "people familiar...", which isn't a sound foundation for any hypothesis.

4
2

T-Mobile US goes gaga for Wi-Fi calling, AT&T to launch in 2015

A Non e-mouse
Silver badge

Re: $50 low-end smartphone already has that...

Why has it taken Apple so long to add this in?

The handset manufacturers could add it in fairly easily. But for it to work with your existing mobile number, the mobile networks need to get on board and support it, otherwise you'll have two phone numbers: A GSM number and a WiFi number.

0
0
A Non e-mouse
Silver badge

Re: Why?

Is it just for use when you have access to an 802.11 network but no cellular (which seems like an unusual situation)

ROFL!

I assure you, where I work, mobile coverage is "poor", yet we have fantastic WiFi. WiFI calling would be ideal for us.

0
0
A Non e-mouse
Silver badge

Re: Hope you enjoy it as much as I do

O2 has TuGo. Unfortunately, it's not available for corporate customers.

Well, not this corporate customer anyway :-(

0
0

European Court of Justice allows digitisation of library books

A Non e-mouse
Silver badge

You're confusing creation and duplication.

Creation of a piece of intellectual property (Software, music, art, literature, etc) can take a long time (Many years by multiple people in some cases)

Reproduction can be just as simple as hitting "copy" in a file manager.

1
0
A Non e-mouse
Silver badge

Re: Poor eyesight

Blind musicians don't have the paper option. It doesn't seem to impede them. I wonder, do they learn completely by ear from recordings, or do they need the help of a sighted teacher to learn a new work?

I can't speak for all blind musicians, but I know one blind musician. She has to buy braille versions of sheet music. It has to be specially typeset. I don't think it's just a case of loading in a Sibelius file and sending it to the braille printer. She then memorises from the braille version.

0
0
A Non e-mouse
Silver badge

Copying & Printing

I can understand the court ruling against the copying of the electronic version to USB stick. But printing is a bit more interesting. In the UK, you can legally photocopy a small amount of a book for private study. So printing a small amount of a scanned version should be no different.

8
0

Ex-Autonomy execs: HP's latest wad blows apart fraud allegations

A Non e-mouse
Silver badge

Re: Why? oh Why?

Aren't HP taknig the Auditors to Courst as well?

RTFA:

"HP says it is planning to bring separate lawsuits against [...] the UK arm of Deloitte & Touche, which audited Autonomy for the acquisition.."

4
0

It's a pain in the ASCII, so what can be done to make patching easier?

A Non e-mouse
Silver badge

Post patch patch

Having to reboot is one pain in the ASCII. Having Windows tell you more patches are available after just installing the latest patches is even more of a pain in the rear.

I just build a Win2K12 server the other day. How many patch/reboot cycles did I have to go through before it was fully patched? Three or four if I remember correctly. (I believe a re-install of Win2K8 requires even more) How many reboots to patch to current levels after installing Linux or MacOS? One (usually)

4
0

VMware updates vSphere, recommends new security fixes

A Non e-mouse
Silver badge
FAIL

Re: web client sucks

Totally agree. Not always using a Windows desktop, I had high hopes when they announced the new web interface to vCentre. Then I got to try it... My desktop machine isn't exactly ancient, and the vCentre server itself isn't slow either, so what did they do to make the interface so darn slow? I sometimes resort back to the Windows client via RDP (despite the dire warnings) just to get a sane level of performance.

Epic fail by VMware.

3
0

Google recommends pronounceable passwords

A Non e-mouse
Silver badge

Password Managers

The update is Google's latest encroachment into the territory of online password management dominated by LastPass and 1Password, who could well feel threatened as Chrome builds in functionality they once offered as third-party value adds.

Browses have offered some kind of form fill/password manager for years, and password managers still sell, so I don't see Google's changes as any threat to them.

Personally, I prefer a standalone password manager as they are genuinely cross-browser and cross-platform. (Oh, and in this particular case, not Google. "Don't be evil", my arse...)

1
0
A Non e-mouse
Silver badge

Bruce Schneier has a blog post on ways to produce memorable and secure passwords. He no longer recommends the XKCD method.

3
0

Data entry REAR-END SNAFU: Weighty ballsup leads to plane take-off flap

A Non e-mouse
Silver badge

Adults Vs Children

This isn't as easy as people think.

When I was at school, a group of us went on a skiing trip. Most of us sixth form boys were bigger than the teachers. (No, it wasn't because we were fat, lazy, lard-arses, either) Plus there were more sixth formers than teachers.

But according to the rules, we were classed as children and the teachers as adults. I imagine that made the plane's weight calculations interesting...

0
0

Redmond resists order to hand over overseas email

A Non e-mouse
Silver badge

Not in America

On the rare occasions I use a web browser without AdBlock plus, I often see adverts for a hosting company proudly saying they aren't in the US. I can only see this growing: "We have nothing in America. No servers and no offices."

Of course, all it will mean is that the American government will have to just rely on the NSA for more of it's dirty work :-(

5
0

'I think photographers get TOO MUCH copyright for their work'

A Non e-mouse
Silver badge

And how many of these copyright extensions benefit the creators rather than some undying corporate entity?

This.

I have friends who are musicians or artists. They rely on copyright for their living. These are the people that I want copyright to protect. The corporates just use their muscle to screw as much money as possible out of everyone. This shouldn't be surprising - it's what companies exist to do: Make money.

Again, though, it's complicated. Corporates often take risks with new artists, and so want some reward for their risk taking. It's when corporates get lazy and would rather earn money from old work, rather than invest in new work that things get bad.

9
1

GCHQ protesters stick it to British spooks ... by drinking urine

A Non e-mouse
Silver badge

Re: WHEN I AM PRIME MINISTER...

GCHQ (the NSA, et al) have two broad functions. Firstly, to devise ways to protect the interests of their home nation. The (secret) invention of public key cryptography at GCHQ, and the NSA involvement to improve DES. These are good things and should carry on - especially if they make this stuff more public.

Their second function is keeping an eye on ne'er-do-wells. Again, this is all good stuff.

The problems arise when the spooks assume *everyone* is a ne'er-do-well, or when they interfere with the things that are supposed to be secure and actually make them less secure (so their snooping on everyone is made easier)

If GCHQ & the NSA are anything like any standard business (which they're probably not) these broad policy decision are made by senior managers trying to empire build and protect their own jobs/departments/budgets and not by the grafters at the bottom of the pile. It's these senior people who we need to get shot of.

11
2

NASA to reformat Opportunity rover's memory from 125 million miles away

A Non e-mouse
Silver badge

Re: I would like to thank NASA...

They only thought the rover would last 90 days, so I suspect flash endurance wasn't a really a consideration.

But look at it like this: That flash card has been working in a challenging environment for 10 years. If my server SSDs survive that long here on planet Earth, I'll be more than happy.

13
0

PCI Council wants YOU to give it things to DO

A Non e-mouse
Silver badge

Clarify existing rules

Maybe the PCI should clarify their existing rules. They are quite vague and subject to interpretation. Some people may say that's deliberate, but I couldn't possibly comment.

0
0

Boffins attempt to prove the UNIVERSE IS JUST A HOLOGRAM

A Non e-mouse
Silver badge
Happy

Sub-heads

The El Reg sub-head writer is on form this week. Although I do detect a bias towards a certain popular music song

16
0

Researcher details how malware gives AV the slip

A Non e-mouse
Silver badge

Re: Virtual question

With VMware, it's not hard to detect: Just look at the BIOS vendor string. It mentions VMWare quite prominently. You can also look for VMware only drivers (e.g. VXNet). Another option, is to try the I/O interface that VMware tools uses to communicate with the VMWare hypervisor.

I suspect you can use similar tricks with other hypervisors.

2
0

IT blokes: would you say that LEWD comment to a man? Then don't say it to a woman

A Non e-mouse
Silver badge

Out the b*****ds

You're right, you shouldn't have to endure that kind of abuse. Salesmen in company outfit should be publicly shamed.

I didn't think this type of behaviour still existed.

33
1

Galileo can't do the fandango: Two Euro GPS nav sats sent into WRONG ORBIT

A Non e-mouse
Silver badge

Reading between the lines

My reading of the press release is that the rocket put the satellites into the orbit it was told to. However someone told the rocket the wrong obit.

Opps.

0
2

Facebook needs to defend Austrian privacy violation case

A Non e-mouse
Silver badge

So the crux of his argument is that Facebook transferred his data outside the EU. Surely for this to work, he has to show firstly that he had a reasonable expectation the data would be stored/processed in the EU, and then secondly, that the data was transferred outside the EU without his permission?

0
7

US Copyright Office rules that monkeys CAN'T claim copyright over their selfies

A Non e-mouse
Silver badge

When I first heard about this story, I was siding with the photographer. Then I read a bit more about the story (e.g. The Torygraph), and realised that the photographer had NO input whatsoever into the set up.

The monkey stole the camera from him and took random pictures.

If the photographer had trained/encouraged the monkey to use the camera, then that would be different. But in this case, the photographer did nothing and got a lucky shot or two. (The Torygraph article says the monkey took hundres of pictures)

2
2

Is it an iPad? Is it a MacBook Air? No, it's a Surface Pro 3

A Non e-mouse
Silver badge

What's the market?

I think MS need to decide what market they are going after with their Surface products. Are they going after the tablet market (in which case, why does it need a keyboard or pen?) Or are they going after the laptop market (Why have a detachable keyboard)? Or somewhere in between (Ultrabook)?

It feels like MS are throwing different versions out to the market to see what will stick.

4
0

Apple's iWatch? They cannae do it ... they don't have the POWER

A Non e-mouse
Silver badge

Ming-Chi Kuo's is assuming that Apple have only recently started work on the iWatch. It could be (and has been rumoured for years) that Apple have been working on an iWatch for a while. In which case, one problem they could have been working on is how to produce it.

0
0

The Return of BSOD: Does ANYONE trust Microsoft patches?

A Non e-mouse
Silver badge

Not the first time

This isn't the first time that a (security) patch from Microsoft (or anyone else) has caused serious problems.

15
0

Twitter displays our 'Favorites'. That is, like, PRIVATE, huff naive users

A Non e-mouse
Silver badge

Follow the money...

When will users of Facebook, Twitter, LinkedIn, Google, etc. learn? They are NOT the customer of these companies. They are assets to be used and sold. These companies want as much out of you as possible so they can sell more targeted (i.e. more expensive) adverts.

The real customers are the advertisers: The people with the money.

Once users start paying for their accounts, *then* they (might) have a reason to complain about their information being sold to all and sundry. But as Facebook proudly states on their home page "Free and always will be." the chances of that are close to zero.

5
1

Page:

Opinion

Houses of Parliament in night-time

Andrew Orlowski

Come on everybody, let's upload all our stuff into Government by Cloud
Joe Tucci EMC
frustration_anger_irritation_annoyance pain

Felipe Costa

Pressure to perform for stock market bearing down on disties

Features

Alistair Darling and Alex Salmond debate Scottish independence
You keep the call centres, Hamish, we'll take the banks
Internet of Things
Everyone loves those Things, just not on each others' terms
No email? No CRM? No Daily Mail iPad edition? You need a plan
Sinofsky's hybrid strategy looks dafter than ever