User: El_Muerte_TDS

Already did for me

On: 76% Of Netflix Subscribers Think Netflix Can Replace Traditional TV (cordcutting.com)

I no longer have regular TV because there isn't anything on it for me anyway, especially not at the time I want to see it.
Sadly in .nl the Netflix catalogue is only 33% of the US catalogue, so I still get stuff to watch via "alternate" channels.

I only one about one other VOD service available here, and it has absolutely nothing to offer (crappy Dutch productions).

2400 security issues in 5 years

On: Facebook Paid $10,000 To A 10-Year-Old For Hacking Instagram (thenextweb.com)

That's more than 1 a day. Maybe Facebook should improve their software development.
And with 1 security issue a day do you really want to put your "private" info on that system.

Deal

On: Senate Bill Draft Would Prohibit Unbreakable Encryption (ap.org)

No encryption is unbreakable, it just takes a rather long time with current knowledge and technology.

Not convinced

On: Outdated and Vulnerable WordPress, Drupal Versions Contributed To Panama Papers Breach (wptavern.com)

We're talking about 2.6TB of data here, 11.5 million documents, photos, scans, and emails created over a time span of 1970 til now, received in batches during a year.
I highly doubt some external used an exploit in customer facing portals to download this many individual files.

Re:Javascript and security?

On: New Attack Discovered On Node.js Package Manager npm (softpedia.com)

wget -O- https://example.org/install.sh | sh

is a very common installation method presented by various tools (or via curl). In most cases you even need to run them as root due to the fact that the creators of those tools do not understand how to have their software work as non-root users.

For example:
https://toolbelt.heroku.com/de...
https://docs.docker.com/linux/...
https://nodejs.org/en/download...

Insightful

On: Facebook Exec Explains Why Technical Skills Aren't Enough To Be a Great Engineer (geekwire.com)

And that's why she earns the big bucks. Because she's the one with this insightful knowledge which no one ever though about before.

Re:duh

On: More Devs Now Use OS X Than Linux, Says Survey (9to5mac.com)

For now. But how long until the terminal is also shown the door.

Backdating

On: Mozilla Breaks Its Own Promise, Allows Symantec To Issue Insecure Certificates (softpedia.com)

Couldn't Symantec simply set the certificate date to be valid from 31 December of 2015?

Also, why would I trust Worldpay PLC with any business if they can screw up something as simple as renewing certificates?

Security flaws in iOS?

On: Apple: Terrorist's Apple ID Password Changed In Government Custody (buzzfeed.com)

The executives said the company had been in regular discussions with the government since early January, and that it proposed four different ways to recover the information the government is interested in without building a backdoor. One of those methods would have involved connecting the iPhone to a known Wi-Fi network and triggering an iCloud backup that might provide the FBI with information stored to the device between the October 19th and the date of the incident.

So there are 4 security flaws in the "encrypted" iCloud backups?

Really useful.

On: Why Sarcasm Is Such a Problem In Artificial Intelligence (thestack.com)

Well, this research wasn't a waste of time and money.

Re:It is Over

On: Fine Brothers File For Trademark On Word "React"

No good enough. They deserve to be run out of the business.
An action should have an equal opposite reaction.

Cloud Campus needs living space?

On: Oracle Asked To Help Low-Income Residents Evicted For Its New Cloud Campus (cio.com)

I thought the cloud was everywhere. Why does a Cloud Campus needs physical space in one location?

Accuracy 52% with 600 programmers and 8 samples

On: Coding Styles Survive Binary Compilation, Could Lead Investigators Back To Programmers (princeton.edu)

Good luck when your programmer pool is a couple of thousand and your samples consist out of obfuscated and underhanded software which is often produced by malware creators.

Apache Harmony getting replaced

On: Google Confirms Next Android Version Won't Use Oracle's Proprietary Java APIs

Wasn't Android using Apache Harmony as basis? Given that Harmony is no longer being developed due to OpenJDK being just as open and available, it's only a logical choice to upgrade to a modern Java API.

Additionally, using OpenJDK instead of Harmony (or any other Java Classpath implementation) does nothing with respect to using "Oracle's Proprietary Java APIs".

Re:What Constitutes Good UI and Good UX?

On: Improving UI and UX: Changing the "Open Source Is Ugly" Perception (opensource.com)

But SASS and Bower are command line applications, and ember is a framework. How do these have a good user interface? Or is a product/project website now the UI of an application?

Illegal downloads

On: Streaming Video Is 70 Percent of Broadband Use (recode.net)

This conclusion does not match with the extensive research of the movie industry that they are losing billions on illegal downloads of movies. Unless... as 70% is considered legal streaming they must be making twice the money on streaming than they lose on illegal downloads.

Re:Anyone else with security concerns?

On: Mozilla May Separate Itself From Thunderbird Email Client (techcrunch.com)

I use Mutt.

Re:Need more mature languages

On: Python Is On the Rise, While PHP Falls (dice.com)

Interesting read by Andrei Alexandrescu, D Language Architect, on: D, Go, Rust, and C, C++:
https://www.quora.com/Which-la...

SystemD

On: Pushing the Limits of Network Traffic With Open Source (cloudflare.com)

Wouldn't it just be easier to put this in systemd?

Looked into it: it's mostly harmless

On: Lenovo Collects Usage Data On ThinkPad, ThinkCentre and ThinkStation PCs

What this customer feedback tool actually does is update entries from the "event log" called "Lenovo-Customer Feedback".
If you open the Event Viewer you will see entries with a large hexadecimal string. This string is simply the text representation of the bytes of a gzip compressed xml file.

The contents of this XML file looks like this:
<root>
<events>event1</events>
<eVar20>Open</eVar20>
<visitorID>aca1232d265941f7ae2259e402ab350c</visitorID>
<eVar1>aca1232d265941f7ae2259e402ab350c</eVar1>
<eVar2>N</eVar2>
<eVar3>System Update</eVar3>
<eVar4>2015-09-23</eVar4>
<eVar5>5.7.0.6</eVar5>
<eVar8>20AL00FGMH</eVar8>
<eVar9>Think</eVar9>
<eVar10>ThinkPad</eVar10>
<eVar11>X240</eVar11>
<eVar12>Windows 7 Professional</eVar12>
<eVar13>US</eVar13>
<eVar14>en</eVar14>
<pageName>System Update</pageName>
<timestamp>09-23-2015 19:54:13 PM</timestamp>
<reportSuiteID>lenovoappssystemupdateprod</reportSuiteID>
<serverUrl>http://lenovoappssystemupdateprod.112.2o7.net/b/ss/lenovoappssystemupdateprod/6</serverUrl>
<assemblyName>Lenovo.TVT.CustomerFeedback.InnovApps</assemblyName>
</root>

The value aca1232d265941f7ae2259e402ab350c is a unique ID created for the Lenovo application for the user running it. This key is stored in the registry at:
HKEY_CURRENT_USER\Software\Lenovo\MetricCollectionSDK\UserAppIDs
Removing it will give you a new key when events are logged.

The server URL is the server where this data will be posted to. The kind of things logged appear events for the various Lenovo tools, like starting and which Lenevo system update you installed. (Along with data about your hardware/OS).

Logging of events is also controlled via the the registry at:
HKEY_LOCAL_MACHINE\SOFTWARE\Lenovo\MetricCollectionSDK\ReportSuites
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Lenovo\MetricCollectionSDK\ReportSuites
You can change the "ReportMetrics" setting for each entry to disable it, but I do not know for how long as this data might be overwritten when a new MetricCollectionSubscription.xml file is downloaded from the Lenovo servers (this is stored in C:\Users\USERNAME\AppData\Local\Lenovo\MetricCollectionSDK )

There is also a unique machine id stored at:
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Lenovo\Customer Feedback
This one is generated when it does not exist, and is included in "Lenovo-Customer Feedback" event entries for OmnitureSiteCatalyst. I do not know when these event entries are created .
These entries contain XML data like this:
<root>
<visitorID>10e7794c7d254b4784e77df5c37963e7</visitorID>
<eVar12>224d213ffaa14c5aa0d638b2e3a19c72</eVar12>
<reportSuiteID>lenovotvtlenovosolutionscenterprod</reportSuiteID>
<serverUrl>https://s.lenovo.com/b/ss/lenovotvtlenovosolutionscenterprod/6</serverUrl>
<sc_xml_ver>1.0</sc_xml_ver>
<pageName>lsc</pageName>
<timestamp>2015-09-12T21:35:09.2631913+02:00</timestamp>
<events>event11</events>
<eVar1>20AL00FGMH</eVar1>
<eVar2>2.8.005</eVar2>
<assemblyName>Lenovo.TVT.CustomerFeedback.OmnitureSiteCatalyst</assemblyName>
</root>

So the collected data looks mostly harmless and somewhat anonymous, as fa

Re:Self inflicted damage

On: EU Court: Commuting to Customer Sites Counts as Work

How do you measure productivity?

systemd

On: LILO Bootloader Development To End

Can't simply replace LILO with systemd?

Re:i think it shows trends in GitHub's demographic

On: The Top 10 Programming Languages On GitHub, Over Time

> java usage has increased at GitHub, but this more likely reflects greater adoption of GitHub by the business community.

Not to forget that Google Code is closing, Codehause closed, SF.net becomes more shit every day. They housed a lot of Java projects, and they are moving to alternatives like GitHub.

Re:Is there even a reason to patch airgapped machi

On: Ask Slashdot: Patch Management For Offline Customer Systems?

To fix non-security related bugs.

fixing the configuration is trivial

On: The OpenSSH Bug That Wasn't

> fixing the configuration is trivial

So trivial that the suggested configuration change is not mentioned anywhere.