Category: Software

The Colonial Pipeline Was Unaffected by the Ransomeware Attack

No Comments

It turns out that the systems controlling the pipeline continued to function as intended, it was only the billing systems were hit, which means that the decision to shut down the pipeline, which threw much of the East Coast of the US into a panic, was not about safety, and critical infrastructure was not impacted, it was just that collecting payments from customers became more inconvenient.

The technical term for what Colonial did was irresponsible, and possibly negligent.

Why am I not surprised that Koch Industries, aka, the Koch Brothers, are a major shareholder?

This, “F%$# you, pay me,” attitude is integral to their warped souls:

The cyber attack that shutdown the Colonial pipeline causing a gas panic and stoking fears of gasoline shortages, didn’t actually shut down the pipeline. It impacted the billing system at the Colonial Pipeline Co., which shut it down because they were worried about how they’d collect payments. 

Yes, the fuel-carrying pipeline was shut down last week in order to prevent a company that is entrusted with what should be a public utility from enduring an accounting headache.

I really hope that someone, I’m looking at you Katie Porter, to whip out the old white board, and cut the executives running a new asshole at hearings.

For the problem described, they could have set up a paper system, and faxes, (or scanners and Gmail) to handle billing temporarily in perhaps 48 hours.

How Badly Does Someone Have to F%$# Up for the DOD to Decide That They Won’t Hire Contractors to Do It?

No Comments

It appears that the Pentagon is looking at terminating its massive cloud computing project known as Jedi. 

Given that this massive contract has the potential for creating comfortable retirements for dozens of senior officers, I call it back-loaded bribery, something has to be seriously wrong.

It’s got to be worse than the F-35 clusterf%$#, and it doesn’t get much worse than that:

Pentagon officials are considering pulling the plug on the star-crossed JEDI cloud-computing project, which has been mired in litigation from Amazon.com Inc. and faces continuing criticism from lawmakers.

The Joint Enterprise Defense Infrastructure contract was awarded to Microsoft Corp. in 2019 over Amazon, which has contested the award in court ever since.

A federal judge last month refused the Pentagon’s motion to dismiss much of Amazon’s case. A few days later, Deputy Defense Secretary Kathleen Hicks said the department would review the project.

………

“The prospect of such a lengthy litigation process might bring the future of the JEDI Cloud procurement into question,” the Jan. 28 report said.

………

Some lawmakers and government-contracting experts say JEDI should be scuttled because its single-vendor, winner-take-all approach is inappropriate and outmoded for mammoth enterprises like the Department of Defense.

These people say the Pentagon should move to an increasingly popular approach to enterprise cloud-computing that includes multiple companies as participants. Spreading out the work also reduces the risk of legal challenges from excluded companies, they say.

Oh, I see now:  They want to spread the dollars around to get some of the usual suspects into the room, as opposed to Microsoft and Amazon, who have been playing the game far longer than either of them, and they have LOTS if executive vice president positions. 

If you split this up between Lockheed-Martin, Boeing, Raytheon, General Dynamics, Northrop Grumman, etc., think about all the retired officers that you can hire.

………

A Pentagon inspector general report last year determined that the Pentagon adviser didn’t violate any ethical obligations or give preferential treatment to Amazon.

Steven Schooner, a George Washington University law professor who specializes in government contracting, said early questions about the Pentagon’s underlying procurement strategy for JEDI have grown over time.

“And all of that is before this case became one of the most jaw-dropping, head-scratching collections of conflicts of interest imaginable,” he said.

The US defense procurement system is beyond dysfunctional..

Microflaccid Office Fail

2 Comments

It turns out that one of the major data exchange formats for genetics is Microsoft Excel, and we have now discovered that the Redmond company’s flagship spreadsheet program has been autocorrecting the data into oblivion:

For many people, working with error-ridden spreadsheets is a way of life. This takes on added meaning for genomics researchers, who study the building blocks of life. It turns out that their work, too, is rife with dodgy spreadsheets.

A new paper has revealed the vast extent of errors in published genomics research, which is down to an unfortunate quirk of Microsoft Excel. A trio of scientists in Australia scanned 7,500 Excel files with gene lists accompanying 3,600 papers in 18 journals over a 10-year period. One-fifth of the files had easily identified errors, which is “quite striking and a little bit embarrassing,” says Mark Ziemann of the Baker IDI medical research institute in Melbourne, one of the paper’s co-authors.

What happened? By default, Excel and other popular spreadsheet applications convert some gene symbols to dates and numbers. For example, instead of writing out “Membrane-Associated Ring Finger (C3HC4) 1, E3 Ubiquitin Protein Ligase,” researchers have dubbed the gene MARCH1. Excel converts this into a date—03/01/2016, say—because that’s probably what the majority of spreadsheet users mean when they type it into a cell. Similarly, gene identifiers like “2310009E13” are converted to exponential numbers (2.31E+19). In both cases, the conversions strip out valuable information about the genes in question.

What on earth inspired all these researchers to use what can only be described as the greasy kid stuff of analysis and data storage for this purpose?

It’s nucking futz.

My Next Computer is not Going to Be Windows 10

No Comments

The latest Microsoft operating system is a privacy horror show:

By default, Microsoft gets to see your location, keystrokes and browser history — and listen to your microphone, and some of that stuff is shared with “trusted [by Microsoft, not by you] partners.”

You can turn this all off, of course, by digging through screen after screen of “privacy” dashboards, navigating the welter of tickboxes that serve the same purposes as all those clean, ration-seeming lines on the craps table: to complexify the proposition so you can’t figure out if the odds are in your favor.

Oh, and if you’ve already chosen to use Firefox as your default browser, Microsoft overrides your decision when you “upgrade” and switches you to the latest incarnation of the immortal undead monster formerly known as Internet Explorer.

See also here, where they note that you cannot shut the service off except by getting deep into dodgy operating system functions, and it listens to everything that you say.

A ain’t gonna go Mac though:  I hate walled gardens, so it’s probably some flavor of Linux for me next time around.

And the Arms Race Begins

No Comments

Facebook creates ad blocker proof ads, and the ad blockers block those ad blocker proof ads.

I use an Adblock plus.

Ads frequently serve up malware.

I also serve ads at my site.

I understand the moral ambiguity here:

As you may have noticed over the last few days — I sure did — Facebook recently incorporated a sneaky change to the way its ads are displayed that disguised them as ordinary content and circumvented ad blocking software in browsers. Ads crowded the streams of even the most vigilant users.  But this hell on earth was not to last: two days and change later, the Adblock Plus community has found a way to block them again.

Expect more back and forth on this.

My standard disclaimer the ads on my site apply:

Also, please note, this should be in no way construed as an inducement or a request for my reader(s) to click on any ad that they would not otherwise be inclined to investigate further. This would be a violation of the terms of service for Google™ Adsense™.

Cyber Currencies’ Fatal flaw

No Comments

You can never be sure that someone won’t come after your assets via the blockchain.

When you realize that almost every square inch of the earth (Antarctica excepted) was stolen at some point, and the same applies to most assets in the modern world.

With Bitcoin and its ilk, there is no statute of limitations:

An interesting little observation by Izzy Kaminska over in the FT about a problem that Bitcoin faces. It’s a legal problem that leads to an economic one. And the problem Bitcoin faces is one that is based upon the very existence of the blockchain itself. There’s a good reason that all functioning economic systems have something akin to a market ouvert rule, or something like squatters’ rights. Note that I say something like, not exactly either of those rules. For example, if you find money in the street then you can’t and shouldn’t just keep it. But if you hand it in to the police, no one then claims if for some period of time, then it does become yours. No, you can’t just move into someone elses’ house and insist that it belongs to you. But move in for long enough (the time period varies) and no one complains or does anything and it becomes yours. You don’t get title when you buy stolen goods. But something you bought in good faith, in an open marketplace, does become yours eventually. Even if it had been stolen some point further down the ownership chain.

 The reason for these rules, and yes they vary across places and concerning different specific items, is that at some point we’ve got to give up on historic unfairnesses and or illegalities and just get on with the current allocation of scarce resources. We just don’t want to wall off something that may or may not have been stolen in, say, 1820, from being put to use today. We almost certainly would want to make sure that something stolen yesterday was returned to its rightful owner. But at some point between those two dates we’ve got to have a cut off point.

………

And that’s where Bitcoin has the problem, in that very existence of the blockchain:

The first relates to the ongoing legal recourse rights of Bitfinex victims. Even though they may have lost their right to pursue Bitfinex for compensation, they are still going to be entitled to track the funds across the blockchain to seek recourse from whomsoever receives the bitcoins in their accounts. That’s good news for victims, but mostly likely very bad news for bitcoin’s fungible state and thus its status as a medium of exchange.

Just one successful claim by a victim who tracks his funds to an identifiable third party, and the precedent is set. Any exchanges dealing with bitcoin in a legitimate capacity would from then on be inclined to do much stronger due diligence on whether the bitcoins being deposited in their system were connected to ill-gotten gains. This in turn would open the door to the black-listing of funds that can not prove they were originated honestly via legitimate earnings.

Of course, people should not steal things. And yet for a currency to work it has to be possible to take the currency at its face value. Thus it may well be that the bank robber paid you for his beer with stolen money but you got it fair and square and thus the bank doesn’t get it back as and when they find out. Another way to put this is that the crime dies with the criminal. And yet the blockchain upends all of that. Because every transaction which any one bitcoin has been involved in is traceable.

The problem with cyber currencies and the rest of the internet enabled Libertarian-Utopian is that they believe that computer code developed over a few months can somehow trump contract law and record keeping that has been developed over the past 1000+ years.

Ask yourself, what happens if you have a fruit tree with branches that cross a property line.  Who owns the fruit on those branches?

It is very complicated.

In some places, the branches, and fruit, belong to the property owner over whose property it extends.

In others, it belongs to the property owner of the location of the trunk, but  the owner of the property can prune branches over their yard and dig up roots under the yard.

In some places, it belongs to one person when it on the branch, and another when the fruit falls.

In some places, a landowner can sue for trespass for branches over their yard.

This is just a fruit tree.

Recording property transactions are far more significant, and potentially far more complex, and we saw what happened when the banks decided to create MERS to “streamline” fraud real estate transactions.

I’m an engineer, not a lawyer, dammit, * but is clear to me that the people behind these efforts have only the vaguest idea of how society works, and how long it took to get society works.

*I love it when I get to go all Dr. McCoy!

Microflaccid Screws the Pooch

No Comments

A court in France has ruled that Windows 10 illegally invades user privacy, as well as being too insecure:

A French regulator has issued Microsoft a formal warning over Windows 10, saying the operating system collects excessive amounts of personal data, ships that information illegally out of the EU, and has lousy security.

The warning comes from the Commission Nationale de l’Informatique et des Libertés (CNIL), an independent data privacy watchdog with the power to levy fines against companies. The CNIL has been investigating Windows 10 since its launch and has now drawn up a damning list of criticisms.

“The CNIL has decided to issue a formal notice to Microsoft Corporation to comply with the Act within three months,” said the group on Wednesday.

………

Chief among the regulator’s concerns is the amount of information Windows 10 slurps up about its users and sends back to Microsoft’s servers. While all recent flavors of Windows send some information back to Redmond, Windows 10 harvests much more and the CNIL considers this intrusive and also not needed to run the OS.

It could also be breaking the law. The collapse of the Safe Harbor agreement last year didn’t stop this flow of data from French users back to the US, and the CNIL is concerned that Microsoft made no attempt to comply with the law. The watchdog estimates that there are at least 10 million Windows users in the Euro nation.

This in addition to buying Nokia’s cell phone business, where they wrote down over 7 billion dollars , and then they sold off the Nokia brand.

And then there is the whole ribbon thing in the more recent versions of Office.

Why is this company still a going concern?

Finally a Small Reason to Buy Windows 10

No Comments
Microsoft has added a (still Beta) feature to Windows 10, which will allow users to do a clean install of the OS to remove crapware that manufacturers install in their PC’s:

Windows 10 already includes ways to clear out applications and data to repair misbehaving systems or prepare them to be sold, courtesy of the Refresh and Reset features added in Windows 8. Microsoft is now adding a third option: a new refresh tool.

Currently available only for Windows Insiders, the new tool fetches a copy of Windows online and performs a clean installation. The only option is whether or not you want to preserve your personal data. Any other software that’s installed will be blown away, including the various applications and utilities that OEMs continue to bundle with their systems.

This is an upgrade from Microsoft that actually is an improvement, as opposed to, for example, the abomination that is ribbon.

Well, Here is a Hearty F%$# You to Larry Ellison

No Comments

Oracle just lost its lawsuit against Google.

It was attempting to claim that its Applications Programming Interface (API) was a copyrightable element, which would have had the effect of allowing Oracle, and other makers of software platforms, to charge programmers for writing compatible programs:

A jury ruled in favor of Google on Thursday in a long legal dispute with Oracle over software used to power most of the world’s smartphones.

Oracle contended that Google used copyrighted material in 11,000 of its 13 million lines of software code in Android, its mobile phone operating system. Oracle asked for $9 billion from Google. Google said it made fair use of that code and owed nothing.

The victory for Google cheered other software developers, who operate much the way Google did when it comes to so-called open-source software. Unlike traditional software created by corporations and tightly held, open-source products are released, often with some restrictions, for anyone to use and modify.

………

The particular areas of copyright protection in Java involved the so-called declaring code in Application Programming Interfaces, or A.P.I.s., which have become the common way that networked programs on the Internet share data.

Declaring code establishes standards and meanings by which future lines of software, the actual effects the software seeks to create, will operate. This distinction compelled the 10 jurors — eight women and two men — to hear extensive testimony by engineers and economists about the nature of code, and the copyrightable implications of this type of creativity.

The idea that APIs are copyrightable is insane.

It makes independent development of software impossible.

PICTURES: Saab rolls out first Gripen E fighter

No Comments

Saab has rolled out its first Gripen NG, which structurally is pretty much a new plane.

As compared to the travails of the F-22, where upgrades and modernization have been expensive and difficult, and the F-35, which is late, expensive, under performing, and unreliable.

By comparison, all the major systems for the new Gripen have flown, the first aircraft is a production unit, and it is expected to start flight testing this year:

Saab is targeting the on-schedule delivery of its new Gripen E fighter to the Swedish and Brazilian air forces late this decade, as it steps up export campaigns involving both the advanced model and its earlier C/D-model jet.

 The first of three Swedish test aircraft to be involved in the project was unveiled at the manufacturer’s Linköping facility on 18 May, in front of an international audience of current and prospective Gripen users.

 Lead aircraft 39-8 will be handed over to Saab’s flight test department “this summer”, and should make its flight debut at the end of the year, the company says. It will be used initially to verify the general systems, airframe and aerodynamics of the evolved design, which – while visually resembling earlier iterations – is entirely new.

 Powered by a GE Aviation F414 turbofan engine capable of generating 22,000lb (98kN) of thrust, the Gripen E has an empty weight of 8,000kg (17,600lb) and a maximum take-off weight of 16.5t. The latter represents a 2.5t increase over the C/D. At 15.2m (49.8ft), it is also 30cm longer than its predecessor, while its wingspan has increased by 20cm, to 8.6m. With 40% more internal fuel, the new model has increased range, payload and endurance, and features an active electronically scanned array (AESA) radar, other updated avionics and new electronic warfare equipment.

 Saab chief executive Håkan Buskhe reveals the cost of developing the Gripen E and producing its three Swedish test aircraft will be less than $2 billion.

This is chump change by the standards of modern fighter development.

………

 Stressing that aircraft 39-8 is not a prototype, Ydreskog says: “Assembly of the first test aircraft – with 60,000, mostly new parts – was shorter than number 204 for the C/D.” The programme’s other test units are in different stages of structural assembly and only minor adjustments are expected as the shift to series production occurs. “There is some optimisation to do – we can reduce some weight,” he notes.

 But Saab believes one of the biggest advances with the Gripen E comes through its use of an all-new integrated modular avionics system, which splits flight-critical and tactical management software. It says the latter’s software, hardware and algorithms can be rapidly changed – like apps on a smartphone – to keep pace with evolved operational requirements or technological advances in computing over the life of the type’s use.

(emphasis mine)

The updated software has been in development for far less time than the (still not up to snuff) avionics package for the F-35 JSF, and it will be trivial for countries using the aircraft.

The reason is that critical functions are segregated from one another, which, as any programmer can tell you, simply works better than tightly integrated all in one software as used in the JSF, even after billions of dollars have been spent.

Of course, for Lockheed Martin, their hairball of a software platform is not a bug, it’s a feature, because it allows charge tolls on users who want to make upgrades.

As Aviation Week notes:

………

Gripen E is scaled up from the early Gripen C/D with 40% additional fuel capacity, more thrust from its General Electric F414 engine and more weapon stations. Internally the aircraft has been given a new sensor suite, with active electronically scanned array (AESA) radar and infrared search and track (IRST).

Key to the aircraft is a federated software system that separates critical flight control systems from the tactical systems. Saab claims this will make the Gripen E’s avionics and mission systems more easily and quickly upgradable. Just 10% of the aircraft’s system code will be devoted to flight-critical systems; the remaining 90% will be mission-system related. Saab officials say tactical upgrades could be tested and introduced in weeks rather than months.

(emphasis mine)

The direct operating cost, as well as the fly away cost, of the Gripen looks to be less than that of its competitors.

Compared to its competitors, the Eurofighter Typhoon, the Dassault Rafale, and the Lockheed-Martin Lightning II, this aircraft should better suit the needs of most countries out there, but Sweden lacks the connections behind the other platforms, so it looks likely that while it will be a market success, it will be a only a modest success.

Ez a Mechayeh!

No Comments

In July, Microflaccid’s offer for a free upgrade to Windows 10 expires, and it means that those f%$#ing pop up windows will be going away:

There was one issue that went unspoken in Microsoft’s announcement on Thursday that the free Windows 10 upgrade offer would end on July 29. What would the company do about all those annoying, almost malware-like, pop-up notifications to upgrade to Windows 10 that appeared on the PCs of Windows 7 and 8.1 users? The answer is they will disappear.

“Details are still being finalized, but on July 29th the Get Windows 10 app…will be disabled and eventually removed from PCs worldwide,” Microsoft told WinBeta in a written statement.

Hallelujah

The company warned that it may take some time to disable the upgrade pop-ups on computers worldwide.

Hallelujah is right.

I am sick to death of Microsoft’s nags to install its f%$#ing spyware.

*It’s Yiddish, “איז אַ מחיה,” and it means that it is a great joy.

Sick of Those Windows 10 Update Messages?

No Comments

JR at the Stellarparthenon BBS came up with the following to turn it off:
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINESOFTWAREPoliciesMicrosoftWindowsWindowsUpdate]
"DisableOSUpgrade"=dword:00000001
[HKEY_LOCAL_MACHINESOFTWAREPoliciesMicrosoftWindowsGWX]
"DisableGWX"=dword:00000001
I haven’t tried it myself, but feel free to try this out.

You past this into a text document, and give it the .reg extension, and it will run when you double click on it.

The NSA’s Whiz Bang is Short on the Whiz, and Long on the Bang

No Comments

The NSA has a metadata analysis program in South Asia that it used to make up a kill list. It is rather unironically called called SKYNET.

Analysis of the results now indicates that it doesn’t work, but drone based terror continues to rain down on innocent civilians:

In 2014, the former director of both the CIA and NSA proclaimed that “we kill people based on metadata.” Now, a new examination of previously published Snowden documents suggests that many of those people may have been innocent.

 Last year, The Intercept published documents detailing the NSA’s SKYNET programme. According to the documents, SKYNET engages in mass surveillance of Pakistan’s mobile phone network, and then uses a machine learning algorithm on the cellular network metadata of 55 million people to try and rate each person’s likelihood of being a terrorist.

 Patrick Ball—a data scientist and the director of research at the Human Rights Data Analysis Group—who has previously given expert testimony before war crimes tribunals, described the NSA’s methods as “ridiculously optimistic” and “completely bullsh%$.” A flaw in how the NSA trains SKYNET’s machine learning algorithm to analyse cellular metadata, Ball told Ars, makes the results scientifically unsound.

 Somewhere between 2,500 and 4,000 people have been killed by drone strikes in Pakistan since 2004, and most of them were classified by the US government as “extremists,” the Bureau of Investigative Journalism reported. Based on the classification date of “20070108” on one of the SKYNET slide decks (which themselves appear to date from 2011 and 2012), the machine learning program may have been in development as early as 2007.

 In the years that have followed, thousands of innocent people in Pakistan may have been mislabelled as terrorists by that “scientifically unsound” algorithm, possibly resulting in their untimely demise.

(%$ mine)

This is why our roving army of flying killing machines is such a bad idea:  If most of the people you kill are innocent, they will have relatives looking to avenge their cowardly assassination.

It’s basic human nature.

Muck Ficrosoft

No Comments

It’s clear that since the clusterf%$# that was Windows 8, Microsoft has been running scared.

Now, it appears that they will be doing their best to cripple earlier versions of their operating systems with the current hardware:

Soon, when you buy a new PC, it won’t support Windows 7 or 8. Microsoft has announced a change to its support policy that lays out its plans for future updates to its older operating systems, and the new rules mean that future PC owners with next-generation Intel, AMD, and Qualcomm processors will need to use Windows 10.

It’s not usual for old PCs to fall short of the minimum requirements of a brand new operating system, but in this case, the opposite is happening. Microsoft and its partners will not be putting in the significant work necessary to make new hardware work with older versions of Windows. The old operating systems, at best, will merely lack the latest updates. At worst, they might not function properly.

Policy starts with Intel’s current processors, Skylake

“Going forward, as new silicon generations are introduced, they will require the latest Windows platform at that time for support,” Microsoft notes in a blog post published on Friday. “Windows 10 will be the only supported Windows platform on Intel’s upcoming ‘Kaby Lake’ silicon, Qualcomm’s upcoming ‘8996’ silicon, and AMD’s upcoming ‘Bristol Ridge’ silicon.”

This new policy doesn’t mean that Windows 7 and 8.1 are no longer supported in general. The two operating systems will continue to get updates through January 14, 2020 and January 10, 2023, respectively. But that’s only if you’re using hardware that was contemporaneous with those operating systems.


For current PC owners, the detail to note is that Intel’s current, sixth generation processors, known as Skylake, are the first that won’t support either of the older versions of Windows. (Intel and Microsoft say that the platform and Windows 10 were designed for each other.) Microsoft is phasing in the policy now.

When juxtaposed with Microsoft’s attempts to move to software as a service, it’s yet another reason to move to Linux.

Why Northrop Won the LRS-B Contract

No Comments

Over at Aviation Week, Bill Sweetman has a very good analysis as to why Northrop-Grumman beat the joint Lockheed-Martin Boeing bid for the LRS-B bomber program. (Paid subscription required)

When one considers the relative sizes of the competitors, Boeing and LM both dwarf Northrop, it was a surprise when won:

Northrop Grumman won the Long-Range Strike Bomber (LRS-B) contest on cost; the question is whether it also beat its rivals on technology and risk. The immediate response from Lockheed Martin and Boeing was to query the cost and risk assessment behind the decision; Loren Thompson, a consultant to both companies, confirmed that they knew from the numbers announced on Oct. 21 that they had been underbid, quite unexpectedly and by a decisive margin, pointing to fatal flaws in their strategy.

Thompson’s later column in Forbes, focusing on Northrop Grumman’s ability to execute the engineering and manufacturing development (EMD) contract, suggests that the winner undercut its rival on EMD. “I’d say Wes [Northrop CEO Wes Bush] bet the company,” Thompson said. One Wall Street analyst who had predicted a Boeing team win said: “I have an impossible time believing that this will be a financially attractive proposition if he underbid the only defense contractor who understands lean manufacturing.”

But Northrop Grumman did precisely that—relying on its operational experience with wideband, all-aspect stealth technology on the B-2 bomber and the still-secret RQ-180 intelligence, surveillance and reconnaissance (ISR) unmanned air vehicle. Also, the winning formula was not just a question of delivering more stealth or greater range, but of meeting a complex set of requirements that stressed risk reduction, an open systems architecture, agile management and new manufacturing technology.

………


Northrop Grumman won the Long-Range Strike Bomber (LRS-B) contest on cost; the question is whether it also beat its rivals on technology and risk. The immediate response from Lockheed Martin and Boeing was to query the cost and risk assessment behind the decision; Loren Thompson, a consultant to both companies, confirmed that they knew from the numbers announced on Oct. 21 that they had been underbid, quite unexpectedly and by a decisive margin, pointing to fatal flaws in their strategy.

Thompson’s later column in Forbes, focusing on Northrop Grumman’s ability to execute the engineering and manufacturing development (EMD) contract, suggests that the winner undercut its rival on EMD. “I’d say Wes [Northrop CEO Wes Bush] bet the company,” Thompson said. One Wall Street analyst who had predicted a Boeing team win said: “I have an impossible time believing that this will be a financially attractive proposition if he underbid the only defense contractor who understands lean manufacturing.”

But Northrop Grumman did precisely that—relying on its operational experience with wideband, all-aspect stealth technology on the B-2 bomber and the still-secret RQ-180 intelligence, surveillance and reconnaissance (ISR) unmanned air vehicle. Also, the winning formula was not just a question of delivering more stealth or greater range, but of meeting a complex set of requirements that stressed risk reduction, an open systems architecture, agile management and new manufacturing technology.

The conventional wisdom is that Northrop significantly underbid LM and Boeing, and that they will unable to execute their extremely aggressive bid.

Sweetman notes looks toward Northrop’s experience with the RQ-180, which seems to imply that they may have made a breakthrough in incorporating aerodynamic efficiency and broadband stealth.

I think that it is something else, and I think that Sweetman buried the lede here, because the following requirements should have whoever made the decision fleeing from LM like Laurie Strode did from Michael Meyers:

LRS-B, too, is planned to be upgraded easily and competitively, “with space and weight provision for things we can’t imagine today,” LaPlante said. Open architecture, he noted, could allow the Pentagon to procure a new or upgraded subsystem competitively, “provide it to the prime and say, ‘integrate this.’” Along with the cost of maintaining the bomber’s low-observable systems, upgrades will account for a large proportion of the bomber’s life-cycle cost—which will be much greater than its procurement bill.

………

Lockheed Martin brought its experience with stealth systems integration to the party. But the history of the F-22—where upgrades have been constrained by a tightly integrated architecture, so that every change requires painstaking regression testing to ensure that other functions are not affected—was exactly what the LRS-B program’s open architecture is designed to avoid.

(emphasis mine)

Lockheed-Martin has been doing tightly integrated monolithic systems for years, which runs counter to just about every rule of both software and weapons development, where critical functions should be segregated from everything else.

L-M’s model, as shown in the F-22 and the F-35 is put everything in one box that no one can look into except for Lockheed Martin.

They make their money by placing a toll on access.

It’s great for Lockheed Martin, but it’s technically stupid, and bad for the end user and the taxpayer, and it appears that someone in the Pentagon has finally recognized this.

This is a Feature, Not a Bug

No Comments

It turns out that Lockheed-Martin and the Pentagon are adding insult to injury, and requiring that F-35 customers fund software upgrade laboratories, because these will be the only entities capable of maintaining the aircraft.

So in addition to everything else, the JSF will be a “forever” source of revenue for LM, while ensuring that foreign operators will never develop expertise necessary to be a competitor: (Paid subscription required):

Foreign air forces using the Lockheed Martin F-35 Joint Strike Fighter are being compelled to build and fund $150 million software laboratories, based in the U.S. and almost 50% staffed by U.S. personnel, that generate data crucial to the fighter’s ability to identify new radio-frequency threats.

This regime is more stringent and far-reaching than earlier U.S. fighter export deals. Those usually withheld key software — known as source code — from the customer, but in most cases allowed local users to manage their own “threat libraries,” data that allowed the electronic warfare (EW) system to identify radio-frequency threats, with in-country, locally staffed facilities.

For the U.K. in particular, the reliance on U.S.-located laboratories looks like a pullback from its earlier position. In 2006, concern over access to JSF technology reached the national leadership level, and prompted a declaration, by U.S. President George W. Bush and U.K. Prime Minister Tony Blair, that “both governments agree that the U.K. will have the ability to successfully operate, upgrade, employ, and maintain the JSF such that the U.K. retains operational sovereignty over the aircraft.”

That promise seemingly contrasts with the severe limits now being imposed on non-U.S. access to the system.

………

Another source close to the U.K. user community notes that Lockheed Martin has advertised the capability of the “fusion engine” — the software that combines inputs from different sensors and datalinks — to identify targets and implement rules of engagement automatically. But if the logic of the fusion engine itself is not understood at the U.K.’s operational level, he says, “You can imagine that this slaughters our legal stance on a clear, unambiguous and sovereign kill chain.”

The restrictions are also likely to be cumbersome. By contrast, “Swedish air force Gripens are often updated between sorties,” a Saab spokesman says. Signals intercepted and recorded by the fighter’s EW system on one sortie can be analyzed and the system updated in hours.

If this sounds like incompetence, it’s because you do not understand the goal of the program.

The goal is maintaining and extending US hegemony in the weapons market, so that they have money for overpaying retired generals as “consultants”.

What a Stupid F%$#ing Idea

No Comments

If I had a time machine, I would go back in time to find the father of whoever came up with the idea of adding copy protections to JPEG images, and kick that man in the nuts so hard that he would be rendered sterile:

So much for hopes that the tech industry would back away from copyright protection any time soon. The Joint Photographic Experts Group recently launched a Privacy & Security initiative that potentially brings digital rights management (DRM) to regular JPEG images, not just the specialized JPEG 2000 format. The proposal could protect your privacy by encrypting metadata (such as where you took a photo), but it could also prevent you from copying or opening some pictures. Needless to say, that opens up a can of worms when it comes to fair use rights. If someone slapped DRM on a photo, you couldn’t use it for news, research or remixed art — many of the internet memes you know wouldn’t be possible.

This is so unbelievably stupid.

Belay that Upgrade to Windows 10

No Comments

No verification yet, but there has been a semi credible report that Microsoft’s new operating system is literally sending everything you do to the Redmond Borg:

Note: Some readers have commented that the original source for the article is of questionably validity. If anyone can confirm or refute the original author’s finding with actual data, please let me know in the comments, and I’ll update this post accordingly.

Some Czech guy did a traffic analysis of data produced by Windows 10, and released his findings the other day. His primary thesis was that Windows 10 acts more like a terminal than an operating system — because of the extent of the “cloud” integration, a large portion of the OS functions are almost dependent on remote (Microsoft’s) servers. The amount of collected information, even with strict privacy settings, is quite alarming.

Information transmitted

All text typed on the keyboard is stored in temporary files, and sent (once per 30 mins) to: 

oca.telemetry.microsoft.com.nsatc.net
pre.footprintpredict.com
reports.wes.df.telemetry.microsoft.com

There isn’t a clear purpose for this, considering there there’s no autocorrect/prediction anywhere in the OS (There is autocorrect in certain text fields, but the supposed purpose for transmitting these keystrokes is to improve autocorrect across devices. Whether a full keylog is necessary for this (as opposed to just corrections) is questionable. Furthermore, this appears to still occur even if the user is not signed in to a Microsoft account, eliminating the “across devices” benefit. Perhaps there is a global autocorrect dictionary that benefits all users, but the privacy implications of an un-disableable always-on keylogger outweigh these potential benefits.). The implications of this are significant: because this is an OS-level keylogger, all the data you’re trying to transmit securely is now sitting on some MS server. This includes passwords and encrypted chats. This also includes the on-screen keyboard, so there is no way to authenticate to a website without MS also getting your password.

………

………In another example, typing the name of any popular movie into your local file search starts a telemetry process that indexes all media files on your computer and transmits them to:  ………

………

It’s hard to imagine any purpose for this other than the obvious piracy crackdown possibilities.

When a webcam is first enabled, ~35mb of data gets immediately transmitted to: 

………

Everything that is said into an enabled microphone is immediately transmitted to: 

………

If this weren’t bad enough, this behaviour still occurs after Cortana is fully disabled/uninstalled. It’s speculated that the purpose of this function to build up a massive voice database, then tie those voices to identities, and eventually be able to identify anyone simply by picking up their voice, whether it be a microphone in a public place or a wiretap on a payphone. 

……… 

While the inital reflex may be to block all of the above servers via HOSTS, it turns out this won’t work: Microsoft has taken the care to hardcode certain IPs, meaning that there is no DNS lookup and no HOSTS consultation. However, if the above servers are blocked via HOSTS, Windows will pretend to be crippled by continuously throwing errors, while still maintaining data collection in the background. Other than an increase in errors, HOSTS blocking did not affect the volume, frequency, or rate of data being transmitted. 

So it appears that Microsoft does key-logging under Win 10, which means that they have your password, they phone home with your media files, meaning that the RIAA and MPAA can go after you for your bootlegs, and they have created a voice profile, so that the NSA can listen to you when they recognize your voice..

Again, this is preliminary, but if half of this is true, my next computer will be a Linux box.

Why Not to Trust Online Apps

No Comments

In addition to users having very little recourse when a vendor creates an update that is worse than its predecessor,* it also leaves you at the mercy of a vendor who can jack up the licensing fees when you are hooked:

Microsoft looks to have increased the price it will charge for Office 365 in the Euro-zone, Denmark, Norway, Sweden, Australia, and Canada.

Nicole Sheridan, who works and blogs for Irish distributor MicroWarehouse, has posted a Microsoft missive on the price rises. She also quotes from a Microsoft communiqué that says the price rises are justifiable because “cloud services are rapidly evolving, and Microsoft is adding significant value to our products.”

The translation from Microflaccid speak is as follows, “We are raising prices for the same reason that dogs lick their own genitals:  Because they can.”

*Like when Google, who is particularly awful about retrograde “upgrades” removed the ability to save map locations to contacts when they went to version 7.†
†BTW, as of version 9, they have still left what was an essential feature out of maps.‡
‡The rat-f%$#s who did this should be the first bunch up against the wall when the revolution comes.Ψ
ΨBTW, you can get a link to the old version of Google Maps here. Just be sure to enable the installation of non Play Store apps, and turn off auto updating for the Maps app.