Recent Comments


Note: new comments may take a few minutes to appear on this page.

January 23, 2021 12:23 PM

Winter on Friday Squid Blogging: Vegan Chili Squid :

@Clive
“Thay way you maybe able to work out who those who kept their faces out of images are…”

They are still looking for the one who laid the bombs.

He (most likely, he) had his face covered. I assume he was not stupid enough to keep his phone on or even carry a phone. But with pictures from inside, they can try find pictures of him outside, in the crowd and trace him back.

January 23, 2021 11:47 AM

Nick Levinson on Friday Squid Blogging: Vegan Chili Squid :

@name.withheld.for.obvious.reasons, @Goat, @MarkH, @Jon, & @Clive Robinson:

In U.S. law on statutory construction, the plain words determine the meaning when the statute is applied to a set of facts, unless the plain words are not clear for that set of facts. An interpretation judicially applied and that is necessary to the final decision in the case where applied (thus not an obiter dictum) tends to become a precedent, binding in the court so interpreting (including all of its judges) and any courts below for future similar cases with different parties and advisory for other courts. While courts and judges can differ with each other and even rule in opposite directions, those differences can be resolved and a division among the circuit courts of appeal in the Federal system is a common reason for the Supreme Court to take a case. Thus, there is relatively little chaos in determining meanings. Even if a statute is new and some lawyers say no one knows exactly what it means (often to solicit client business), we usually have a very good idea of what it means because it probably does not have newly-invented words (and if it does they’re likely defined in that statute)...

January 23, 2021 11:31 AM

Clive Robinson on Friday Squid Blogging: Vegan Chili Squid :

@ Nick Levinson,

A Peloton bike seems to be a security risk

They are, like other excercise equipment, sports health, sports performance, etc tech. Where Internet connectivity alegedly gives the user benifit, even if it is just showing off or watching scenic videos to take the mind off of the numbing tedium.

So just like many other items of home / household tech from diminutive MP3 players up to the largest of flat screen TV’s. Much tech that goes in kitchens such as menu driven microwaves, and even some clothes irons have System on a Chip (SoC) devices on them that do WiF amongst other connectivity protocols...

January 23, 2021 10:57 AM

Clive Robinson on Friday Squid Blogging: Vegan Chili Squid :

@ JonKnowsNothing, ALL,

ARS reporting that a specialty site popped up, that posted 6,000 images of faces extracted from videos from the Parler site taken the day of the Coup Attempt.

Well now they have a list of 6000 images they still need not ID folks to enrich the data.

For instance find all the duplicates and where they were and when, then “join the dots” together on a time line for each individual...

January 23, 2021 10:18 AM

Goat on Friday Squid Blogging: Vegan Chili Squid :

@Winter, I was talking about acts specifically, while contracts may move to plain english acts are unlikely to, though improvements are being seen but basic laws are unlikely to amended for a change in language(i.e. clarity)

Also, dozen pages isn’t less given that such transactions are fairly common place, unlike terms of software agreements which mostly experienced lawyers take up.

Eg. In netherlands they would probably have a bulky contract act and multiple other acts dealing with such transactions...

January 23, 2021 9:57 AM

JonKnowsNothing on Friday Squid Blogging: Vegan Chili Squid :

@All

re: Jan 6 Coup in USA, participants meet AI/ML Tech

ARS reporting that a specialty site popped up, that posted 6,000 images of faces extracted from videos from the Parler site taken the day of the Coup Attempt.

AI/ML was used to extract the faces and remove most duplicates and then the images were stitched together into a big mug-book style collage.

The site creators make a distinction between: Face Detection and Face Recognition(ID). The first is to find faces, the second is to assign names to the extracted faces. The site does not ID anyone...

January 23, 2021 9:57 AM

Winter on Friday Squid Blogging: Vegan Chili Squid :

@Goat
” Law is also progressing into a direction. If we keep going at this pace a thousand years later legalese may dry up 🙂”

There is also a large difference between common law and civil law. Case law has much less weight in civil law jurisdictions.

I am not sure whether this distinction is the whole cause, but here in the Netherlands, any contract involving a consumer is very short. Even the sale of a house involves only a dozen pages or so (if it is that much). Most conditions that are covered by contracts in the USA, are already covered by (consumer protection) laws here...

January 23, 2021 9:19 AM

Goat on Friday Squid Blogging: Vegan Chili Squid :

@Jon, the future seems better businesses are pushing for clearer plain english contracts, Law is also progressing into a direction. If we keep going at this pace a thousand years later legalese may dry up 🙂

The Stakes are very high for most law so in all practical sense legalese won’t go away. Even If it does the volume won’t.( The GPLv3 Weighs quite a lot)

External Links

1) https://hbr.org/2018/01/the-case-for-plain-language-contracts...

January 23, 2021 8:42 AM

Goat on Friday Squid Blogging: Vegan Chili Squid :

@Jon

Re:”If one word or phrase gets redefined several times in several different places, you don’t have any definition – or meaning – at all. J.”

Well, it doesn’t work that way. Mostly the Act has a set of definitions for terms used in the act and clearly mentions the acts whose definitions apply in case the term isn’t defined there.(People here Know about Dependecy management so they know it quite well what the issue can be)...

January 23, 2021 8:01 AM

Clive Robinson on Friday Squid Blogging: China Launches Six New Squid Jigging Vessels :

@ JonKnowsNothing,

While we would all like to think we do only good things and not bad things and certainly not really bad things, the unfortunate truth is we can be convinced to do any and all sorts of bad things.

There are two sides to the “good people” delusion.

The first is as you mention, examples of which abound such as the making and using of “child soldiers” and a lot worse.

The second side is the mass delusion that somehow people who do these things are some how different. Well in the case of some they are neurologicaly different and it can be shown. Such examples are coming out of full contact sports where players become slowly different as micro brain injuries occur. Others from chemicals causing neurological damage at various points in life. Such damage is I understand irreversible currently and likely to remain so (unlike the story of the “Strange Case of Dr Jekyll and Mr Hyde”)...

January 23, 2021 6:58 AM

Clive Robinson on Friday Squid Blogging: Vegan Chili Squid :

@ name.withheld…

With regards,

“… Pardons for Offences against the United States, except in cases of Impeachment.”

There are two ways that can be read,

1, The power to pardon stops entirely at the start of impeachment.

Or,

2, The power to pardon stops ONLY with regards the impeachment proceadings in progress.

I think you will find that most politicians, judges and law professors will read it in the second way for a number of reasons, most of which make sense (you always go for minimum scope to avoide the side effects caused by “The Law of Unintended Consequences”)...

January 23, 2021 6:36 AM

Clive Robinson on Friday Squid Blogging: Vegan Chili Squid :

@ JonKnowsNothing,

Pick 1:
  $300 for a face covering or $300 for bills or $300 for food.

It will soon be the same in the UK.

As for getting PPF2/N95 masks, if you remember back this time last year or a little later I did the math. The conclusion of which was that even the highest grade physical filters you can buy and breath through unassisted would not stop the virus just significantly reduce the viral load (similar with power assisted HEPA filters)...

January 23, 2021 5:49 AM

Jon on Friday Squid Blogging: Vegan Chili Squid :

@ Goat :

That’s actually one of the things that really bugs me about the law. They go to such efforts to be carefully specific and define everything (or at least claim to) but when the rubber hits the courthouse, suddenly everything’s flexible again. “Oh, no, that doesn’t mean that, you silly person!”.

If one word or phrase gets redefined several times in several different places, you don’t have any definition – or meaning – at all. J...

January 23, 2021 5:41 AM

MarkH on Friday Squid Blogging: Vegan Chili Squid :

@name.withheld:

The interpretation you offer of the constitutional pardon language is logical, but I think incorrect.

Because I’ve been so anxious about pardon abuse, I’ve been taking in opinions from a variety of legal scholars and practitioners.

The impeachment language has a narrow meaning: no Presidential pardon can reverse any part of the effects of a Congressional impeachment ruling.

I’ve heard a reference to a long-ago case in which a POTUS reversed a pardon — which had not yet been delivered — issued close to the end of his predecessor’s term...

January 23, 2021 5:09 AM

Goat on Friday Squid Blogging: Vegan Chili Squid :

@nme.withheld…

Re:”From my simple reasoning of a plain reading of the U.S. Constitution,”

As a law student I can tell that plain reading of any law can be Very deceptive. Until you take it in context with different Clauses of the same act, different acts and judicial interpretations. It’s best left to the experts.

January 23, 2021 2:35 AM

JonKnowsNothing on Friday Squid Blogging: Vegan Chili Squid :

@Ismar Clive All

re Changes in PCR testing for COVID-19 mutations

I read an interesting side note recently about some aspects of the many sub-types of N501 that are becoming dominant form of COVID. It had to do with PCR tests for the new variants.

The focus of the article was on the variants and the PCR aspect was a side bar box.

The article box described that PCR tests use 3 segments of known COVID-19 RNA sequences to match. In non-501 COVID, all 3 segments will show positive. In N501-COVID only 2 of the 3 sections capture the presence of the virus. The 2 segments are enough to get a Positive Reading...

January 23, 2021 1:59 AM

AL on Friday Squid Blogging: Vegan Chili Squid :

@name.withheld.for.obvious.reasons
there is probably a powerful case to be made that all those Pardons were illegal.
Doubtful. I’m not hearing of any attorney making that case. The issue is “secret” pardons, including the possible self-pardon of Trump himself.
https://www.reuters.com/article/us-usa-trump-pardons-legal-explainer/explainer-with-no-self-pardon-in-hand-private-citizen-trump-faces-uncertain-legal-future-idUSKBN29Q1BP...

January 23, 2021 1:25 AM

Clive Robinson on Friday Squid Blogging: Vegan Chili Squid :

@ Ismar,

not so good news with COVID-19 trying to outrun the vaccine

Nature is a prestigious journal and those who write for it tend to take care to check their facts.

Thus what they are reporting is very probably factual, and to be honest what I’ve been expecting to happen. As noted by the scientists the human immune system is multi layer, so should be able to cope to some degree.

However there is another item that needs to be considered, and that is the genetic lineage of those who’s blood serum has been tested...

January 23, 2021 12:33 AM

name.withheld.for.obvious.reasons on Friday Squid Blogging: Vegan Chili Squid :

Legal Challenges to President Trumps Pardon Authority
Given that the Pardons issued by the former President are questionable on moral and ethical grounds, there is probably a powerful case to be made that all those Pardons were illegal.

From my simple reasoning of a plain reading of the U.S. Constitution, the President did not have the proper authority to pardon ANYONE. As impeachment is reserved exclusively to the House of Representatives, Impeachment is on the finding from the House, the conviction upon articles of Impeachment is the sole jurisdiction of the U.S. Senate. The Power to Pardon is striped from the President upon Impeachment, it says nothing of the status or findings regarding the Impeachment which occurs in the U.S. Senate. In other words, once a President is impeached in the House, the Pardon authority is revoked automatically...

January 22, 2021 11:50 PM

Blake on Friday Squid Blogging: Vegan Chili Squid :

@SpaceLifeForm
NCov2019, Wuhan one year later…Misinformation vs truth. Dancing in clubs. It’s going to become a hotspot again.

Meanwhile actual evidence, if it matters, has already shown that Covid-19 was present in Europe months before it was found in China.

As to misinformation? You get that from countries like Sweden and Australia as well. And the sort of “dancing-in-clubs” mentality, it’s not much better here in USA. A large amount of the population still thinks that its a hoax. At least the Chinese took it seriously as a society...

January 22, 2021 11:30 PM

SpaceLifeForm on Friday Squid Blogging: Vegan Chili Squid :

RIP Hammerin’ Hank

Truly a man of great character, humility, and strength.

I should not have to say this, but I must.

Everyone should aspire to be this great of a person.

It has nothing to do with the colour of your skin.

We are all humans and can do better. And we must.

January 22, 2021 10:44 PM

SpaceLifeForm on Friday Squid Blogging: Vegan Chili Squid :

NCov2019, Wuhan one year later.

Check the headlines from around the world. Crazy.

Misinformation vs truth. Dancing in clubs. It’s going to become a hotspot again.

January 22, 2021 9:23 PM

JonKnowsNothing on Friday Squid Blogging: China Launches Six New Squid Jigging Vessels :

@Clive Winter Goat All

re:Doing Bad to do Good

Generic Comment:

While we would all like to think we do only good things and not bad things and certainly not really bad things, the unfortunate truth is we can be convinced to do any and all sorts of bad things.

Military Systems do it all the time. Documentaries exist that explain how its done and how the authorities strip people of their individual identities and replace them with a faux-sense of identity...

January 22, 2021 8:46 PM

Goat on Friday Squid Blogging: China Launches Six New Squid Jigging Vessels :

@Winter, re:”Those going to fight for Al Qaeda or IS are the same spirit,”

Sometimes people are brainwashed into thinking they are doing something good or lured by material pleasures. Troublemakers aren’t all that common. Most terrorists are disillusioned people serving as tools in hands of trouble makers.

January 22, 2021 8:16 PM

Kermit_the_Frog on Friday Squid Blogging: China Launches Six New Squid Jigging Vessels :

I have no idea who Mr. Lindell is, but Jane Krakowski looks friendly.
I am in hibernation at this time, but will be available for testimony in a few months or so. Please direct any inquiries to Miss Piggy. We suspect Constantine is behind this evil plot. If needed, we will call upon Joe the Legal Weasel.

hx tps://www.nj.com/entertainment/2021/01/njs-jane-krakowski-shuts-down-mypillow-ceo-romance-rumors-would-rather-date-kermit-the-frog.html...

January 22, 2021 7:04 PM

D-503 on Friday Squid Blogging: Vegan Chili Squid :

A gentle reminder that connecting your junk to the internet is a bad idea:
ht tps://www.theguardian.com/commentisfree/2021/jan/13/when-hackers-can-take-your-nether-regions-hostage-something-has-gone-very-wrong
ht tps://www.vice.com/en/article/m7apnn/your-cock-is-mine-now-hacker-locks-internet-connected-chastity-cage-demands-ransom
“A hacker took control of people’s internet-connected chastity cages and demanded a ransom to be paid in Bitcoin to unlock it.”...

January 22, 2021 6:42 PM

Clive Robinson on Cellebrite Can Break Signal :

@ Rachel,

I am unclear about whats appears to me as a couple of leaps

I think you are refering to this,

“And in the case of “Signal”, it’s “developers”, and the “business model” you have no input, no control, and other people such as US legislators and judiciary have it all.”

As far as Moxie and friends are concerned, they want to eat have a roof over their head as well as a place to work and pay for the server(s) Signal uses. Thus they have to have some kind of business model to do the above even if it’s only “pass the hat around” at the bar on a Friday night...

January 22, 2021 5:03 PM

Rachel on Friday Squid Blogging: China Launches Six New Squid Jigging Vessels :

AndyF

genuine question. What makes you so sure that data was not in the public interest? Why have you assumed Pfizer are the trusted actor, and the others are the untrusted actors, and then thrown in some nice ‘anti vax morons’ for good measure?
I’m not getting into a vax good, vax bad debate as this is not the place. But you’re made some seriously critical, unverified assumptions

...

January 22, 2021 4:59 PM

Rachel on Cellebrite Can Break Signal :

Hi Clive

sincere thanks
it was clearly, only, a United States-North American who settled on the name ‘Eve’ to describe that particular party! Bob and Alice on the other hand are innocuous white bread.

while, as usual, your arguments are convincing. I am unclear about whats appears to me as a couple of leaps [over the pond]

I refer to the leap from Signal to ‘US legislators’.
Of course, you mean the comms channel as we are not on a Signal LAN...

January 22, 2021 4:16 PM

JR on SVR Attacks on Microsoft 365 :

@Lurker

I think they realize it now. The US Gov produces most of the regulated data, so it would primarily be for them. Otherwise neither the US Gov or the regulated private sector will be allowed to use the Cloud. A few regulators were already suggesting that for the critical infrastructure sector. And of course this is going to be the result of this hack. The CEO of VMW jumped to Intel. That says everything about our future...

January 22, 2021 12:32 PM

lurker on SVR Attacks on Microsoft 365 :

@JR

If we had a Government protected Internet for regulated data: …

First “we” have to elect a government who believe that this is their duty, in the interest of their constituents. That’s a big ball of dung to roll uphill…

January 22, 2021 11:33 AM

JR on SVR Attacks on Microsoft 365 :

@all

Perhaps we need to look at cybersecurity through a different lens now?

We keep focusing on methods to secure access to data and network monitoring. But the bad guys will always figure out how to overcome those obstacles.

If you look at the reason why cloud exists, it is clear where we need to go next. Cloud was created for ‘capacity on demand’ and because data centers were running out of space and power every few years...

January 22, 2021 8:17 AM

Clive Robinson on SVR Attacks on Microsoft 365 :

@ JR,

The French CNIL doesn’t seem too invested. They gave Google permission to not abide by GDPR.

Hence my foreboding if the French make a power push whilst Germany are sorting out their potential politicsl problems.

But there is more to it than just that back last century a head of the French external security services (their version of MI6/CIA etc) was interviewed by if I remember correctly CNN. He frealy admitted that the French carried out economic espionage as it was more cost effective than the waste in R&D[1]...

January 22, 2021 4:44 AM

Winter on Friday Squid Blogging: China Launches Six New Squid Jigging Vessels :

@Clive
“They all in effect describe a “trouble maker” that needs an excuse any excuse to make trouble.”

That also holds for terrorists. Those going to fight for Al Qaeda or IS are the same spirit as those youngsters that fight for Neo-Nazis, KKK, White supremacists, South American death squads, drug gangs, Italian Mafia and so on.

They all want to kill people and any excuse and any people will do...

January 22, 2021 4:19 AM

Clive Robinson on Friday Squid Blogging: China Launches Six New Squid Jigging Vessels :

@ Winter, Goat,

Whether there is much of a difference between these crowds is to me an open question.

Ever heard the expressions “Rebel without a cause”, “Samari without a master”, “Gun for hire”?

They all in effect describe a “trouble maker” that needs an excuse any excuse to make trouble.

So one day they appear for a cause, the next against it, the only commanality is the pleasure they get from causing trouble...

January 22, 2021 3:09 AM

Clive Robinson on SVR Attacks on Microsoft 365 :

@ Ismar,

even if that means loosing some of our productivity

The dread “Productivity mantra”

It’s a buzz word that has no real meaning, but does one heck of a lot of harm.

The supppsed theory behind it is that humans are lazy in that they might work hard, but they don’t work smart, therefore they are working below capacity.

Which when processed by some peoples thinking basically means you need to “crack the whip”. Which in turn means installing lots of surveillance and sacking people that do not meet some metric they are set, no matter how meaningless the metric. The result is whilst there might be a few slackers in the organisation repeated rounds of sackings actually kill the organisation. For two basic reasons,...

January 22, 2021 2:40 AM

live22 on Announcing: Movie-Plot Threat Contest :

Discussion of the articles that you have created is very interesting and helpful, especially for me personally. I think I need to share with my friends and relatives, so that they read this useful thing!

January 22, 2021 1:31 AM

zee raja on Term Paper Writing for Hire :

Fundamentally, this is a problem of misplaced economic incentives. As long as the academic credential is worth more to a student than the knowledge gained in getting that credential, there will be an incentive to cheat.

January 22, 2021 12:47 AM

Ismar on SVR Attacks on Microsoft 365 :

After reading only the first couple of paragraphs of the Fireeye’s report it became clear that this is yet another case of us people not able to make fully secure software systems once their complexity reaches a certain level.
So instead of trying to constantly patch security holes in these complex systems we should learn to live and work with less complex ones even if that means loosing some of our productivity- word that is often misunderstood and misused in modern Systems...

January 21, 2021 11:46 PM

Ismar on Sophisticated Watering Hole Attack :

Isn’t the life full of paradoxes- some of the Google security engineers may, in couple of years, end up working for NSA to help with another Zero Day, and perhaps even stranger some of the people who wrote the Zero days may eventually end up at Google or Microsoft

January 21, 2021 9:34 PM

Anonymous on Friday Squid Blogging: China Launches Six New Squid Jigging Vessels :

Hope that I already wished everyone a Happy New Year. Sleepy Joe seems like less of a risk with the football. This reminded me of the other Clive. File under Starfish Prime:

The lamps you’re not allowed to have. Exploring the Dubai lamps
https://www.youtube.com/watch?v=klaJqofCsu4
1,233,224 views•Jan 12, 2021

bigclivedotcom
707K subscribers

These fascinating lamps are a result of a collaboration...

January 21, 2021 9:30 PM

mikethomson on Spammers Using Porn to Break Captchas :

Thanks for taking the time to discuss that, I feel strongly about this and so really like getting to know more on this kind of field. Do you mind updating your blog post with additional insight? It should be really useful for all of us. Freevideo

January 21, 2021 8:31 PM

JR on SVR Attacks on Microsoft 365 :

The UK wrote the original data privacy laws and one can only hope. US law is based on the UK so we often need the UK to show us the way. One thing I’ve learned if we put our hope in one person to solve everything we will always be disappointed. It is up to us to ‘collectively’ make changes.

I learned most of what I know about Cybersecurity from Germans. They really get it. The French CNIL doesn’t seem too invested. They gave Google permission to not abide by GDPR...

January 21, 2021 8:22 PM

Winter on Friday Squid Blogging: China Launches Six New Squid Jigging Vessels :

@ SpaceLifeForm,
“I don’t know nor read what you did to make the ai bot go ballistic.”

@Clive
“The bot or it’s operator?”

It started after I wrote about Vlad the Poisoner, Vlad Otravitel Putin (влад отравитель)

Maybe they are sensitive, like that Pooh bear guy?

January 21, 2021 7:56 PM

Clive Robinson on SVR Attacks on Microsoft 365 :

@ JR,

This will make the EU and UK ICO happy too. Safe Harbor may then return.

I’d rather the Safe Harbor did not return it was a load of nonsense in the first place with US companies not even paying lip service to it. Instead I’d much rather the US sort out a worthwhile set of data protection laws.

With regards Europe, it rather depends on what happens with Germany at the end of summer this year,...

January 21, 2021 6:46 PM

JR on SVR Attacks on Microsoft 365 :

@Foreigner

Apologies. You did a great job.

IAM – Identity Access Management – access control
2FA – two factor authentication
MFA – multi factor authentication
SIEM – Security Information Event Management – tools that monitor networks
DLP – data loss prevention. Usually achieved by controls and monitoring

Here’s another one:

CMMC — Capability Maturity Model Certification

Also known as NIST 800-171 it is similar to ISO 27002. In order for an IT vendor or service provider to sell to the US Government this certification is now required. CMMC Certifications will be required for Cybersecurity professionals too. If this certification program existed a year ago, this FireEye and SolarWinds fiasco would not have happened. This program will create an AVL (approved vendor list) for the government and the regulated private sector...

January 21, 2021 5:45 PM

Soket on Sophisticated Watering Hole Attack :

I sometimes wonder about the 0day window of opportunity and if that isn’t actually being exploited by security services, with high tech top manager alliances. Obviously google project zero researchers are highly skilled and their disclosure efforts seem to reveal a high ethical standard but nevertheless I keep wondering If they couldn’t be being exploited without their knowingless or maybe I’m just too naive. I guess that sets me in the high conspiracy spectrum, but I always have that voice on my head saying “Google Is Evil” given the amount of power and skilled people they have...

January 21, 2021 4:55 PM

Foreigner on SVR Attacks on Microsoft 365 :

@JR:

This blog is widely read around the world. Some of your abbreviations are not commonly understood.

IAM – ?
2FA – two factor authentication
BYOD – bring your own device
FB – Facebook
SSO – single sign on
MSFT – Microsoft
VPN – virtual private network
AD – active directory
MFA – ? multi-factor authentication (NOT Master of Fine Arts)
WFH – work from home
SIEM – ?
SEC – Security and Exchange Commission...

January 21, 2021 3:00 PM

Clive Robinson on Friday Squid Blogging: China Launches Six New Squid Jigging Vessels :

@ SpaceLifeForm,

I don’t know nor read what you did to make the ai bot go ballistic.

The bot or it’s operator?

By the looks of it the bot is quite simplistic, almost a childs toy. I’m guessing it is a script and word list system. Worse some of the scripts are paragraph length hence the style repetition over and over like a squeaky hamster wheel.

You will note that the bot output changed when things were said about it like @Goats suggestion of a rude word filter got loads of rude words with an ampersand in them...

January 21, 2021 2:10 PM

@Winterpee on Friday Squid Blogging: China Launches Six New Squid Jigging Vessels :

@Winter:

One day while Andy was mastur&bating, Woody got wood. He could no longer help himself! He watched as Andy stroked his juicy kawaii co&ck. He approached Andy which startled him and make him p&ee everywhere on the floor and on Woody too. Being drenched in his ur&ine made him harder than ever! Woody: “Andy Senpai! I’m alive and I want to be INSIDE OF YOU.” Andy: “Oh Woody Chan! I always knew you were alive! I want to stuff you up my kawaii a&ss!” Woody grabbed a bunch of flavored live and rubbed it all over is head Woody: “Oh my! It’s cherry flavored lube! Cherry is my favorite! Woody then stuffed his head up into Andy’s tight a&ss! The other toys around the room watched intently as Woody shoved his head back and forth into Andy’s nice a&ss, continuously making a squishy wet noise. The other toys also became aroused and they all gathered around Woody and Andy and started to urinate all over them, and then they started to mastur&bate. Andy: “Oh my goodness, Woody Chan! You are churning my insides up so well! Your nose is stimulating my prost&ate! OH YES! All the other toys became so arou&sed by this, that they could not help themselves anymore! They pushed Woody completely inside, and they all went inside. All of them wanted to be inside Andy’s nice round a&ss. Andy: “No wait guys! My a&ss cannot hold this much! I’m getting so full! All the toys went inside of poor squirming Andy and pretty much, he was beyond full, and die&d from having his insides completely damaged. The mother came inside and found Andy, dea&d with a huge a&ss hemorr&hage on his an&us, with a HUGE belly full of toys...

January 21, 2021 1:53 PM

Clive Robinson on Friday Squid Blogging: China Launches Six New Squid Jigging Vessels :

@ Winter, Al,

We don’t borrow from China anymore.

Actually the US did not do that much borrowing from China, when compared to what China was “investing” by buying up US companies etc. There were various reasons China did this, one of which was it made war less likely.

The other reason is they were taking advantage of US stupidity. China gets money for supplying “trade trinkets” to the US. China then used the profits to aquire US assets thus giving the US it’s money back to buy more “trade trinkets”. Each time the wheel went around the Chinese gained more US assets that appreciated with time, and US citizens got more “trade trinkets” that devalued rather rapidly with time...

January 21, 2021 1:43 PM

Winterpee on Friday Squid Blogging: China Launches Six New Squid Jigging Vessels :

@Winter:

Look, having nuclear—my uncle was a great professor and scientist and engineer, Dr. John Winter at MIT; good genes, very good genes, OK, very smart, the Wharton School of Finance, very good, very smart—you know, if you’re a conservative Republican, if I were a liberal, if, like, OK, if I ran as a liberal Democrat, they would say I’m one of the smartest people anywhere in the world—it’s true!—but when you’re a conservative Republican they try—oh, do they do a number—that’s why I always start off: Went to Wharton, was a good student, went there, went there, did this, built a fortune—you know I have to give my like credentials all the time, because we’re a little disadvantaged—but you look at the nuclear deal, the thing that really bothers me—it would have been so easy, and it’s not as important as these lives are (nuclear is powerful; my uncle explained that to me many, many years ago, the power and that was 35 years ago; he would explain the power of what’s going to happen and he was right—who would have thought?), but when you look at what’s going on with the four prisoners—now it used to be three, now it’s four—but when it was three and even now, I would have said it’s all in the messenger; fellas, and it is fellas because, you know, they don’t, they haven’t figured that the women are smarter right now than the men, so, you know, it’s gonna take them about another 150 years—but the Persians are great negotiators, the Iranians are great negotiators, so, and they, they just killed, they just killed us...

January 21, 2021 1:32 PM

@Winterpoo on Friday Squid Blogging: China Launches Six New Squid Jigging Vessels :

@Winter:

It all started when I was on Twitter and I went to check out my friends page just to see he retweeted a beautiful lady named Corinna Kopf’s picture of her in a bikini, I felt something I have never felt before, I know I mastur&bate a lot but this time it was different. I had a raging bo&ner as I saw that pic and instantly followed her with notifications on. I then started scrolling down her photos tab as my di&ck began to get bigger and bigger it felt like I was gonna ri&p my pants due to how aroused I was seeing a girl in bikinis and in her hot tub, I had to leave my phone on the table cause I couldn’t stop scrolling. 5 minutes later I still had that bo&ner to the point where I couldn’t contain myself and just mastur&bated to her Twitter posts, I busted the biggest load I have ever done in my life. From that day I mentally changed and I haven’t missed a Facebook stream of hers and I always get a bo&ner on those streams and I just mastur&bate to her and nut and continue watching her stream. I don’t know how I can stop this, SOMEONE HELP ME...

January 21, 2021 1:22 PM

JonKnowsNothing on Friday Squid Blogging: China Launches Six New Squid Jigging Vessels :

@ Clive @ Prelurk

re: South Africa Donor Plasma Mutations

iirc There was a report about a Antibody Resistant version of COVID-19 developed in a person who was getting convalescent plasma for a long time (5months until death).

During the 5 months the person received various plasma infusions with different antibodies creating a living petri dish mutation factor for COVID-19. COVID-19 antibody resistant variants were traced to this practice...

January 21, 2021 1:16 PM

JR on SVR Attacks on Microsoft 365 :

I wonder why Microsoft is not recommending using their Insider Risk product to solve this? Couldn’t Insider Risk be configured to identify and report on these anomalies?

Unfortunately, IAM and Systems Admin is often outsourced at arms length, especially now with the virus. Add to that many institutions lack systems, users or data inventory negating the ability to ascertain whether anything has been compromised...

January 21, 2021 1:13 PM

AL on Friday Squid Blogging: China Launches Six New Squid Jigging Vessels :

@Winter
“Being financial irresponsible when the alternative is death is a rational decision.”

‘Cept one tiny detail. The QE started in 2019. The stage was set at the end of 2018 when the market dropped. Although the mandate of the Fed is to maintain stable employment and stable inflation, Powell decided to prop up the stock market with lower interest rates. As the Fed continued to reduce interest rates, there became less lenders willing to lend, since there wasn’t adequate return on their money...

January 21, 2021 12:54 PM

Clive Robinson on Friday Squid Blogging: China Launches Six New Squid Jigging Vessels :

@ Prelurk,

Not having any joy with you URL.

However,

escapes neutralization by South African COVID-19 donor plasma

I suspect tells me what you are asking.

And yes “convalescent donor plasma” does not work on any people injected with it in UK hospitals under the Oxford “ReCoVer” trials either for which there is a peer reviewed paper.

Although formal studies have not been carried out as to why convalescent donor plasma has not worked (because such studies would now be unethical). It is probably due to the way SARS-CoV-2 in all it’s varients works...

January 21, 2021 12:26 PM

Winter on Friday Squid Blogging: China Launches Six New Squid Jigging Vessels :

@Al
” We don’t borrow from China anymore.”

The reason is that China found a much better way to use their excess US dollars. China lends it’s dollars to the countries of the belt and roads initiative.

Instead of propping up the consumption and GDP of the USA, they are now using the dollars to propp up their influence in Asia and Africa (and Eastern Europe).

That seems to be the real reason the US is so mad at China...

January 21, 2021 11:08 AM

JonKnowsNothing on Friday Squid Blogging: China Launches Six New Squid Jigging Vessels :

@MarkH

re:brings his own foodstuffs and cooks

I dunno about P, but a lot of folks do bring their own foods and cooks (if they can afford them). They have a variety of reasons.

1, Religious – restricted diets (no animal protein)
2, Allergies – anaphylactic shock (peanut satay sauces)
3, Food Illnesses – avoiding road sickness (actors, singers, opera, politicians)
4, Personal Preference – specialty diets (Oprah traveled with a personal chef for health concerns)...

January 21, 2021 10:53 AM

1&1~=Umm on Friday Squid Blogging: China Launches Six New Squid Jigging Vessels :

Winter:

“Does it pass the Turing test?”

It obviously,

‘Does not pass the Trump test’

Of the ‘little boy’ lies.

That is it’s fakery does not even come close, to that of William “Fat Man” Barr esq’s tactic of moving the figures around untill they fit the appalling counterfactual narative you want to portray.

In fact, to do it so badly is not a very bright thing to do because other people can use the same very public domain information to show what a fake story it is they are trying to portray...

January 21, 2021 10:24 AM

QThePowerOf on Friday Squid Blogging: China Launches Six New Squid Jigging Vessels :

@Winter:

SS: Nearly 1000 people have died in America today from Covid under Joe Biden’s leadership. This is just terrible. He is personally responsible and has blood on his hands.

The conspiracy – see how Covid propaganda works? This exact statement was said over and over again for the last year – but with Trump instead of Biden.

Will this type of reporting continue?

January 21, 2021 9:58 AM

Goat on Friday Squid Blogging: China Launches Six New Squid Jigging Vessels :

re:”Does it pass the Turing test?”

I bet he/she would, Satire isn’t as well attempted by bots until now.. 😉

@Moderator, My word filtering wouldn’t work they can put & in between.. & Waste their own time, since no one would read their comments.

January 21, 2021 8:54 AM

Clive Robinson on SVR Attacks on Microsoft 365 :

@ ALL,

There is a saying about not “putting all your eggs in a basket”.

The implication being if the basket breaks, gets dropped, etc then you loose the lot.

Now bearing in mind that is advice to just one entity, what do you say to the very many people putting all of their eggs in one very large basket?

Because when that big basket dreaks or is dropped everybodies eggs get lost.

That’s what happens with federated systems that give individuals cloud services, and one of them looses it’s authentication secret...

January 21, 2021 8:15 AM

1&1~=Umm on Friday Squid Blogging: China Launches Six New Squid Jigging Vessels :

Winter:

An analysis of the cadence of the attack and the stylistic paragraph openings does indead suggest it is not of inteligent design.

That it is automated in some way is shown by the length of the posting and time stamp differences. Oh and that the error ratio is small.

We have seen this before.

@ Moderator,

This is not an attack on an individual blog poster but an attack on the blog it’s self...

January 21, 2021 7:00 AM

Fertility on Friday Squid Blogging: China Launches Six New Squid Jigging Vessels :

@Winter

My mad insatiable lust for successful women can no longer be contained!

You would cry happy tears if you knew the importance of this divine sexual mission that I am on. The sheer force of my will is enough to drive back any sense of rational thinking, I am propelled forward by nothing but the turgid veins in my hungry peni&s.

I am a man on a mission, who will stop at nothing to get what I want. Your feeble dainty woman hands are nothing compared to my big strong man arms. I want your hole, your pulsating meat sheathe under the sheets. Your warm moist cavity of love and fertility...

January 21, 2021 6:33 AM

Serious Observer on Friday Squid Blogging: China Launches Six New Squid Jigging Vessels :

If privileges must be earned, why do we pit this concept against that of being disadvantaged? By default, it is no secret that a certain level of responsibility must be attached to the notion of reward. Nothing would get done, if this were not the case. Seems simple enough, no? Despite being apparent in something as generic as raising a child (one of the most notorious prerequisites required for economic involvement, inscribed within our genetic coding, simultaneously natural and artificial) this primitive teleological force has not yet proven itself to be anything less than crucial to the sustenance of complexity...

January 21, 2021 3:51 AM

Winter on Friday Squid Blogging: China Launches Six New Squid Jigging Vessels :

@Goat
“But we can do things to make the response less effective:”

All true. You can attack the individual points, but the root problem I see is that society has served them badly.

On every front, they were betrayed by the politicians they voted for, and by the civil servants who should serve them.

In the big picture, median household income has stalled since 1980, while everyone is putting in more hours. Doctors prescribed pain-killers that killed more people than COVID has yet killed. Good education is out of reach for most kids...

January 21, 2021 3:37 AM

Clive Robinson on Injecting a Backdoor into SolarWinds Orion :

@ SpaceLifeForm,

Microsoft has collected and analyzed a lot. But I think they realize they have not found enough yet.

Interestingly even their researchers are calling the US Gov “t’wos Russia wot dunnit” a lie from the very first sentence,

“More than a month into the discovery of Solorigate, investigations continue to unearth new details that prove it is one of the most sophisticated and protracted intrusion attacks of the decade.”...

January 21, 2021 3:02 AM

Clive Robinson on Cellebrite Can Break Signal :

@ Rachel,

Can Moxie Marlinkspike be trusted?

Wrong question… Try,

“Why should Moxie be trusted?”

To which the answer, in a security setting, is effectively “NO”.

This is not an assessment of “Moxie” in human terms, but of “any entity in a security system”.

The same applies from the LED on the front panel of a box[1] or even “apparently passive” components[2] upwards, and that includes the box it’s self[4]...

January 21, 2021 2:53 AM

Goat on Friday Squid Blogging: China Launches Six New Squid Jigging Vessels :

@Winter, Space, All

Conspiracy theories are a competitive market, it is inevitable that the most effective Survive. But we can do things to make the response less effective:

  • Trust in the media: The media doesn’t do things that can foster trust, This is also due to the internet business models that define “impressions” as clicks.
  • Walled Gardens: Everyone of these people are livingin their own walled gardens,algo censored to suit their beliefs...

January 21, 2021 2:09 AM

MarkH on Friday Squid Blogging: China Launches Six New Squid Jigging Vessels :

@Winter, Clive:

Some years ago, I was impressed by encountering the assertion that when Putin travels, he always brings his own foodstuffs and cooks with him.

If you see an image of Putin at a state dinner, he is eating a different meal from all of the other attendees.

Quite the charmer, he. And now his special friend has lost influence …

January 21, 2021 2:04 AM

Winter on Friday Squid Blogging: China Launches Six New Squid Jigging Vessels :

@Space
“Do not rub it in. Help them. As best you can. It will not be easy.”

I would find it difficult to do so, but you are right.

Qanon is not your random conspiracy theory, but one of the vilest I have encountered. On the other hand, it pushed the deepest buttons in the human mind: Children. So, I assume many of the “victims” were sucked in by their best intentions.

But that was also how the Spanish Inquisition worked, one of the cruelest institutions in human history, who burned people alive to save their souls...

January 21, 2021 12:18 AM

Winter on Friday Squid Blogging: China Launches Six New Squid Jigging Vessels :

@Clive
“I was told it ment “poisoner of food” after someone sprayed polonium around in a food bar.”

Google translate says that “food poisoner” is translated as:
pishchevoy otravitel (пищевой отравитель)

That would sound as you remember.

January 20, 2021 10:24 PM

SpaceLifeForm on Injecting a Backdoor into SolarWinds Orion :

@ Clive, JR

My Q’s where rhetorical. It was a TLA that had assets burned.

Yes, the double encryption could be false flag. Maybe not.

JR, I have thoughts, but I need to go thru your points with much more thought. A lot to digest and mind meld with other stuff. Appreciate your input.

Consider this scenario: Matryoshka APTs/TLAs.

Think about Compartmentalization.

The Solarwinds Orion backdoor feels like a platform...

January 20, 2021 10:02 PM

Rachel on Cellebrite Can Break Signal :

Moxie Marlinkspike was interviewed by Joe Rogan quite recently.
Perhaps inspired by Snowdens two recent appearances.

Serious question. Is the grassroots Bay Area Blag Flag listening cypherpunk facade just incredibly useful marketing?

Can Moxie Marlinkspike be trusted?

I’d really like to know what you think. Can he?

Matthew Green has written recently on Signal.

https://blog.cryptographyengineering.com/category/signal/...

Sidebar photo of Bruce Schneier by Joe MacInnis.