* Posts by P. Lee

5267 publicly visible posts • joined 4 Dec 2007

Microsoft waltzes users through Azure by killing VM conversion tool

P. Lee

Well we never saw that coming did we?

No siree! Removing features once market share is high enough to drive lock-in?

I wonder what it will be like when everything is in the cloud and there are no downloads ever?

Ransomware dodges EMET

P. Lee

Re: A crisis in winTel land

Possibly, but the question is, why is flash so privileged that exploiting it is worthwhile?

Sandbox that whole browser process and its children. No network socket access, chrooted disk, read-only disk except for a stub directory/Object storage, http/s access only via a hardened local OS proxy which logs and can filter.

Read-only OS partition? Read-only installed software partitions?

Browsers don't need privileges. Use repo's or execute by default in a sandbox.

Intel reveals Xeon E7 v4: Is that 24TB in your pocket or are... oh, it is

P. Lee

"Fewer cores means fewer bucks on enterprise software licenses."

Yeah, that's what we were told about CPU sockets, too.

Its all fun and games until you mess with someone's income model. Next up, software licensed on bogomips.

Universe's shock rapidly expanding waistline may squash Einstein flat

P. Lee

Re: Too early to tell.

>The 'Dark' is an explicit statement of ignorance.

And it's a good thing to admit that we don't know what's going on. I think the objection is that the terms "dark matter" and "dark energy" appear to be designed to give the impression that we know more than we do.

If we substitute P (pixie dust) for dark matter and M (magic) for dark energy we haven't actually got to change the equations.

This doesn't change the investigative science but it might redress the balance in the weight we give to scientific pronouncements based these things in the layman's mind.

"Dark matter is stuff we know is there but can't detect with today's instruments" and "sometimes the results don't tally with expectations" sounds like homeopathy with better jargon.

Undefined stuff with undefined effects is not strong science. That doesn't invalidate the idea, but for laymen, a caveat of "Here be dragons" might be more enlightening, even if it does strip the scientists of some of their priestly robes.

North Korea clones Facebook, forgot to change default creds

P. Lee

Re: Why is everything on the sign-in page in English?

So, do we still believe western media?

Because it tells us what we want to hear.

Helium... No. Do you think this is some kind of game? Toshiba intros 8TB desktop drive

P. Lee

Re: Cue the pain in 2.0001 years

Maybe the 8tb is the backup for the network.

P. Lee

Why 8 tb for gamers?

Maybe gamers are often tech heads who also run pvr's.

Maybe they rip all their CDs and DVDs to their home network too.

You don't need no STEEENKING GPU, says Intel

P. Lee

Re: Bloody 'Ell

>why would one want a Xeon for 4K streaming, pray tell ?

The only reason I can think is to split the a noisy workstation from an ultra-quiet frontend. Two 4k streams speaks to a dual-monitor setup and a fairly good LAN connection.

Not two, not four, but 10 cores in Intel's new PC powerhouse

P. Lee

Re: Coincidence??

>10 times the telemetry?

I doubt it links to Windows. More likely they've disabled 6 cores so they can sell an easily manufactured upgrade later.

Mouth, meet nasty taste.

Interestingly, if arbitrarily multi core systems take off, it leaves scope for popping lots of cheap arm chips in a box.

Surface Book nightmare: Microsoft won't fix 'Sleep of Death' bug

P. Lee

Re: Latest Drivers do help, somewhat...

Hibernate is fine if you have a low spec machine.

Load it up with ram and it becomes less usable.

As lots of other people have said, several generations of Macs do it just fine and the whole point of a vendor-appliance is that they have supposedly sorted out issues like this.

It's another war story to add to the list of, "we're stuck with MS because of the cost of moving, but we do quite loath them." and with top-end machines like these, it will infect the minds of important people who will assume MS is rubbish in general. That can cost MS in the long-run and its why it is better to hold off releasing a product until it is ready.

P. Lee

Re: Still copying Apple

>If your Mac is in sleep mode, hitting a key on a Bluetooth keyboard or moving a Bluetooth mouse will wake it up

Which is *really* annoying. They keyboard is fine, but a mouse shouldn't wake it up - they are far too sensitive for that.

The Windows Phone story: From hope to dusty abandonware

P. Lee

Re: Too little too late

>>>Every one I know hates Microsoft software

Perhaps "hates" is over-egging it.

It does, however, remind most people of the 9-to-5 grind. Who wants to take that with them at the weekend?

Another fail of Universal UX.

P. Lee

Re: "Universal" anything is always a disaster...

>Lying behind that is probably a mistaken belief that 'we'll get it right even if everyone else has failed'.

I don't think that was it. Their problem was that there few windows phone apps so they were hoping to leverage their desktop application dev army. Hence, the abomination which is W8.

They should have gone for security and privacy as their USP, but they shot that idea down with W10 and then viciously stomped all over it with their backports to W7.

So yes, I'll take the free "upgrade" to W10, but it will sit on a very lonely and under-utilised partition with a couple of games. Another freebie W10 system runs in a VM for customers who insist on that sort of thing. All *my* stuff gets done on Linux. Even my gaming purchases only go forward with that magic little "steamplay" icon.

P. Lee

Re: I wonder when Microsoft is finally going to pull the plug.

>Intel's problem is not the architecture ... its the management.

Or perhaps the profit margins.

ARM gets by on very little. If Intel start producing low power, low cost x86, will it eat into the Windows laptop market, but at very low margins? Would it be hard to justify other products?

The danger is in whether ARM will be able to move up and eat that market anyway. Or will everything go Cloud/VDI, so that ARM doesn't need to move that far up market for Intel to lose that segment?

My guess is that Intel want to hold off that day for as many years as possible.

$10bn Oracle v Google copyright jury verdict: Google wins, Java APIs in Android are Fair Use

P. Lee
Trollface

Re: Google must have paid big bucks...

Obvious Troll is Obvious

Dropbox gets all up in your kernel with Project Infinite. Cue uproar

P. Lee
Holmes

"Clunky at best in a web browser"

Wassat Sherlock? A web browser is not an OS? Heresy!

I have some sympathy for the idea of a kernel-based system, in that we'd expect other remote storage protocols such as iscsi to live in the kernel, and we'd also expect proprietary device drivers to be in the kernel, but (and its a big but!) I think the main issue is that we just don't trust web2.0 companies to behave properly. Would I trust Javascript devs with my kernel?

No.

But then again, cloud storage is not for me either.

A UK digital driving licence: What could possibly go wrong?

P. Lee

Re: OK, I'll bite

If I want a digital license, I'll use my mobile phone to take a picture of it.

China caught astroturfing social networks

P. Lee

Re: Will they carry out a similar study ...

>I mean, the Chinese didn't invent this

Yeah, Western governments are much worse

Ooh! 50c!

GM crops are good for you and the planet, reckon boffins

P. Lee

Re: When electricity was first introduced....

Ah, the joy of cleverly designed terms of reference.

Forget what could/might be done, what are the bulk of gm sales for? Is it pest-resistance or pesticide-resistance?

If you could make un-ripe or over-ripe food look just right, would there be an economic incentive to do that?

If you could make food absorb extra water to grow larger and heavier (but with no additional nutrient value) would you do that? Would that cause malnutrition?

If you could dominate world wheat production like android and iOS dominate smart phones, what would that do for wheat genetics?

Why were Monsanto trying to sell protein-enriched potatoes in India- the land of lentils?

So much money, so much scope for irreversible lethal badness followed by "it isn't our fault. It isn't our job to regulate the industry."

Tobacco was thought to improve health when it was introduced too.

We don't have a world food shortage. We have a lack of desire to help those in need, and gm does nothing to fix that. Putting more power in the hands of large corporations has rarely been a solution to anything. It's neither needed nor desirable.

Want a Brexit? Promise you'll sort out UK universities' £1bn research cash loss

P. Lee

>1B in nothing if you look at what other western countries throw at R&D we should be outraged at such a small ammount

And we should also ask where the EU got the 1Bn they were going to give us.

Lyft, Uber throw Texas-sized tantrum over Austin driver law

P. Lee

Re: Texas

Ban the guns and ban the term "ridesharing" with respect to über. The appear to be a taxi company with a better mobile app than most.

In my mind, if I'm sharing my car, I don't pay someone a fee to do so and then get paid.

I'm all for sharing, but this isn't it.

Malware scan stalled misconfigured med software, mid-procedure

P. Lee

Why?

Forget the idea of whether it should have been installed or not, or if it was scanning too much, why would an AV scanner bring its host system to its knees? Forget the idea that a clueful techie might be available.

Surely the AV software designer would make it run as a low priority process?

Love it or hate it, it's time for that Software Power Meeting again

P. Lee

Missing the point of Change Control and dev/test/prod environments.

It isn't there to check your work. It's there to make change so painful that you check your work.

The idea is that you never want to go through it twice (even, that if you have to go through it twice you endanger the project) so you make sure you know exactly what you're doing before you do it rather than trying to wing it.

No-one wants to be in the situation of having a patch released and finding out it breaks something because the testing wasn't adequate, but there is a natural tendency in organisations to cut corners.

Woman charged with blowing AU$4.6m overdraft on 'a lot of handbags'

P. Lee

Re: No way you could 'withdraw' 4 mill from my branch of Lloyds...

>its my money!!

Only once it hits your Russian bank account.

Stop resetting your passwords, says UK govt's spy network

P. Lee

> making small adjustments. Password_1 going to Password_2 won't fly

>System sees last digit is a number, replaces that number with n-1, generates hash result (for Password_3 in this example) and sees if it is a match with existing password hash. If it is, slapped wrist.

Usually defeated with passwor1d, passwor2d etc

Microsoft: Why we tore handy Store block out of Windows 10 Pro PCs

P. Lee

>I wonder if you could get a discount on licence fees for features that are removed...

Er, yes you do.

Enterprise is the least annoying and they have a sliding scale of "annoying vs price."

It seems they are really trying to lose the consumer market. I get that it doesn't make them much direct license revenue, but even if companies accept the MS Store (which I suspect many will do rather than upgrade) there are a lot of techies and other influencers who are just revolted by their attitude.

That is going to cost them in the long run.

Old, complex code could cause another UK banking TITSUP – study

P. Lee

Re: Pah

>>"However, in the UK mission-critical banking apps have between 800,000-900,000 lines of code."

>If that is a problem, then just remove the line breaks. As a Perl programmer, I do that all the time.

Perl programmers are the reason the code has a variable number of lines.

P. Lee
Coat

Re: "Even if something has been written in Java in 90s that is still 20 years ago."

>"Does - your - sourcecode - loose it's comments on the bedpost overnightttt?"

Yes, but the bedpost is strong enough to withstand them.

US data suggests Windows 10 adoption in business is slowing

P. Lee

Re: did Microsoft kill it's cash cow?

>the equivalent of persistently assigning a drive letter to a NAS share, which in Windows takes about 30s, in Ubuntu would involve plenty of Googling, firing up the good old terminal, editing fstab, ...).

Maybe you should run Suse... ;)

Yast->Network Services->NFS Client

or from the file browser, click on "Network->Samba Shares->(workgroup/domain)->Server->(share)

Admittedly, there is still work to be done. KDE (& probably Gnome) should push their file system configs down to the OS.

The EU wants you to log into YouTube using your state-issued ID card

P. Lee

Re: Brexit?

>As things stand the European courts can slap down UK surveillance attempts

So you're giving up on making the UK democracy work and hoping someone else will over-rule our democracy.

What happens when they turn against you?

Microsoft joins the 1c/GB/month cloud storage caper

P. Lee

Sounds good!

Until you do the maths

USD$0.01=AU$0.013

8tb (8000G) = AU$510 (WD NAS drive, retail)

8000G on Azure = AU$104.00/month

ROI in < 5 months

That isn't cold storage either. I know, there are other costs, such as electricity, fancy storage management and chasses etc, but with storage this cheap, you hardly need to manage it and if its archive storage, you hardly need fancy slice & dice management layers.

My ancient core2 mobo with dual Gig ethernet has 8 sata ports giving 64TB of raw storage (say 32G usable) which would bring in $416/month mirrored, $728 if you go raid5, for data which essentially sits there doing nothing.

Yeah, so MS has a mountain of engineering it needs to do to offer this commercially and at large scale. The question is, why would a customer care about that? Why wouldn't they do it themselves?

Windows 10 handcuffs Cortana web search to Bing and Edge browser

P. Lee
Coat

"What's a Cortana?"

The best selling UK car of the 1970's?

What the slimy merchant did in Frozen?

The answer to the questions, What do you think of Kiera Knightly? Would you like a coffee? Would you like a copy of Windows 10?

The case for ethical ad-blocking

P. Lee

Re: First questions first

I'm not sure "who doesn't filter adverts" is the first question.

The first question is, to what extent should artists be paid when they aren't performing?

A couple of things stood out in the article:

1. there is no natural "right" to "intellectual property." IP is a fiction. Perhaps a useful fiction, but complaining that your monopoly is legally protected enough seems like a bad PR campaign. You might not notice a dip in revenue if youtube disappeared, but quite frankly, if most of the artists disappeared, most people wouldn't notice. Some people would, but you could lose an awful lot before most people noticed. Excludability might be the most "property-like" property of Intellectual Property, but intellectual property isn't property and in the UK at least, we often have public rights of way which (Horror!) trump private ownership.

2. "The all-powerful middleman today is Big Tech. But changing copyright in favour of the little guy takes time, and isn't easy" Would that be the "little guys" like Sony BMG et al? Do we need to strengthen the rights holders like Simon Cowell? How many "little guys" are there who would have made it, if only youtube and the ASCAP/PRS hadn't tragically taken the money that was meant to feed their starving children? If we did what the article suggests, are we just shifting profit from one middleman (big tech) to another (the music label)? Which serves the public good better?

My personal opinion is that it isn't generally the artists' skill which brings success, but the marketing. Certainly, skill is important, but the real money in the media industry comes from taking a cheap product and running a successful marketing campaign. Rinse and repeat. I'm not convinced that the film and music industries, while fun, actually improve the world that much.

Ding-dong, reality calling: iPhone slump is not Apple's doom

P. Lee
Windows

"To many, this is will be inconceivable."

I do not think it means what they think it means.

Microsoft's Windows 10 nagware storms live TV weather forecast

P. Lee

Re: Oh, yeah...

>A lot of people here will now start to cry, whinge an moan about how this will impact bussiness, blah blah blah.

"Hey, you didn't pay us for the most expensive version of Windows, so we're going to punish you with annoying and disruptive adverts, and we think that's a valid business model. Here's DaddyHoggy

to explain why this is acceptable. In the meantime, please buy more of our stuff."

Oddly enough, Suse doesn't nag me even though I'm two versions behind, neither does it listen in on my conversations in case I want to use voice control nor does it randomly upload my data to some cloud. It lacks all that functionality without me even having to reconfigure it!

Microsoft fingered for Western Euro PC tragedy

P. Lee

Re: Microsoft

>>The impact of this was seen in distributors’ official sales data compiled by venerable analyst Context, with units falling nine per cent in Q1 versus the same quarter a year ago.

>Netbooks mk II - can't they just whack Mint or Ubuntu on the things this time?

If you can avoid it, you don't want to build your business on someone-else's. They will eventually try to eat your market. That's why HP and IBM and so on do Linux. If Redhat try any funny stuff it is easy to switch and the mere threat of switching pretty much prevents them trying.

IBM says no, non, nein to Brexit

P. Lee
Meh

Re: Being in the EU...

>Just as easy to shuffle the money to IOM and Channel Islands and Gibraltar

True, but it doesn't have the same veneer of respectability.

As for IBM's opinions, meh.

Meet the malware that screwed a Bangladeshi bank out of $81m

P. Lee

Re: Follow the money

>When was the last time you heard of GCHQ or the NSA being short of cash?

Didn't the CIA run drugs to help fund their activities?

Planning to throw capacity at an IT problem? Read this first

P. Lee

Re: Errr

>Nope, but you can buy or sell a gigabyte of storage, or an hour of compute, or a thousand DNS queries. Those things are definitely commodity.

Not really. Yes you can buy "compute" but the key thing about commodities is that they are interchangeable regardless of supplier and they can be traded.

As a business, you can't substitute an hour of compute time from AWS for an hour of Azure compute time - at least probably not easily. Got a TB of storage on Azure? You probably can't swap that out for AWS storage without having some adverse impact on your applications.

Cloud companies like to pretend its all just a lump of generic compute and its a bit like trading iron or coal, but that's just marketing to make you think they aren't locking you in.

Microsoft, Google bury hatchet – surprisingly, not in each other

P. Lee

Re: Detente for a reason

And the reason is Amazon.

AWS is replacing Win32 at the server end and it ain't running on either Azure or GCloud.

My enemy's enemy....

What the world needs now is... not disk drives

P. Lee

Re: Just bought 5 4TB drives

Well you could, but why would you pay more to buy more kit to obtain more performance than you can use?

If you have 8 SSD's and it's in a NAS, You'll need 40G links before you start on the expanders.

P. Lee

Re: Just bought 5 4TB drives

And when you start looking at high-capacity systems and adding RAID, you can easily get to the point where SSD's saturate your network link long before you've got the capacity you want. In more recent systems, there may also be a problem getting enough ports (SATA3 or PCIEx) if your drives only have a few hundred Gig each.

SSD's are great for client-facing and speed-critical (e.g. VM-serving) systems etc but there's no reason at all to move a media collection to SSD. There's usually little reason to put backups on SSD unless you need to backup while a system is down. That MythTV database.... you're probably better off with a bit more RAM than faster disk. Maybe run two instances, one off a ramdisk and the other off spinning rust. The ramdisk version is the one you access, the spinning rust just sync's off it.

Bypass the Windows AppLocker bouncer with a tweet-size command

P. Lee

>>"what non-admin would ever need regsvr32"

>Make sure it's unavailable, then. Job done.

Security comes at various levels. Accidental user breaches, like flash exploits, which should be fairly easy to contain with jails and stub resource areas.

Combating users who are trying to subvert the system is much harder. You can govern the executable flag (e.g. on unix) but we're at a whole new (but possibly required) level of system examination when we are passing data which may turn out to be executable as a script.

I think one of my favoured solutions to this would be, "any system executable that takes a url as a parameter passes it through a system proxy." and its extension, "most applications use http/smb/nfs etc and therefore can use a system proxy rather than being given generic network access." Sadly, these days many a commercial OS itself can hardly be trusted, so that may not be acceptable.

With the proxy (or probably audit facility) we have some enforced auditing and possible control and the system can do the encryption/decryption so you can't sneak dodgy data in - or at least if you do, there is a record of it.

Will Comcast's set-box killer murder your data caps? The truth revealed

P. Lee

Re: One word: Monopoly

Yup!

When you have that much power, you (should) have the various parts of your business operating at arms length to each other. That means no free-passes by the internet/transmission business to the content side of the business, or vice-versa.

Australia admits to running offensive cyber-ops team

P. Lee
Unhappy

re: he'd rather be disappointed that so very few who heard* of '1984' actually got the message.

They heard it, got the message... and thought, "Fantastic!"

Utah declares 'war on smut'

P. Lee

Re: Sex Education

>Pornography, in itself, isn't a public health hazard. Not educating teenagers about the realities of sex is the health hazard.

And there's the, er, rub.

Porn is fake relationships and fake sex, but it isn't just video like other films. It is designed to provoke and link to a very real, very strong physical reaction in the viewer. It is anti-education. It works really (ahem) hard to undermine what might be learnt intellectually about it, by tapping into strong hormonal reactions. As the age of sexual maturity/puberty has dropped, but the age of intellectual maturation has not dropped in sync with it, we have a few years where children become sexually mature before their thought processes have the maturity to deal with it. Why in general do people think that its ok to have sex once puberty hits, but getting married at that age would be foolish?

If you look at most of the motivations listed in the bill the concerns are actually quite valid to one degree or another, and the resolutions basically amount to, "do more research and try to limit its spread if you can." Perhaps the high-usage rates in Utah make it more of an issue there than it is elsewhere.

The commercialisation of sexual satisfaction, where it becomes a transaction with a vendor and a customer with demands which should be fulfilled in order to warrant payment seems to me to be one of the most tragic mindset-outcome, especially as increased availability makes that the norm during formative years. Even if its non-commercial porn, there is a sense of "I go and get/download it and she becomes part of my collection. I like her." The self-centred nature of it works against what makes a stable relationship, which is putting the other person first and yes, the breakdown in the relationships and support networks has health impacts - it is a public health issue. If legislators step aside while commercial interests attack the mindset-glue which holds relationships together, is that a good thing or not?

This is not prohibition, this is just suggesting that maybe we've let commercial pimps have a little too much freedom to put their goods front and centre in society. Maybe we should think about whether the top shelf is a better place for it.

Sneaky Google KOs 'right to be forgotten' from search results

P. Lee

Re: Syntax

Maybe they complied with the law and then issued themselves with a "right to be forgotten" notice.

All-Python malware nasty bites Windows victims in Poland

P. Lee

re: dot and source only work for scripts written in the same language as the shell.

True, but /usr/bin/python or %WINDOWS%/Program Files/python/python.exe isn't exactly hard to guess.

What we want is a jailed browser process by default, and a prohibition on launching any executable (mime/extension recognition?) from disk areas the browser has write access to. I'd settle for a ramdisk with all the executables in it which gets copied and deleted after use. The browser is a high-risk interface - we know that. From a security pov, you should be able to completely compromise it and still not be able to compromise the user's general files, install persistent threats or compromise the system as a whole. i.e. (pun intended) the browser is an app controlled by the OS, not part of the OS. If you want a high-privileged (what we normally get now) browser, that should be a launch-time option, not the default.

This isn't a windows only problem - I want this for linux too. A chroot without all those interpreters (python, bash, cmd.exe, screen saver config, word.exe, excel.exe) would be a good start. The option of a non-kernel (slow but safe) display system would also be good, even if it were a boot-only option.

Linux is free - it is hard to complain about a lack of features. Windows has no excuse.

Catastrophic 123-reg VPS cockup deletes Ross County FC website

P. Lee

Re: Victim blaming

The problem is that if you use a service/asset, you should understand what you are using and at very least the T's & C's.

If the football club had a website, someone should have assessed what the cost of the website and/or data going away was and made contingency plans. If something is important to you, make your own plans to preserve it. Worst case, have some USB sticks with a copy of the website on it, or pay a different provider 14.99/month to host a manually replicated site, in case the whole provider goes away.

P. Lee

Re: And where was... Their local backup of the website?

I think the first article mentioned that the "backups" were online rather than offline so the rm -rf {foo}/{bar} took them all out at the same time. No news on whether the script ran as root or an unprivileged user but the backups were held under the same user privileges. That's Agile DevOps!

This is where automation is a bonus if you use something well tested. The point about automation is that you get people who know what they are doing to encapsulate their expertise and experience (check your parameters before you delete) which can then be safely reused by those less skilled.

You deployed a script straight into Production? Smack! The rm -rf {blank}/{blank} legend is pretty much the first thing you read if you read any unix shell scripting book. I wonder if 123-reg is reconsidering whether hiring really cheap admins is a good business decision?