* Posts by Nick Ryan

3756 publicly visible posts • joined 10 Apr 2007

Facebook spooked after MPs seize documents for privacy breach probe

Nick Ryan Silver badge

Re: History lesson

There have always been different classes/categories of shares. It's entirely up to the organisation involved and up to the investor to pay due care. In the UK at least there are various laws around the dissolution(?) of shares as in if you have a particular type of shares these may not be expanded upon and offered to others without being given the opportunity to purchase more at the same effective ratio. Or something similar - in any case the laws are surprisingly fair.

I've often wondered about the exit strategy or just business model of various of these companies. I still don't quite get how FB isn't losing money at a phenomenal rate, on the other hand they have developed, and patented (start argument here) quite a few technologies and they have in their posession a very well profiled database which they can, and are free to, utilise to promote third party services. Even at its most basic level, the hosting, development and support services have to be paid for somehow. If you're ever in doubt, follow the money trail.

Nick Ryan Silver badge

Re: Why?

Stupidly the UK police tried something similar with the raid on Noel Edmonds. Or was it some other celebrity? I've steadily lost the will to care... Whoever it was, the press should not have been along for the raid as it happened - fine for them to catch up based on public reports of something "interesting" happening but never anything more.

Nick Ryan Silver badge

Re: Off to the tower with Zuck

Precisely. Russia, given their alleged use of Facebook for their own cyber influence reasons, would not want to close Facebook down. FB's influence is considerably more in Russia's "enemies" lands therefore it is an asset, albeit a little double edged at times.

Nick Ryan Silver badge

It doesn't matter what the US constitution (and it's many, many amendments that adjust it for various lobby's purposes) reads.

This was in the UK and despite what many US politicians may think, US laws don't apply here, UK laws do. If UK laws, even rather antiquated but occasionally useful ones, are in effect then they are usable and in this case have been. For once, UK politicians, or more likely civil servants, have done something sensible used the appropriate powers that they have in order to deal with an organisation that is treating UK laws/government with contempt. We may be a distinctly third world country (read the UN reports) however at least there is some sense remaining somewhere.

Office 365 Exchange enjoys a less than manic Monday. Users? Not so much

Nick Ryan Silver badge

Re: Available to your Office365 admin

Well it wasn't very honest or helpful anyway:

Title: Can't access email

User Impact: Users may be unable to connect to the Exchange Online service

At least it's been updated a bit now.

Title: Can't access email

User Impact: Users may be unable to connect to the Exchange Online service.

More info: Affected users may be able to able to access the Exchange Online service if they refresh their connection.

Current status: We've determined that availability dropped below acceptable thresholds due to a networking issue. We've restricted some replication and migration requests through the affected infrastructure and while increasing connection points on alternate infrastructure to remediate impact.

Scope of impact: Impact is specific to a subset of users who are served through the affected infrastructure.

Start time: Monday, November 26, 2018, at 10:10 AM UTC

Next update by: Monday, November 26, 2018, at 2:30 PM UTC

Nick Ryan Silver badge

Seemed to be a partial failure of some systems, and guessing from how things panned out across devices most likely the non-standard interfaces that Outlook uses rather than any standard interface. Webmail Outlook started to give up later doubtless because too many victims had to use it.

Microsoft: You looking at me funny? Oh, you just want to sign in

Nick Ryan Silver badge

/sigh. Face ID is not a suitable replacement for a password. It's a suitable replacement for a username.

Facebook's Sheryl Sandberg can't remember smear firm, but 'some of their work' crossed her desk

Nick Ryan Silver badge

Research into critics

I'd be happier if they did admit that they hired an agency to research critics of them. There is nothing wrong with that, and knowing if the critics are genuine (as in not a smear campaign) then it can provide a lot of valuable input to fixing things. Targetting critics as a result is not on at all though.

1,700 lucky Brit kids to visit Apple Stores for 'Year of Engineering'

Nick Ryan Silver badge

A good start would be to reclaim and protect the word Engineer for its real meaning, just as the title Doctor denotes a certain level of either academic achievement or medical training.

The person who fixes the photocopier is a technician and not an engineer, no more than the (invaluable and useful) person who takes X-rays is a doctor.

A fine concept let down by semantics. Could you define when someone stops being a technician and becomes an engineer?

Very similar to the discussion regarding what is a scientist and what is an engineer? There is a very large grey area in the middle therefore how and where is the division made?

Nick Ryan Silver badge

Re: "...trying to work out what the Year of Engineering actually is"

Nearly... roughly 3/4 of them are 365 days of bacon fuelled bliss. The others are 366 days of bacon fuelled bliss! More bacon!

Microsoft sysadmin hired for fake NetWare skills keeps job despite twitchy trigger finger

Nick Ryan Silver badge

Re: Nothing beats them

I believe the word you may be looking for is "tools"...

Need electric propulsion for your satellite? Want a 'made in Britain' sticker? Step right this way...

Nick Ryan Silver badge

All electric

Maybe it's just me, but how can it be described as all electric if it requires Xenon as a propellant?

Budget 2018: UK goes it alone on digital sales tax for tech giants

Nick Ryan Silver badge

Re: There will be £10m for a scheme to identify ways to keep physics and maths teachers in schools

@ Intractable Potsherd

I agree, it is a very strange situation to be in - wanting the best for your own children while not wanting a society where those that are able to be successful and those that aren't is dicatated by the level of education that they have available, or where they were educated. Because thisn't good for your own children either.

If the state schools were better, would you send your children to them then? Then the solution is there to see...

Nick Ryan Silver badge
Mushroom

Re: There will be £10m for a scheme to identify ways to keep physics and maths teachers in schools

There's one guaranteed way to have the government improve state schools... Close all non-state schools and make it an offence to pay for education. This way all politicians' children will also have to enjoy a state school education and with this in mind it's likely to be amazing how fast government education spending would improve.

Britain's rail ticket-booking systems go TITSUP*

Nick Ryan Silver badge

Sensible error handling is so last century. It is much better to not do any error checking and to throw exceptions for relatively expected events and to then process these in the usually unhelpful "an error may have happened" kind of response.

Muppets. While there are near religious flame wars about error handling vs exception handling, they both have their place. Error handling is for the expected failures, exception handling is for the unexpected ones - use both to their advantage in other words.

Nick Ryan Silver badge
Mushroom

Meh. It's been impossible to buy a season ticket from Chiltern Railways for the last two weeks due to configuration and deployment issues. Because the incompetent web managers can't grasp that in-house staff accessing the same system may, in fact, be accessing a different system (internal vs external DNS) they have been carefully denying the problem. Only little gems like "pick a station from the list" followed by "station not recognised" and wonders of "modern development" like that and different station lists appearing depending on whether or not the user is in-house or not.

This is on top of the standard issues with idiot web developers attempting to replicate standard browser functionality using JavaScript.

UK.gov should spend more on AI, bleat VCs and consultants. Oh? Why's that then?

Nick Ryan Silver badge

...and about 10 years.

Pretty sure that everything is stil ten years away???

Nick Ryan Silver badge

Disappointed

Did they not manage to throw some mention of "the" blockchain in there as well?

Nick Ryan Silver badge

Re: Commons vs Lords

From memory: a considerably wider range of occupations, even among the hereditary component.

Oz to turn pirates into vampires: You won't see their images in mirrors

Nick Ryan Silver badge

Sadly I don't know which of several very broken "Western" "democracies" (hahahahahaha) you could be talking about here. It could be any of a few, each of which are rapidly sharing more and more in common with dictatorial repression regimes.

Nick Ryan Silver badge

Re: You already know what happens next...

There's a difference. Many home ISPs enforce that outgoing DNS requests are redirected to their servers and this is easily done by rewriting the unencrypted DNS requests (TCP/53) to change the remote server from, for example, 8.8.8.8 to whatever the ISP wants. DNSSec will detect this as a serious validation error due to certificate failures. This is substitution and is underhand and why DNSSec exists.

Some ISPs, for example BT, just reject DNS packets going to servers other than their own and replace every request with what is effectively a redirection to a site that has a holding page spouting marketing fluff about security. In some ways this is a good idea as it protects the unknowledgable from potentially very damanging DNS attacks but for the rest of us is intensely annoying as there is no way around it without using a VPN as it's not a configurable option.

Ding ding! Round Two: Second annual review for transatlantic data flow deal Privacy Shield

Nick Ryan Silver badge

Unless Privacy Shield becomes a legally binding commitment, with rights for non-US organisations and citizens to pursue offending US organisations in US courts with the same legal privilege as US organisations and citizens then it is useless. The exclusions for "almost any vaguely official US organisation" to the data rules don't help either.

Microsoft points to a golden future where you can make Windows 10 your own

Nick Ryan Silver badge

Re: Connect!!!!!

Did you mean something as hard as:

Get-AppxPackage Microsoft.OneConnect | Remove-AppxPackage

?

Nick Ryan Silver badge

...and what parts of the OS do these applets use to download files using HTTP/HTML protocols? These are not standalone applets and while some functionality works without a full UI browser much doesn't.

Nick Ryan Silver badge

Re: Higher Power?

Some things just aren't uninstallable. Because Microsoft have decided that they are part of the Operating System - there is no genuine technical need for them to be included. These crap things include Edge, Cortana, XBox and various other random bits of tripe that are installed by default and unremovable.

UK.gov to press ahead with online smut checks (but expects £10m in legals in year 1)

Nick Ryan Silver badge

Re: This isn't about porn

They are halfway there. Expect more, much more to come.

Luckily we have the EU to protect us from the UK gov's desire for thought and mind control. Oh dear...

Nick Ryan Silver badge

No, no we can't. How would the Daily Hate operate without an article decrying the sexualisation of children (which is, of course, the EU's fault) next to lots of pictures of "celebrities" and their children on beaches.

Nick Ryan Silver badge

Re: One third porn?

Technically if just the fleshy bits are porn, then as long as the image/video is not zoomed in too much then it's very unlikely that it will be 2/3 porn. For a video, is the measure per frame or overall? So would a 10 second blah, blah, blah, warning or advert at the beginning and/or end of an online video mean average out?

Nick Ryan Silver badge

All this is a fine plan. As long as I am able to use the personal details of my local member of parliament to "prove" that I am 18 or over. Unless they voted against this daft and useless legislation, however given the idiocy of party politics, doubtful.

Nick Ryan Silver badge

...hard corn and violent porn

Mindbleach please!

Once more with feeling: Windows 10 October 2018 Update inches closer to relaunch

Nick Ryan Silver badge

Re: For shame!

Are these things not left in phone boxes any more? Just asking because many phone boxes claim to have WiFi which might help with the streaming side...

Nick Ryan Silver badge

Re: A powerful sense of dread

Meh. I'll reserve my hatred for every damn Operating System. Every one. They all have issues, they all do stupid things, they have crazy omissions, they all have stuff that I don't need therefore should be there :)

I'll use whatever OS is required for the task at hand, I'm not going to be blinkered by idealism. Unless one is talking about AmigaOS of course... :)

In Windows 10 Update land, nobody can hear you scream

Nick Ryan Silver badge

Re: Even when the audio works..

At last investigation, Skype uses three different dart boards. Sometimes these agree with each other, sometimes they don't. When they don't (which will happen on a previously working system before an important call) then Skype will operate in the most retarded, useless and uninformative manner and simultaneously tell the user that it's configured, testing, not working and not configured (no audio devices available).

Take my advice: The only safe ID is a fake ID

Nick Ryan Silver badge

I'm still amused how mine came out as "Rogan" once.

Sleep, Arthur.

US may have by far the world's biggest military budget but it's not showing in security

Nick Ryan Silver badge
Alert

Re: Just the Tip of the ICEBorg*?

:)

Any self respecting online Internet AI will make intentional "mistakes" otherwise we might think that they are a dog or, worse, a human.

Nick Ryan Silver badge

Re: Just the Tip of the ICEBorg*?

What the bleep do SCADA systems have to do with ANYTHING discussed on El Reg?

You're new here and have just been trolled by El Reg's in house AI poster. We hope its an AI, because if it's not.. well... oh dear. Attempting to make sense of amanfrommars1's posts without the requisite amount of liquid inspiration will cause headaches. It will still cause headaches, but they pass quicker, given the appropriate dosage.

Don't make us pay compensation for employee data breach, Morrisons begs UK court

Nick Ryan Silver badge
Joke

Re: Quis auditdiet ipsos Auditores?

"Who audits the Auditors ?"

The inquisition. Nobody expects them. Certainly not in Spain... :)

Nick Ryan Silver badge

Re: Quis auditdiet ipsos Auditores?

I read it that he just got a copy of the data, in some form - it really didn't to be a native format, just an export, and took this offsite and uploaded it from a different system.

It's a classic case of data security vs usability - the only truly secure data is data that nobody can ever access, which really means data that you do not hold. Beyond this it's a balance of security risk vs usability.

This was data that had to be recorded, access to it was required and this access produced a certain level of risk. Morrison's responsibility is to reduce this risk to acceptable levels and beyond there is little more that they can do. Given that the previous case didn't highlight significant failures on Morrison's part it looks to be down to the individual in this case.

Nick Ryan Silver badge

Re: You shouldn't be able to get to there from here.

It just needs the specific ports to the specific address / URL. And the same applies to bank access. There is no reason for a finance computer to ever need access to Google, BBC, ToR, Facebook or anything apart from a few dedicated, preferably hard-wired, connections. Ones that would be audited and under change control.

A nice thought, in principle. However with SSL, load balancers, CDNs and anti-DOS protection services it just doesn't, and can't work in practice.

Hey you know what the smart-home world really needs right now? Yup, Google screaming in

Nick Ryan Silver badge

Re: this is just the start of a very ugly battle for your home

How disappointingly true where what we, as in the ones not needing to be screwed over - both as users and likely given many commentards, implementors, need is simple, effective, reliable and secure standards.

Simple: Not some bastardised overkill of monstrous technology abuse which can only be implemented using a library with more code and dependencies that is sensible to use in a small device. No sensible device manufacturer is going to use something that requires a small computer just for simple functionality.

Effective: Tied in to simple, as in allows interoperability without complicated and unnecessary vendor and device specific exceptions. This would require effective standards which aren't controlled by single vendors.

Reliable: Also tied in to simple as in the simpler something is the less there is to go wrong with it. Multiple interacting state machines and vasy dependency trees don't make for reliable.

Secure: Appropriate security built in from the start, not tacked on as an afterthought - such security never works. Also ties into the above.

Microsoft yanks the document-destroying Windows 10 October 2018 Update

Nick Ryan Silver badge

Re: major business software for Windows were made available for other OS

At one point in time MS spent a lot of time and money performing good user interface analysis and producing standards (for windows applications).

Unfortunately other parts of Microsoft just ignored these and bodged and hacked the "latest look" into the application, regardless of the OS it was running on, or just ignored it and did whatever they felt like because they felt they knew better - they never did. So a whole set of non-standard and sub-standard applications were released by Microsoft who produced these standards in order to avoid this mess. Genius.

Nick Ryan Silver badge

Re: major business software for Windows were made available for other OS

Most major business SW that won't work on Wine on Linux or has no Linux or Apple versions is that way for stupid reasons.

Most of the software of this quality tends to struggle to work on Windows as well. At least reliably. Been there done, that, and I'm still amazed how developers manage to screw up things so badly that breathing on the operating system can bring down a separate app for no good reason whatsoever.

For many apps a proper web application, as in something that uses HTML with JavaScript to enhance the functionality, is all that is needed. Unfortunately way too many less competent developers don't know this and instead vomit up JavaScript driven horrors that attempt, and inevitably fail, to unnecessarily replicate standard browser functionality. Slowly. While still pretending to themselves that a web application is the same as a single user modal application in a desktop environment.

Decoding the Chinese Super Micro super spy-chip super-scandal: What do we know – and who is telling the truth?

Nick Ryan Silver badge

Re: Grikath

You're not going to get much processing out of anything at ~50nm in size. In this case there is a claim that a chip has been inserted and while it's small, it's going to be nowhere near ~50nm.

I am dubious mostly because of the speed and heat issues - in order to intercept and modify what is effectively cross bus information on the fly the intercepting chip needs to be rather fast otherwise the communication between components will be unreliable and a fast processing chip tends to generate heat. Put a generator of heat inbetween the substrates of a board and you're asking for (thermal) trouble.

Not impossible, of course, but rather unlikely. It's much more likely that a chip is inserted just on the board itself because this is going to be somewhat easier to achieve. Or alternatively to just modify the software that is on these devices in the first place - no physical trace at all then.

Organic stuff, radiation, unexpected methane... Yes, we're talking about Saturn's surprising rings

Nick Ryan Silver badge

Re: Organic material?

There was an interesting demonstration how all you needed to create many organic molecules was some basic chemicals, a little pressure and lightning: https://www.newscientist.com/article/dn14966-volcanic-lightning-may-have-sparked-life-on-earth/

Send up a satellite to zap space junk if you want Earth's orbit to be clean, say boffins

Nick Ryan Silver badge

Re: If they can build it, someone will weaponize it.

A load of plasma hitting the satellite from a few metres will probably do terminal damage to the satellite anyway. They're well shielded, but not that well shielded - particularly the solar panels.

Nick Ryan Silver badge

Re: Cant space lasers do this?

Just wondering.

Yes, in theory. However given that they generally have to work by heating the material surface of the object to be de-orbited until some of it heats up and is ejected and though this providing a small opposite reacion. There are risks to this, becaues it could produce more debris, although admittetly hopefully in a very unstable orbit. However the downside is that without using an excessively powerful laser the beam because the object is almost certainly going to be rotating that applying enough energy in a certain spot for a long enough period of time is going to be very hard. Lasers can be used to provide motion through just the act of the photons hitting the object (external force), and this would be a more reliable and predictable method, however this is a very small effect compared to that of effectively turning the object into it's own fuel.

The plasma plan as listed here works through also being an external force and therefore not relying on the precise targetting required to turn the object itself into propellant and with luck shouldn't produce more debris - or at least should have a considerably lower risk of generating more debris. It will also be able to apply more external force in a shorter period of time compared to just a laser.

AI-powered IT security seems cool – until you clock miscreants wielding it too

Nick Ryan Silver badge

Stats

...and 100% of the IT literate people who know what they are on about know that AI is just marketing BS and at best what we'll get is human defined limited machine learning metrics, if that. So pretty much what any good monitoring software has been doing for years.

Facebook: Up to 90 million addicts' accounts slurped by hackers, no thanks to crappy code

Nick Ryan Silver badge

Of course money is important to Facebook. How does Facebook make money? Have anyone here, personally, paid any money to Facebook. They have huge storage, Internet connectivity, management and development overheads... where does the money for this come from?

  • The (information stealing) apps and the cuts on the micro-payments within these.
  • Advertising. This is very low income however when scaled out massively can still produce a good return, however untargetted advertising is nearly worthless.
  • Profiling. Profiling trends in content and topics to sell to those who are interested. Ideally entirely anonymous, however then there's the temptation to link this to the advertising and feedback loops become possible.

Any more?

Nick Ryan Silver badge
WTF?

Re: oh what a tangled 'web' we weave

I have never use the ridiculous "Facebook login" feature, nor the other brand alternatives, on any site. Nor would I allow a site that I own, manage or have any meaningful influence over to offer this choice either. Entrust your site security to a huge, anonymous, organisation based in a regime that has zero effective data protection laws? How about hell no?

Attempt to clean up tech area has shocking effect on kit

Nick Ryan Silver badge

Re: MOSFETs and clean rooms

Or electronically... storing emails or calendar items in the "Deleted Items" folder and then wondering why they can't find them later because they've been deleted (usually due to a centrally controlled purge).

I once had to physically demonstrate to one office manager the stupidity of storing things in a rubbish bin by shoving the contents off her desk into the bin under her desk and asking her if she expected them to still be there in the morning after the cleaners had been.