* Posts by Mike Pellatt

561 publicly visible posts • joined 17 Apr 2007

Page:

Microsoft puts out Outlook fire, says everything's fine with Teams malware flaw

Mike Pellatt

Re: Windows giant aware of Teams social engineering phishing attack

It wasn't quite such a dumb idea when every password in The Known Universe wasn't out there.

Using the same device for 2FA as the one you're trying to log-in via, though...

Mike Pellatt

Re: Windows giant aware of Teams social engineering phishing attack

Meanwhile, elsewhere in Microsoft, push authentication via Microsoft Authenticator has been enhanced to...... improve its defence to.... social engineering attacks.

Whilst this bit of MS blames users for being vulnerable to them.

What's bunch of d**ks

The number’s up for 999. And 911. And 000. And 111

Mike Pellatt

Re: band-aid fix:

But my back's broken.

Moving 10 feet? Not the brightest idea in the world.

See, every suggestion that someone comes up with to "fix" W3W is worse than the obvious solution of not using it, but using a proper, pre-existing, geolocation system with a public location code generation algorithm

Mike Pellatt

They haven't gone all "NIH" over W3W.

The major issue (OK, one of the major issues) is that the word allocation algorithm is a trade secret.

For a publicly-used geolocation system, that is madness.

Listing those is left as an exercise for the reader.

Mike Pellatt

Re: I still have analog landlines.

Whilst BT switching off POTS won't affect those supplying unbundled copper connections, the exchange closure programme sure will. Still, that's scheduled for completion by 2040. A date no-one expects to be achieved...

Microsoft’s Azure mishap betrays an industry blind to a big problem

Mike Pellatt

I guess you missed point b) in my post.

Mike Pellatt

Yeah, but at least with Cloudflare you get a detailed, published RCA that will:

a) put hands up to what went wrong

b) Tell The World the steps that have/will be taken to reduce the probability of a recurrence.

Anyone seen that from Microsoft or AWS?

Brit data watchdog fines sleazy sales ops £250K for 'bombarding' folk with calls

Mike Pellatt

Re: Pathetic

It seems to take forever for an individual to be barred from being a company director, and even longer to actually prosecute when they inevitably ignore the ban.

It can also handily be worked around by having a family member as the director instead.

Keir Starmer's techno-fix for the NHS: Déjà vu disaster or brave new blunder?

Mike Pellatt

Re: Tech is not the solution.

Surely GPs just need to be like Doc Martin.

Then they'd have a handy ultrasound in their surgery.

And doubtless an MRI as soon as we get room temp superconductivity...

Excess profits on Motorola's Airwave estimated to be £1.3B

Mike Pellatt

Re: Motorola should call their bluff

I'm old enough (and in this case that's not a sarcastic phrase) to remember GCHQ demonstrating an analogue multi-channel HF Comms system they'd developed called "Piccolo". This was at the annual RSGB show In the late 1960s. Damn clever it was, and pretty much entirely analogue.

To improve security, consider how the aviation world stopped blaming pilots

Mike Pellatt

Re: Pilot Error

I also recommend reading RAIB (Rail Accident Investigation Branch) reports.

In this case, though, you will see a recurring theme of "we've already discovered what the industry should do, but they STILL haven't done it" (e.g. zero hours contracts for staff working for contractors so they inevitably have multiple jobs and are fatigued when working on safety-critical tasks) or, even worse, the lessons learnt after the Clapham disaster being forgotten so another one is on the cards.

Mike Pellatt

But.having scaled to meet the mass wet film market, it became unable to meet the needs of the niche market.

To think, I nearly took a job with them in Harrow doing process control.....

Criminal records office yanks web portal offline amid 'cyber security incident'

Mike Pellatt

"We take data security very seriously ..."

It's the same sort of terminological inexactitude as

"Your call is important to us"

when you've been told that 50 times after being on hold for 25 minutes.

It clearly isn't the least bit important to you, otherwise you'd have, you know, actually answered the call by now.

BT taps Kyndryl to migrate mainframe apps to the cloud

Mike Pellatt

Re: Odd tactic

This is your regular pointer to the strategy Peter Cochrane advocated when BT's CTO, which would have seen FTTP to every premise decades ago.

But instead, because Public bad, Private and Competition good, we had the cable companies, lots of little local franchises until the inevitable consolidation into one national operator came about.

Labyrinth of 371 legacy systems hindered hospital's IT meltdown recovery

Mike Pellatt

Re: IT is a cost to be minimised

Everywhere.

Especially in the places where Excel is banned.

What did Unix fans learn from the end of Unix workstations?

Mike Pellatt

Re: PanelSim, SimH, Hercules Studio, etc.

Oh yes, the blinkenlights were a joy to behold. Getting the DEC engineer to replace all the faulty ones was always a challenge.

But.... when we had to take the slave off maintenance 'coz of budget cuts (late 70's UK IMF rescue days....) I got to recognise the logic state when we got SSP (Stop Second Processor) crashes. Apparently random series stabilisers (per row of TTL logic) tripping out on overcurrent. Finally (after 4 pints of Directors one lunchtime) tracked it down to an O/C end winding on the PSU transformer, so the unregulated DC feed was a volt or so down. Dropped it down a tap each side of the halfwave, all was good, and DEC none the wiser when it went back on contract.

We used TOPS-10's brilliant ability to do both timesharing and realtime for the data capture from an HPD flying spot digitiser for bubble chamber film. Although timesharing did stop for a couple of seconds while a frame scan took place.

I remember the joy when our systems programmers finally got SMP going, that was the time the second processor started earning its keep.

Mike Pellatt

Re: PanelSim, SimH, Hercules Studio, etc.

Interesting you mention IBM peripherals on DEC 10 there. We had the Systems Concept SC10 on our dual-proc KI10 in Imperial's HENP (as then was) group. Only had tape on it, but it got us 6250bpi well before DEC managed to deliver, which was the main goal. That, and reliable tape drives.

Confused the hell out of the IBM FS guys when they asked to run OnLine Tests...

Norway has a month left until sun sets on its copper phone lines

Mike Pellatt

Re: Universal service obligation

Or - as I've recently discovered - the POTS copper is direct-in-ground buried, not even in ducting. There are whole estates like this, with chambers and a little bit of ducting to fool you.

No use at all for getting fibre to the home.

Mike Pellatt

Pretty much the situation in Ukraine at the moment, AIUI.

Mike Pellatt

Re: The big problem

First rule of any backup system - be it for your power or your data - have a routine testing schedule. Otherwise you deserve what you get. Which, let alone anything else, is that the money you spent on the backup system was wasted.

Mike Pellatt

Re: Arwen

The PSTN has generators as well as batteries. Certainly in the larger "exchange" buildings in urban and sub-urban areas, tho I'm not so sure about the small rural ones.

Mobile base stations and Fibre exchanges housing OLTs and associated IP kit generally don't.... And lack of aircon on power failure can mean extended battery operation isn't viable anyway.

The solution for most operators is driving a mobile genny to site. Not scaleable to a wide-area extended outage.

Cloudflare hikes prices by a quarter, blames the accountants

Mike Pellatt

Re: The Great Mismatch

At least it's better than BT, (successfully) asking the taxpayer to do that for them. As well as the customer, subsequently (differential Openreach pricing in copper-only areas).

Windows Subsystem for Linux now packaged as a Microsoft Store app

Mike Pellatt

Re: Simple workaround

Virtualisation is so last-year.

Try out this new-fangled containerisation. Or, as the marketdroids have renamed it, "serverless"

Alert: 15-year-old Python tarfile flaw lurks in 'over 350,000' code projects

Mike Pellatt

Exactly. What sort of techniques do you think APTs use to achieve P?

Inverse Finance stung for $1.2 million via flash loan attack

Mike Pellatt

Re: Programming for smart contract execution... What could go wrong?

Not if:

i) You've got the functional specification right

ii) Each machine has a separately coded implementation

This is, after all, how safety-critical fly-by-wire systems were supposed to be implemented.

I have no idea:

a) If that is still the case

b) If cryptobros have heard of this

First Light says it's hit nuclear fusion breakthrough with no fancy lasers, magnets

Mike Pellatt

Re: Timing is the problem

Yabut that's not synchronising anythings with a large rest mass.

The time you solved that months-long problem in 3 seconds

Mike Pellatt

Re: I replaced a network cable.

Write out 100 times:

"Free as in speech, not Free as in beer"

C: Everyone's favourite programming language isn't a programming language

Mike Pellatt

Re: Annnnd...you completely missed the point of the article

It turned out with Oilivetti writing one of their OSs in the early 80s in Pascal, because some NCGs believed what they'd been taught.

Needless to say, didn't turn out well. Fortunately the OS from the previous generation of kit worked on it.

File Explorer fiasco: Window to Microsoft's mixed-up motivations

Mike Pellatt

*Microsoft is putting revenue ahead of security"

I'm old enough to remember ActiveX being launched.

Infosec community: "This is a security disaster in the making".

Microsoft: "Yabut our customers are demanding it"

Brocade wrongly sacked award-winning salesman who depended on company insurance for cancer treatment

Mike Pellatt

Re: A timely reminder

And of course general practice was privately provided forever.

GPs were historically independent contractors to the NHS, not employees.

Not the same as megacorp contracts, I'll grant.

Mike Pellatt

Re: A timely reminder

Have you seen the bureaucracy involved in a predominantly private insurance funded system? By comparison, the NHS is a model of administrative efficiency..

And don't forget, much of that bureaucracy is devoted to finding ways of not paying out.

Mike Pellatt

Re: A timely reminder

A good exposition there.

What it misses is the conclusion that healthcare has to be rationed. The debate over how to do that has never properly been had (much like how to pay for long-term care) but at root there are 2 methods being tried.

One is rationing by ability to pay - the inevitable end-point of a wholly private insurance based system with some state intervention for the most needy.

The other is rationing by cost-effectiveness trying to balance clinical need with cost and outcome of treatment. This is the role of NICE - unfortunately people understandably don't like it when the treatment they hope for is denied or delayed.

Of course, political decisions about NHS funding (and purpose) determine where the rationing line is drawn....

Remote code execution vulnerability in Samba due to macOS interop module

Mike Pellatt

Re: Heads up networked Time Machine users

Not if you're using netatalk for that. I know I am!

For general filesharing, both SMB and AFP were pensioned off here over 2 years ago in favour of Nextcloud.

And that's made Time Machine pretty much redundant for my use case too.

£42k for a top-class software engineer? It's no wonder uni research teams can't recruit

Mike Pellatt

Re: if the salaries were improved./ Universities need serious reform across the board

You almost had me there until you said "climate lie"

Mike Pellatt

Re: if the salaries were improved./ Universities need serious reform across the board

Or, of course, fewer universities so the fixed costs are reduce allowing reallocation of funds....

Mike Pellatt

Re: IT person

I resemble that comment. Only the very best IT people are able to fix many an HP printer problem.

Mike Pellatt

Re: abominations

Complete reversal of meaning? Like the word "let" which used to mean "prevent" but has now had its meaning reversed?

I'm with you though, as that's a single world rather than a complete phrase which rather than having its meaning changed is more being incorrectly parsed.

MySQL a 'pretty poor database' says departing Oracle engineer

Mike Pellatt

Re: PHP is somewhat responsible for MySQL’s uptake

There, in one post, is why Django.

Python

PostgreSQL backend.

UK Telecommunications Act – aka 'power to strip out Huawei' – makes it to the statute book

Mike Pellatt

Re: Communism bad

They are required to put the long-term interests of the investors first. That is demonstrably achieved by being interested in the company's customers, rather than taking no interest in hem or even working actively against them.

BOFH: You. Wouldn't. Put. A. Test. Machine. Into. Production. Without. Telling. Us.

Mike Pellatt

Re: The guy's here...

I'm tempted to use that somewhere and save it in my browser, just to see if Google or Microsoft have spotted it in a list of stolen passwords anywhere

Mike Pellatt

I'm making an exception for the Devon flag with "cream first" across the bottom that I saw recently, as soon as I can find one in a rip-off-the-grockles shop.

2FA? More like 2F-in-the-way: It seems no one wants me to pay for their services after all

Mike Pellatt

Re: Online French banking outside working hours - fuggedaboutit

Only if you insist on attempting to speak to it in English. Try the tiniest bit of school O level French on it and all of a sudden its attitude will improve dramatically.

It's only human and hoping for a little bit of respect, after all.

Oracle loses appeal against $3bn payment to HPE over withdrawal of Itanium support

Mike Pellatt

Re: Could one of the longest and dirtiest cases in tech history finally be over?

But not half as much as Caldera The SCO Group The US Trustee in Bankruptcy Unxis Xinuos

Cloudflare launches campaign to ‘end the madness’ of CAPTCHAs

Mike Pellatt

Came here to say exactly that.

"Physician, heal thyself".

No other provider I login to has such an annoying captcha system. And, like so many providers, you don't get SAML support without paying for the Enterprise product.

Broadband plumber Openreach yanks legacy copper phone lines in Suffolk town of Mildenhall en route to getting the UK on VoIP

Mike Pellatt

If you can show me the OLT and ONT equipment currently available that supports this technology. And the additional power supply and battery capacity needed in the OLT to supply 10,000+ ONT's. Then I'd say that's a useful comment.

Until then....

Mike Pellatt

SOTAP is the answer to your question

"When it is launched, you will be able to use SOTAP to provide broadband and internet protocol (IP) phone services, because it connects to your exchange infrastructure.

We’re developing SOTAP to help us withdraw Wholesale Line Rental (WLR). We’re planning to launch it UK-wide by August 2022.

It will only be for areas where there aren’t any fibre products available. And it won’t include a managed phone service, or any associated calling and network features."

https://www.openreach.co.uk/cpportal/products/copper/sotap

Mike Pellatt

Re: Lack of mains

Indeed. Looks out of my window at the pole-mounted single-phase 11KV-230V transformer feeding half a dozen properties.

Nope, no telemetry there. Now, if I had a SMETS2 smart meter, perhaps they could use that. Oh, hang on, no network here yet. And it would be passing data to my electricity supplier, not the DNO.

Mike Pellatt

Re: The way forward then

Agreed, SIP is a technology with remote intercept capability and other inherent vulns. Especially since SIP over TLS and S/RTP are so very hard (once you've found a provider who can offer it - and I've been there)

But is it.worse than POTS? Pitch up to a street cab or DP with appropriate bits including yellow hi-viz and you'll have hours, if not days, to find the pair you want and listen in.

VM used to make it really easy, having street cabs with the doors flapping in the breeze everywhere, but I hear they've upped their game lately.

PS the existing phone sockets in the UK aren't RJ11, but a unique design chosen solely to prevent unapproved phones being connected. All in the name of preventing bell tinkle when using pulse dialling and electromagnetic bells. Back then even trivial stiff like that was important, let.alome important stuff like the phone working during a power cut. Once this is implemented, I'll have to walk 200m to get mobile coverage to report a power outage to the DNO. (Not really, I have a UPS. But I'm a techy)

Intel laid me off for being too old, engineer claims in lawsuit

Mike Pellatt

Re: Another one?

2 years at Intel cured me of the aspiration to work for an American company.

Should have realised, had had a good view of AT&T for the previous 3 years.

Page: