* Posts by Alan Brown

15079 publicly visible posts • joined 8 Feb 2008

Huawei savaged by Brit code review board over pisspoor dev practices

Alan Brown Silver badge

"Presumably this is an RTOS that doesn’t have dynamic libraries?"

It's Wind River Linux.

Alan Brown Silver badge

Re: Security is not a part of the of organization's KPI

A little like another Asian country and cars then.

Alan Brown Silver badge

Re: I'm looking at the list of sins...

"China doesn't normally outsource to India"

Judging from the names and comments in the patches for various of my Huawei switches - "yes they do"

Alan Brown Silver badge

Re: Real point here

300 aircraft are of no use if they aren't combat-ready. Nor are 15 for that matter.

The difference isn't the numbers, it's how much has been spent on them.

Acquaint yourself with Arthur C. Clarke's "Superiority" sometime.

The F35 isn't known as "the Jet which ate the Pentagon" for nothing.

DXC Technology warns techies that all travel MUST now be authorised

Alan Brown Silver badge

Re: Wasting executive's time on the trivial stuff

"HP was similar in the years pre-split; it was said that the head of HP UK&I was not able to authorise pay rises."

It also leads to inane stuff like HP substituting vastly inferior components in computers, then the managers saying "like it or lump it" to the customer - which is the wrong thing to say to anyone who knows the sale of goods act and rules applying to substution (like for like is OK. Downgrading to something worth half as much, with 1/3 the performance and keeping charging the same price is court territory - and this is on the NDNA contracts so it's affected a lot of institutions.)

Alan Brown Silver badge

"It means no travel."

This is exactly the line taken 25 years ago when we had our expenses capped at rates lower than the prevailing accomodation charges.

Manglement eventually realised that meant we could only fit 30-45 minutes in onsite without going into overtime (which they were refusing to pay too, so we wouldn't work it)

Get familiar with your contract. You can't be forced to work unpaid overtime - it must come out as time off in lieu and "from time to time" doesn't mean "every other day". On top of that, if the hours worked divided by the pay received goes below minimum wage, it's a criminal matter - _EVEN_ if you're on a salary, not a wage.

"work to rule" is one of the more devastating forms of industrial action you can take, because it gives seagull management _nothing_ to use and if they try harrassment or standover tactics, industrial mediators _will_ hand them their heads on a plate. "I'm only paid for 8 hours. Outta here. Sorry, not sorry"

Alan Brown Silver badge

Re: no it's worse than that

"so then had to write a "memo" to justify the cost, the discussion must have cost more."

I'd have just asked him if he would do it too.

and quietly made the customer aware that I was spending 2 hours less and I could be onsite - at the daily chargeout rate - due to this policy.

Alan Brown Silver badge

Customer reaction

"Sorry, we can't get someone onsite for at least a fortnite"

*Votes with wallet.

You're not Boeing to believe this, but... Another deadly 737 Max control bug found

Alan Brown Silver badge

Re: Boeing's 737 Max Software Outsourced to $9-an-Hour Engineers

"relied on temporary workers making as little as $9 an hour to develop and test software, often from countries lacking a deep background in aerospace -- notably India"

Who last week were working on Huawei or Cisco code.

Alan Brown Silver badge

Re: Are Boeing employees brainwashed?

But then they've not yet been successfully invaded

[1812]

nor lost an Empire.

[Cuba, the Philippines(who'd just seen off the Spanish), Panama(which was forcibly split off Columbia) ... you can't occupy a country when the locals don't WANT you there.]

The USA has an amazing ability to airbrush "certain things" out of history that I'm sure Stalin would approve of.

Alan Brown Silver badge

Re: Are Boeing employees brainwashed?

"The level of loyalty to Boeing from some employees seems to verge on the fanatical , we are so great we cannot do anything wrong."

Actually the _really_ loyal employees are the ones who tried to fix this shit - see my comments about the auditors who discovered the 737NG build clusterfuck - and got shat upon by seagull management.

Boeing has a sordid recent history of shafting its employees in every way you can think of (both in Renton and in Wichita) and advanced antipathy towards unions (whose primary concern is safety of both individual employees and long term jobs - which is achieved by NOT fucking the company over). It's long past the point where anyone loyal has gone or has just given up and lives in quiet despair and whilst the sociopaths in the boardroom pretend there's nothing wrong, or if there is, it's all someone else's fault, or if it isn't, then you made them do it and if they did it you deserved it.

Alan Brown Silver badge

"Trying to cram the new(ish) plane into the existing 737 NG type certification was the problem"

The 737NG or MAX would not be certified on their own cognisance. They can only fly as modifications of an existing airframe. As soon as you tried to certify them as a new aircraft they're going to be FAILED so hard that heads would spin at Boeing.

If you're going to have to get a whole new type certification then you'd address the engine positioning - which means longer legs, which means new undercarriage and hull design to take it (this is a _major_ change - aircraft are designed and built around their engines and legs.). You'd fix the wing sweep (it's too swept for the speeds used) and you'd fix the baggage compartments to actually be able to take standard aviation containers.

At that point you're spending so much in airframe modifications you're better off starting with a clean sheet.

There are 8000 backorders on the 737 order book alone (another 8000 for the A320 family), simply because this is the sweetspot in the market as far as airlines are concerned (this has a lot to do with the US's heavy subsidiation of airports). This gave Boeing very little incentive to actually innovate or invest in new aircraft design when they could just keep kludging the old design and have their tame FAA stamp the already signed off paperwork.

The way they went about covering up the issue of suppliers counterfeiting documentation on critical hull components for the 737NG (The ribs were supposed to be precision-CNC made and weren't), and ALSO covered up how badly the build shops in Kansas and Washington were battering the parts to make them fit (then filling and painting over the damage) - which is the root cause of at least 3 hull breakups/11 deaths that shouldn't have happened on landing overruns - shows that this is NOT a new thing at Boeing. (There are at least 500 737NGs flying which are at risk of bursting like a Comet at high flight cycle levels thanks to these faulty parts) - When internal auditors found this they were ignored. When they blew the whistle they were identified almost instantly due to FCC stooges who handed the complaints straight back to Boeing and hounded mercilessly by Boeing corporate.

(The FBI recently arrested people in the FAA and other US government departments who were offering to sell whistelblower data back to the companies concerned - and this ONLY happened because one of the companies did the right thing and fiiled criminal complaints. It turns out that the USA's whistleblower protection legislation has been backdoored by corrupt employees since it was enacted.)

Alan Brown Silver badge

The REAL problem

Is that Boeing progressively rat-rodded a 50 year old design (737-400 to 737-800) to the point of being dangerously unstable (737NG), added more rat rodding which made it actively unstable (737MAX), kludged in some "features" to try and counteract that and fucked up those kludges.

The design was originally _very_ stable, but the original design had the engine UNDER the wings, not in front of them.

737NGs were already dangerously unflyable without specialist training - if they stall, you can't power out it - pilots have to put the nose down FIRST, or the engines will keep swinging the nose up when the power comes on and no amount of pilot control can counteract this. Older models already this tendency but it could originally be flown out of. As engines got bigger and moved further forward of the wing it became more pronounced. There's also the wee scandal about 737NG airframes being damaged (and the damage covered up instead of being repaired correctly) during the assembly process due to contractor fraud and the Boeing auditors who lifted the lid on it being hounded out of the company.

737MAXs will vastly change their flying angle of attack with throttle setting if the controls are left untouched (a huge no-no for certification), so Boeing had to add MCAS - and they royally screwed the pooch on it.

Neither aircraft should have been certified - the engine and airframe mismatch is simply too great - but the FAA suffers from regulatory capture.

More or less: Boeing 737MAXs are the functional equivalent of early 1970s USA auto designs coming up against foreign competition.

The only way to _properly_ fix this is to give the 737 longer landing gear so the engines can go back under the wings - except that can't be done because it can't have longer landing gear without major airframe modifications - and in any case the lack of container handling ability in the baggage hold is a major problem in this day&age. In the end the real answer is to EOL the design.

There's Huawei too many vulns in Chinese giant's firmware: Bug hunters slam pisspoor code

Alan Brown Silver badge

Re: I'd like a true comparison

As MI5 said:

Huawei: Shoddy and careless

Others: only sightly less shoddy and careless

ALL the vendors need their feet held to the fire

Alan Brown Silver badge

Re: Not an investigation

this is almost exactly what Iwas going to say.

Ive pointed out a few such issues to Huaweri in devices still under support, to be told they won't be addressed

It could be Rotterdam or anywhere, Wiltshire or in Bath: Euro cops cuff 6 for cybersquatting, allegedly nicking €24m in Bitcoin

Alan Brown Silver badge

Re: You keep it all in.

"The sand is titanomagnetite"

Is the ironsand mining operation still running? I was on and off the barge many times during the 80s as a telco tech and thought it was shut down in the early 90s

Hey China, while you're in all our servers, can you fix these support tickets? IBM, HPE, Tata CS, Fujitsu, NTT and their customers pwned

Alan Brown Silver badge

Re: Who is telling the truth ?

> All countries have laws that compel its citizens to do what they are told to do and then keep quiet about it. This is both for the 'good' and 'bad' countries. I'll let the reader decide which countries are 'good' or 'bad'.

There are no "good people" or "bad people"

It's all "Bad people" - they just happen to work on different sides.

Iran is doing to our networks what it did to our spy drone, claims Uncle Sam: Now they're bombing our hard drives

Alan Brown Silver badge

Re: In other news... lying liars.

"Do you think there is a screw loose in Jeremy head"

The instated part about the £15bn is that in short order they'll be patrolling to prevent the exodus of skilled people. The population losses of the late 1960s will seem minor by comparison.

Alan Brown Silver badge

Re: In other news... lying liars.

'Johnny "Chickenhawk" Bolton'

Chickenhawk is also a term for a violent homosexual predator who goes after young teenagers.

Given what happens to young men in wars, it fits.

Alan Brown Silver badge

Re: In other news

"US policy was not the reason Japan chose to go to war"

I think the USA's trade embargo and oil blockade had a hell of a lot to do with it.

The USA knew that they were going to have to go to war with Japan, but they were planning for about 1943. What they didn't _expect_ was for Japan to reach out early and hit the fleet at Hawaii as a starting shot.

Alan Brown Silver badge

Re: In other news

"but they've always been more than happy to push back pretty hard when they've been attacked"

Funnily enough when you have a history of around 5000 years of being invaded, you tend to get tetchy about wanting to be left the fuck alone. Russia's still raving on about Ghengis Khan taking Moscow and St Petersberg. Iranians still scare their children with stories about Alexander killing Darius.

Alan Brown Silver badge

Re: In other news

" Today, that's likely to mean discovering the hard way that the US is far more dependent on the internet and vulnerable to cyberattack than Iran "

Whilst ALSO discovering that aircraft carriers were obsolete for warfare sometime ago (as the USA did with battleships in 1941, despite many years of warnings).

Hint: DF21D, DF26 - and they don't even need to have explosive tips. A kinetically achieved hole in the flight deck is more than sufficient to ruin the Admiral's day.

Biz tells ransomware victims it can decrypt their files... by secretly paying off the crooks and banking a fat margin

Alan Brown Silver badge

The website's still up

Anyone want to take bets on how long it stays there - and how long they stay answering the phone?

BGP super-blunder: How Verizon today sparked a 'cascading catastrophic failure' that knackered Cloudflare, Amazon, etc

Alan Brown Silver badge

Re: Response

"Unless someone creates a 'project' and associated billing codes/budget to go with it, nothing gets done to fix BAU issues in large companies like this."

Or in other words, people should start billing Verizon for hijacking their routes - and then they _might_ start paying attention.

Alan Brown Silver badge

"I remember, years ago, the internet was designed to stop people taking a big chunk out and stuffing it up for everyone else."

Years ago, the first octet of an IPv4 was supposed to represent the destination network and the second, the location inside that network.

Things grew, numberspace got crowded and that tidy setup got obliterated. IPv6 is _big_ and _sparse_ precisely to allow the tidy setup to be maintained without panicking and stuffing numbers into every available gap.

What the cell...? Telcos around the world were so severely pwned, they didn't notice the hackers setting up VPN points

Alan Brown Silver badge

Re: VPNs would be easily overlooked its not that egregious to have missed it

"So usual nonsense of modest security at the front end, and once you cross that magic employee's only line all notions of security go out the window..."

Yup - and THAT is why caller-ID spoofing is so trivial for any company which cares to do the paperwork and connect its own kit. Along with malicious call rerouting, or hijacking entire number ranges from halfway around the world (Nuiean and Chilean area codes being used for London-based porn lines at one point in the late 1990s...)

If you thought BGP security was bad, you aint seen telcos.

Alan Brown Silver badge

Re: Ah....white hats and black hats.....

"There are, always and only, the bad people, but some of them are on opposite sides"

Alan Brown Silver badge

"Such lulls in activity are not unprecedented, particularly when it comes to hacking groups from s/China/govt organisations/ "

There, FTFY

TBH I wouldn't be at all surprised if this was Nork in origin, or even one of the larger narcogangs - they all have an interest in knowing who's talking to whom and when.

Remember that crypto-exchange boss who mysteriously died after his customers' coins disappeared? Of course he totally stole them

Alan Brown Silver badge

Re: Alternatively...

Dying of Crohn's disease anywhere in the world is unusual - even in India. It takes _decades_ of suffering the disease without medical treatment to have that effect.

If you're sick enough that you'd die of complications, then there's no way you'd be well enough to be travelling in the first place.

The "death" has about the same ring of truth about it as the account names.

Alan Brown Silver badge

Re: Cherchez la femme?

"someone who, as far as I can tell, is not a techy in the least bit."

You got that right. Neuromancer was banged out on a _MANUAL_ typewriter.

Alan Brown Silver badge

"He saw all that money, realized that he could do whatever he wanted, and did so."

Not exactly the first time a money handler has decided to do this - and it won't be the last time.

Bitcoin (and other cypto currencies) just make it easier than creating a South Sea Bubble, but there are ALWAYS greedy and gullible investors coming along - who will helpfully act as schills to sell even more of the worthless stuff - we all work with some hopeless gambling addict who's constantly buying into these scams (my reply is usually "Tulips! tulips!")

https://www.historic-uk.com/HistoryUK/HistoryofEngland/South-Sea-Bubble/

It's official. You can get FUCT, US Supremes tell scandalized bureaucrats in rude trademark spat

Alan Brown Silver badge

Re: Will it help?

"A number of aspects of US culture are stuck in the 17th or 18th century. "

This particular aspect ("new morality") is very much a late 19th-early 20th century thing - as is the Lanham Act.

The rose-coloured specs about our predecessors is a direct result of rigid censorship and rewriting by many prudish historians and authors - Tolkein's academic work on old english texts being one of the more egrarious examples of Bowdlerisation

It's ironic that "Bowdlerisation" is used, when he specifically targetted Shakespeare - and most of the bard's stuff the public are familiar with these days is what has been tampered with, not the originals.

Alan Brown Silver badge

Re: Bah and possibly, Humbug!

Your grand dad blamed all those young people listening to that satanic Rock and Roll, and HIS grand dad blamed it on Jazz

Alan Brown Silver badge

Re: Bring In The Fashion Police

"The 1000s of petty little laws" is a result of large chunks of the USA being of Germanic/eastern european stock, culture, and religious nutjob tendencies (a result of centuries of warfare over what colour socks a certain arab was wearing one day on a hill - he was probably wearing sandals) despite being a common law country. They'd legislate blasphemy if they could. (some areas actually did). The rest of the world simply rolls their eyes and ignores people saying naughty words unless they're doing so whilst waving fists(or other things) around.

Say it aint so and I'll point to the factor that the proliferation of those laws (and morality enforcement) is strongest in areas of germanic+religious nutjob migration.

The real takeaway from this is that the Lanham Act has just been declared unconstitutional and that's been the go-to for meddling morality busybodies American Taliban types for _decades_. I can think of much more offensive behaviour in media or public places that US lawmakers won't touch - such as wearing swastikas and shouting "sieg heil", or wearing sheets and white pointy hats whilst carrying torches and waving bibles around.

It's time to invest in popcorn shares, because shit's about to get _very_ interesting in Middle America.

Out of Steam? Wine draining away? Ubuntu's 64-bit-only x86 decision is causing migraines

Alan Brown Silver badge

Not as if they're the only ones.

RHEL7.5 onwards is x64 only, no x86

RHEL8 is fully 64-bit only (not just x64 - Arm32 is gone too)

Support for actual i386 cpus (as in: no fpu) was dropped a long time ago and 32-bit x86 cpus are a distant memory at this point.

A lot of this is driven by one simple problem: Nobody is developing for these items anymore.

If you were to step up and take over the mantle (and you're good enough) then perhaps the reign of the 32-bit environment could continue, but unless someone's willing to do it, things stagnate.

I'm minded of the story of the guy in the rowing club who used to do do various bits and pieces on Saturday mornings to keep the place tidy because he liked doing so - until he got yelled at by some entitled brats for not keeping it tidy enough. That was the day he stopped.

Remember the Nominet £100m dot-uk windfall it claims doesn't exist? Well, it's already begun

Alan Brown Silver badge

Re: FC.UK

I'll just take fuu,uk

*Spits out coffee* £4m for a database of drone fliers, UK.gov? Defra did game shooters for £300k

Alan Brown Silver badge

Re: £4m for a database of drone fliers

" £350m for nhs PER WEEK! "

Which is now £350m for Boris' rich chums in tax cuts whilst asset stripping the NHS and giggling all the way to the Cayman Islands.

Greatest threat facing IT? Not the latest tech giant cockwomblery – it's just tired engineers

Alan Brown Silver badge

Re: Estimating Software Projects

"a manager notorious for his "5-minute" jobs, which generally took 5 days."

We have a lot of those - where the job might actually be 5 hours - but getting to it might take 5 weeks.

Alan Brown Silver badge

Re: Estimating Software Projects

> and also usually a bunch of 'unknown unknowns'

Yup, such as when a vendor "can't duplicate" a bug(*) you've been spoonfeeding to them - because they insist on trying to replicate it in a totally different OS (macos) to the one you're using (linux) and different authentication schema (local users vs LDAP) - and keep repeating the same mantra no matter how many times you point out that their "It works for me" is comparing Applies to orange juice.

(*) Not so much a bug as a software module that's entirely broken from the ground up and the people responsible are dodging accepting the blame whilst their management look on, not realising that newer Linux distro rollouts are going to show this particular dain bramage(**) up in spades.

(**) Otherwise known as "we're going to fuvk your security up, in exchange for gaining small amount of programmer convenience"

Monster magnet in my pocket: Boffins' gizmo packs 45.5-tesla punch and weighs just 390g

Alan Brown Silver badge

"This does, however, bode well for the subsequent demonstrator phase for a commercial fusion power station, if that ever happens."

If it happens in my great-grandchildrens' lifespan I'd be surprised. (I'd also be surprised to be alive by then)

Alan Brown Silver badge

Re: At last.

"I've got one of those USB charging cables with a detachable magnetic plug; it's quite nice having a "quick-release" system and it also means I can leave the plug attached to my phone to prevent dust and water getting into the socket"

I've yet to find one that's compatible with QC2 or QC3 - so you're limited to 5V 0.5A

Blighty's online pr0n gatekeepers are begging for a regulatory beating, says digital rights org

Alan Brown Silver badge

> but when we want a draconian law passed, you can always count on us to "think of the children".

The best response to that is "After all, your friend Jimmy Saville always did."

Alan Brown Silver badge

Re: "We want the UK to be the safest place in the world to be online"

"but most teens with rampaging hormones are going to find porn at some point"

By the time they get to BE teens you've had plenty of time to instill into them an idea of "right and wrong", plus ensure that they KNOW that if shit hits fan they _can_ talk to you. The ones who don't have this and feel they have to hide everything from (usually control-freak) mumsy and dadsy are the ones who end up being victims.

I know when I was that age I knew that some jazz mags were ok and some were best avoided. Then again I could talk to my parents about most things. A lot of my friends weren't so lucky.

Alan Brown Silver badge

Re: Not done with DNS

"There's no legal requirement, as a foreign website isn't subject to UK law."

Long arm statutes, "doing business in or with residents of" - where the latter condition seems to be easily fulfilled even if the access is "free"

That's how the USA's being handling that kind of thing for, oh, at least 100 years - and they _can't_ challenge UK or EU courts invoking long arm statutes as it would undo decades of precedent on both sides of the Atlantic.

This is why the GDPR laws have an effect despite potentially offending data handlers being entirely based offshore. It's perfectly feasible for data privacy commissioners to sue them anyway.

Alan Brown Silver badge

"I quick test using an EE mobile plan where adult sites are normally blocked at the DNS by EE."

That would be the same EE whose adult site blocking nobbled access to the Sarracens Rugby club in Watford? I know about rugger buggers but that's a bit over the top (especially seeing as the Sarracens' site is the only way to know about the availability of certain public parking spaces on match days)

Alan Brown Silver badge

Re: Bloody big state Tories

"Vicorian views to morality"

Which were "anything goes" for the most part.

The age of consent was 12 years old and only raised to 16 due to a moral panic over child prostitution (it was felt that younger girls could pass for being 12, but it's harder to pass for being 16)

If you didn't pay your bills, it was commonplace to hire a "cutter" who would hunt you down and do as the job title suggested - usually to your face - as a warning to others.

And the rich lived in terror, behind 12-foot high walls topped with broken glass/razor wire.

Alan Brown Silver badge

It's not just this side begging for a beating

The self-appointed policemen of these things (who then managed to be delegated authority) are operating without oversight or auditing of anything they do - and have been caught adding any groups which attempt to analyse their politics and procedures to the blacklist regardless of actual illegal content.

Imagine Mary Whitehouse having actual control of the switch - and deciding she doesn't like sites that criticise the way she operates.

Because use of these filters is _not_ voluntary, there are reasons that such things _must_ have public oversight, else they become the stealth path to a Great Firewall.

Of course in the medium term Elon's Satellite Cloud(tm) is going to blow this entire filtering concept apart as the authorities start playing Whack-a-mole - they will be forced to concentrate on the sources rather than the viewers. I can't see making using Musk Internet illegal going down well amongst those people who can't get broadband services. More to the point I can't really see how using it will be detectable.

'Cynical and bullying' TalkTalk hackerhacker getsgets 4 yearsyears behindbehind barsbars

Alan Brown Silver badge

Re: Skilled cyber-criminal left traces of own IP address

> Exactly, too many smart-asses commenting "just use a VPN and then you're perfectly safe and untraceable"!

By the time these skiddies think about using a VPN they (and their online fingerprints) already well-known - plus they like to boast - which means that all it takes is someone observing the skiddy community over a prolonged period to connect the dots sufficiently to get a monitoring warrant.

Various groups have been doing exactly that and building intelligence files on skiddies from the moment they first appeared as young pains in the arse until some point when they're determined to be non-sociopathic and outgrown the behaviour. At first it was other net users who were pissed off about the DoS attacks, more recently it's law enforcement.

Alan Brown Silver badge

Re: Skilled cyber-criminal left traces of own IP address

"how do we know he didnt take extra IP hiding measures"

He didn't. Most crims (who get caught) simply aren't that smart.

If they were, they'd hold down honest jobs (or start up new religions) - and although you occasionally hear about massive amounts stolen, when you tote up the hours involved they're usually getting less than minimum wage overall. It's some kind of gambling mentality. (big up the wins, ignore the losses)

"and the Mad Skillz of the plod traced it anyway?"

As with many such cases, it was handed to them on a silver platter after a lot of other people did the legwork.

About the only time they did their own legwork was when Peter (weaselboy) Francis-Macrae sent out fake invoice spam with a reply phone number of the Cambridgeshire police HQ's main switchboard in 2003. Then it got personal.

You won't guess where European mobile data was rerouted for two hours. Oh. You can. Yes, it was China Telecom

Alan Brown Silver badge

Re: A fuckup is a fuckup, a hack's a hack

"However, a fuckup this large requires either a special kind of stupid"

Never underestimate the stupidity of people in sufficiently large groups - particularly where there are rigidish social structures.

There are more societies where copilots will sit and watch the captain totally screw up and fly a large passenger aircraft into the ground and be afraid to intervene than ones where the crew will scream bloody murder and take over the controls - in fact such cultures have repeatedly happened in corporate america too (including at least one US airline!)