* Posts by Dan 55

15447 publicly visible posts • joined 13 Jun 2009

NSA code backported, crims cuffed, leaky AWS S3 buckets, and more

Dan 55 Silver badge

Re: "... we at El Reg never provide positive coverage in exchange for freebies."

I take it you missed Dabbsy's review of the iPhone X.

Dan 55 Silver badge

Re: Crime and unniceness: Totally mainstream

I won't have a word said against Shutterstock.

Due to Oracle being Oracle, Eclipse holds poll to rename Java EE (No, it won't be Java McJava Face)

Dan 55 Silver badge

Shame they've ruled out Yachty McYachtface.

US Senate mulls giving Huawei and ZTE the Kaspersky treatment

Dan 55 Silver badge
Dan 55 Silver badge

&genie=1 (amongst others)

Far better to choose patriotic all-American suppliers like Netgear. The brown envelope's in the post.

Talk about a hot mic: Dodgy Pixel mobe audio lands Google in court

Dan 55 Silver badge

Re: Every 30 months?

That law would certainly have covered a known problem like this though.

Dan 55 Silver badge

Re: Every 30 months?

England and Wales have a six-year guarantee that makes retailers angry, click here to find out why!

Dan 55 Silver badge
WTF?

Crappy consumer laws in the US

- Hey, this new phone you sold me with only a year's guarantee is a lemon.

- No problem, we'll replace it with a used one with only 90 days guarantee.

No yolking matter: Google Translate cock-up gives Norwegians more than un œuf eggs

Dan 55 Silver badge
Trollface

Can't say I noticed anything out of the ordinary for a Reg article

Note: this story was translated from English to Norwegian with Google Translate. Then translated again from Norwegian to English with Bing Translate. Because why not? ®

New strife for Strava: Location privacy feature can be made transparent

Dan 55 Silver badge

Re: GDPR

Oh yes it does - recital 26.

If the data subject can be discovered with additional data then they're not anonymous, and if they're not anonymous then the data controller has just fallen foul of the GDPR.

Dan 55 Silver badge

Re: GDPR

The GDPR says the data must be rendered anonymous in such a way that the data subject is not or no longer identifiable if it is published by the data controller or processor. That is debatable.

Dan 55 Silver badge

GDPR

Will Strava even be able to publish people's routes inside the EU when the GDPR comes in?

I'm rather hoping not.

Apple's top-secret iBoot firmware source code spills onto GitHub for some insane reason

Dan 55 Silver badge

Re: Is it Legit?

Apple is probably changing the boot code as we comment (or may have done already)

Why would they introduce new bugs? Far better to keep it as it is and let a whitehat report something or watch the blackhat marketplaces.

Indiegogo to ailing ZX Spectrum reboot firm: End of May... or we call the debt collector

Dan 55 Silver badge

What did we say about Tesla's self-driving tech? SpaceX Roadster skips Mars, steers to asteroids

Dan 55 Silver badge

I hear it's a laugh a minute down at HPE, IBM, DXC, etc...

Monday: Intel defector touts Arm server chip. Wednesday: Intel shows off new server chips

Dan 55 Silver badge

Xeon D-2100 a coincidence, Chipzilla assures us

Dinosaur de-facto monopolies always have something ready to announce should the minnow-sized competition dare to launch a new product which competes with their line up.

Otherwise it'll never see the light of day. I mean, why would it if they're the monopoly?

I see you're writing a résumé?!.. LinkedIn parked in MS Word

Dan 55 Silver badge

"Yes, no love for UK or Europe. Er, thanks GDPR?"

Why, do you like being spammed by recruitment agents via every communication medium under the sun?

Boffins crack smartphone location tracking – even if you've turned off the GPS

Dan 55 Silver badge

There is a 4G version out this year. As 4G use on the phone will be limited, hopefully this means it's also got tethering.

MPs: Lack of technical skills for Brexit could create 'damaging, unmanageable muddle'

Dan 55 Silver badge

Britain was fundamental in the development of the Single Market, so the current flailing around in government showing the complete misunderstanding of what it is is rather disappointing.

There is also no amount of trade on Earth with other countries that can replace being shut out of Single Market, that's perhaps why Whitehall is mentally welded to it.

Dan 55 Silver badge
Gimp

Re: But it will be worth it

Basically stopping single market access is a stick to be welded if the UK doesn't respect EU citizens' rights. With any rational government at the helm it shouldn't have to be used. So it could very well get used.

And I don't think the fundamentalist wing of the Brexiteers mind too much, they want out of everything ASAP anyway. They just need to engineer something to get punished.

That's the UK, not Tory MPs, some of whom may engineer something to get punished every evening. Allegedly. (See icon.)

Can't wait to get to Mars on a SpaceX ship? It's a cold, dead rock – boffins

Dan 55 Silver badge

Maybe Mars is a dead end

However it's the second closest stepping stone there is to Earth on the way to Europa. We're certainly not going to be able to get Europa if we don't know how to get to Mars first.

UK PM Theresa May orders review of online abuse laws in suffrage centenary speech

Dan 55 Silver badge

She did. The idea is not to mention the suffragettes and to starve the organisations and cebrations of funding so people don't realise they can make a difference.

As she's that much of a one trick pony, when she doesn't want to mention something, she fills the silence with her pet hate, the Internet.

UK Home Office grilled over biometrics, being clingy with folks' mugshots

Dan 55 Silver badge

Don't forget the supermarket loyalty cards which everybody apparently has too. You know, those things which were once compared to ID cards and ID cards were found to be even cuddlier and more harmless.

Dan 55 Silver badge

Broken by design...?

GCHQ unit claims it has 'objectively' made the UK a less desirable target to cybercrims

Dan 55 Silver badge

Re: All very nebulous

Recommendation not to pay the ransom, recommendations for what seems to be antiviruses and data recovery companies, "cyber-awareness" PowerPoints for management, and a recommendation for NHS trusts to develop their local action plans.

This is the organisation which "hacks back"? I'm not exactly impressed, maybe I'm expecting too much of the NCSC. You know, sort of like what Hutchins did (who was later not warned that he would be arrested in the US).

Dan 55 Silver badge

Re: When was the last time you heard about a government agency/program...

Even Universal Credit is succeeding, although for that to happen the requirements must have been that it plunge large sections of the population into poverty.

Dan 55 Silver badge

Re: All very nebulous

Don't see the NCSC mentioned anywhere there.

Dan 55 Silver badge

All very nebulous

Can't we get a list of attacks and responses? E.g. What they did when the NHS got hit by Wannacry.

Ballmer once yelled: Developers, developers! Today it would be: Docs! Support! Certificates!

Dan 55 Silver badge
Meh

Re: Programmer, not developer...

"Read 6-10h a week" he says.

I could do that in my sleep. In fact, I'll have to because I sure as hell haven't got that much free time to dedicate to reading. And if I did I wouldn't be reading programming books, I'd be reading some SF.

Ghost in the DCL shell: OpenVMS, touted as ultra reliable, had a local root hole for 30 years

Dan 55 Silver badge

Re: The sky is falling in

Well, if you consider the free hobbyist licence expensive I guess it is.

Of the few hobbies I am allowed to have, buying a second-hand DEC Alpha or MicroVAX and putting it in my man cave isn't one of them.

Dan 55 Silver badge

Re: The sky is falling in

Yo do realise that VMS's security is by obscurity? It's quite expensive to get hold of.

Dan 55 Silver badge

I do hope they didn't have to install a uuencoded binary.

Here's why online social networks are bad for humanity, the nerds who helped build them tut-tut

Dan 55 Silver badge

Again? How many times is that now?

There comes a time when you've got to put away the defibrillators.

Dan 55 Silver badge

Re: ignore the actual issue

Are you sure? We have a government educated in the philosophical arts (the P in PPE) and they're currently running the UK into the ground.

T-Mobile US let hackers nick my phone number, drain my crypto-wallets, cries man who lost $20k

Dan 55 Silver badge

SMS is SFA

Use a HOTP or TOTP client.

But not Google Authenticator for obvious reasons.

You've only gone and committed to becoming cloud native

Dan 55 Silver badge

Re: What to do next?

Can you really claim that just after Spectre and Meltdown rendering cloud pretty pointless as you can't share hosting with anyone else? You can pay more to have the entire server to yourself, but if you do that you might as well stick with your own data centre.

In a few years new CPUs will come out which address Spectre and Meltdown (probably available as an option for a premium cost), but then again GDPR will be up and running and will have hopefully focused minds on privacy and data protection. If it's in your basement it's much more difficult to be accused of losing control of your data.

Dan 55 Silver badge

Re: Cloud Native Foundation is a neutral organisation

It's like the egg marketing board saying their independent advice is you should go to work on an egg.

Lloyds Bank bans Bitcoin purchases by credit card customers

Dan 55 Silver badge

Re: This is the problem

What's the difference between buying bitcoin and a cash advance for a foreign currency (which may go down as well as up)? If they allow the second they should allow the first.

You're the IT worker in charge of securing the cloud for your company. Welcome to Hell

Dan 55 Silver badge

Expectations of a modern workforce

Without blaming millennials, our society expects to access information fast and in a manner that’s convenient. That behaviour is seen in our customers and in our workers. Whether it’s a self-service portal to change your address, an account with your personal details for ordering from an app, or just the ability to check work emails on the train from your own phone, we’ve changed our definition of “remote access.”

Who has an expectation of checking work e-mail from outside the office? My expectation is that I don't check it, but it seems fewer and fewer jobs will allow you to (not) do that. It's of utmost importance to stay on the hamster wheel.

Dan 55 Silver badge
Thumb Up

That's an actual Shutterstock photo

Excellent.

South Wales cops crow about facial recognition arrests on social media

Dan 55 Silver badge

Knock, knock. Who’s there? Another Amazon Key door-lock hack

Dan 55 Silver badge

Re: Hmmm....

I might put one on a lockable box outside the house. That's how much I'd trust it.

No Windows 10, no Office 2019, says Microsoft

Dan 55 Silver badge

Re: As soon as Windows 7 support finishes

Nope - Registry keys are much lower level than a config file in Linux. And you don't get such auditing in Linux without a version control system.

In registry nomenclature, a key contains value-data pairs. In everybody else's nomenclature, a configuration file usually contains key-value pairs. How are they not equivalent?

Nope - not private - you can't block root accessing anything on a Linux filesystem.

SELinux.

Almost all OS configuration is in the Registry and all the advantages above apply. Also it's much faster to parse and far more scalable than text files.

[Citation needed]

A configuration file, even on Windows, can be text, binary, whatever the program developer needs.

Dan 55 Silver badge

Re: As soon as Windows 7 support finishes

No, registry keys are almost always at a way more granular level than configuration files in Linux.

No, because a key holds a collection of value-data pairs, similar to a configuration file holding a collection of settings.

But if that happens you just boot to the "last know on good configuration" or a system restore point.

Which was disabled from Windows 8 onwards. You need to set a registry key to enable it again. Difficult if the problem is due to the registry being hosed.

No, they recommend that for data that must or you choose to store as files. There is no recommendation not to use the registry.

So on the one hand we have, "if you want, go ahead and use files", and on the other we have Registry Junk: A Windows Fact of Life and finally the future (UWP) does not use it. Not difficult to work out what MS' advice really is.

Because .Net apps can be multiplatform.

UWP apps are multiplatform but mobile is dead so it's multiplatform with one platform.

Dan 55 Silver badge

Re: As soon as Windows 7 support finishes

You have per key ACLs and auditing, you have atomic transaction commits with rollback and snapshot capability and above all it's a single interface, a single location and a standard format for all configuration data. Windows stopped using crappy solutions like INI files many years ago - Linux has yet to catch up.

The registry was a Windows 3.1 solution to there being no defined hierarchy of directories to hold application settings, so it had to be centralised because otherwise developers would put files anywhere and nothing could stop them (unlike UNIX).

Registry keys are equivalent to files, which can also have ACLs and auditing. Most configuration files are stored in the user's home directory meaning the settings are private to that user without doing anything.

In UNIX if you want to copy a program across from one comouter to another it's easy to install the same program from the repository and copy the configuration file/directory across. Try that in Windows.

Commit and rollback are necessary because it's centralised, and that still isn't good enough as registry corruption and registry cleaners are things in Windows.

If there is a corrupt configuration file in UNIX you just wipe it or restore from backup and carry on with your day. Try the same on a Windows machine with a hosed registry.

Finally the registry is legacy. MS now recommends %APPDATA% is used for desktop software settings and it isn't used in TIFKAM app settings.

Dan 55 Silver badge
Facepalm

Re: "Is it me or is MS getting desperate now?"

No, there's no technically astute people here. FFS, go shill elsewhere.

Dan 55 Silver badge

Re: If you don't eat your Windows 10s, you won't get any Office 2019 for pudding

to me its you

face facts

wouldn't matter what the hell Microsoft did - in these forums the penguins would be all over it

I use Windows, macOS, and Linux and I don't discriminate, I hate them all equally. Perhaps MS could pull the plug on the slurping. Until then, it's Windows 7 for me.

Dan 55 Silver badge

Re: just to it

Jesus christ...the ribbon has been around for 11 years.

The interface hasn't had a radical change since.

By all means bash them for the stuff they do. Not the stuff you didn't like over a decade ago.

If that doesn't show you how really fucking awful the ribbon is, what will? It's not as if commentards actively refuse to learn it, it's there day in, day out. It's just such an atrocious user-hostile design, like TIFKAM. Both, incidentally, pushed by the same person.

Peers approve Brit film board as pr0n overlords despite concerns

Dan 55 Silver badge
Facepalm

Magic which will happen will be determined at a future date

The BBFC will rate all websites on the Internet, somehow. Age verification will happen, somehow.

With such a solid foundation, how is this not going to burn down, fall over, and then sink into the swamp?

You can find me in da club, database full of faces… but this ain't privacy watchers' jam

Dan 55 Silver badge
Windows

Bournemouth

Presumably they're talking about over-65 clubs?