* Posts by SImon Hobson

2539 publicly visible posts • joined 9 Sep 2006

UK spy overseer: Snooper's Charter cockups are still getting innocents arrested

SImon Hobson Bronze badge

Re: meanwhile elsewhere

It's the same here in the UK - except that they don't actually have locks, just a standard triangular key. Manholes (pits) just need standard manhole cover keys - which isn't a key (as in security), just a tool for lifting the cover.

SImon Hobson Bronze badge

Re: Wrong IP? Pah - Try Plusnet!

... and are keeping the password in plaintext/reversable enc ...

IIRC the plaintext password is needed for CHAP - and CHAP avoids the need to send the password across the wire in plaintext. While there are probably better ways of doing it, they have to support what is actually supported in routers.

Trying to log into Office 365 right now? It's a coin flip, says Microsoft: Service goes TITSUP as Azure portal wobbles

SImon Hobson Bronze badge

Re: Century Link

That wouldn't be an excuse.

One of the great claims for "cloud" is the ability to have stuff in different locations etc. MS have enough scale for the loss of "a link" to perhaps cause a slight blip while the system reconfigures - but having an outage like this because of "a link failure" would imply a complete noob approach to networking resilience.

SImon Hobson Bronze badge

Re: Fragility of DNS

... why Google is trying to move Android users over to Chrome and their own DNS so that Android users can survive some imminent DNS apocalypse?

Nah, if there is such an impending apocalypse (which I doubt) then it's only incidental if Google's DNSoverHTTPS avoids the issue. One real reason is to make sure that your DNS goes via Google.

The claim is that it avoids people seeing your DNS queries - but of course we all trust Google with our information don't we ?

Apple: You can't sue us for slowing down your iPhones because you, er, invited us into, uh, your home... we can explain

SImon Hobson Bronze badge

Re: Attitude

Actually the only limit is the 6 year statute of limitation for civil cases - the law specifies "reasonably durable" without specifying what that means. Clearly if you paid a fiver for a second hand phone off a market stall then your expectations might not be too high; but when you've paid perhaps getting on for a month's take home pay then you'd expect it to last pretty well.

As others have commented, I;ve had phones last "a long time" - so long in fact that I really can't remember how long. I think I used my Treo 650 for over a decade and only upgraded when I just couldn't get by without "modern" features like WiFi, larger screen, web browser that can cope with modern web pages, etc. I've had a Moto G (early model) for a good few years, and only replaced that (I've still got it and still use it for some things) because one of the lasses upgraded to an S8 and I got her S6.

I hope the appellants' lawyers pick up on this "can't expect it to last more than a year" and (metaphorically) really run Apple's nose in it.

Gripe to UK, Ireland, Poland: Ad tech industry inhales, then 'leaks' sensitive info on our health, politics, religion

SImon Hobson Bronze badge

Actually I thought the action to be taken would be "tell the outfit to hide their activities better".

Facebook didn't care if your kids ran up gigantic credit card bills – lawsuit

SImon Hobson Bronze badge

Re: Facebook didn't care if your kids ran up gigantic credit card bills

if they were knowingly ... providing services to children via credit card, which children cannot legally own, then they are knowingly processing unauthorized transactions

Technically they were authorised - because the parent/whoever put the card details in and authorised purchases. Where it probably gets grey is whether Faecesborg made it clear about the implications (ie "enter your card details, we'll take whatever any user spends forever") and whether they provided any meaningful controls (eg setting a spend limit, or otherwise restricting spend).

It will probably be this latter area that gets examined in detail.

Stage fright or Stage light? Depends how far you dare to open your MacBook Pro's lid

SImon Hobson Bronze badge

There are laws to cover this - what used to be (in the UK) the Sale of Goods and Services Act which has (IIRC) been replaced with something very unmemorable. TL;DR version, any item sold must be "reasonably durable" and the fault described does not meet that definition. As it's a widespread problem, then it's clearly a designed in defect - so no problem demonstrating that it was present when bought.

There is no time scale in law - so since this is supposed to be a quality product, there's no excuse for it not to last a good few years. The main limitation is that under civil law, there is a limit of 6 years from when the breach occurred (which would be the date of sale, when they sold you the faulty goods) in which to start legal action.

So simple course of action - take it back to where bought and insist on repair or replacement without charge. If it was from a dealer then I pity the dealers who are going to have to swallow the costs and then argue with Apple. From teh sound of things they've only gone downhill since I dealt with them (as an independent dealer) many years ago - and they weren't exactly good then !

Different countries will have different consumer protection laws, but under EU directive, all are obliged to impose a minimum 2 year warranty - Apple were found guilty in court in Italy over this. So 18 months old, no problem, it's Apple's cost to fix. After 2 years, depends where you are.

UK.gov plans £2,500 fines for kids flying toy drones within 3 MILES of airports

SImon Hobson Bronze badge

Re: De minimis non curat lex

Wasn't it wearing a loud shirt during the hours of darkness ?

Not to mention, possession of thick lips and curly black hair.

Looming EU copyright rules – tackling Google news article scraping, installing upload filters – under fire from all sides

SImon Hobson Bronze badge

Re: ....unless they can prove its not copyrighted

so I can properly weep for those poor, poor Creators and seventh sons of their sevenths sons deprived of their rightfully inherited luxury jets, jumbo yachts and private islands.

Err what ?

You seem to have fallen into the trap of thinking that all creators are wealthy. Some are indeed wealthy, and that wealth may or may not have been inherited. But MOST creators certainly are not.

I know a few creators who, simply by lacking that "got discovered by the masses" lucky step, need a day job to pay the bills. Some were indeed fortunate in "hitting the bullseye" and became wealthy - but they started out very much not wealthy. Take J K Rowling for example, when she started writing Harry Potter you could not in any way call her wealthy - and in fact she was living on state benefits at the time. Not to mention, the first twelve publishers the manuscript was offered to turned it down - I bet all of those regret that ! So yes, J K Rowling is now "quite wealthy" and can in fact afford to give away a lot of money. But ponder this, if copyright had not protected her work, then everyone could have just ripped it off and she'd probably still be on benefits - that's the purpose of copyright, to give creators protection for their works, so they have an opportunity to profit from them, and hence an incentive to create them in the first place.

We can argue about whether "death + 70 years" as it stands in the UK for written works is right - but I think it's hard for anyone but the most hardcore freetards to argue that copyright is wrong in principle.

And of course, many people put just as much effort in, but don't get that lucky break. My mother spent years writing, and people have told her how much they've enjoyed reading her books. But it's just as well she didn't need any income from them, since she's made "b***er all".

German competition watchdog toys with ban on some Facebook data-slurps

SImon Hobson Bronze badge

Re: About time

Facebook has only the data you and your friends willingly input ... plus a "like" button on only the most questionable websites ...

What rock have you been living under for the last few years. Faecesborg harvests far more than you seem to think here - carefully harvesting whatever they can, correlating with anything else they have, and building a shadow profile. Lookup Max Schrems and his case against Faecesborg.

Germany has a problem with the entire point of Amazon's daft Dash buttons – and bans them

SImon Hobson Bronze badge

Re: Just dumping the stuff in a cart wouldn't be a terrible option.

You can't re-order until the order's been dispatched

With a system like Amazon's, that could mean ordering several times in a day, and before there's any warning by something arriving at the front door (if you aren't the sort that checks their email every few seconds)

Begone, Demon Internet: Vodafone to shutter old-school pioneer ISP

SImon Hobson Bronze badge

Oh another one gone under the Thus -> Clueless & Witless -> Vodamoan transitions. Reg, please note correct spellings of their names !

Vodamoan are utter **** to deal with, even for business services at business service prices. Went through something similar at my last job, having to migrate away from the leased line and class C address block we'd had since ... well before I joined the company. Trying to get something as basic as a FTTC connection working was beyond them - I left the company before they got one of the lines working (it had been something like 5 months IIRC).

Oh yes, and another one who got online thanks to Demon's tenner a month service. RIP

SImon Hobson Bronze badge
Coat

Re: sniff!

Aye, nostalgia isn't what it used to be

The D in SystemD stands for Dammmit... Security holes found in much-adored Linux toolkit

SImon Hobson Bronze badge

Re: Whatever happened to Upstart?

Couldn't decide whether to upvote you for Yes, I will never forgive Debian for that. or downvote you for At least they still provide a means to avoid it, though. !

They don't provide a means to avoid it though - all that exists at the moment are few packages that won't work at all without it. Since systemd is the default, and supporting non-systemd systems is not mandated, over time it will get harder and harder to duct-tape a non-systemd Debian together.

That's why Devuan was born, to ACTIVELY maintain non-systemd package status - forking Debian packaging for those packages that need modifications, and providing replacement for a couple of irretrievably borged ones.

Despite vows to spend more with smaller firms, UK.gov sure does seem to love legacy lock-in

SImon Hobson Bronze badge

Well, there's no excuse for not having the technical skills ...

All they need is a few technically qualified contractors on the procurement team to hold their hand. Plenty of those about ... ah, except they've done their best to p**s them off with taxation bull manure imposed by people who lack the technical skill to see that it's bull manure.

Attention all British .eu owners: Buy dotcom domains and prepare to sue, says UK govt

SImon Hobson Bronze badge

Re: Don't worry, it's only money

Since when has the EU given any thought to how much its bureaucracy costs the member states?

More to the point, it looks strongly like "the EU" (or at least, certain high ranking people) are keen to make life as hard as possible for the UK regardless of the cost to the EU. If we leave without it being very visible painful for us then it opens the floodgates for other countries to leave. And lets be realistic, there are other countries that would be better off out of it.

I'm just not sure the computer works here – the energy is all wrong

SImon Hobson Bronze badge

Re: Memories

Autopilots are great at controlling a fully functioning aircraft, and can do so better than a human pilot. But are not designed to react correctly to a myriad of abnormal situations which ...

I recall watching a program on the gogglebox some years ago that was talking about the issues faced by pilots when "something's broken". For example, in the Sioux City DC10 incident, the pilots ended up flying he aircraft with just the two remaining engines - they were fortunate in having a training captain on-board who managed this for them and took some of the pressure off the situation.

Anyway, modern airliners can use alternatives to the traditional control surfaces - eg some of them use spoilers instead of the ailerons. There has been talk of training computers to use "whatever is working" - and I recall them saying that some simulator trials had shown that the computers would often manage to fly an aircraft that the pilots couldn't fly.

SImon Hobson Bronze badge

Re: Memories

Aircraft autopilot is actually an almost trivial task since it's going to be flown in known conditions where ATC (normally) takes care of avoiding banging you into another aircraft. It would always be monitored anyway, so the pilots would not allow it to (for example) autoland on an obviously blocked runway without ATC permission to land. And for that autolanding, it doesn't have to try and figure out where the runway is by analysing pictures from a camera - there's an expensive, complicated, and continuously monitored system transmitting a radio signal for it to follow. Or more recently, a GPS system with ground augmentation and an accurately placed runway in the database.

You don't generally cyclists, animals, drunk pedestrians (or worse, ones glued to their mobile devices), etc once you get above a few feet off the ground - and security usually keeps them all off the runways.

In contract, the "self driving car" has a task several orders of magnitude greater in complexity.

SImon Hobson Bronze badge

Re: Similar story

Ah yes, a relative had a similar story from when he got started with a geo-surveying outfit.

One of his earliest jobs with them was up the north east where there's some large radar installations - and they were a few fields away. Anyway, they rocked up with a load of trucks of gear and started to set up camp - and were quickly visited by military people checking up on what a bunch of blokes with technical looking kit were up to in close proximity to a military site ...

After that was sorted, they started setting up and found that the radars were crashing the computers - so they had to up sticks and move to the other side of a hill to shield them from the radars.

One I;ve personally had was a customer who made drum closures - the big snap-fit bands that hold lids onto oil drums. Their factory contained a number of powerful spot welding machines - and for a short time we were convinced that this was the problem corrupting their floppy disks. Moving the machine to the office didn't fix it though - and it tested perfectly on my test bench.

Eventually we twigged ... Apple had pictures in the brochures showing an Apple II with two floppy drives on top, and a monitor on top of that - and that's what the customer had done. However, unlike the Apple monitor, the one they had didn't have magnetic screening in the base to allow it to sit on top fo floppy drives without causing problems.

Fake 'U's! Phishing creeps use homebrew fonts as message ciphers to evade filters

SImon Hobson Bronze badge

Re: html in email...

Agreed. I read email for the message

Me too !

too many people want it to look pretty - marketing people I am looking at you.

Except that often the result isn't that it looks pretty - it often makes it unintelligible.

I'm slowly getting into reading some of my emails on my phone - with a small display. Plain text emails are fine, but formatted ones, even non-HTML get shrunk so the formatted version fits in the screen, resulting in impossible to read text. Even on a laptop screen, many emails are "hard to read" because they render in the stupid font/size and stupid colour the sender's email program defaults to - like the small blue text Microsloth seem to think is a good idea.

And don't get me started on Microsloth's contribution to email usage by defaulting to top posted replies.

And to think people at work kept telling me I was in the wrong for using plain text and bottom posting :-/

Forget 2019's tech biz takeovers, here's the mega-merger everyone's talking about: Milky Way and LMC, coming soon

SImon Hobson Bronze badge
Joke

Will this be another event that we can go to, then retrospectively when we get back, invest 1p to pay for the trip thanks to a billion years of compound interest ?

50 years ago: NASA blasts off the first humans to experience a lunar close encounter

SImon Hobson Bronze badge

Re: Apollo 8 in 1968 - IT! WAS! AWESOME!!!

when you take the RISKS necessary

Especially this, too much these days is all about "but what about the repercussions if it goes wrong ?"

If they were trying to do it today, you'd see a crown of legal firms round the homes of the crew's homes - waiting for bad news so they can get in and "you've lost a family member, let us sue NASE for you ?"

SImon Hobson Bronze badge

Re: Apollo 1

Could have been worse. I was listening to a talk (on air accident investigation) a few years ago, and the guy giving it has some interesting tales ...

He was visiting the AAIB (Air Accident Investigation Branch) at Farnborough, and while walking round he casually picked up an instrument off a table. The chap showing his around advised his to put it back down as it still had someone's brains on it. Now that sort of puts perspective on what accident investigation can involve - and I dare say they'd not have been allowed in the house at all if the ones you saw were like that !

Corel – yeah, as in CorelDraw – looks in its Xmas stocking and discovers... Parallels

SImon Hobson Bronze badge

Re: Not surprising

Corel has always been the final resting place of the also-ran software that they acquired from some failing business.

As a long term Parallels user, I can assure you that it's not and "also ran" bit of software. But it is worrying that it's been acquired by a company with such a reputation - and I feel a sense of deja vu coming on ...

Many many years ago I was using a bit of software called (IIRC) Virtual PC which did more than just a compatibility layer as it also had to do machine level translation to emulate the Intel chip on the Power PC (G4 or earlier). Then the company was acquired by Micro$oft who clearly were after it's "windows on windows" capabilities. Needless to say, ongoing development for Macs didn't happen and when the G5 came out then it stopped working. My memory is too hazy to recall what I used between that and getting an Intel based Mac - but since I got an Intel processor I've been using Parallels as an essential tool. I really hope it does go down the pan.

Mark Zuckerberg did everything in his power to avoid Facebook becoming the next MySpace – but forgot one crucial detail…

SImon Hobson Bronze badge

Would that be such a bad thing?

No, but it won't happen.

Basically the network effect means that if you don't use Faecesbook then you aren't connected. I can't find it now, but in a security blog, I recall someone having done a little research into why students were all on FarceBork. It came down to, most are, most parties are only advertised there, so if you aren't onit you don't get to go to the parties - and if you don't go to the parties, you don't get much sex !

That's what FB has been working hard towards, as the article points out. By linking into everything, they make themselves such an integral part of online (and even offline) life that lots of people "can't do without it". As long as they maintain critical mass, then they can keep the "be on FB or be nothing" facade in place - and thus coerce people to using it. Only today I was looking at job ads, and for one company their only online presence was on FB - that's what FB want. If they can maintain that sort of thing, then they operate from a position of power - yeah you can be like one of those "oddballs" who lives without [ a bank | TV | electricity | whatever ], but "everyone" who's not a nutter uses FB".

A year after Logitech screwed over Harmony users, it, um, screws over Harmony users: Device API killed off

SImon Hobson Bronze badge
Mushroom

At least with Google/Amazon et al you have a fair guess it won't disappear overnight.

No, they'll usually give you at least a few days notice ! BTW - try asking a Revolv user what they think of Google's approach to long term support ;-)

But yes, it's a problem if you buy into all this "online connected" tat - you are at the whim of some beancounter at some outside company who does not have your interests in mind.

The Palm Palm: The Derringer of smartphones

SImon Hobson Bronze badge

Re: 2nd phone

Has anyone found an operator that will let you have two phones with the same number active on the same network at the same time ?

That is indeed the issue - and I vaguely recall having read that (IIRC) Vodamoan did indeed have this facility, at a price, and with limitations. If it was Vodamoan then it makes sense them having grabbed the UK rights to it.

However at £350 they are avvin a larf. If I wanted a second phone for when I'm oout and about and don't want to risk my main phone - I'd want something cheap so I'm not too fussed when it disappears in the midden, gets dropped and stood on by a cow, or whatever.

Equifax how-it-was-mega-hacked damning dossier lands, in all of its infuriating glory

SImon Hobson Bronze badge

Neither is fair, but I don't think the "scapegoat" was fired for ... but rather for "not applying an important patch in due time", which apparently he did (fail to) do.

The question is, was he actually under instruction (whether from management or the systems) to do so ? Reading the article, it sounds like they knew there were instances to patch, but missed some of them because they did a scan wrong when looking for all of them - the latter raising other issues about knowing what's running !

If the instructions were to "patch this list of servers" and the one he didn't do wasn't on the list then he's not to blame. But even he did miss one he was instructed to do, I'd think he's still got a good case for wrongful dismissal since it's clear that his error was only a tiny cog in the big system that allowed this breach.

Why millions of Brits' mobile phones were knackered on Thursday: An expired Ericsson software certificate

SImon Hobson Bronze badge

Re: Reminder

From the way it's written, this doesn't sound like the security certificates people here seem to be assuming. A lot of software like this uses keys (or certificates) to enable features - when it runs out, the software/feature stops working. Thus you have to keep paying the vendor's support fees for as long as you want to keep using the software/feature.

And typically there is some management function that will a) warn you about impending expiry, and b) allow installation of new keys/certificates.

It sounds a lot like "something went wrong" with this renewal process, so come the expiry time of the key, the software/feature stopped working - and the network stopped working.

The British Home Office was warned about its crappy data management – then Windrush happened

SImon Hobson Bronze badge

Re: Notes from a Small Island

It wasn't the ID card per se that people objected to. It was the massive database to go with it, the requirement to hand over all sorts of data that wasn't required, and massive fines for not informing them of every little change. So instead of having an innocuous card that would be useful as official ID, we had a data fetish's wet dream of a database that no-one (or at least, no more than a handful of people) was prepared to trust the authorities with.

European fibre lobby calls for end to fake fibre broadband ads

SImon Hobson Bronze badge

Re: Where to draw the line?

Explanation for my downvote ...

You're correct, but in context it is irrelevant. Anyone could (subject to factors like service areas etc) order a high speed connection from one of many providers - and it will arrive at your house/premises over a bit of glass. But these are mostly business products with a price tag to suit - by your own admission £10k (is that the install cost, or the per year recurring cost ? I assume the latter).

I've made the comment a few times before when people said things like "I'm paying for 8M, I expect 8M" that they are not paying for 8M, they are paying for the poor man's option of whatever this poor man's option can deliver - and if they really want a service with guaranteed rates they can have one, if they are prepared to pay for it.

In the context of this article, users are being hoodwinked - it's a deliberate marketing department lie to call FTTC "fibre", and as mentioned above, using the same logic then so it ADSL and even dial up.

PS - part of my last two jobs has involved the procurement and management of such lines.

NHS supplier that holds 40 million UK patient records: AWS is our new cloud-based platform

SImon Hobson Bronze badge

Re: USA Patriot act

Would that be the same Microsoft that "just handed over" data located on servers in Ireland once the US passed the CLOUD act ?

https://www.theregister.co.uk/2018/04/04/microsoft_agrees_doj_cloud_act_renders_email_battle_moot/

As such, the Feds issued a fresh warrant under the CLOUD Act instead and – hey presto – Microsoft responded.

If there was the legal and technical separation claimed, then Microsoft in the US would not have been able to access the data, and Microsoft Europe would have refused to hand it over. Also, the recent SNAFUs affecting Microsoft's authentication services prove that there is no technical separation as claimed since an outage of a server in the US would be unable to affect users not supposedly connected to the US. If a user authenticates using a server in the US, then subverting that authentication process can over-ride any supposed technical separation.

Euro consumer groups: We think Android tracking is illegal

SImon Hobson Bronze badge

Re: Also consider Bluetooth

I've recently bought a bluetooth widget (NIX colorimeter) and for the app to talk to the device you have to give it permission to access location. WTF ? Why does it need location permission to talk to a bluetooth device ?

Domain name 'admin' role eyed up as latest victim of Whois system's GDPRmeggdon

SImon Hobson Bronze badge

Re: The cloud will save us

At some point people need to be responsible for the crap they throw onto the Internet

I think you've missed the point. I'm happy to manage my domains - it's really not that difficult.

But why should I have to have my name, email, and home address splashed across the internet when that "splashed across the internet" bit is 100% not required in order for the registry operator to perform their part of the contract ?

Yes, the registry (and reseller) need my details so they can bill me etc - that's basic contract stuff. But that information is really only relevant to the three of us involved - not every tom, dick, or harry on the internet. GDPR is clear on that - neither the reseller or registry can make allowing me to have a domain name contingent on me agreeing to collection of data that isn't needed for the contract, or publishing what data they do collect. In both cases they may ask me - but I can simply say no.

THAT is what the debate is about.

Facebook spooked after MPs seize documents for privacy breach probe

SImon Hobson Bronze badge

Re: History lesson

... could vote to use the company cash pile for, well, whatever they please. Such as shipping it off somewhere safe, out of the way, for their own enjoyment ...

IIRC there have been sueballs from shareholders over much less. Such a move would so massively devalue those non-voting shares that there'd be few holders who wouldn't head straight to court for their pound of flesh.

Remember that the officers of the company are required by law to act in the best interest of it's members (shareholders) - and deliberately acting to personally massively enrich themselves (by making off with the cash) at the expense of all the others could not be classed at acting in the best interests of those shareholders left with nothing.

Shocker: UK smart meter rollout is crap, late and £500m over budget

SImon Hobson Bronze badge
Mushroom

Re: How are these supposed to save energy

Also you are unlikely to run a washing machine/tumble dryer overnight ... since fire safety advice ...

Not just fire safety, but safety from having your brains bashed out by the neighbours kept awake by the vibrations. The icon suggests my feelings if I were unlucky enough to live in a flat with a neighbours (above or at the side) running such a machine in the early hours.

SImon Hobson Bronze badge

Re: Smart meters do not save energy

Smart meters only enable surge pricing if the changes in price can be communicated in real-time to the meter.

It can, it's a basic part of the communications network - at least when it's fully rolled out.

I would hope that a court would take the view that the company simply could not prove that ANY of their leccy had been supplied at anything other than the lowest price offered during the billing period in question

And you'd be disappointed. The meters record usage for every half out period of every day - and the price charged at the time. So yes, they can show that you used several units at £1/unit because you dared to want to eat dinner at dinner time when you get home from work.

This is one of the objections, that very detailed usage information is send back to a humungous database which we have to trust will remain as secure as we are being told it will. Not that any large government (or Crapita, or ...) system has ever had a security issue - oh no, government (and it's contractors) IT is perfect :D

It would have been sufficient for billing purposes to tally up usage with a register for each rate used - but they decided not to do that.

SImon Hobson Bronze badge

Re: Smart meters do not save energy

The regulations, in the UK, regarding disconnection that apply to dumb meters applies to "smart" meters as well. There are a number of hoops to jump through before disconnection. Finally, somebody has to physically disconnect at the property to ensure, for example, there is no life saving medical equipment is installed.

The difference here is that disconnection CAN be done remotely. How touching that you trust the big energy suppliers to get their billing correct, that they won't accidentally decide that you have an old debt of several gazzillion quid and disconnect you for bad credit, that they won't accidentally hit the wrong key and disconnect you instead of someone else, etc, etc. The regs means SFA when it comes to corporate incompetence.

And the remote disconnect facility has been in the specs from the outset - EVERY "smart" meter has the facility, because it's needed for the second stage of the demand management they are being put in to provide. The first stage is price rationing, the second stage is rolling power cuts like we had in the 70's - but done on a more granular level.

BTW - the "smart" gas meters also have the remote disconnect facility - but they cannot be remotely reconnected. For safety reasons, the user has to manually turn the gas back on.

In theory someone with medical equipment etc can be put on the vulnerable person register. While this may affect decisions by the DNO about maintenance and exclude the property from rolling power cuts, I can't see it dealing with corporate billing cockups.

Washington Post offers invalid cookie consent under EU rules – ICO

SImon Hobson Bronze badge

Personally I think the ICO is wrong here.

As has already been pointed out, there are salaries and other costs to be paid if you want news*. So you either pay directly (eg by taking a subscription), or you pay indirectly (the paper gets paid by advertisers). If you refuse the tracking cookies then the advertisers won't pay as much - so the difference has to come from somewhere.

At least they offer the choice - unlike the likes of FaecesBork who don't seem to have realised that GDPR (or indeed, any other law) actually exists.

And of course, no-one has mentioned all those sites that say "you can turn off these other cookies by going to [long list of scum sites] and ask them to stop tracking you".

Ethernet patent inventor given permission to question validity of his own patent

SImon Hobson Bronze badge

Re: Curiouser and Curiouser

As Pascal says, he moved company. You may have to read between the lines, but it's fairly clear in the article.

After inventing the "thing", he assigned the patent to Cisco - fairly common that employers want the patents on things their employees invent as part of their employment. So Cisco, not he, owns the patent.

After that, he left and (with other Cisco employees) startup up another networking gear company - Arista. Now it stands to reason that some of the things they'd like to sell would infringe said patent, so they have three options : 1) Say "pretty please" to Cisco and buy a licence on whatever terms Cisco may (or may not) want to give them; 2) avoid infringing on the patent (which may mean leaving features out of the product); or 3) challenge the validity of the patent. Don't forget that other than in the case of a standards required patent (ie something that's incorporated into a standard*), Cisco do not have to licence the invention if they don't want to - they can refuse and so prevent any other vendor from taking advantage of the invention. And if they do licence it, they can name their own terms - which could be quite expensive.

So here, it was Arista that challenged the patent, and presumably this happened before Cheriton left. But either way, strictly speaking, it's not the inventor challenging the patent, it's his company.

* Where a patented method is incorporated into a standard, there's normally a FRAND clause attached - the holder of the patent must licence it to anyone on a Fair, Reasonable, And Non-Discriminatory basis. This is to avoid someone getting their patented method included in a standard, and then being able to to hold everyone else to ransom - or even block certain competitors from using it at all.

OK Google, what is African ISP Main One, and how did it manage to route your traffic into China through Russia?

SImon Hobson Bronze badge

Re: The obvious solution would be a "Web of Trust"

The thing is, there is no easy solution to this.

In the generalised case, only one peer knows what route their customer should be emitting - and that's the one directly providing the service. But that only applies for the "leaf nodes" - so if I get a line in form a couple of ISP to my little hosting biz, both of those ISPs can (and should) filter my BGP announcements to only allow the small set of IPs I have. That bit is relatively simple - and as long as every end-point provider does this basic filtering at source then one avenue of cock-up is blocked. But if they don't then ...

Both of those ISPs will be taking my traffic to one or more exchanges and publishing my routes alongside many others. So my route advertisements now appear coming from two different ISPs - the problem is that all those other peers connected at the exchange(s) will not know (or have any way of knowing) whether the routes the ISPs are sending on my behalf are genuine.

And it gets worse. Those peers will pick up my routes and propagate them across their network, and at some other point they will get broadcast to other peers. These other peers (now twice removed from any relationship with me) will not have any way to know whether or not they are genuine.

And so it goes on, with peers around the world getting further and further away from knowing who I am and who should be carrying traffic towards my IPs.

But that is only the simple case where the error is in a leaf node where it's relatively easy to know what routes should be advertised from there - the ISP asks me when providing connectivity what AS numbers I own and put those into their filter for the connection itself.

In the case here, the error happened at a transit peer that by definition must be handling lots of routes for people it knows nothing about.

In this case, what I think has happened is that internally they've setup routes to send Google traffic direct to Google via their peering arrangement. Basically that's a matter of "send this list of IP blocks via this gateway". At the same time, they should be filtering those same IP blocks from BGP announcements they make via other connections - specifically the sub-sea cable they operate. They made a mistake here, so the peering specific routes leaked out.

But as above, the other peers involved have no way of knowing that this was a mistake - it could be that the announcements they saw were the result of some new connection going in that made this a good route for the packets, something that's not easy to determine. The key thing is, these other peers really have no way of knowing whether that link genuinely is a route to those destinations. Just signing the route advertisements won't help - because all those routers will have to propagate the routes anyway, so seeing a route that's signed does not tell you anything about whether the router you received it from should actually be routing that traffic.

Bear in mind that the global routing table is heading on for 3/4 of a million entries, propagated across many thousands of routers operated by thousands of operators. It's hard to see how any web of trust could be setup that would handle that scale

UK.gov fishes for likes as it prepares to go solo on digital sales tax

SImon Hobson Bronze badge

Re: Tax isn't my strong point...

you use their services for free

As you point out, it's not free - there's a real cost involved. What is missing (and I doubt will ever be provided until GDPR really catches up with them) is an option to pay real cash and not be slurped.

they just show you ads and maybe use your data that (as long as you consent to it) to sell to others

If only that were what they do. If all they did was show you ads then fine, but they don't. Untargetted ads are worth little, the big money is in showing ads carefully matched to the data they've slurped on you. And there's never any element of consent - both Google and Facebook will slurp data on you without you ever having an account or ever consenting to them doing it.

One thing that's "irritating" me at the moment is the number of sites where they say "we use these third party cookies, if you want to stop them then you go to the third party and tell them to stop". Great, so to stop Faecesbook tracking you, you'd have to create an account on Faecesbook (because they'll ignore you otherwise) - but to do that you have to agree to their Ts&Cs which give them permission.

So how can you tax someone that provides a service for free, just because they then make money of you using their service for free?

Note that the money isn't made from people using their services (at least with Google) - Google makes money by showing adverts to you on every f***er elses' websites. So even if you have never ever, not even once, used any "free" Google service - they will still be making money from your data because of the sites you do visit showing ads that they get paid for.

For good measure, Google in particular is very good at using it's clout (particularly it's dominance in search) to take over any market it wants to. There were other mapping tools around, and some of them have managed to survive so far - but when Google started giving mapping away free* by using cross subsidies from it's massive marketing bis, they had an advantage over anyone else. So some other company could have a great idea - but because they don't have the backing of something the size of Google, there's no way they can both develop it and give it away free. Thanks to short sighted sheeple thinking "ooh, free", other offerings have tended to wither away, or limp on with little development, or stick to a niche commercial market - leaving Google to monopolise that market and then use it's dominance to a) push adverts to further it's own business, and b) keep any upstarts from succeeding. The USA has laws specifically to deal with this sort of behaviour - but a poor track record of actually doing too mush of practical use with those laws, c.f. Standard Oil, IBM, Microsoft who all avoided any significant penalty for blatant abuse of a dominant position in one market to give themselves a leg up in another.

Can your rival fix it as fast? turns out to be ten-million-dollar question for plucky support guy

SImon Hobson Bronze badge

Re: I'm just going to say...

... trying to explain to the moronic fuckers at my bank why ...

While you are at it, how about reporting them to the FCA for forcing insecurity on their online banking customers ? If you've identified real security issues, and the bank has refused to accept them, then the FCA ought to be interested.

I wonder if the ICO would be interested as well as the sort of issues you've raised would seem to violate GDPR compliance as well.

If you have inner peace, it's probably 'cos your broadband works: Zen Internet least whinged-about Brit ISP – survey

SImon Hobson Bronze badge

Re: I'm with Vodafone

Blimy, you must be dealing with a different Vodamoan to the one I had to deal with at work. As part of some business changes, we arranged for several customers to move to Vodamoan provided VDSL (FTTC) lines - and it was a complete and utter shambles, one of the lines never did get installed properly.

Contrast - Vodamoan ordered line from BT OpenRetch, wrong cabinet specified so they should have just ordered a cease and reprovide. After months and months of phone calls they still didn't understand. We also got a line installed from another provider which thanks to BTOR incompetence also had the same problem. However this other provider knew the tricks and got a working line in under 2 weeks. It helps when the provider employs people with a clue rather than script monkeys. Like A&A and Zen, not the cheapest but we always found Gradwell to be good at fixing things when it went wrong.

To be fair to everyone involved, the premises was supplied by two different cabinets - it's just that only a few of the units were off one cabinet - but that cabinet was the one that came up first in the address search. Also, the BTOR chap that came to install the Gradwell provided line tried really hard to find a routing that would connect the line as provisioned - but there was just no route as the cabling from the cabinet the line was provisioned on went no-where near our unit.

As an aside, the BTOR guys can fix a phone line by going into the systems and changing the routing to deliver it via the right cabinet - and changing the jumpering at the exchange. Apparently it's Ofcon rules to curb BT's anti-competitive behaviour that stop them doing the same with the FTTC connections - they have to return the job so it gets flagged to the ISP, who have to order a cease and re-provide on the service to get it delivered via the right cabinet.

Needless to say, we found Clueless and Witless went downhill in service standards after Vodamoan acquired them.

Unsure why you can't log into Office 365? So is Microsoft

SImon Hobson Bronze badge
FAIL

Why both sides of the Atlantic ?

Isn't that obvious ? As was demonstrated when they had an "isolated" data centre failure, their systems are globally intertwined like a platetruckload of spaghetti. If you ever install a tool like Little Snitch and allow connections from Outlook one at a time then you will find that simply signing in requires the program to follow a long list of DNS redirects (from memory at least half a dozen) that send the connections all round the world.

Given the way things seem to be built, it's a wonder it ever works at all !

Also makes a mockery of any claims to be compliant with GDPR - I hope no-one here is using O365 for anything business related and relying on Microsoft's claims ;-)

Budget 2018: Landlords could be forced to grant access for full-fibre connections

SImon Hobson Bronze badge

The problem is that there's a financial incentive for small developers to ignore the problem. If it's a choice between "cough up money" to put in the ducting etc, or just ignore the problem and force BTOR to put overhead washing lines in from the nearest pole - then it's a no brainer for the ignorant developer to go for the cheaper option.

So yes, there needs to be some sort of presumption that developers must install ducting unless they have compelling reasons not to. It needs to get to the point where ducting for comms is considered as essential as gas, lecky, water, and drains - but for many people that doesn't even enter their minds.

SImon Hobson Bronze badge

Re: Hmmm

... there's no way I would want them imposed on me

It's not about imposing anything on you. It's about allowing a tenant to get a service installed where the landlord simply ignores requests for permission to install it. As the article says, if a tenant wants a service installed - eg high speed FTTP - then typically they need the landlord's permission (the landlord may also need the freeholder's permission). If the landlord just doesn't answer then it's currently a longwinded (and I imagine expensive) process to get an order from the tribunal to allow it.

So this is about making the process for getting an order, where the landlord ignores requests, easier.

SImon Hobson Bronze badge

... and the Gas Board or whoever they're called nowadays want to connect my property to the network, I can say no

Yes indeed. However, suppose you rent out the house and the tenant wants gas installed - perhaps it's just been installed into the village. The analogy is where the tenant wants gas installed, the gas company realise they need your permission, try to contact you but you just ignore them.

At the moment they will simply give up and the tenant then can't have the service installed. Under the new rules, if you ignore the request then it'll be easier for the communications company and the tenant to get an order from a magistrate. I would imagine that if you respond and say no, then that would be the end of the matter - but as a landlord I would have no problem with the request subject to agreement on how it was to be done.

From today, it's OK in the US to thwart DRM to repair your stuff – if you keep the tools a secret

SImon Hobson Bronze badge

Re: Cars? Trucks?

There already systems that cover the safety aspect.

But, for example, John Deere has been using DMCA to prevent anyone but their authorised dealers repairing equipment. Bear in mind that modern tractors are highly computerised - engine management, gearbox management, etc, etc. Given that a big part of fixing a problem is working out what the problem is, being able to (for example) find out what the various sensors are doing is critical to that. Even if you could fix the problem without this help, often you need the diagnostics software to reset the system (perhaps take the engine out of "safe mode") and clear the fault light. Thus it makes a lot of maintenance impossible for third party mechanics - most of whom are as good as the ones working at the John Deere franchises.

Quite simply, they are using the DMCA to cripple competition - but (falsely) using "safety" as the justification for it.