nav search
Data Center Software Security DevOps Business Personal Tech Science Emergent Tech Bootnotes
BOFH
Lectures

* Posts by gerdesj

1155 posts • joined 15 Aug 2009

Page:

Microsoft Teams goes free, as free as the wind blows... up to a point

gerdesj
Silver badge
Windows

My count is less than that and I follow Hacker News FFS!

I see they have Papr but not Plopr or Wnkr

4
0

Fresh cup of WTF with lunch? TeamViewer's big in Twitter's domination-as-a-service scene

gerdesj
Silver badge

Go on, you know you want to: https://twitter.com/search?q=%23teamviewer&src=typd

3
0

Microsoft might not support Windows XP any more, but GandCrab v4.1 ransomware does

gerdesj
Silver badge
Gimp

Re: And people still use XP

Get a grip. My firm tends to a Win 98 (*) machine for someone. You'd be surprised what runs the machinery in manufacturing ...

(*) It breaks if you put a default gateway on it. NetBEUI becomes NetBIOS and that's too modern. Hilarious

9
0

At last – a use for AI! Predicting an England World Cup victory

gerdesj
Silver badge
Holmes

Bollocks

"Brazil are still favourites with a 29.9 per cent likelihood of taking home the spoils."

Not any more they aren't.

7
0

While you were basking in the sun, the relentless march of the Windows-maker continued

gerdesj
Silver badge

Re: bugger the mouse

If having your ball and rollers removed and replaced with a red light and sensor wasn't bad enough, you want to do that to the poor thing.

For shame Sir, for shame.

6
0

Not OK Google: Massive outage turns smart home kit utterly dumb

gerdesj
Silver badge
Childcatcher

IoT

Look, if you are going to do IoT you need: A network technician, a sysadmin, multiple sites, the mind set of a proper engineer and a lot of time to experiment and test. You'll need a safety first mentality and a few other skills.

I have most of the above, including a lot of tape. I am starting with ESP8266s and simple circuits, Mosquitto and Home Assistant. My VMs live on a proper SAN and VMware cluster. I start with multiple segregated VLANs and firewalls (including hosts). All comms including MQTT are TLS 1.2 or similar. Web apps live behind HA Proxy etc etc. If anything fails, it is designed to fail to manual operation rather than fucked.

Oh and the wife is the customer.

14
0

UK Foreign Office offers Assange a doctor if he leaves Ecuador embassy

gerdesj
Silver badge

Re: WiFi coverage

He is next door to Harrods and on a residential(ish) street with a *lot* of APs nearby. At least one of those will be running WEP or have a PSK of "Password1" or "hanscrescent" or something equally stupid. If he does not have internet access, then I'd be quite surprised.

He's here (Google Maps, Street View) That droopy flag is Ecuadorean and those green boxes to the right of the iron railings are BT jobbies. Yes he has the internet rather close by.

9
0

Microsoft Azure Europe embraced the other GDPR: Generally Down, Possibly Recovering

gerdesj
Silver badge

Title

Wouldn't it be nice if threads that had a title with an OS in it had a no Anon rule?

Has anyone really bothered to value their el Reg karma value?

Does anyone really give a shit?

6
2

Have to use SMB 1.0? Windows 10 April 2018 Update says NO

gerdesj
Silver badge

"but Sonos only connects via SMBv1"

I too have Sonos, so does Jeremy Allison.

0
0

1,300 customers of Brit bank TSB defrauded due to botched IT migration

gerdesj
Silver badge

"it is tempting to go 100% cashless"

It seems that several 1000 TSB customers have beta tested that for you and found the experience less than satisfactory.

41
0

Four hydrogen + eight caesium clocks = one almost-proven Einstein theory

gerdesj
Silver badge

Re: This is why science rocks

"As much as you're upvoted, you must accept the scientific fact that placebo ... works. "

Yes, placebo has a measurable effect. Homeopathy is still bollocks.

104
1

Nadella tells worried GitHub devs: Judge us by our actions

gerdesj
Silver badge

Re: "Judge us by our actions"

"It decided it was going to download 1803"

Calm down hmkay ... we use the same numbering scheme as Ubuntu. Windows 10 is practically open source and hence lovely.

In case it passed you by: 1803 (Win10) is March 2018, 18.04 is April 2018 (Ubuntu)

2
18

Is Microsoft about to git-merge with GitHub? Rumors suggest: Yes

gerdesj
Silver badge

"or you could try hosting your own Git service"

I do - its called git!

21
1

Facebook finally fully embraces GDPR – Generally Derailing Pages Recklessly

gerdesj
Silver badge

"If a vendor is too lame to have a real page, then I just skip them."

However, many business owners are unable to avoid the fact that their customers are glued to FB and unable to engage with them otherwise.

8
6

GDPRmageddon: They think it's all over! Protip, it has only just begun

gerdesj
Silver badge
IT Angle

ACs ACs everywhere, yet ne'er a comment to worthily remark upon

Is RegAuth down? Every comment here so far is AC. (OK test done and "no"). So wtf is going on? Am I really going to have to ditch my Private Eye sub?

On balance I think that a set of regs with aims like this might be useful:

This Regulation is intended to contribute to the accomplishment of an area of freedom, security and justice and of an economic union, to economic and social progress, to the strengthening and the convergence of the economies within the internal market, and to the well-being of natural persons.

http://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:32016R0679

1
2

Welcome to Ubuntu 18.04: Make yourself at GNOME. Cup of data-slurping dispute, anyone?

gerdesj
Silver badge

Re: Welcome to the 'new' Canonical

"I think you need to run wireshark and look at the actual traffic on a minimal install ubuntu. I think you'll be surprised."

It's not going to be very minimal if you've got Wireshark on it. Perhaps you meant tcpdump? Anyway, I've just done a Bionic minimal - https://help.ubuntu.com/community/Installation/MinimalCD - install and there is no sign of any data slurping.

6
1
gerdesj
Silver badge

Re: "opt-out was probably the best choice"

GDPR relates to personally identifiable data. I'm not sure that the metrics being gathered constitute a fingerprint.

66
3

Advanced VPNFilter malware menacing routers worldwide

gerdesj
Silver badge

Re: It's the Russians, No the Chinese...

Trump.

6
3

You've got to be kitten: Vet recruiter told to pay £1k after pinching info from ex-employer

gerdesj
Silver badge

Re: 3 fivers and change?

GDPR doesn't apply yet. This would have prosecuted according to the provisions of the Data Protection Act.

10
1

Summoners of web tsunamis have moved to layer 7, says Cloudflare

gerdesj
Silver badge
Trollface

Simple solution

"OSI layer 7 attacks"

Simply use the DOD four layer model and avoid the problems at layers 5,6,7! Job done.

4
0

IPv6 growth is slowing and no one knows why. Let's see if El Reg can address what's going on

gerdesj
Silver badge

Re: How to make the move?

"My ISP (Plusnet) is IPv4 only." I used to be with PlusNet and when I asked a few years back what their plans for IPv6 was, I was told "no plans".

I left. I also took the four office links to another ISP ... and around 30 odd of my customers ... and my dad and my brother and a few other family members and friends and acquaintances.

Not the end of the world for them, I'm sure.

2
2

Facebook Android app caught seeking 'superuser' clearance

gerdesj
Silver badge

Re: So Facebook's response is to shoot the messenger basically

Dream of electric sheep (possibly).

3
0

Meet Asteroid, a drop-in Linux upgrade for your unloved smartwatch

gerdesj
Silver badge
Paris Hilton

"Privacy has been a design consideration. And because it's actually a rich Linux, you can run Docker."

wtf?

2
1

UKFast bit barn yarn: 'Cisco switch glitch' leads to service ditch

gerdesj
Silver badge

"so the incoming mains supply was lost to the bit barn and generators failed to pick up the slack"

They are not generators then, just lumps of stuff taking up space ..

5
0

UPnP joins the 'just turn it off on consumer devices, already' club

gerdesj
Silver badge
Paris Hilton

Re: another lesson

"NOBODY NEEDS TO FORWARD PORTS UNLESS THEY ARE RUNNING A SERVER."

IPv6 8)

1
4

Facebook stuck with IRS bill after court tosses $7 BEEELLION appeal

gerdesj
Silver badge

Re: “the IRS gets to decide what does and doesn't get an appeal hearing”

"Rather defeats the purpose of an appeals hearing, if the opposing side gets to decide whether to let you fight."

That was the result of a court hearing, not a fight in a playground.

3
4

Wanted that Windows 10 update but have an Intel SSD? Computer says no

gerdesj
Silver badge
Trollface

"Wanted? I thought it was foisted regardless?"

You mean one day I'll run $ yaourt -Syu and find myself mashing ctrl-c really, really quickly and taking a long hard look at my mirror lists??

Karma to burn

5
4

Every major OS maker misread Intel's docs. Now their kernels can be hijacked or crashed

gerdesj
Silver badge

Re: Be careful about version numbers.

" whereas distro-makers might be doing their own thing." Oh they do ...

Ubuntu take a stock kernel version eg 4.13.0 and then stick with it but backport fixes etc. Hence you get versions like 4.13.0-41-generic which is the 41st version of the Ubuntu version of 4.13.0 - in a generic way 8) This on the other hand: 4.16.5-1-ARCH is the first Arch iteration of the stock 4.16.5 kernel.

Both kernels will have some stock mods applied before distribution so my 4.16.5-1-ARCH will be different to what you get direct from Linus and Co.

2
0

Microsoft reckons devs would like an AI Clippy to help them write code

gerdesj
Silver badge
Mushroom

Why not wire it up to Stackoverflow as well and be done with it? You'll have your code writing itself 8) What could possibly go wrong?

9
1

Admin needed server fast, skipped factory config … then bricked it

gerdesj
Silver badge

Re: 80186

My school (Abingdon aka "Royce's") had a RM Nimbus in the D&T workshop. With Windows 1 on it and a rather early AutoCAD.

About 1 year later I (cheers Mum and Dad) had a 80286 based beast with 1MB of RAM. I saved up for a 80287 maths co pro so I could run ACAD on it. To be honest I had more fun reading Peitgen and some other bloke's fractal related shenanigans and attempting to replicate their results in GW Basic.

Then I got hold of a C compiler - cool and quick and bloody complicated. I went back to BASIC to get the results that I wanted at the time, in linear time. Before you smite me with righteous indignation, bear in mind that I just wanted results and not a cool paradigm.

3
0

UK gov grilled over massive exposure to struggling outsourcer Capita

gerdesj
Silver badge

"MP's obviously don't read el Reg"

Private Eye have used that name for as long as I can remember

43
0

Microsoft Lean's in: Slimmed-down Windows 10 OS option spotted

gerdesj
Silver badge

Re: The funny thing is that...

My cat must have gone on a diet:

-rwxr-xr-x 1 root root 34856 Dec 29 12:08 /usr/bin/cat

4
0

Facebook puts 1.5bn users on a boat from Ireland to California

gerdesj
Silver badge
Paris Hilton

$1.6bn

$1.6bn - How many NHSweeks is that?

0
1

Millions of scraped public social net profiles left in open AWS S3 box

gerdesj
Silver badge

Re: S3?

https://haveibeenpwned.com/

3
0

Australia’s .au admins told to reform or get rooted

gerdesj
Silver badge

Bingo

"This includes transitioning the delegation for management of .au to another provider if auDA is unable to achieve necessary outcomes."

This includes getting someone else to do it.

3
0

Facebook faces foe formation in facial fingering fight

gerdesj
Silver badge

Re: OH dear....

"The supplier said the client was free to invoke them, but if they did, the supplier would be filling for bankruptcy as it could't afford to pay any.

The public body was stuck between a rock and a hard place."

.. and hopefully now understands the concept of "due diligence" (including insurance)

13
0

Why you shouldn't trust a stranger's VPN: Plenty leak your IP addresses

gerdesj
Silver badge

Re: So ElReg what are you reporting this crap for.

"The only VPN's of any value are the ones that you connect to at your place of Work or Home, if you can keep them secure, don't stuff up, leak your own addresses, crash, staff don't spy on your usage or just............"

So true and yet even the pros make mistakes. Take me for example. I look after quite a few networks, firewalls and the like. I have a newish laptop and decided to put my office OpenVPN connection on it. Fired it up, typed in "whats my ip" into Google and saw my IPv6 address staring back at me. Bollocks. Oh well I'll use the office WANs via the web proxy to get the job done.

I now need to fix up what happens with working IPv6 when connecting to our currently IPv4 only VPN. The assumed policy is that all traffic is gatewayed through the VPN and it isn't. I could simply change the policy I suppose.

4
0

It's baaack – WannaCry nasty soars through Boeing's computers

gerdesj
Silver badge

Aircraft do not use Windows for critical systems.

Imagine being a pilot in a commercial jet on finals and being told that Windows Updates needs to do its thing due to an inadvertent miss configuration (ahem) and "making everything safe" before doing it.

13
0

Java-aaaargh! Google faces $9bn copyright bill after Oracle scores 'fair use' court appeal win

gerdesj
Silver badge
Gimp

IT exists ...

... to keep lawyers in business. I suppose it is one way to repatriate non trivial amounts of dosh to the US:

spend it on sharks.

Trebles all round for m'learned friends *chink*

6
0

Microsoft to lock out Windows RDP clients if they are not patched against hijack bug

gerdesj
Silver badge

"Such a shame the patch kills 2008R2 servers" and Windows 7 and possibly not just on VMware either. We also have several instances of wifi being disabled on Windows 7 on our helpdesk ...

2
1
gerdesj
Silver badge
Linux

"It's also worth looking for updates from vendors of third-party RDP clients, as they can also fall foul of this vulnerability."

https://github.com/FreeRDP/FreeRDP/issues/4449

https://github.com/FreeRDP/FreeRDP/issues/4503

https://github.com/FreeRDP/FreeRDP/issues/4498

etc.

It took nearly three whole days from patch Tuesday for a fix to arrive via pacman on my PC.

4
1

Mozilla's opt-out Firefox DNS privacy test sparks, er, privacy outcry

gerdesj
Silver badge

Re: Off the top of my head

"Now I haven't put much thought into this" - You sir win the internet for that comment.

"I personally use Open DNS" - they work very well for many use cases but is yours one of those? ODNS will always respond with an IP address for a request for an A record - their webby server. Is that what you want (unlikely)?

I'll recommend using 9.9.9.9 ie Quad9 for DNS instead. They will not respond with a default address on fail which is what should happen and easier to work with.

7
1

Windows Server 2019 coming next year and the price is going up

gerdesj
Silver badge

Buggrit

Hi, my name is Jon

Hi Jon

I've been clean of Windows on my personal systems for over 10 years now ...

* wow* *well done* (etc ad nauseam)

... but the bigger boys ... they make me do it ... I can edit their docs and use their Exchange (Evolution with EWS) but I feel ashamed - I still can't open OneNotes ...

... I installed PS Core (from my package manager - not via a random download) Apparently it is normal to install any old stuff on a Windows box. I'll stick with curated by someone I've heard of on the end of a GPG sig.

I'm not cured - I like to fix broken AD's I can't help it, they are so sad. I see OpenDNS used for upstream DNS and other things (*).

Cheers

Jon

(*) ODNS will always reply with a record but sadly it might not be the one you want or need

3
7
gerdesj
Silver badge
Alien

"RHEL at least costs a lot more to license in most cases than the equivalent Windows Server!"

That's nice AC! I'm sure it does but thankfully I have choice and I choose to exercise it. I run up Ubuntu LTS (Xenial for now) like they are going out of fashion for servers and use Arch for workstations and Arch and Gentoo for personal use. Not one - just to re-iterate - not one of those (and there are around 300 across the country that I look after) has skipped a beat that I didn't cause in some way.

I also look after quite a few other systems and I can't be so charitable about them. Recently Win 2008R2 and Win7 machines had wifi and ether snags (for VMs) after the latest batch of Windows Updates (funnily enough we'd already documented the fix years ago, nice to see it again). I'm also not close to being mentally scarred (but pissed off) by a recent AV n firewall etc upgrade for a customer on a system I've been a sysadmin for a time range that is near to decades - not just years.

Windows - you can stick it u *** bbbzzzt ***

15
8

YouTube plan to use Wikipedia against crackpots hits snag

gerdesj
Silver badge

Partnership requirement to read?

"In this case, neither Wikipedia nor the Wikimedia Foundation are part of a formal partnership with YouTube"

I'm not in a formal partnership with WP either. Do I need one to read it?

8
10

Samba settings SNAFU lets any user change admin passwords

gerdesj
Silver badge

Re: SO what I'd like to know...

"Is how long this flaw has been around?"

Version 4 of Samba has been around for a while now: https://www.samba.org/samba/history/samba-4.0.0.html. Whilst surveying the view from your horse, you might note flaws have come to light in other systems (hardware and software) that are way older than that.

I have personally fixed a problem by having access to the source. Per system connection limits from a Samba box to another system (using CIFS/SMB ie for "drive mappings") were fixed to 256 by a constant in the code. I increased the value and re compiled. Problem fixed. That was with Samba 3 a long time ago but the point remains.

7
6

Oh honey! Oxfordshire abuzz with reports of a MEEELLION bees stolen

gerdesj
Silver badge

@Kugutsu

Agreed - that's a lot of colonies in one location. They may be breeding for sale or it could be insurance enhanced counting.

2
0

Intellisense was off and developer learned you can't code in Canadian

gerdesj
Silver badge

I had never realised (sic) that Canadians are illiterate(*) too... :-)

Canadians are likely to be keen on French style spellings, for some reason that escapes me. Anyway, colour etc were the original spellings across the board until the US decided they were un-American a few years back.

7
3

DropEverything! DropBox DropsDocs to DropStocks

gerdesj
Silver badge

Now I use spideroak. I pay 120$ a year for unlimited zero-knowledge encrypted storage. Currently using 9 TB. :)

I can't see that plan here: https://spideroak.com/one/ $279 for 5TB seems to be the top of the range. I do hope that zero knowledge is not simply a prescient comment on your future data availability.

Also, why is this needed for a zero knowledge data storage silo: https://spideroak.com/dmca-takedown-notice-submission/ ?

1
0

VMware sticks finger in Meltdown/Spectre dike for virtual appliances

gerdesj
Silver badge

Disable the shell for operators

I've just read the vCentre 6.5 mitigation doc. It is to disable the shell on all non root accounts and disable the shell. Seems obvious really when you think about it and not such a bad idea.

2
0

Page:

The Register - Independent news and views for the tech community. Part of Situation Publishing