* Posts by Robert Carnegie

4545 publicly visible posts • joined 30 Sep 2009

Brit couch potatoes increasingly switching off telly boxes in favour of YouTube and Netflix

Robert Carnegie Silver badge

Re: Showrunner?

I think no. "Showrunner" is a type of showman, give or take gender. "Executive producer" is a type of executive. One of them makes shows, and one of them signs cheques, give or take 21st century fintech. A person can do both jobs, and in terms of credit usually does, but one you're supposed to put your soul into, and in the other, if you have one it's liable to get damaged. I'm romanticizing this a bit... a "showrunner" has overall "creative responsibility" but that doesn't guarantee that they personally do anything "creative". There's staff that that can be left to.

How to avoid getting burned at Black Hat, destroyed at DEF CON or blindsided by Bsides

Robert Carnegie Silver badge

Re: Don't Touch My Shit

Miniature robot crab that runs around the conference plugging near-invisible Bluetooth adapters into anything that looks like a USB port.

LibreOffice handlers defend suite's security after 'unfortunately partial' patch

Robert Carnegie Silver badge

Re: Not secure enough

Macros are just programs, like the rest of the software. They're not intrinsically less safe unless it's possible to replace a safe macro with a malicious one. You may need digital file signatures to prevent that.

I gather that this particular issue involves running arbitrary Python program code through LibreLogo by opening the document containing malicious code, which is regrettable.

Our hero returns home £500 richer thanks to senior dev's appalling security hygiene

Robert Carnegie Silver badge

Re: Password-related horror

This sentence has about one bit of randomness per key stroke. Memorable, ish, but you may as well be typing a binary number.

For me: alphanumeric with 1 initial capital - but all symbol values are random. Abcdefgh12 - or for a rare system that insists on a symbol, Abcdefgh12! (These aren't the random ones.) To avoid other stupid password filters (parse that carefully), I may exclude repeated letters and all vowels. Because they do.

Long long long ago, I tried and failed to set a UNIX password to "moscow". That's because SCO UNIX banned passwords containing string "SCO".

Rise of the Machines hair-raiser: The day IBM's Dot Matrix turned

Robert Carnegie Silver badge

Not my field, but

"Correct design of plant" may include machinery with dangerous parts firmly sealed inside enclosures and cabinets. In many workplaces you may then find the enclosures and cabinets wedged open in inventive ways in order to get a better view or sound of what the dangerous parts are doing. Thus, protective eye and foot wear. There may be a cultural difference in Mercedes so that this doesn't apply, or possibly your engine plant is a studio set with imitation machines that don't do anything. Or... a workforce of robots doesn't need to wear safety spectacles. And probably has steel feet.

Robert Carnegie Silver badge

Re: youTube anyone?

A short film by S. Laurel and O. Hardy may interest you - it's called "Busy Bodies" and seems to be a documentary about their work at a sawmill, I say work...

Robert Carnegie Silver badge

Re: Health and safety gone senile

I made a see-through plastic half-pocket with a safety pin cunningly taped to the back, that my photo card lives in on my shirt front, except when I have to take it out to present it to a door lock sensor - alas not lanyard-height. The raw material was a plastic food tray from supermarket product packaging; the stuff that plastic bottles are made of, I think, except that the bottles don't have flat bits to suit this purpose.

Microsoft preps to purge its cloud access security broker of shonky crypto protocols TLS 1.0, 1.1

Robert Carnegie Silver badge

Re: MCAS???

It stands for a number of things, one of which makes Boeing 737 MAX aeroplanes crash ("Maneuvering Characteristics Augmentation System", sic).

Some others are:

Mast cell activation syndrome

My Child At School, "an online portal for parents that enables them to view their child's performance at school in real-time" (creepy?)

Airbus A350 software bug forces airlines to turn planes off and on every 149 hours

Robert Carnegie Silver badge

Re: What is overflowing?

The story says "exactly" 149 hours. If I'm following, it also says that if you've installed the software patch to fix the issue... well done but you still have to do the reboots every 149 hours.

When you play the game of Big Spendy Thrones, nobody wins – your crap chair just goes missing

Robert Carnegie Silver badge

Re: "disk drives the size of top-loading washing machines"

No newspaper the next day seems to be on the cards anyway.

I would suppose that the matter could have been raised tactfully and successfully with the chippies, but what do I know?

Given the story we're replying to, offer the editor's personal big chair, instead.

Facebook: The future is private! So private, we designed some handy new fingercams for y'all!

Robert Carnegie Silver badge

Dilbert, 1993, prior art?

https://dilbert.com/strip/1993-03-10

Sensors (or CPUs) on all of your fingernails.

Microsoft has Windows 1.0 retrogasm: Remember when Windows ran in kilobytes, not gigabytes?

Robert Carnegie Silver badge

Re: Scanner

I think that was the idea: a cheap copy of Windows that only ran for the software or hardware that it was accompanying. If you wanted to use Windows properly then you'd buy your own full copy and use the third-party item with that instead of with the runtime.

Robert Carnegie Silver badge

Re: It's a warning...

Or decimalise it?

DoH! Secure DNS doesn't make us a villain, Mozilla tells UK broadband providers

Robert Carnegie Silver badge

Re: Mozilla are only partly right

I'm a bit hazy on how DNS with privacy prevents blocking of access to illegal pornography. If the pornography is on the server with IP address 111.222.333.444 then you can just input that number to get there, no DNS involved. So, banning use of uncensored DNS doesn't stop the pornography...? Conversely, the government could just block the IP address...

Reach out for the healing hands... of guru Dabbs

Robert Carnegie Silver badge

Next to the printer?

Maybe I said last time, I don't recommend a desk next to the office printer, if it's at all of the laser / electrostatic kind and like ones from twenty years ago. Something about those - both actual ozone and the particulate fine dust used to "print" are accused - may bring on symptoms of cough and cold. I've used quite a lot of Lemsip which I could have avoided by making the connection sooner.

The machines have an air filter, but it may be not much good.

King's College London breached GDPR by sharing list of activist students with cops

Robert Carnegie Silver badge

Re: Only monarchy fans allowed, then ?

We've got an effectively powerless UK monarch, and I loyally approve. Keeps the career politicians away from the glory. And from the really expensive personal stuff. Imagine if any recent prime minister thought they had the status of national symbol, they would go mad. Or more mad than they actually did. As it is, they have to report in to her regularly, in person. Mind you, I bet she's dreading Boris Johnson.

I do wonder, however, whether HM The Queen visiting a university during term and exam time and causing this disruption in the first place was a good thing, compared to not doing it. But I wouldn't want her to feel unwelcome.

Robert Carnegie Silver badge

Norman?

Didn't William the Conqueror nick the lot anyway? I mean, obviously he won ("treason doth never prosper", etc) but...…

Flanders and Swann, about a later time: "We're nationalizing the monasteries."

Let's talk about April Fools' Day jokes. Are they ever really harmless?

Robert Carnegie Silver badge

Re: Go and have a barBQ

Someone will do a "Reply to all" when that's not necessary. This is inevitable. I've learned more about my colleagues' private business that way than face-to-face. ;-)

Metropolitan Police's facial recognition tech not only crap, but also of dubious legality – report

Robert Carnegie Silver badge

Re: Jean Charles de Menezes wasn't a victim of facial recognition cameras.

British police have indeed killed lots of people since Menezes, usually by trying to. Usually, either they put across the story that it was unavoidable to kill the suspect, or they were black or on drugs or mentally ill and so there isn't much of a fuss.

https://www.inquest.org.uk/deaths-in-police-custody if I'm counting right is showing about 1 death in British police custody per week since 1990. That evidently does include the Westminster Bridge terrorists who it's difficult to dispute had it coming, but I think also it's about the rate of deaths at the hands of an abusive partner or a mentally ill person, quite roughly, which are considered to be undesirably many. Mind you, if your partner is a mentally ill police officer and does you in then you'll be counted as all of those.

Microsoft: OK, we admit it, spring is over. Here's your Windows 10 19H2

Robert Carnegie Silver badge

Only now have they (I think) allowed home users without enterprise-managed PCs a straightforward way to choose not to have the latest semi-annual Windows reinstall at Microsoft's behest. So, yes, let it be optional from now on, at least the bleeding edge edition.

The non-straightforward way to block the new Windows push has been to label your internet connection as metered: then Windows won't download updates without your permission. This itself is a post Windows 10 feature, I think. I recommend it.

A possible other way is to use your PC only on battery power, since Windows also doesn't like to load a new edition when not on mains power. But this is inconvenient.

What would Jesus tweet? Church of England hands down commandments for Anglicans on social media

Robert Carnegie Silver badge

Re: So you're saying the Old Testament is worthless?

Some fundamental "facts" claimed in Judaeo-Christianity clearly are bollocks (I think I still need "salt that hath lost its savour" explained), and I have worried that someone will come along and invent a new religion which carefully avoids that while still ruining people's lives. But I have to admit that bollocksness in certain existing religions is not a very effective protection anyway.

UK's North Midlands hospitals IT outage, day 2: All surgery and appointments cancelled

Robert Carnegie Silver badge

Re: Cisco?

If only it was WannaCry; you can remove WannaCry (and all of your data, but you have a backup, yes? maybe?)

There's Huawei too many vulns in Chinese giant's firmware: Bug hunters slam pisspoor code

Robert Carnegie Silver badge

Re: Missing information - biased test method of Finite State?

A vulnerability that you know about in software, even if it isn't your software, can be treated as a backdoor. But I'd say that the true "backdoor" is one placed by the programmer on behalf of a specific community, for instance themselves, and usually with its own key, although maybe a hardcoded password or whatever. Including vulnerable third-party code means that anyone can break in, and you don't want a back door that everyone can use.

Before we lose our minds over sentient AI, what about self-driving cars that can't detect kids crossing the road?

Robert Carnegie Silver badge

They also need, what's the current polite term for little people?

Mind you, I bet if you test human drivers then they also are more likely to miss (or not miss) a child on the road than a full sized adult.

FCC adviser and fiber telco CEO thrown in the clink for five years after conning investors out of $270m with fake deals

Robert Carnegie Silver badge

The restitution amount

$896,698 is a number that reads the same forwards and backwards. What special meaning does this have? That the judge bet that he could do it with no one noticing? Well... I noticed!

Having bank problems? I feel bad for you son: I've got 25 million problems, but a bulk upload ain't one

Robert Carnegie Silver badge

That's not the word.

I was briefly intrigued but... "object lesson", please. A particular example that demonstrates a general principle, i.e. make sure that you have backups, undos, and other protections of the production estate from prestidigimistakemaking. Now THERE is a word (nearly).

Awoogah! Awoogah! Firefox fans urged to update and patch zero-day hole exploited in the wild by miscreants

Robert Carnegie Silver badge

UPDATE AGAIN

I think this is the highest I can place this: You now "need" version 67.0.4 or ESR 60.7.2.

Because,

https://www.mozilla.org/en-US/security/advisories/mfsa2019-19/

Although, this one is only an Orange problem, the one before it was Red.

Robert Carnegie Silver badge

Workarounds

https://linuxhint.com/getting_latest_version_firefox_linux_mint/ suggests getting the Snap version, or, and I think you won't want to do this, an "unofficial" "flatpack" download which comes as "developer" or "nightly" edition, which I think means respectively "prominent new bugs" and "extraordinary new bugs".

Having said that, I am looking (in Microsoft Internet Explorer) at the release-channel appearance of version 67.0.4 for some reason, at https://www.mozilla.org/en-US/firefox/67.0.4/releasenotes/

Yup, https://www.mozilla.org/en-US/security/advisories/mfsa2019-19/ says that we now need, or anyway want, version 67.0.4, or ESR 60.7.2.

If Uncle Sam could quit using insecure .zip files to swap info across the 'net, that would be great, says Silicon Ron Wyden

Robert Carnegie Silver badge

Re: Use 7-zip .7z with AES256

You want two e-mails to send one zip file?

Bot war: Here's how you can theoretically use adversarial AI to evade YouTube's hard-line copyright-detecting AI

Robert Carnegie Silver badge

Some music already sounds like that.

Pop music released after I turned 30 sounds like that. So does "classical" music by most living composers. And anything I listen to on a very, very cheap DAB radio that I bought from never-mind-where.

I'm not sure if I have a point.

When customers see red, sometimes the obvious solution will only fan the flames

Robert Carnegie Silver badge

Re: Good old days

I'm quite capable of expressing my wishes in the wrong form box onscreen. I did enjoy an early-ish copy of Opera where the URL box would take (g hedgehog diet) as code to use Google (g) to look up The Hedgehog Diet. Otherwise its default was, and maybe still is, to autocomplete (iwantsomething) to iwantsomething.com, with a configuration choice if you preferred iwantsomething.co.uk instead.

Warning that these are all probably sex things except for the hedgehog one, on which anything I ever heard or will ever hear, or see, about it being a sex thing will be firmly forgotten as much as I possibly can.

Robert Carnegie Silver badge

Re: Dolt

Possibly in tench anal.

"A freshwater food fish, Tinca tinca, of Europe and Asia that can survive short periods out of water", appears to be not in my computer's dictionary. Perhaps a lack of local colour - ah yes.

settlement.js not found: JavaScript package biz NPM scraps talks, fights union-busting claims

Robert Carnegie Silver badge

Re: Those aren't business secrets

If you forbid your employees ever to talk about problems in their employment, then how would anyone else find out? (Reads the story again) Ah.

Wondering where that upcoming meeting with 'Cheap Viagra' came from? Spammers beat Gmail filters by abusing Google Calendar, Forms, Photos, Analytics...

Robert Carnegie Silver badge

Re: gmail broken

I have an Excite.com account that seems to close doors in several places. A Google user can "white list" you by setting a "filter" which directs your messages somewhere other than the spam box. I found some instructions which look intelligible although still quite complicated:

https://www.lifewire.com/how-to-whitelist-a-sender-or-domain-in-gmail-1172106

Robert Carnegie Silver badge

Re: "Spammers are abusing the preferential treatment Google affords its own apps"

As I read it, these messages are coming from Google. The spammer sets up a Google Calendar account in the name of V.I.Agra and then sends meeting invitations to 1 millfon of V.I.Agra's friends.

I would feel sorry for a user whose name actually is V.I.Agra. Even without this.

Oblivious 'influencers' work on 3.6-roentgen tans in Chernobyl after realising TV show based on real nuclear TITSUP

Robert Carnegie Silver badge

Re: Can someone explain...

Should there be something about house prices, the Royal Family, and immigration, or is some of that for the Daily Express instead?

Robert Carnegie Silver badge

Re: Small point

"Standing in front of a radiation source" - I think you want something like "Dr. Bruce Banner is bathed in the full force of the mysterious gamma rays".

i.e. https://www.blogs.unicamp.br/ciencianerd/hulk/ (a little way down the page)

Watch him boogie (still picture). http://jwong.freeshell.org/origin.html catches it well, too.

As does "that" scene inside #441, "Hulk Fiction" (in which Mrs. Hulk plans her memoirs...but Bruce's cousin the "She-Hulk" poses for the cover).

Idle Computer Science skills are the Devil's playthings

Robert Carnegie Silver badge

Re: Congratulations

I think it's either Ian or Duncan Smith?

Robert Carnegie Silver badge

Re: Run for it!

Your alternative to a recursive algorithm is a recursive algorithm.

If you knew that your alternative to a recursive algorithm is a recursive algorithm... is that another recursive algorithm?

Worried ransomware will screw your network? You could consider swallowing your pride, opening your wallet

Robert Carnegie Silver badge

Re: "Where's "here"?"

Ok, another alternative plan, legalise hacking to demand money... if the government does it. Try this: if the tax office can get malware onto your company computers and perform encryption and denial of service, then they're entitled to demand extra tax from the company in return for releasing the encryption. That will motivate the finance director to support keeping your systems secure and also well backed up, to not pay even when the government successfully breaks in. And this will keep out other bad guys as well.

Although I suppose there are quite a lot of foreseeable problems with this scheme...

Robert Carnegie Silver badge

Re: 'Paying the ransom isn't going to make a difference' - Wrong

I think "Malwarebytes" actually works against malware, but I may be mistaken?

Robert Carnegie Silver badge

Re: "If you can't back up the data that is operationally important . . "

But then how would he take it home to work on... and, malware loves removable media.

Robert Carnegie Silver badge

Re: Here we stopped the "kidnapping industry" when laws blocked ransom payments

Where's "here"? Globally, kidnapping for money is still a thing. Also in "failed states".

As for the deadline... tell 'em the finance steering committee only meets quarterly. Also, this is the year of "shareholders reject the executive compensation plan" - you'll have heard what happened to Hamelin Inc. trading as Rats R Us. :-) So paying the ransom demand... the moral is, when robbing and extorting honest CEOs and local politicians, don't be greedy.

Although, leaving a trail of dead victims who couldn't or didn't pay will also encourage your latest to be generous.

Give my regards to Reigate: Print biz Canon to up sticks in the sticks

Robert Carnegie Silver badge

Re: Ahh what is it with Crispin Blunt????

Most of the candidates for new Conservative Party leader and Prime Minister seem to have taken drugs at college and then tried to keep it quiet. Google for "Crispin Blunt" turned up a Daily Telegraph article (paywalled, and I haven't paid) on that topic - because he wrote it. "But at least they will be properly representative of the country they hope to lead," he said, in the free-view section (presumably it gets much more naughty later).

I can't readily think of drugs names (because I don't know many) for the rest of them apart from Jeremy Skunk and Andrea Hadsome (both... substantially... as alleged), but you get the idea.

Esther Wahey?

Matt Hand-Cut?

Mystery GPS glitch grounds flights, leaves passengers in the bar

Robert Carnegie Silver badge

Re: Time

Does your navigation system have up-to-date mapping? An old box won't know about new roads, but you may be able to get an update to load into it.

I think that the most fancy systems get current information about road repairs and even accidents that obstruct your journey. That may be worth being told about.

US border cops confirm: Maker of America's license-plate, driver recognition tech hacked, camera images swiped

Robert Carnegie Silver badge

Reg: "The CBP went on to say it has removed all of the equipment used to gather the images involved in the leak."

I think you misread the text that you quoted, i.e. "CBP has removed from service all equipment related to the breach." CBP's cameras and computers weren't breached, and their stuff is all fine, as far as we know. "The breach", I think - I may be wrong - refers to their contractor getting hacked or otherwise exposed, and that happened to the contractor's copy of the data. The contractor shouldn't have copied the data, but that isn't counted as "the breach", I think.

Help the Macless: Apple’s iPadOS is a huge update that will enable more people to do without a Mac... or a PC

Robert Carnegie Silver badge

Just speculating, but I should think that if a blind or visually impaired person wants to use voice control then it can be set "always on" in accessibility. Or... they can look at the screen, they just can't see it when they do that.

It's official! The Register is fake news… according to .uk overlord Nominet. Just a few problems with that claim, though

Robert Carnegie Silver badge

Re: Nice write up! Excellent fact checking!

I thought that - that the value of Audi.uk is not great if you're not Audi, and Audi probably can stop you. Especially if you're Honda.

On the other hand, a careful... blackmailer?... will take longer to trace and punish. And not every case of a domain name resembling yours will be pursuable. Look at the long weary story of s e x dot com.

To members of Pizza Hut's loyalty scheme: You really knead to stop reusing your passwords

Robert Carnegie Silver badge

Re: careful wording...

I think you don't ever know with more certainty than 99.99 percent.

I bet a fake pizza deliverer (or a real one) could go round asking customers for their password on the doorstep and would have a better than 0% success rate. Even if it's their Facebook password.

Robert Carnegie Silver badge

Re: Yes, but...

If you did not get hacked, it is because you did not set your password to "password". The people who did - or who used "142857pizzahut" alongside "142857amazon" and "142857classadrugs" - are the victims. Your totally cryptic password is probably safe, but, change it anyway to a good one, a different one. Then spend a year failing to remember it...

However, the apparent failure to hack all of the customer accounts and the corporate network could be a ruse, where actually that has happened, but to conceal it, they are only abusing the accounts with less safe passwords, just now.