* Posts by VinceH

3483 publicly visible posts • joined 26 Nov 2009

When it comes to DNS over HTTPS, it's privacy in excess, frets UK child exploitation watchdog

VinceH

Re: Does this change anything?

AIUI...

(Not my area of understanding, really, so apologies if this is bollocks...)

The domain is sent in the clear to the name server (as the article suggests) but any and all communication between you and the website is either clear under http or encrypted under https, depending on which is in use.

Your ISP can see you are visiting www.example.com because of the DNS query.

It can't see that you are visiting www.example.com/foo/bar/dodgyimages/01.jpeg if https is in use because that query is sent to www.example.com's servers in encrypted form.

You might be thinking that the fact the full url is being sent *to* www.example.com is the give away - but it's being sent to its IP address, and that IP address might be hosting multiple sites, so it doesn't give much away.

UK's internet registry prepares a £100m windfall for its board members – and everyone else will pay for it

VinceH

Re: Flat design was a bad idea

"Nominet should never have introduced the new flat namespace in the first place, it really was nothing more than a way for them to print money."

Yes... My guess is that while the introduction of .uk was a way for them to print money, not enough of it was printed because not enough owners of existing .uk domains took up the flat equivalent. It didn't work well enough in the money printing aim, so now they're doing this.

Also, wasn't there a problem quite a long time back with at least one registrar whereby if someone checked for the existence of a domain, they'd go ahead and register it - so the person searching could then not do so anywhere else? This is surely making that an option again.

I'll just clear down the database before break. What's the worst that could happen? It's a trial

VinceH
Thumb Up

Re: I'll be borrowing this!

An excuse generator? I'm going to use it as an insult!

AI can now animate the Mona Lisa's face or any other portrait you give it. We're not sure we're happy with this reality

VinceH
Happy

Re: Scary stuff

It seems to me that they've just used x-rays to see what's inside Pandora's Box - they haven't quite cracked it open just yet; though it won't be long.

If you watch the video, take note of the background in all the examples - including the Mona Lisa. The animation of the face, where head movement is added, causes the background to be messed up, and the more there is on the head that needs to blend with the background (Einstein's messy hair*, beardy bloke's beard), the more obvious the fakery.

This will improve, of course - but for now, just avoid having your picture taken against a flat background, and for added security make sure your hair is a mess. (Burns passport, throws away all combs...)

* In that instance it's worse, the system didn't appear to work out where the hair really ended, so some of it was the background.

Exclusive: Windows for Workgroups terror the Tartan Bandit confesses all to The Register

VinceH

Re: Changing Wallpaper can have career enhancing effects

"a lot of confusion when the mouse is going the wrong way"

Nice one. I've done the screen grab, and hide all the icons and task bar - never thought about the rotation though.

Another option would be to use a suitably sized screen grab from an entirely different operating system. For completely pointless reasons, I did that to my own machine at one point. (I didn't hide the taskbar because I wasn't playing a prank, and I don't generally have many icons on the desktop.)

Server at web host 1&1 Ionos decides to take unscheduled day off, sinks a bunch of sites

VinceH

I'm not aware of having one, but I suspect it's a relatively new sales pitch. There may very well be someone assigned to my account, but with no reason to call them, I wouldn't know.

VinceH

Same here, and for a similar length of time. Prior to moving to them, I changed hosts quite a bit - probably every two or three years on average. That should be a good indication of how reliable I've found their service compared to hosts I've had previously. (And I didn't notice anything yesterday, either.)

Who had 'one week in' for a Making Tax Digital c0ckup? Well done, you win... absolutely nothing

VinceH
Thumb Up

Re: Anyone got a script?

The Onymous Coward...

"If you don't want to install anything and want to keep using your existing spreadsheet, web-based Excel bridging software is available from people like me for not much money (i.e. a tenner a year). I don't think I'm allowed to advertise on here though, so shan't leave a link."

"you have to save your LibreOffice spreadsheet in Excel format - you don't even have to have Excel installed, as the web app reads the file"

If someone asks you for a link, surely that makes it okay?

What's the link, please? ;)

They're BAAACK: Windows 10 nagware team loads trebuchet with annoying reminders to GTFO Windows 7

VinceH

Optional

Dear Microsoft,

Thank you for your kind reminder that Windows 7 is approaching EOL and that Windows 10 is current.

Now fuck right off.

All the best...

Silent Merc, holy e-car... Mflllwhmmmp! What is that terrible sound?

VinceH
Thumb Up

As a Numan fan, seeing Cars as a suggestion in the body, but not listed in the options, I was a bit disappointed*. So I opted for the Tie Fighter sound instead. Obviously.

* I haven't heard that Bill Bailey version in a while. That would be perfect. :)

Cop films chap on body-worn cam because he 'complains about cops a lot'. Chap complains

VinceH

Re: Increasing the public's "trust" in the police

"The only way is up....."

Well, you'd think so - but then they keep showing us there are still depths to plumb.

Ad-tech industry: GDPR complaint is like holding road builders to account for traffic violations

VinceH
Thumb Down

But the IAB has hit back, saying that the complaint is "fundamentally misdirected" at IAB Europe, likening it to holding road builders accountable for people speeding or parking illegally.

You didn't build the fucking roads. You're just private contractors who are putting obstructions in the road to slow traffic in order to do what you're conning local businesses into paying you to do - and as the slowed traffic passes your obstruction, you're peeking inside the fucking cars, and abusing the knowledge of what you see.

Crispest image yet of Ultima Thule arrives on Earth, but grab a coffee while the rest downloads

VinceH
Alien

Re: The rubber ducky comparisons are right on.

That what we are seeing are really fossils of giant rubber-duck like creatures that once thrived in the coldness of space itself? And that life on Earth therefore might have come from bacteria in rubber-duck poop that somehow fell to the surface?

A picture tells a 1,000 words. Pixels pwn up to 5 million nerds: Crims use steganography to stash bad code in ads

VinceH
Meh

"variables should not be executable ...

Then this would not work. You can extract strings all you want. They are DATA, not code."

The problem is we're talking about web pages and Javascript. The modern web needs this sort of functionality in order to wor...

*thinks*

You're absolutely right.

Fake broadband ISP support scammers accidentally cough up IP address to Deadpool in card phish gone wrong

VinceH
Unhappy

Re: Dirty Scammers

I almost took a call from scammers pretending to be BT yesterday, where I was working.

Someone in the front office answered the phone, and after being told what they were calling about - he tried putting them through to me. When he told me what they said (monitoring our connection, large intermittent bursts of data causing problems) I pointed out it's probably just a scammer, but told him to put them through... by which point they'd hung up.

RIP 2019-2019: The first plant to grow on the Moon? Yeah, it's dead already, Chinese admit

VinceH

Re: Bad planning

"Surely the only living thing on the planet having any real chance of surviving the lunar night has to be Theresa May."

This calls for a suitable mission to be arranged forthwith in order to test your hypothesis. How do we get this done?

It might also be a good idea to send the opposition leader as well, for comparison.

Huawei and Intel hype up AI hardware, TensorFlow tidbits, and more

VinceH

Re: deepfake?

"I didn't see anything that a bit of colour correction and fudging with playback wouldn't achieve."

Quite. Also, the edited ('faked' really isn't the appropriate word here) version was broadcast by Q13, owned by Fox News. IIRC, isn't Fox News a Trump-fan station? That's probably the real reason the staffer was sacked - he took the piss out of their beloved messiah by doing this.

Just for EU, just for EU, just for EU: Forget about enforcing Right To Be Forgotten outside member states

VinceH

Re: EU being sensible again...

"Why are we trying to leave?"

Because of liars and cheats.

You were told to clean up our systems, not delete 8,000 crucial files

VinceH

Re: xfer

I also have one of those.

But worse, whenever I move to a new computer, I decide to 'start again' in how I organise my (local) files. I therefore used to create a directory for the data brought forward from the old system until I can find the time to properly integrate it into the new system. So I have directory containing data from the old computer, which contains a directory containing data from the old old computer, containing a directory from... you get the picture. :)

I'm now sensible. They're no longer recursive, and instead self contained folders on the NAS. :)

Google-whisperers beat reCaptcha voice challenge with 90% success rate

VinceH

Re: idiots like this

"You're lucky, I spent God knows how long identifying an endless stream of fire hydrants, shop fronts, bicycles, cars, buses, 'cross walks' what ever they are."

Yes. It's bad enough when you get one reCaptcha challenge, but when it's followed by another... then another... then another... I get just a touch annoyed by them. IIRC, the record number of challenges I've had to deal with in one go is around eight.

And I'm also now occasionally seeing them simply not work properly in Palemoon, and having to resort to another browser to get shit done. My first guess was a script issue, but even temporarily disabling NoScript and allowing them all to run doesn't solve it. (Ordinarily I'd simply not bother when encountering a problem like that, but sometimes I have no choice.)

Dutch boyband hopes to reverse Brexit through the power of music

VinceH

Re: Optional

I can still keep my what job now?

VinceH

Optional

When I first heard it, I commented that it's an awful racket, almost - but not quite - enough to make me change my mind about being a remainer.

Mark Zuckerberg did everything in his power to avoid Facebook becoming the next MySpace – but forgot one crucial detail…

VinceH

Re: Facebook's shadow profile.

Ah, okay - I assumed you were misunderstanding that I was talking about ad-blocking.

But either way, you are still missing the point. I wasn't saying "Facebook's getting data, how do I stop it?" - I was pointing out that there is more to it than shadow profiles built up from friends' data.

A more interesting side point is one of identification. Given that they know I installed Plex - the question isn't so much "how" as "how do they know it was me?" Remember, no Facebook app is on my phone; even if something on the phone is feeding data to Facebook, nothing on the phone knows my Facebook log-in details. It can't even be tied in via the email address, because the one I use for Facebook is unique to Facebook.

The answer is, I would guess, those shadow profiles. I haven't given Facebook my phone number - but you can bet one of my friends has allowed access to contact data. And if I'm right that the source of them knowing I installed Plex is that TrueCaller shite, I wouldn't be surprised if my phone number isn't amongst the data it's given Facebook behind my back. These two separate sources of phone number would enable the link to be made.

VinceH

Re: Facebook's shadow profile.

Blokada appears to be an ad blocker, so wouldn't AFAICS have any effect on what I was talking about.

VinceH

Re: Facebook's shadow profile.

Well, they don't use them exclusively - they combine them with data from other sources.

I've commented before on El Reg about an interesting discovery I made when I looked at my ad settings on Facebook. To summarise:

I installed Plex on my phone at one point, in order to try it out - and it was listed there in my ad settings as an app I'd installed*. I do not have the Facebook app on my phone. Nor the Messenger app. Nor any other app from their stable.

* Along with TruCaller, which was foisted on me by WileyFox in an update. My gut is telling me that's the source of their data, but I can't say for certain.

US told to appoint a damn Privacy Shield ombudsperson already or EU will take action

VinceH

Re: Oooh just you wait

My grin would be very wide were that to happen - but like you, my breath will not be held.

Also: Threaded comments! It's about time!

Ofcom asks networks, ISPs: Hey, wouldn't it be nice if you let customers know the best deal once their contract's up?

VinceH

You might also find they are unlocked anyway. The last phone I got on contract was a Sammy Galaxy S3 - and I was playing around with someone else's phone trying to solve a SIM problem for them, and tried their SIM in my phone, completely forgetting that it was on contract and probably locked.

It turned out it wasn't locked.

The other person's phone, however, was - to a different network than the SIM they had. :)

Time for a cracker joke: What's got one ball and buttons in the wrong place?

VinceH
Meh

"Matthew, thanks for the replacement but there seems to be something wrong… When I try to go up, it goes down, and when I try to go left it goes right. The buttons are also in a weird place."

Um. If you turn a mouse over and try to use it as a trackball, then either up/down will be wrong with left/right correct, or left/right wrong with up/down correct, depending on which way you've turned it over (pivoting around the tail/wire or longwise so that the wire is pointing towards you). But not both.

China on its way to becoming the first nation to land on the far side of the Moon

VinceH
Coat

Optional

"The first human eyes to see the far side were the crew of Apollo 8, and one of them told Arthur C. Clarke that they had debated radioing back news of a large black monolith on the surface, having seen the film 2001 before launch, but that wiser heads prevailed."

Well, obviously wiser heads prevailed. The monolith that was found on the moon was buried. It wouldn't have been visible from orbit.

Awkward... Revealed Facebook emails show plans for data slurping, selling access to addicts' info, crafty PR spinning

VinceH

Don't pressure them - they need time to make up something that sounds plausible.

FYI: NASA has sent a snatch-and-grab spacecraft to an asteroid to seize some rock and send it back to Earth

VinceH

Re: Giant wombats in space?

"I'm worried - it looks like a Borg cube."

Perhaps it's the one from the documentary "Star Trek - First Contact" but the documentary makers got it wrong. They had it as a sphere, when it was really a normal cube. When the Borg cube actually travelled back in time, it went a bit too far, right back to the formation of the solar system, and as a result of waiting around since then it has accreted so much matter that it now looks like an oddly cuboid asteroid. The plan might be for the Borg to arouse when they receive any indication that we are about to achieve warp capability, shed the matter, and carry on as per the documentary.

In order to ascertain if this is so, we need to study other asteroids more closely and see if we can identify one that vaguely resembles NCC1701-E.

VinceH

Re: Careful with that TAGSAM Eugene

Especially if we bring back something we shouldn't, and the Bennuans* want it back. Or they might just send a battle fleet, instead of risking their entire world.

* Who, judging by the size of Bennu, are probably very, very small. After what to them might seem like thousands of years tearing across the empty wastes of space, they'd finally dive screaming onto Earth - and due to their terrible miscalculation of scale, all we'd need to defend ourselves is a small dog.**

** With apologies to Douglas Adams for rewriting that to fit the set up.

Space policy boffin: Blighty can't just ctrl-C, ctrl-V plans for Galileo into its Brexit satellite

VinceH

Re: Can't we just use...

I'm sure there must be a way we can use sharks with frikin' lasers.

£10k offer to leave firm ASAP is not blackmail, Capita told by judge

VinceH

Re: Terminology

According to the quoted email, that's what she described it as - she described a perceived threat to get rid of her if she didn't take it as blackmail.

"Simon Mayall stated that he "couldn't have me escalating issues to you", and if I didn't take the £10k offer then I would be managed [presumably out] via my sick records.

Is that not bribery to keep my mouth shut and blackmail to take the offer?"

The two things seem to have become confuzzled by the time it reached the court, AFAICS.

Musk's popstar girlfriend Grimes croons about next-gen AI, plus more machine-learning news

VinceH

Re: Grimes against humanity

I've never heard of Grimes before - and TBH I quite liked it on first listen.

AI snaps business titan jaywalking

VinceH
Joke

[still from] "DeepEye promotional Video Click to enlarge"

Are you sure that's not a still from the opening titles of Person of Interest?

Black(out) Friday for HSBC: iOS and Android banking apps on the fritz

VinceH

Optional

As for getting the all-important security code for internet banking, the spokesperson told us that "customers can opt to login with their memorable word and password". How delightfully retro.

Memorable word and password? Surely they mean memorable word and second factor security device? They got rid of the password yonks ago, didn't they? And then, IIRC, they suggested people get rid of the security device and use the app instead - but I'm still using the security device. (I guess I'll lose that option when the battery dies).

Was there a change between that I've blissfully ignored?

It has not been a great few months for HSBC. An outage at the end of September presented users with errors on their smartphones. Still, at least customers can pop into a local branch if needs be, right? Oh, wait. Never mind.

It's worse than that - I'm pretty sure I saw comments on their Twitter feed a week or two back (i.e. a bit more recently than the end of September) to the effect that there were problems with both online banking and the app.

*Checks...*

Working backwards, then...

2018-11-23: The tweet in the article appears to be missing.

2018-11-18: Reported mobile problems at 4:53pm, saying they were fixed at 6:56pm.

2018-11-16: Reported mobile problems at 6:58pm, saying they were fixed at 11:34pm.

2018-11-06: Online problems reported at 11:10pm, and fixed by 12:34am.

2018-10-27: Online problems reported at 1:24pm, reported fixed at 5:14pm.

2018-10-16: Reported online problems at 11:25am, and that they were solved at 6:13pm.

2018-10-08: 9:49pm - mobile problems. Fixed as at 11:20pm.

2018-09-28: Mobile problems reported 8:30am, fixed by 12:05pm. I guess that one is the end of September one referred to. Glancing back further, the next one working backwards is this one:

2018-08-29: Online and mobile problems reported at 9:25pm, and said they were fixed at 9:38pm.

After that the next one I can see is all the way back on May 26th.

So over the last month and a half the problems look worryingly frequent.

Peers to HMRC: Digital tax reforms 3 days after Brexit? Hold your horses, how 'bout 3 years...

VinceH

"As I understand it (from a brief conversation with my accountant) you are having to submit a lot more than boxes 1-9. He said all transactions involving a VAT element will need submission so presumably they can match the claimed refunds for one business against the sales for the other."

I suspect that was sort of what they were originally thinking - and when it was still at the planning stages some time back, I read stuff (on HMRC's site, I think) that suggested that during the submission process, the server could request more background data from the submission client. i.e. they could interrogate your software for the full data.

However, even that's been scaled right back - to the extent some people have told me I was imagining it; I'm sure I wasn't. If you look at the API (I've linked to it in comments on El Reg before, and someone else has done so further upthread) it does indicate only the main VAT return boxes.

There is supposedly a requirement that the figures be built up digitally (because that was supposed to be the point) - but AFAICS you could still keep manual records, and just key the VAT return figures into something that will then submit them, and they would be none the wiser at this stage*. It's all a big exercise in wasting lots of money.

* Things might change in future, of course.

VinceH

Not necessarily. You can still buy Sage on a perpetual licence, and if you want to make MTD submissions directly from the software you'll just have to subscribe to the MTD module. Still an annoying cost, but nowhere near £850/annum.

And if you do go down the route of updating Sage and using it to submit, try SJ Software as a supplier instead of Sage. They're cheaper. :)

Sage CEO: £60m says we can convert more folk to Business Cloud

VinceH

Re: Sage are pushing customers

"Sage have always been aggressive with marketing, but they have pushed the boat out for subscriptions and tried to use making tax digital to force everyone into some sort of subscription."

Exactly what I've been saying all along. I would jump ship (I already use VT for some clients), but the problem is, I've found no software that is as good as Sage for those whose accounts I keep in it. If I have to upgrade from my five year old version for something, I will - and I'll be looking at non-subscription options - but if I can avoid doing so I'll stick with what I have for as long as I can.

"Those who held out against the sales pressure may reap the rewards because there are now multiple companies offering bridges to submit VAT returns."

Indeed - both the sales pressure and FUD whereby some cloud-first companies were at one point trying to make people believe that making tax digital means you need to use cloud software.

An ex-client called me a dinosaur for my position on stuff like this. I think we therefore need a dinosaur icon!

Microsoft slips ads into Windows 10 Mail client – then U-turns so hard, it warps fabric of reality

VinceH
Joke

Re: Windows Mail gets worse and worse

"And MS will promote that as a feature to keep you safe from spam."

Well, spam other than their adverts, anyway.

Thank $deity that week's over. Look, here's some trippy music generated from pixels of a Martian sunrise to play us out

VinceH
Thumb Up

"I like it, when are they releasing the album?"

Early 1980s, IIRC.

By which I mean it sounds like it would fit nicely in amongst some of the tracks on Brian Eno's Apollo Atmospheres and Soundtracks album. At least, based on my recollection of it - I haven't listened to it in many years, but I think some of the tracks had that sort of sound to them.

Obviously, that was Moon/Apollo inspired rather than Mars/Opportunity derived (!), but still!

In news that will shock, er, actually a few of you, Amazon backs down in dispute with booksellers

VinceH

"Antiquarian Booksellers: almost as badass as Librarians."

I know you say that as a joke, but there's this documentary about librarians that I haven't seen yet, but does make it sound like there may be something in the idea that Librarians are indeed a bit bad-ass.

Bean-counting outfit Sage appoints bean-counter as new CEO

VinceH

Re: Perhaps

Payroll does change every year, yes - but I was talking about VAT, which doesn't.

To illustrate how much it doesn't, as I said I've been using Sage 50 Accounts Plus 2013 since it came out - which was probably in 2012 - and using it to submit VAT returns. It was only at the end of the first quarter this year that I could no longer do that, because HMRC changed the log-in process. So that's five years at least with no change.

VinceH

Re: Perhaps

Indeed; I have a multi-company Sage 50 (2013 version IIRC - wrong machine to check) which I use for a few companies. One (my own) I could do in something else, but nothing I've looked at comes close to being good enough for my clients' data, in some cases due to mickey mouse inputting methods, or in others lack of adequate reports.

VinceH

Re: Perhaps

Sage are fairly determined to get people onto a subscription model for their software, because they like the "pay and keep paying" model, over the one preferred by people like me, which is to pay once and then just keep using it until it actually *needs* to be upgraded. And you can still get Sage's main products on a perpetual licence - but for one thing.

For day to day work accounts and bookkeeping work, tax law changes are irrelevant - it's down to the person using the software. There is one change coming RSN, however, that does force an upgrade: Making Tax Digital.

If you're using a Sage product that you have on a perpetual licence, unless Sage have changed their minds since I last commented on this, if you want to be able to submit VAT returns under MTD, you have to *subscribe* to the MTD module.

HMRC don't charge for access to the API.

The API, once finalised (and I believe it now is), shouldn't be a constantly changing, moving target. It's possible that it might change occasionally, but as a general rule it should remain fixed.

Therefore, in my opinion, there is no justification for a subscription model for the module. Sure, they may update and improve the software over time, but if people want a version with a better bloody UI or whatever, they can buy an upgrade - and similar if and when the API does change.

But to insist on only selling it on a subscription model is, in effect, to tax businesses for being able to pay a tax.

Roughly 30 years after its birth at UK's Acorn Computers, RISC OS 5 is going open source

VinceH
Trollface

Re: the best-ever source-code editor StrongEd

Nope. StrongED all the way. :p

VinceH

Re: A bit too old now.

"I think the best route would be to build a RISC OS desktop on top of a Linux kernel, rewriting the RISC OS modules and applications in Rust (or C), and use Linux drivers etc. to make it exploit modern hardware."

Although this isn't what you meant, take a look at this.

VinceH
Happy

Re: I see butt plug, i upvote...

Nonsense - that's clearly Weebl after he's eaten a bit too much pie.

On the seventh anniversary of Steve Jobs' death, we give you 7 times he served humanity and acted as an example to others

VinceH

Re: "oh boy"

"or Microsoft could've possibly introduced Windows Mobile to the consumer market."

They already had done IIRC.