* Posts by big_D

6779 publicly visible posts • joined 27 Nov 2009

US govt indicted me because I make privacy tools, says crypto-chat app CEO accused of helping drug smugglers

big_D Silver badge

Re: So tomorrow Signal, Telegram?

So, if McDonalds sells him a burger at lunch time to sustain him, are they complicit too? They are also profiting from the illicit gains of a criminal enterprise by taking his money...

big_D Silver badge
Paris Hilton

Re: So tomorrow Signal, Telegram?

And I'm sure that I've seen images of drug dealers driving Ford and GM trucks and using American made guns. Why aren't the CEOs of these company also up on charges?

Another Windows 10 patch that breaks printers ups ante to full-on Blue Screen of Death

big_D Silver badge

Re: It’s worse than that

Yes, we had a couple of users with Kyocera printers that caused BSODs. Swapping to the XPS driver solved the problem.

So far no problems with HP or Canon. I'm currently blocking the patch in WSUS, luckily it has only been rolled out to half a dozen test machines so far.

GitLab latest to ditch 'master' as default initial branch name: It's now simply called 'main'

big_D Silver badge

Re: @Snake - RE: Master / slave

When there is a slave... In this instance, it uses one of the dozen or so other meanings of the word master, which has no connotations to slavery!

Master = definitive source/copy.

big_D Silver badge

Re: RE: Master / slave

There was never a master/slave in code repositories. The master here is for primary or source copy, the definitive version from which copies, branches are taken or are the basis for changes.

This is the same use as in the media industry, especially music, where the master is the definitive copy, from which all reproductions are made.

big_D Silver badge

In Germany, you still have to be a master in many professions, in order to run your own business. If you haven't achieved your mastery of the profession, you may be able to work in that profession (you usually have to have at least made an apprenticeship or being doing an apprenticeship), but you can't run a business until you have your Master Certificate.

There have been cases, where the children have inherited the parents business, but, because they didn't train in the profession, they can't work in the business or run it. Often they have to get a Master in to run the business and learn from them and take the relevant exams, before they can take over the business themselves. (Or just sell the business to a qualified master, but you are in a bad bargaining position to sell, because the business is worthless to you, because you can't actually run it).

We can't avoid it any longer. Here's a story about the NFT mania... aka someone bought a JPEG for $69m in Ether

big_D Silver badge

Re: Boss it...

That doesn't apply to my current bosses, but I've worked for dozens over the years, where that was true.

Surprise: Automated driving biz finds automated driving safer than letting you get behind the wheel

big_D Silver badge

Re: Dept of the Blindingly Obvious

There is also no ego involved. If you look at a lot of crash videos, many are caused by one driver making a mistake (or being an egotistical arsehole) and the one "in the right" not making allowances and forcing his right-of-way to the point it causes an accident.

When you get two big egos facing each other, the result is always going to be a mess, regardless of whether it is on the road, in business, in politics or wherever. Remove the ego, you remove the danger. A good, human, defensive driver would probably also have avoided many of the crashes.

Add in distractions, like smartphones, and you are just asking for trouble. I leave my 'phone in my bag or pocket when driving. If it is a message, it can wait until I get to my destination. If it is important, they will ring and I can either take it hands free or safely pull over and take the call.

Google, Facebook, Amazon et al look on nervously as Biden bumps anti-Big Tech warriors into key posts

big_D Silver badge

Re: More generally

Exactly, and putting experts into jobs that need experts, what a novel thought experiment!

Twitter sues Texas AG to halt 'retaliatory' demand for internal content-moderation rulebook in wake of Trump ban

big_D Silver badge

On the other hand, such codes of conduct, which are used as a basis for expelling people from the platform should be available to all users, otherwise how do they know if they are breaking the rules.

Surely that should be part of the T&Cs or EULA for the site?

As for the rest of it, no idea. But a request for the basic rules of the platform is not unreasonable.

It depends on what they mean by content moderation. For me, there has to be a clearly listed set of rules that the users of the platform has to follow, otherwise their content could be moderated or they could be expelled. If you don't know the rules, how can you keep within them?

Name True, iCloud access false: Exceptional problem locks online storage account, stumps Apple customer service

big_D Silver badge

Re: Could have been worse

I actually used that, well the nuclear option, DROP DATABASE, when testing an online shop.

I reported a bunch of SQL Injection vulnerabilities in their shopping system. They weren't interested. I escalated it. Nobody understood... I asked them if they had a backup, they said yes, so I SQL-injected DROP DATABASE as the password. Woomph, the whole test environment ceased to be!

The management and devs certainly sat up after that eye opening moment. They went back through my report, which listed over 2 dozen instances in the system, where they weren't sanitizing the data. 2 days later, the problem had been removed, and the data restored.

big_D Silver badge
Facepalm

Typeless

That is the problem of using a type-less language to parse input... You have to make doubly sure that you are checking the right thing.

EFF urges Google to ground its FLoC: 'Pro-privacy' third-party cookie replacement not actually great for privacy

big_D Silver badge

Re: Profile the site...

Exactly. The post was supposed to be provocative.

Yes, it is bad for the stock holders. But, too much these days is based around whether it harms the company, or more importantly its stock. If it could damage their income and profit, it is bad. Damage to the environment? Leave it, it would sink our stock price. Be fair to our users? Screw them, it would sink our stock price.

The stock price mentality needs adjusting. We need to look at the sustainability of companies and a certain corporate "morality". Where companies are actually praised, on the stock market, for doing the right thing, instead of ignoring the right thing or doing the wrong thing, just for market cap.

big_D Silver badge

Re: Profile the site...

And? Who cares?

big_D Silver badge

Profile the site...

Just profile the site and basta!

Show me ads based on the content I'm viewing. You don't need to track me, you don't need to know anything more about me than the page I am currently viewing.

First Verizon, now T-Mobile: US carrier suggests folks use 2G to save battery

big_D Silver badge

Re: 200k boored

I just swapped away from Vodafone (Germany), from an "up to 500mbps" LTE account to a congstar "up to 50mbps" account, because I was getting 5mbps at home and 0.01mbps at work. With the new contract, I get up to 25mbps at home and up to 5mbps at work. Not stellar, but less than half the price for 500 times increase in speed!

AdGuard names 6,000+ web trackers that use CNAME chicanery: Feel free to feed them into your browser's filter

big_D Silver badge

Re: PI Hole

I'm using PiHole DNS over TLS with DNSSEC and all other devices blocked from using DNS, DNS over TLS and blocking common DNS over HTTPS destinations.

big_D Silver badge

Re: PI Hole

I never used my IPS's DNS. The first thing I did was use a trusted DNSSEC provider using DNS over TLS.

big_D Silver badge

50,000?

Heck, I already block more than 2.5 million sites at home, with my PiHole.

Those are known tracking sites, malware sites, pr0n and "all of Facebook" (well over 2,500 domains on its own).

Deno 1.8: Node.js alternative gets 'out of the box GPU accelerated machine learning'

big_D Silver badge

It's a nail...

As Abraham Maslow said, "I suppose it is tempting, if the only tool you have is a hammer, to treat everything as if it were a nail."

Use the right fragging tool for the job, don't turn every job into a nail!

Would you let users vouch for unknown software's safety with an upvote? Google does

big_D Silver badge

Re: Not as dumb as it seems

Yep. And at the last 2 software houses I worked at, devs caught installing software off their own backs would end up on the wrong end of a disciplinary procedure! A written warning at best, a shoe carton with their personal possessions and a boot up the rear at worst.

big_D Silver badge

Re: This is not gonna end well

I'd have the up-vote button linked back to the users stool via the mains...

What happens when cancel culture meets Adolf Hitler pareidolia? Amazon decides it needs a new app icon

big_D Silver badge
Paris Hilton

Tash to hairstyle...

So, they dropped his 'tash and are using his hairstyle instead? Such a big move forward! :-S

Google says once third-party cookies are toast, Chrome won't help ad networks track individuals around the web

big_D Silver badge

CNAME

Doesn't CNAME collusion automatically open up the host site to a GDPR violation, because all cookies are then 1st party, which means the marketing company can look up all that juicy personal information in the host site's cookie, heck, they could misuse the session ID to browse the site in the user's name, if they really wanted to.

Nvidia exec love-bombs Arm's licensing model, almost protests too much

big_D Silver badge

Re: With a promise and a dollar...

Just look at Facebook and WhatsApp - we promise, will never merge the WhatsApp data into Facebook... Only, now, that is exactly what they plan to do, although the users kicked up such a stink in January and started leaving in droves that Facebook has postponed it by a couple of months.

Brave buys a search engine, promises no tracking, no profiling – and may even offer a paid-for, no-ad version

big_D Silver badge
Joke

Re: They should keep the name Tailcat

Yes, but renamed to Brave Search, it has the opportunity to also appeal to dog lovers and become the dog's b's (UK slang).

big_D Silver badge

Re: I disagree with the article

I switched to DuckDuckGo a couple of years back and it is my main search engine.

Very occasionally, I will switch to Google, because DDG doesn't find what I want. But Google's quality has also sunk over recent years, one of the reasons, next to privacy, that I switched.

Google results for "handbook/problem <device>" would list about 30+ eRetail platforms, special offers and search comparison sites, I'd have to go to the 2nd or 3rd page, before I'd find a relevant link. DDG is a bit better in this respect. I mean, if I am searching for a handbook or information on problems with a product, the chances are I've already bought it, and in the latter case, I am definitely not in the mood to buy it again, if it is causing me problems!

Such results are a disservice to users and a con for advertisers! Google knows, from the way the query is formatted, that the searcher has no interest in purchasing said product, yet it wastes advertisers money by trying to show me ads and paid results that it knows are irrelevant...

Linux Mint emits fix for memory-gobbling Cinnamon – and future version may insist on some updates

big_D Silver badge

Re: "In a few of them it might even insist."

Did you read the original post, linked to in the article?

big_D Silver badge

Re: "In a few of them it might even insist."

Looking at the original post, it will be automatically updating by default. That implies that experienced users will be able to override the setting and update when they have planned it in.

I think it is a good middle ground. Users who don't know or care about security and patching will be automatically protected, whereas experienced users will know to shut off the option and manually manage patches as before. As long as there is an option to disable auto-patching during the update to the new version that calls it out, I have no problem with such a solution - experts will see it, know what it means and disable it, if it isn't for them; those that don't know what it means will leave it enabled.

Hacking is not a crime – and the media should stop using 'hacker' as a pejorative

big_D Silver badge

Re: Too late

I'm not sure they had films and TV in ancient Babylon, Egypt, Greece and Rome...

But, yes, films and TVs did use different coloured hats to make fight scenes and tracking shots easier to follow in black and white films.

big_D Silver badge

Re: Too late

I'm sort of with you. But blacklist/whitelist goes back a couple of thousand years and has absolutely nothing to do with race, for example.

Slave, I can sort of agree with. It has become a very loaded term. But it is hard to think of alternatives, in some cases, E.g. slaving a convoy of automated vehicles to the lead car.

big_D Silver badge

I've long been a hacker...

When I was growing up, a hacker was someone who pushed technology to its limits, found new ways of doing things and generally pushed frontiers.

I did all that. I was only minor league and never did anything that famously pushed the boundaries we know today, although my first hour in college received a, "wow, I didn't know you could do that with a computer!" From my computer programming lecturer!

Being a hacker was something to be proud of. I still use the term that way today. I hate that it is so misused and abused in the press and society in general.

Microsoft promises end-to-end encrypted Teams calls for some, invites you to go passwordless with Azure AD

big_D Silver badge

Re: Replacing my passwords...

Yes, biometrics, IMHO, are an identifier, not a secret. Fine for 2FA, but inadequate in the long run as a replacement for a password.

That said, I've been using Yubikeys and other cards for logging onto devices and services for a long time - again as a 2FA mostly, but more commonly for cloud services these days as a FIDO2 password replacement.

'Incorrect software parameter' sends Formula E's Edoardo Mortara to hospital: Brakes' fail-safe system failed

big_D Silver badge

Re: A failure of testing

VB auto-generates a lot of code for the form layout.

And well commented code, with templates for file, class and function/property/method level comments.

big_D Silver badge

Re: A failure of testing

That was one of the most important things that was drummed into us in college and at my first employer.

You test what you expect to happen. Therefore you take the specification and the first thing you do is write your test cases based on the specification. Once you have your test cases finished, you can start with the programming. That doesn't make them perfect, but it means they are based on the specification and not the code you have written. That picks up a lot of common errors that would otherwise have been missed.

Unfortunately, many projects I've worked on recently have not had proper specifications and testing was cut to the bone and you had to turn out code first and write test scripts and test cases if you had time afterwards. Time scales were not realistic and the budget for the coding were much too low to do the job properly. But, hey, they are only internet facing shopping and payment systems, so doing it properly and safely isn't really necessary, after all, what could possibly go wrong?

My "best" project (as in closest to being perfectly executed) was a VisualBasic 6 system written for a large agrochemical company to collect its world-wide budgeting and sales forecasts and pushing the data into Hyperion Essbase.

The specification was pretty comprehensive and included use cases and all the business rule errors that could occur. The unit tests and system tests were written based on the spec, then we got around to coding. We had around 75,000 lines of code, when it went live. 3 programmers, 4 months of coding and testing. The system was released world-wide to over 60 national subsidiaries.

In 2 years, we had 2 bug reports. The first was a bug in Windows 98 International English edition*. The other was a simple problem with cell editing in a grid container. That is the only system I've worked on that had so few bugs reported. A shame other projects didn't run so smoothly - although I was generally assigned to projects that had already gone pear-shaped and had to help bring them back on track.

* The bug in W98 International English edition was the Win32 API for getting the localized month names. We tested it in UK English, German and French. All worked flawlessly. But a lot of Asian and South American countries were using International English editions. You gave the API function the month number and it returned the name of the month (E.g. 1 = January (EN), Janvier (FR) and Januar (DE), 2=February, Février, Februar etc.). Only in International English 1=January, 2=January, 3=January, 4=January, 5=January...12=January. In the end, HQ decided that we would just hard-code the English month names for everybody, as English was the corporate language, so we didn't have to be "nice" to the users.

big_D Silver badge

Re: A failure of testing

Maybe if the programmers were forced to test their own code, in-situ, they'd be a little more careful...

I never worked on automotive systems, but I did work on nuclear reactors, traffic systems and manufacturing systems and the code was always thoroughly tested before release. We'd probably spent about 2/3 of project testing, before it was released into production - and generally, you did your own unit testing, but system and integration testing had a whole dedicated team.

big_D Silver badge

Re: Just because...

Maybe the programmers should be forced to drive at a brick wall and test their own code, before it is let loose on the "end users"...

Splunk junks 'hanging' processes, suggests you don't 'hit' a key: More peaceful words now preferred in docs

big_D Silver badge

Hey, I'm a grandfather, sod being over 50, I'm proud of the title!

big_D Silver badge
Mushroom

And outside of the USA. the term has no meaning. So the rest of the world has to suffer for American slang? How about the US gets its own house in order instead?

big_D Silver badge

Half of the words are ridiculous anyway.

Illegal is a law term, meaning to break a rule/law. Illegal characters are breaking a rule, therefore the term fits perfectly with its dictionary definition.

Dummy data is also not a placeholder!

How is grandfather racist? Sexist/gender biased I can accept, but racist?

Hangs? Really, really? Violent? I hang my washing out to dry, there is nothing f'ing violent about that!

Native, oh, come on! I'm a native of the UK. Everybody is a native from somewhere.

Just because some people have corrupted the English language, doesn't mean we should all fall to their level!

big_D Silver badge
Facepalm

Doh!

For example, use "peer" instead of "slave".

Did they even proof-read it? A peer is an equal, not a subordinate, a slave is subordinate.

Two ransomware strains target VMware’s ESXI hypervisor through stolen vCenter creds

big_D Silver badge

It gets the credentials from the client attaching to vSphere for a start. They are often Internet connected or have an email client set-up on it, so a phishing email would be a good vector...

Seagate UK customer stung by VAT on replacement drive shipped via the Netherlands

big_D Silver badge

Re: Should not have Netherlands VAT ...

Part of his complaint was how long it took to get the replacement. Having spares eases that problem. You use a spare and the replacement, when it eventually arrives goes in the spares bin.

big_D Silver badge

That was a huge difference, when I moved to Germany. Every business has to be VAT registered and it also made for complications with UK businesses that weren't VAT registered.

If you buy something, you need a VAT invoice. If the supplier isn't VAT registered and doesn't have a VAT registration number, the accountants and tax accountants kick up a stink, because it causes problems with the Finanzamt (Inland Revenue). I've seen deliveries sent back to the UK for refunds purely due to the UK supplier being unable to quote a VAT registration number.

Sometimes the company has taken the hit and the extra scrutiny, because the product was hard to come by locally. But, generally, the accountants want an easy life, so will get you to send it back, if they can't get a VAT invoice.

That is why we are very careful with suppliers, no no-name Chinese imports and, generally no UK imports without a VAT number, and that was before Brexit.

big_D Silver badge

Re: Should not have Netherlands VAT ...

It was a replacement drive, so no VAT in the Netherlands, but the UK Customs sees the value of the drive on the documentation and automatically slaps on VAT.

That said, as a company, they should be able to reclaim the VAT, as Seagate said. It is a pain, but that is how it goes.

Also, what do datacentres and other bigger customers do? They usually have a bunch of drives on hand as spares - if I had an array of more than a dozen drives and mission critical, I'd always have a couple of spares in my stores, just in case - either as hot spares or cold spares in stores.

When a drive fails, the hot spare is brought online, the dud removed and a drive from stores put in its place. The dud is then sent back for warranty replacement and the replacement goes into stores.

Or I'd have 4 hour or 24 hour (depending on the criticality of the data) service contract, which would deliver the replacement in a timely manner.

With "only" 64 drives, I'd be damned sure to have a support contract or spare drives to hand.

A word to the Wyse: Smoking cigars in the office is very bad for you... and your monitor

big_D Silver badge

Home Office chain smoker...

When I moved, I stayed at a mates house, whilst I was looking for a flat.

He shared the house with another friend, who didn't pay rent on the understanding he would keep the house clean... Only he didn't.

My mate was a chain smoker and had his own business working out of a converted bedroom - air con, 4 servers, 3 desktops a laptop and a couple of printers. All in nicotine orange!

My mate went away for a weekend with his then girlfriend. My girlfriend came to visit and we sat in his stinking office. We couldn't take it any longer. We cleaned the kitchen, to start with, and the black stair rail - it was white! And the office. I sprayed Breff Power at the top of the door, where it was pink, by the time it had run down to the middle of the door, it was dark orange and by the time it hit the floor, it was black! We cleaned everything, although we made the mistake of opening the fridge in the office, it was turned off, but still had old food in it! By the time we were finished, everything sparkled, well, almost everything. I left one printer uncleaned, except for a white stripe along the middle of the top of the printer.

'Meritless': Exam software maker under fire for suing teacher who tweeted links to biz's unlisted YouTube vids

big_D Silver badge

The thing is, you need a base of knowledge on a subject to be able to tell whether the information you are looking up is relevant or accurate. This is something that is severely lacking among a large number of people these days.

But the exam is there to see how much you have learnt, do you actually know the subject being taught. It isn't an exam to see if you can look up random topics online. I do agree that they need to learn how to learn and how to do research, but that is not what an exam is there for; it is there to see if they have managed to learn and do their research.

I use search engines regularly to supplement my knowledge - the key being supplement. If I spent all of my time just browsing forums and reading online articles, I'd never get any work done. That basic knowledge has to be there to start with.

Linux Mint users in hot water for being slow with security updates, running old versions

big_D Silver badge

The other thing is, we have become used to our browsers saying "update has been installed, please restart the browser", or it happens the next time we boot the PC. We don't have to think about it, it just happens.

Because of the package managers this automatic updating no longer takes place, users have to remember to run the updates. For a seasoned professional or an enthusiast, that isn't a problem. For 98% of users, this is a major problem.

As has been mentioned, it should be an option at install time, whether Mint keeps itself up to date or whether the user wants to do it manually. That needs to be clearly worded and it need to default to automatic mode. Pros and enthusiasts will understand the consequences of turning it off and will actually read the screen, instead of just clicking through.

Big Tech workers prefer 3 days at home, 2 in the office. We ask Reg readers: What's your home-office balance?

big_D Silver badge

I'd prefer it to be flexible. Work from home if I want to, E.g. have builders coming in, big delivery etc. but mainly in the office.

Texas blacks out, freezes, and even stops sending juice to semiconductor plants. During a global silicon shortage

big_D Silver badge

Diesel.