* Posts by big_D

6778 publicly visible posts • joined 27 Nov 2009

You only live twice: Once to start the installation, and the other time to finish it off

big_D Silver badge

Re: Not just in exotic places - not just computers

In the late 70s, my father went to a trade show in Milan. They were showing off a carpet paternoster (a lot of rolls of carpet mounted in a machine so that they could be rolled around until the one you want comes to the front).

The machine arrived in Milan and was erected. Then the box with the carpets arrived. It was a long, wide and heavy box. The porter from the trade show drove up in a little forklift and was about to lift up the box. My father and his team were waving their hands and shouting "NO", because the box weighed several tonnes and was much heavier than the little forklift could have managed...

The driver ignored them and lifted the box down from the lorry with ease!

They quickly ran up to it and had a look. Someone had David Copperfielded the contents. The customs' seals were all still there and intact, but the box was empty!

big_D Silver badge
Coat

Re: Fairly Frequent Flier

After 11/9, I was flying back from Hamburg to Frankfurt, when the security found my nail scissors, they have fallen out of washbag about 3 weeks earlier and had gotten wedged under the stiffening board at the bottom of my travel bag.

Telling them that I had flown 4 times in the last 2 weeks with them in there didn't help, I found the scissors, but I had to throw them away, before they would let me on the plane!

More worrying was that 3 other security checks hadn't noticed them.

The electric toothbrush also got some strange looks - on one flight, it got in a tight spot and my baggage was vibrating when I got it off the carousel.

An ex on the other hand had her baggage stopped during loading and it lay on the tarmac, with security around it, because it was humming. She was pulled out of the waiting area and escorted to the tarmac. Let's just say, it wasn't her toothbrush, very embarrassing for all involved.

Mine's the one with the vibrating pocket.

big_D Silver badge

Not me...

but one client I worked for had a contract for the Angolan election in the early 90s.

I was "lucky", I couldn't find my passport, so I didn't get to go out there. The team was put up in a villa in huge grounds. The security guards took them outside into the garden and pointed to an imaginary line 50M into the grounds - "go beyond that point and you are on your own!" Was the simple statement from the Uzi wielding security guard...

We had no-end of problems with email (cc:mail over modem onto a Novell server at HQ in the UK). For some reasons the connection always failed and we were getting increasingly irritated phone calls from the team on-site and from management. In the end, we attached a phone to the modem and listened in as they tried to connect.

"Bleeeep, blurgh, bleeep, CLICK!"

A polite call to the Angolan government to ask them to pretty please not listen in on the line, it was only being used for email and they were welcome to come and inspect the laptop at any time they wanted. The equipment they had was so old, it was causing a loud enough click to cause the modem to drop the connection.

The election went well, well, it was fair at least. But the rebels weren't happy when the government won. The team was evacuated to the airport, laying on the floor in the back of Toyota Land Cruisers and Land Rovers, whilst the security hung out the windows and shot back at the rebels...

We also did the election in Serbia... Funny, after the elections were over, my passport miraculously re-appeared!

Windows kernel vulnerability disclosed by Google's Project Zero after bug exploited in the wild by hackers

big_D Silver badge

Re: Really?

Standard practice goes out the window here, the bug is being actively exploited. I'd much rather know what to look out for than be kept in the dark until my machine is hacked.

The normal wait is 90 days, not 30. But that only counts if hackers aren't actually exploiting it already.

big_D Silver badge

Re: Really?

On many occasions this has been true. But in this explicit case, they are helping affected users, by informing them that hackers are already exploiting this bug, even though there is no patch.

If they had just announced this "for the hell of it," I'd be with you. But in this case they have good reasons to announce it. I'd have preferred a joint statement with Microsoft, but you can't have everything.

big_D Silver badge

Re: Really?

The hackers already knew about it (and are using it), hence the reason why Google announced this, to warn users.

They should have co-ordinated a statement together with Microsoft, but regardless of whether there is a patch, this is already being exploited and users should be informed. I do not agree with Google jumping the gun, when it comes to releasing information about exploits, before the software producer can patch it, but in this case, it is fully justified.

big_D Silver badge

Re: Really?

In the circumstances, I am relatively happy that they have publicly reported this.

They reported it to Microsoft privately, but this is being actively exploited, so people should know about it.

I'd rather see them do a co-ordinated statement together with Microsoft, but regardless of whether a fix is available or not, people need to know they are vulnerable.

Return of the flying car, just when we all need to escape

big_D Silver badge

Re: We piggyback the 4G from our mobile phones

I'm doing the opposite, I'm piggybacking my 4G smartphone (Vodafone "up to" 500mbps LTE contract) onto wi-fi to get any sort of internet connection.

At work, LTE is reporting 0.001mbps, so slow that the providers speedtest app claims there is no internet connection. I've switched provider, when the contract runs out, but the switch will have to wait until January. The new contract is "only" 50mbps, but at work I know I will get between 10 and 30mbps.

Did I or did I not ask you to double-check that the socket was on? Now I've driven 15 miles, what have we found?

big_D Silver badge
Boffin

As a graduate from the BOFH school of diplomacy, it was regarded a tragic accident.

big_D Silver badge

What is funny about the German EC cards? I've lived in Germany for 20 years and never found them funny, what am I missing?

big_D Silver badge

I was working on a 200 page Word document on a Mac Plus in Word (end of the 80s). I was going through marking all the words to be indexed... I'd done over 100 pages, when whumpf! The screen went black.

The cleaner was over by the wall and had yanked out the plug, so they could plug-in the vacuum cleaner, GRRRR!

That was when I learnt to hit save every couple of minutes. It has saved me a lot of misery since.

China sets itself 2035 goal for technology self-sufficiency and covets title as the world’s top innovator

big_D Silver badge

Exactly.

I mean, Huawei is only leading in 5G because of all the technology it builds into its kit that nobody else has, so of course that was stolen. Oh, wait.

People stick with their old prejudices, without even bothering to check, whether they are still valid.

If we want to play that game, the UK and Europe would still be muttering on about those thieving Yanks that stole all their technology to kickstart their industry in the late 18th and early 19th centuries... Until such time as they started innovating themselves, when, suddenly, stealing other people's IP was a bad thing.

Japan testing sandwiches that discount themselves as they age

big_D Silver badge

So...

More electrical and plastic waste, in order to reduce biodegradable waste? Sounds brilliant! /sarcasm

I worked on a project to tag all carcases passing through the slaughter house and then on to the processing plant, to ensure the quality and to aid in traceability. But the project failed, because it wasn't economical to put a tag on each carcase half. They kept their reusable RFID tags in the meat hooks for tracking. If it isn't economical to put the tags on 40Kg of meat, I don't see it being economical to put it on a few grams of sandwich, unless they are re-using the chips in some sort of tray?

The story is missing some information.

Brave browser first to nix CNAME deception, the sneaky DNS trick used by marketers to duck privacy controls

big_D Silver badge

Re: Sooner or later we're going to have to work out a way to fund all this.

First party ads, no tracking. Simple.

I'm happy for an ad to be shown to me, based on the site I am visiting.

I am totally against people tracking me from site to site and building a (faulty) profile about me. Let the site I'm visiting handle the showing of the ad.

President Trump's H-1B visa crackdown wiped $100bn off market value of America's largest corps, top study finds

big_D Silver badge

Re: How many from Coronavirus?

Didn't El Reg report a month or two back, that even with the restricted number of H-1B visas this year, US Immigration had to go into second or third rounds of offering them, because nobody wanted them?

big_D Silver badge

Re: do they mean speculative algorithms

They've shown that the stock market dipped, but they have not actually proven that it had any effect on the ability of the said companies to actually carry out their work. And that is a big problem, too much emphasis is placed on stock market performance and not on actual company performance, they are not the same thing!

Looking at the stock price is a stupid metric for the impact of the EO. I don't agree with the EO and I'm for people going to the US to work, if they are truly needed and not just "cheap" alternatives to equally well trained people already in the US. (I don't live in the US, but I have benefited from being able to move to and work in a country of my choice due to freedom of movement.)

But that second part is a big part of the problem. You need to invest to provide an education to skill people up for the roles required. Ignoring education and just importing people to work cheaply, because you can't find anyone locally is not the answer. The whole "labour supply chain" needs to be examined and adjusted.

As long as the only metric of import for the stock market is a business' profit for the next quarter and not its sustainability, the US education and labour markets won't benefit or recover. And, yes, the same is true in many other countries. Education means investing in short-term goals over 1 to 1.5 decades into the future. Although this is a short-term goal, it is still at least 40 times longer than many stock market speculators are willing think about,

Also, we are talking about multi-nationals, for the most part, so why do these skilled workers even need to be in the USA? Especially in Silicon Valley companies, which have been lauding and promoting products for remote working for nearly 2 decades. Some jobs need to be done locally, but if SV's claims for their products are real, they don't need all of those H-1B visas anyway.

Facebook tells academics to stop monitoring its political ads for any rule-breaking.... on privacy grounds

big_D Silver badge

Re: Scraping?

And there is no data protection issue, the users have manually installed the add-in/plugin and have chosen to share the adverts with AdObservatory.

Yes, we have a 5G iPhone now. But that doesn't mean 5G has arrived

big_D Silver badge

Re: Oh goody

I'd be happy if they even rolled out 3G here... Just ditched my Vodafone "up to 500mbps LTE" contract to go back to congstart "up to 50mbps LTE", because I actually get around 20 - 30mbps with them, whereas I get 0.001mbps with Vodafone at work and around 5mbps at home.

COVID-19 security tips: Ensure you sack your staff without leaving their IT access enabled, says Secureworks

big_D Silver badge

Re: Macros

Stripped by policy. No archives, no executables, no old Office formats, plus a bunch of others.

big_D Silver badge

Re: Seems reasonable

I hope you disable copy and paste between the local machine into the remote session.

big_D Silver badge

Re: Macros

Our users do that anyway.

We've had a flood of phishing emails being forwarded from the users, asking if it is truly a phishing email. And I am glad they do, I'd rather deal with a dozen requests for confirmation every day than one incident of a user using their own initiative and reacting to a phishing email.

We have seen an up-tick in malware attachments, generally in .doc or .xls files and those formats are automatically stripped from emails by policy, regardless of whether they are infected or not. Some users complain that they aren't getting information from suppliers or customers, but we are hard and ask them to inform the other party that file formats that have been declared dangerous for over a decade will not arrive and they should use more modern formats that are less* vulnerable.

* I don't think any format is 100% safe, you can just try and minimize the chances of compromise.

big_D Silver badge

Re: Tip for those sacked

Keeping company data after you have left the company, however the relationship ended, is not a good idea. And personal data should never find its way onto a company owned device.

big_D Silver badge

Re: Seems reasonable

True, but that company device still needs to connect to some form of network. If the home network already has one or more compromised devices on it, the company device can still get p4wn3d, even if you are running a closed tunnel VPN from the device for when it is connected to the office network

A VPN is needed and helps, but you need to still make sure the device is safe from attack when it is in "strange" networks, regardless of your VPN settings.

When you're On Call, only you can hear the silence of the clicks

big_D Silver badge

Re: Classic Errror

We had a consultant, he didn't have a home telephone, but the company put him on-call anyway...

So he would go home at 5, then toddle off with the dog at 9 o'clock to the next telephone box and call duty op, to see if there were any problems. If there weren't, he'd toddle off back home and go to bed.

Dutch telco KPN goes its own Huawei, picks Ericsson for its 5G core network

big_D Silver badge

It's okay...

It's okay, Huawei. Vodafone still loves you.

They sent us a new Huawei router for our new fibre connection this week.

NHS looks to the market for advice on one system to replace two separate, giant Oracle ERP and HR systems

big_D Silver badge

Re: to soon ?

Exactly what I came here to say.

Even with the 65K rows restriction in older .xls formats, it would still be an improvement.

Microsoft will adopt Google Chrome's controversial Manifest V3 in Edge

big_D Silver badge

Re: PI Hole

I don't care about the ads, the sites have to earn a living. But I do object to them tracking me.

I am perfectly happy for a site to serve me 1st party ads, as long as they don't track me to other sites.

Samsung Galaxy S20 FE goes from 'nearly dead' to full in an hour, but you might not be a 'Fan' of some of the shortcuts

big_D Silver badge

Re: Glass...

Yes. My S20+ looks lovely, but it is just too slippery and fragile to use without a case.

big_D Silver badge

Re: Glass...

I had a series of Lumias with polycarbonate cases. They got bashed around a lot, took some knocks and the screen never broke and the back either, just a few lumps taken out of corners or scratches on the back.

I never had any component failures.

big_D Silver badge

Glass...

I never like glass backed phones, they are weaker and you have to put them in a plastic case anyway, so why not just make them out of polycarbonate? It feels good, is less slippery than glass and is harder to break. (i.e. glass is more likely to fall out of your hand and it is more likely to break if it falls out of your hand.)

UK govt advert encouraging re-skilling for cyber jobs implodes spectacularly

big_D Silver badge

Re: You missed off...

Having worked for 3 decades in IT, I've never seen cyber used as an abbreviation of cybersex. It was always cybersex...

I know cyber as an abbreviation of cybernetics and its practitioners from the Sirius Cybernetics Corporation will be the first against the wall, when the revolution comes.

Your plastic pal that is fun to be with.

Arm has 11 months to hire 490 UK techies. Good thing there isn't a pandemic on. Or, say, Brexit

big_D Silver badge

Re: Void Brexit Woes

Wasn't one of the terms of the takeover that they remain a UK based company?

From the Department of WCGW: An app-controlled polycarbonate lock with no manual override/physical key

big_D Silver badge

Reliably informed...

and wiping your arse with dead leaves

I am reliably informed, that you should never leaf (sic) your medieval home for the latrine without a couple of fresh docleaves in your pocket.

K8s on a plane! US Air Force slaps Googly container tech on yet another war machine to 'run advanced ML algorithms'

big_D Silver badge

Agile...

We look to unleash the power of digital engineering and agile software development to seize the opportunity for rapid evolution of the technical stack;

If the Internet has proven one thing, it is that agile development and security aren't very compatible. The move to get the next iteration out, without missing the deadline means that things like thorough testing and looking at security are often get left by the wayside "for the next iteration".

Surely the last thing you want from a flying weapon is software that hasn't been fully tested? Using fully separate computers to control the cameras with an agile software stack? OK. Using computers that are connected to the flight systems to host the containers? No.

UK, French, Belgian blanket spying systems ruled illegal by Europe’s top court

big_D Silver badge
Mushroom

Re: Leave it to Boris

World Beating? I think you need to open your world view a bit more...

big_D Silver badge

Re: International Insecurity ..... the Gift that just keeps on giving

The heads of and the ministers responsible for the BND, MI6 have all been drawn over the coals before now or fallen on their proverbial swords for overreach.

Heck, the US Supreme Court ruled that the CIA, NSA and Co. had gone too far, based on the Snowden leaks and had acted illegally.

The UK's RIPA bill has been thrown back at the Government at least twice, because it breaches Human Rights standards.

Excel Hell: It's not just blame for pandemic pandemonium being spread between the sheets

big_D Silver badge

Re: Simple tables

It is. It is quick, easy and flexible.

big_D Silver badge

Re: Simple tables

That or tab separated. That is the way I've been doing tables in Word for a couple of decades.

big_D Silver badge

Having faced many abortions of "systems", "developed" in Excel, I can only agree with Rupert.

Using Excel as a proper spreadsheet to analyse some figures, fine.

But I've experienced:

* Timesheet system for a whole company automated with Excel 4 macros (not VBA, Excel Macros).

* Forecasting system so complex in 1-2-3 that Lotus threw up their hands in disgust and told my project manager to use a real language!

* Production completely bypassing an ERP system, doing planning and production in Excel and booking the end result back into ERP.

* Complex "databases" automated in Excel

And many more sins.

big_D Silver badge

Its worse than that...

When I was "young", I worked on a sales forecasting system which downloaded data from a VAX Oracle database and performed calculations in Lotus 1-2-3. The project manager wrote a quick-and-dirty prototype in 1-2-3 and presented it to the customer as a set of "working" screen mock-ups. The finished project should have had a database and use C++... Only the customer said, "no, 1-2-3 is great! All our sales people have that already, just get the prototype working!"

I was called into the project at that stage and no amount of wailing helped. The customer was adamant. So, we expanded the 1-2-3 model. It ran in DOS, it had around 40 sheets it loaded in one after another and ran calculations... Then it started doing funny things.

Self-modifying /-code macros didn't help (dynamic cell references, as 1-2-3 didn't have variable). It worked fine in debug mode, stepping through the thousands of lines of /-codes. But actually run it? It fell over randomly and gave the wrong results. After tearing our hair out, we actually contacted Lotus support. They asked for a copy of the spreadsheet, they got a 2MB bundle of tables (we are talking DOS here, 640KB main memory, 1MB with Himem.sys and a 40MB drive!).

They looked at it. They wept. Their official answer was, "forget it, 1-2-3 was never designed for anything this big or complicated!"

IBM manager had to make one person redundant from choice of two, still bungled it and got firm done for unfair dismissal

big_D Silver badge

I always used to call them Incredible Bloody Mindedness... I think it still covers nearly everything they do.

Microsoft Exchange 2010 support ends in a matter of days and there are 139,000 internet-facing servers still up

big_D Silver badge

Re: Vnext - and so it starts

Yes, you too can experience the instability that is Azure, all from the comfort of your own computer room.

There ain't no problem that can't be solved with the help of American horsepower – even yanking on a coax cable

big_D Silver badge
Coat

Rex?

Shouldn't that be the Rexx of the species?

Federal judge temporarily neutralizes President Trump's blockade against visas for foreign techies, other workers

big_D Silver badge

Re: Hypocrite Much?

Because it is interesting? Because you feel you can achieve something?

I did STEM, because I found it fascinating. My mother wanted me to study to be an accountant, because there is no money in IT. After 1 year, I was so bored with accountancy that I switched to an IT course, because it was interesting and I was good at it.

But this problem needs to be tackled from both sides, you need to get people interested in STEM and you need to incentivise companies to employee local staff - E.g. make it mandatory that visa staff get paid the same as local staff and receive the same benefits.

big_D Silver badge

Re: Hypocrite Much?

You have to do both. You need to train people up and once there are people capable of doing the job locally, as far as I understand the visas, those being imported to do the job will no longer be eligible for a visa.

You also need to throw in things like forcing equal pay, so that it isn't "cheaper" to import workers.

So, you can gradually reduce the number of visas as people come out of training in the USA and are there to fill the jobs.

When I went over to the US in the 90s to do a training course on a product I had written (UK HQ had implemented a new global system and I was there to train up the US employees), the first question I was asked at immigration was, "could a US citizen do this training?" I was lucky. My employer told me to tell immigration that I was only there for a meeting, but tired and "zombied" out after the flight, I just blurted that I was there to train the users. Luckily the immigration officer let me through, as I was only there for 2 days.

Think tank warns any further delay to 5G rollout will cost the UK multiple billions – but hey, at least Huawei is out

big_D Silver badge

Re: What Is Mobile Communication?

That is the one saving grace of my Vodafone contract, even though there is 1 bar of 2G coverage, at least it makes calls over Wi-Fi, when it is connected.

big_D Silver badge

Yes, I'm in Germany, just dropped my Vodafone "up to 500mbps" LTE contract and gone back to congstar, they only offer me 50mbps, but I actually get 50mbps at home and work, as opposed to Vodafone, which gives me 5mbps at home and 0.001mbps at work. And congstar costs half of what Vodafone costs and I get 15GB a month, instead of 10GB (of which I am currently lucky to actually use 1GB, due to lack of coverage).

If I go into the local city, I do get >100mbps, if I am lucky. But as I've spent 80% of my time in areas with little to no data coverage, the contract was a complete waste of money.

5G? I'd be happy if they sorted out 3G or 4G first.

First analysts, now YouTubers put you on blast. Do you A) take it on the chin or B) up fire up the DMCA-o-tron?

big_D Silver badge

Re: dmca damage

It unfortunately doesn't work that way on YouTube, the YouTuber is guilty until they prove their innocence - in that their video is removed until they can prove they have not infringed copyright, which can take a long time and for things like news channels, that means that the video is worthless by the time the issue is resolved.

Who watches the watchers? Samsung does so it can fling ads at owners of its smart TVs

big_D Silver badge

Re: Likewise

It hasn't stopped them so far...

Burning down the house! Consumer champ Which? probes smart plugs to find a bunch of insecure fire-risk tat

big_D Silver badge

Extra...

I don't currently have any Internet of Tat stuff, but when I set up my network, I dedicated an extra VLAN for IoT devices. It has its own SSID and it has only access to the Internet, no access to the other VLANs, just like the guest network.