* Posts by big_D

6775 publicly visible posts • joined 27 Nov 2009

Franco-German cloud framework floated to protect European's data from foreign tech firms slurpage

big_D Silver badge

Re: GAIA-X

My first thought was Captain Planet...

Moore's Law is deader than corduroy bell bottoms. But with a bit of smart coding it's not the end of the road

big_D Silver badge

Re: DEC Fortran

Shudder. I remember S/36 and RPG II and III.

big_D Silver badge

Re: DEC Fortran

We were using it for seismic surveys of oil and other mineral fields (predominantly oil). You needed to eek every last millisecond out of the calculations, because they would tie up the computer room full of VAXes for hours at a time.

I related above, but the optimization was so good, one mainframe sales-rep went away with his tail between his legs. They gave us a mainframe to play with and a test-suite to run in parallel on a spare VAX. The test-suite should run for a week on the mainframe and a few weeks on the VAX. We should call him in a week, when the mainframe was finished.

When he got back to his office an hour later, there was a message for him to call us, the VAX was finished. The DEC FORTRAN compiler had looked at the code, worked out that 1) no input, 2) fill random array, 3) no output meant that 2 was superfluous and optimized that out of the executable, which was essentially empty and took less than a second to run...

big_D Silver badge

I've worked on optimizing a few web projects where the "built-in" optimizations weren't enough, because the code had been written to be elegant and human readable, with no thought about how "executable" the code was.

big_D Silver badge

It depends on what you are doing. If it is a one-off quick and dirty calculation, then the optimization probably doesn't matter.

If it is a system used by hundreds or thousands (or web based, possibly millions of users), then the time invested by the programmer is very cheap, if he can bring down the processing time.

Two examples:

1) a set of financial reporting tools, run every month on a users computers, blocks the computer from all other use during that time. Runtime before optimization: 22 hours, times 250 financial users around the world every month. Optimization: 1 programmer for 2 weeks. Runtime after the optimization: < 3 hours. A saving of 4,750 processing hours per month and around 2,000 man hours of recovered activity involving using their computers. That was 80 hours well invested.

2) an online shop with 4 load-balanced front-end servers and a big back-end MySQL server. When the PayPal newsletter came out and the shop was listed, the whole thing would keel over and die, when around 250 users were spread over the 4 front end servers - the query to generate the front page menu would go from under 1 second to over 2 minutes and the DBA would put in overtime restarting the MySQL database every few minutes.

4 hours of looking at the code, optimizing some decision trees and re-ordering the "WHERE" clauses of the SQL statements, under the load of over 250 user PER SERVER, the menu query was down to under 500 milliseconds and the loading of the front page was under 4 seconds.

They could have thrown a bigger database server and more load-balanced front end servers at the problem, but that wouldn't have been economical, especially when a programmer who understood MySQL and processor architecture was let loose on the code and could get that sort of performance improvement for less than the price of a new SAS drive...

Those are both real-world examples I was involved in. I was brought in to fire-fight both projects, the first an MS-DOS based system, written in BASIC by FORTRAN mainframe programmers and maintained by COBOL mainframe programmers. Having someone who actually understood PC architecture and where the weaknesses were (video output was the biggest bottleneck) made that huge difference.

Likewise, the second one was a couple of year back. The code was elegant and easy for a human to read, but the devs had little of no knowledge of processor architecture (and how to optimize PHP to work more efficiently) and little to no knowledge of optimizing MySQL. Quickly re-ordering the queries and some ifs and loops was all that was required, it was still elegant and easy for a human to read, but more importantly, it was also efficient for a computer to read and execute.

big_D Silver badge

Run it in Fortran on a VAX, it will take less than a second... The optimizing compiler back then compiled a similar demo down to a single NOP wrapped in an .exe bundle.

The same program running on a much more powerful mainframe took several days.

The DEC compiler worked out that with 1) no input 2) fill a matrix with values 3) no output, it could optimize out part 2, because it wasn't needed, which left optimizing parts 1 and 3, which optimized down to NOP (no ouput), or an empty executable.

Trump's Make Space Great Again video pulled after former 'naut says: Nope

big_D Silver badge

Re: Make ? great again

I'll stick to one of John Cadogan's M.A.L.S. baseball caps (Make Australia Less Shit). Now that is the sort of honest, down-to-earth campaign that you expect from an Antipodean.

Travel-sick Windows needing a Systemwiederherstellung would be in Germany, right? Austria? Not necessarily

big_D Silver badge

Weihnachtsspecial

Around the turn of the century, my brother was working as a freelance recruiter and he picked up a contract from a certain discounter/supermarket chain of German heritage (no, not the one beginning with L). They had stocked up with PCs for their UK punters and were selling them to people who were giving them as presents at Christmas time...

Only, luckily, a few people actually wanted to try out the discount PC crapiness straight away... Only to find that there was a "Z" where the Y should be and vice-versa and things like [, ], {, } were now "unobtainable", having been replaced by ü+öä. and when the PC started it was all in German Yes. They had ordered them from the now defunct Peacock computers in Germany and the manufacturer had pallets of the things ready to ship, only they mixed up the orders and the UK got part of the shipment for their German stores.

They were hurriedly looking for some IT bods to roam around the country on Christmas Day, Boxing Day and the through New Year, to replace the keyboards and install a more British version of Windows on the PCs. The pay was allegedly not bad, but you needed to have your own car and some of the customers lived in less salubrious areas and I didn't fancy coming out from refurbishing a PC to find my car refurbished sans wheels, windows and interior...

Facebook to save US users from ads bought by foreign state-controlled media

big_D Silver badge

Re: Facebook to save US users from ads bought by foreign state-controlled media

And what about non-state owned troll farms? State owned non-media outlets? What if they don't declare it as a political ad?

What about people in countries other than the USA, they have elections as well, you know... Although the NSA would probably complain if they were stopped from placing ads in some foreign climes.

Why not force all ads to be country specific and only accepted when the placer of the ad has a tax identity number for the country they are placing the ad in and actually vet the ads? You know, like a responsible media outlet.

Global bean-counting behemoth PWC tells vendors: Now would be a great time to audit your customers

big_D Silver badge

Re: Audits? Now? Really?

Let them visit each employee one at a time at home, at their expense, with masks and disinfectant...

Although they can't do that in Europe because of GDPR. "It is classified, try again in 6 months."

$5bn+ sueball bounces into Google's court over claims it continues to track netizens in 'private browsing mode'

big_D Silver badge

Re: @Mark I 2 Thats not the point...

Google-analytics is blocked on all of my devices, either DNS level on my local network or with NoScript and uBlock Origin in the browser.

big_D Silver badge

Because incognito mode doesn't even protect you from Google tracking you. It doesn't go, "oh, you are in incognito mode, I'll block all Google tracking," it just carries on as normal.

Defending critical national infrastructure... hmm. Does Zoom count as critical now?

big_D Silver badge
Coat

Re: Yes it does

Sorry to put a cloud on your day...

https://www.theregister.com/2020/06/03/google_uk_g_cloud/

Mines the one with a private server farm in the pocket.

Google signs agreement to offer discounts on cloud services through UK govt's Digital Marketplace

big_D Silver badge
Facepalm

Good to see...

they are restricting the deal to cloud services that pay their taxes in the UK... Oh, wait...

Smartphones, PCs, and now wearables... Coronavirus wrecks another corner of tech

big_D Silver badge
Facepalm

Shock...

Situation making us question frivolous spending causing the market for frivolous goods to shrink, who'd a thunk it?

Wearables aren't an essential product. If you already have one and are facing financial realities, you probably won't fork out for a new one at the current time. If you don't already have one, you probably don't need one at the current time, there are better things to spend money on.

The same goes for all luxury and frivolous goods, like smartphones, I replaced mine as Corona hit. I went to the Amazon site with the thought of cancelling the purchase, but it had already been dispatched (3 days earlier than Samsung had announced). I spent the first 2 weeks humming and hawing about whether to send it back or not. If I hadn't already received it as Corona broke, I certainly wouldn't have upgraded my old phone this year.

Office supplies biz owned by UK council shrugs off ransomware demand for 102 Bitcoin

big_D Silver badge

Then there is the 5th point, it all takes time to do the analysis, get replacement kit and drives in, if needed, and then actually provision those devices and recover from backups.

@Terry6

At one site I worked, we had a single ransomed PC, we removed the hard drive and put in a new one and played out a standard image, the user was back up and working in a couple of hours (company policy forbade the storage of documents locally, so any lost documents were the user's problem). Multiply that up by a few hundred PCs and it will be days before everybody is back online, assuming you don't have to recover any personal data on those PCs.

Then you have the server infrastructure, where the data is. That will usually take several hours overnight to perform an automated backup. Recovering each machine from a last-known-good backup will take more time, multiplied by all the servers you have, possibly all on different backup tapes (some machines don't change often, so are backed up weekly or monthly, others change rapidly and will be backed up multiple times a day (E.g. email and ERP servers).

Once you have the right backup media, you will probably spend a couple of days recovering the servers (and keeping them powered off or network isolated). Then you need to check the servers aren't infected, once you are sure they are clean, they can come back online and the users must perform integrity checks, to ensure the data is complete / to assess how much data has been lost since the last backup. That lost data will then need to be reconstructed from the paper trails, worst case or the data is lost completely (catastrophic case).

So, even if you have a lot of IT staff and your latest backups are good and can be used, you will still need days or weeks to get the whole infrastructure back up and running.

Once case I am aware of, the cyber security arm of the Federal Office for the Protection of the Constitution contacted a company and informed them, that their servers' IP address had turned up on a Chinese darknet forum. Given the known vulnerabilities and patch status of the server's firmware, their advice was to "shred" the servers and install new ones and recover from known-good backups.

That is an extreme case, but where are you going to get a replacement server farm on short notice?

big_D Silver badge

Re: Good!

Let's hope, but it means having good backup and disaster recovery plans in place. That is unfortunately where too many companies spare a couple of quid and aren't in a position to actually recover.

Contact-tracer spoofing is already happening – and it's dangerously simple to do

big_D Silver badge

Re: OT - Did I miss something? 301 moved permanently??

Same here. I started my work PC after my leave and the password manager said no passwords, wtf?

Looked at the pinned site and it was now showing .com. No warning, nothing. I did a quick check of the certificate, before logging back in.

7*7 = a simple equation for taking total control of multiple VMware-powered clouds

big_D Silver badge
Facepalm

Re: Oh, my ...

Yes, you should be escaping input, especially names, not executing it...

Das reboot: That's the only thing to do when the screenshot, er, freezes

big_D Silver badge

Re: Funny that

When I first came to Germany, I visited a friend and they lent me a computer, that ran German Windows. I had to go in and change the network settings and give it a dedicated IP address (back then, DHCP servers weren't that common in small companies). I had done it often enough in English that I could do by rote, click Start, click the "System" thing where Control Panel would be, then the thing where Network would be (was close enough, Netzwerk), then the adapter, then...

Just remembering which option was where in each dialog helped even though I didn't understand the language.

big_D Silver badge

Re: Funny that

Switching the language on unlocked mobile phones left on the desk to Greek, Russian or some other non-Lating langauge.

I quickly learnt how to change the language without having to look at the display. The first thing I did, once my new handset could be locked was to set a PIN, that stopped the problem.

Wanna force granny to take down that family photo from the internet? No problem. Europe's GDPR to the rescue

big_D Silver badge

Re: GDPR is a joke....

Luckily, we don't live in the UK

big_D Silver badge

Re: GDPR is a joke....

Whenever we are at a party or gathering, the first thing my wife says, is that nobody has her permission to upload pictures of her to the internet. She is very proactive about her privacy.

big_D Silver badge

Re: Where does the copyright law stand on this?

She can keep the image for her own personal enjoyment. But as it is an image of a minor, she cannot publish it without getting a signed waiver from the minor's guardian(s). It is irrelevant who has copyright, the child is the subject of the photo and therefore permission has to be obtained before publication.

That covers grannies photographing their children, TV cameras in a school (over here, in Germany, they either just film legs running around the playground or they blur out the faces, if the parents haven't signed a waiver for them to be filmed for the TV news), some "Joe" on the street or a professional studio photographer.

big_D Silver badge

Re: GDPR is a joke....

If the grandmother had put it in a private folder on her GDrive or OneDrive for backup, I'd be with you.

She openly published the photo on Facebook. That is a big difference.

To test its security mid-pandemic, GitLab tried phishing its own work-from-home staff. 1 in 5 fell for it

big_D Silver badge
Coat

Alexa, follow the link in my email...

big_D Silver badge

Re: Not bad

We ran a campaign last year. We were inundated by calls with people asking if it was a fake and whether they should click on the link or not.

Most of our users have a lower skill level and, thankfully, they prefer to ask us, whether a link is fake, rather than blindly clicking on them.

A common attack at the moment is an email saying our web mailer is holding suspected messages and the users should click on the link to verify the held messages. We don't use webmail, so, thankfully, they all asked us wtf is going on. I'd much rather be inundated with calls from cautious users than face a security breach.

Could it be? Really? The Year of Linux on the Desktop is almost here, and it's... Windows-shaped?

big_D Silver badge

Re: If only!

I wasn't expecting any problems either, which is why I was really annoyed. I've been using Linux for nearly 2 decades and this is only the second time I've had real problems getting Linux to run.

My old laptop (2004 Acer) had a rare ATi Radeon X800m chipset, it took 18 months before a Linux driver appeared for it - it couldn't even install in VESA mode on that thing!

This time, I was using the open source drivers for the GTX card, but that didn't work well with waking from sleep, so I added the official nVidia drivers for the card. The sleep worked fairly reliably (needed a hard reset 1 in 10 wake-ups), but still unacceptable. But the long pauses every time I opened a window finally drove me back to Windows on the PC. :-(

big_D Silver badge

Re: If only!

Ryzen 1700, 32GB RAM, 3 x 500GB SSDs using LVM, 2TB spinning rust, nVidia GTX1050ti, Dell 34" UW monitor, Amazon Bluetooth dongle, Microsoft Surface Ergonomic keyboard and Logitech MX Master 2 BT mouse. Running openSUSE with KDE.

The first problem was that Bluetooth wouldn't start automatically at boot time or after waking from sleep. That took some deep-fiddling in /etc, but it did work. Not a real problem, after some research.

Then Bluetooth would regularly pause mid-sentence. I never found a cure for that problem.

I had to install the proprietary nVidia drivers to get the PC to wake from sleep at all. It would just start back up, but the screen remained black, I had to then SSH in from another device and force a reboot. With the nVidia driver, it would wake up reliably 9 from 10 attempt, but the failed attempt needed a hard reset.

The display was very slow and if I was playing YouTube in a Firefox tab, opening LibreOffice, a game of Aisleriot (patience), Mahjong (or after winning, starting a new game or closing the app), the video / all window activity was paused for several seconds, whilst the window opened / closed / changed. Not what you expect from an 8 core / 16 thread processor with 32GB RAM and a gaming video card.

big_D Silver badge

Re: If only!

Mint and openSUSE Tumbleweed.

big_D Silver badge

Re: If only!

I agree. Another problem I had was when opening a window, all video stopped.

If I was playing a video in Firefox and opened a new window, the whole thing paused for 5 seconds! This is 2020, this is a Ryzen 7 with 8 cores & 16 threads, 32GB RAM, LVM over 3 SSDs and an nVidia GTX 1050ti graphics card, how the frack is that being so overloaded opening a window that it freezes video for 5 seconds?

big_D Silver badge

Re: If only!

I tried switching to Linux on my desktop last month, but it failed abysmally.

It didn't like the combination of my Ryzen 7 + nVidia graphic card, it wouldn't always wake up cleanly, would randomly hang. Likewise, the Bluetooth keyboard and mouse would regularly hang, so I couldn't go anything. It is a real shame, I use Linux on my Pis and my old laptop and wanted to go 100% Linux, but the hardware compatibility just wasn't there, for me.

Luckily, I imaged Windows before I installed Linux, so going back was fairly painless. I'll stick to CentOS and SUSE in Hyper-V VMs and WSL on my Windows desktop for now.

Google rolls out pro-privacy DNS-over-HTTPS support in Chrome 83... with a handy kill switch for corporate IT

big_D Silver badge

Re: DoH

On my firewall, it is 1 rule, but with a group of IP addresses. At the moment, it is a relatively small list. The firewall can also act as a DoH provider, using my main DNS server as its source.

big_D Silver badge

Re: DoH

I have set up rules to block DoH at the firewall. The browsers and smartphones just drop back to using my internal DNS server (DNS over TLS with DNSSEC to Quad9). The internal DNS server blacklists around 2.5 million sites (most of them tracking and known malware flingers). However it will be a moving target as more and more DoH servers come on line.

I worked out that DoH was being used on my tablet when it suddenly started showing Facebook in the new tab list - I had blocked over 2,500 Facebook domains in DNS. I quickly set up additional rules to block DoH to known providers.

Rogue ADT tech spied on hundreds of customers in their homes via CCTV – including me, says teen girl

big_D Silver badge

Re: "ADT failed to monitor consumers’ accounts"

The problem is, how does ADT know the difference between a mail address the customer entered or an email address that was entered by an employee when visiting the customer? I assume it was private email address, so probably wouldn't have been suspicious in a log, on its own - just another gmail address, for example.

If their system checked for the same address on multiple accounts, it might work - unless he created a different address for each account he compromised...

I agree ADT has some fault here, but no matter how hard you make it, somebody will come up with a way around your precautions.

AT&T tracked its own sales bods using GPS, secretly charged them $135 a month to do so, lawsuit claims

big_D Silver badge

Re: Telekom

That makes more sense, although our local consumer outlet don't really have any time constraints either. They are happy to talk to you as a human being.

big_D Silver badge

Telekom

Our Telekom rep in Germany can spend 10 minutes here or several hours depending on what he is dealing with and what needs to be discussed.

If there is a major problem with one of our sites, he won't be out of here again in 45 minutes. Likewise, we were looking for a replacement exchange a couple of years ago, we had about half a dozen suppliers turn up, none of them could fully demonstrate the solution and answer all questions in 45 minutes.

If it takes longer, the reps don't complain, they aren't pounded on by the beancounters. Their company knows that customer satisfaction is paramount to keeping the customer and if they need to spend more time with the customer, they can. The AT&T model seems very counterproductive, there is no way I'd give business to somebody who keeps looking at his watch and can't wait to get out the door to the next appointment.

I've had the rep take a break to call his next appointment to cancel or move the appointment or he has called me to explain that he will be late. If they are honest about it, I have no problem with them taking longer with another customer, because I know they will do the same for me, if I have questions or problems.

Huawei's defiant spinning top says Chinese vendor can cope with renewed US sanctions

big_D Silver badge

I was thinking more about the other angle, me sitting in Europe, beholden to European law and suddenly Trump, a person who has theoretically no legal power over me, can decide that, because I am using a US based cloud or Windows or a piece of plant bought from a company with US influence, I can't sell to my customers.

It makes using US products untenable, as I may wake up tomorrow and find I don't have access to my products any more or I am not allowed to sell to my customers, because "Trump slept badly last night".

big_D Silver badge

Except it isn't a locals only policy. The US sanctions don't just affect US companies, it is a world-wide ban on dealing with Huawei, if you have any US technology in your plants. Talk about overreach.

Microsoft gives Office 365 admins the heads-up: Some internal queries over weekend might have returned results from completely different orgs

big_D Silver badge

Re: Metadata *is* data

Not only them. I think just about every cloud out there has had some form of breach over the years.

The problem is, if it is your data behind your firewall, you have somebody you can shout at and, in the worst case, fire. With the big clouds, they just give a shrug of their Teflon-coated shoulders and carry on as if nothing happened.

big_D Silver badge

Re: Metadata *is* data

And search results often have a line or so of text from the document being searched for.

Microsoft proves that data in the cloud isn't yours, or isn't yours alone...

big_D Silver badge

Re: rule 34

Argh! NO! Hand the eye-bleach stat!

Podcast Addict banned from Google Play Store because heaven forbid app somehow references COVID-19

big_D Silver badge

Re: AI is rubbish, developer doesn't read emails?

With the current COVID-19 situation (and increasingly with hate speech etc. on the social networks), they don't have time to react. They shoot first and ask questions later.

big_D Silver badge

Re: Big tech - the solution is simple

That is part of the problem, Google and Facebook are considered big companies based on revenue and users, yet they are tiny companies, in terms of employees per customer, they have scaled their tech without ensuring that there are enough people in place to deal with the expansion.

The same is true about the law. When they are small, they circumvent the law and they scale up, circumventing the law until the authorities come a-knocking and suddenly their systems have been scaled up so much that it is "impractical" to comply with the law - i.e. it would be prohibitively expensive to obey the law, it is cheaper to keep paying the fines and lawyers than it is to actually tackle the problem.

They should follow the law from the beginning and they should scale their solutions for staying inside the law as they grow, that way the revenue model grows taking into account compliance - but that isn't sexy, because revenues will be lower than they could be - instead of getting "sticker shock" when they suddenly have to actually comply.

big_D Silver badge

Re: Well there's the problem

We had a problem with Google a few years ago and it was very sobering, how you can best deal with Google.

One of their servers suddenly started spamming our Internet connection (10mbps connection being stuffed with around 100mbps of traffic from the Google server) - possibly a misconfigured server that was supposed to send information to another part of Google and our IP address was mistakenly entered?.

Tried contacting them at abuse@ and webmaster@ addresses. Automatic answer that this account is not read and the message had been automatically deleted!

Okay, call them... Over 20 minutes bouncing back and forth over their automated telephone system, before being spat out and left with a dead connection.

Twitter didn't bring any help either. In the end, we had to contact our commercial ISP and get the Google IP address blocked at their border, which was a subscription service costs nearly 3 figures a month! In the end, we just accelerated our move to a new ISP and got a new IP address, it was quicker and easier to arrange than to get Google acknowledge a problem. For all I know, the Google server is still spamming the old IP address.

Latest NHS IT revolution is failing to learn lessons from the last £10bn car crash

big_D Silver badge

Outside the industry...

If you look outside the IT industry, if a supplier fails to deliver on time, they usually don't keep getting paid, they have to pay the customer penalties defined in the contract for the overrun. But public sector and IT seem to be just an ongoing cash printing machine.

If American tech is used to design or make that chip, you better not ship it to Huawei, warns Uncle Sam

big_D Silver badge

Re: Also Microsoft

And the US Government will reimburse these companies for lost revenues due to its petty actions?

No, thought not.

big_D Silver badge

Re: Also Microsoft

Microsoft already got a dispensation from the SoC to allow them to resume sales.

big_D Silver badge

Security of Commerce...

US Security of Commerce Wilbur Ross. “This is not how a responsible global corporate citizen behaves, when an irresponsible Megalomanic misbehaves.

TFTFY.

Micros~1? ClippyZilla? BSOD Bob? There can be only one winner. Or maybe two

big_D Silver badge

Re: BobZilla ?

I think the "House of Bob" is also not the best in that direction. "The house that Bob built" would be better. Or for kid's TV, Bob the BSODer?

Bobzilla would have been good.