* Posts by big_D

6779 publicly visible posts • joined 27 Nov 2009

I've had it with these motherflipping eggs on this motherflipping train

big_D Silver badge

Re: On the other hand...

That was back in the early-mid 80s.

big_D Silver badge

Re: On the other hand...

I know that well. After a week's sailing around the West Coast, we dropped into Tobermory, went on land and straight to the Mishnish pub and booked an hour in their baths. We felt almost human again, afterwards. A nice single malt rounded off the recouperation process.

Uber CEO compares pedestrian death to murder of Saudi journalist, saying all should be forgiven

big_D Silver badge

Re: Everyone likes to hate on Uber

No, and they do have the requirement that drivers for hire (i.e. Uber drivers, as well as taxi drivers) must have a professional driving license - not a taxi license, but a driving license with extra requirements to prove you are safe to drive passengers around.

Uber were not checking that their drivers had a valid professional driving license - and without that, you can't get commercial insurance, only private insurance, which is null and void if you are using the vehicle to ferry around passengers for remuneration (you can accept, at most, recompense for their share of the petrol used on the trip, if you carry passengers privately).

The courts banned them for a while, but I haven't heard any news that they are back on the "mean streets" of Germany. But, as you say, the taxi situation is a lot different here and more tightly controlled, from a safety and fraud aspect, than in some countries, I just don't see any reason why I would ever consider an Uber ride.

big_D Silver badge

Re: Everyone likes to hate on Uber

Given that they were banned here for operating illegally and then went underground... No, I've no time for Uber. Oh, and it should be Über, if they are trying to say they are better than taxis...

big_D Silver badge

Premeditated

Sorry, neither was a mistake. Both are pre-meditated acts.

The software on the Uber car was demonstrably not ready to be tested on real roads, as was seen last week in the logs in the NTSB report. It is premeditation to take a system you know can't cope with real-life situations and put it on real roads.

As to the huge political furore around the Kashoggi murder, there isn't much more to say there, it was front page news for a couple of weeks and nearly everybody has condemned the act, you can't accidentally assassinate someone.

Despite Windows BlueKeep exploitation freak-out, no one stepped on the gas with patching, say experts

big_D Silver badge

I was just listening to Security Now, there was a new BlueKeep exploit last week and it crashed many of the exposed servers - turns out that the malware was using a hook for the Meltdown mitigation and the servers that were crashing didn't have the Meltdown mitigation from Microsoft installed. If patches from nearly 2 years ago haven't been installed, I doubt that this one will be either!

big_D Silver badge

I would assume security conscious admins have already patched. We patched straight away.

But, if you are exposing RDP directly to the Internet, you probably don't have all of your admin marbles together anyway.

At a previous company, the CEO claimed that putting RDP directly on the Internet was safe, because he didn't use the standard port! It took a bit of arm twisting to get him to use a VPN in front of the RDP service - mainly because he only had a thin-client at home.

At every other company I have worked at, RDP was behind at least a VPN with 2 factor authentication.

150 infosec bods now know who they're up against thanks to BT Security cc/bcc snafu

big_D Silver badge
Facepalm

Who?

Who, working in info-sec,

a) uses a "real" email address for such things, you'd usually use a throw-away address, such as bt.stand@mydomain.com, or even a disposable gmail or similar address.

b) uses their work email address when looking for a new job (that goes to anybody, not just info-sec bods). 30 years ago, maybe, but today?

That said, a complete balls-up by BT

I'm still not that Gary, says US email mixup bloke who hasn't even seen Dartford Crossing

big_D Silver badge

Re: Where's the EU when you need them?

Put the ICO in CC, then next time you write to them that they are sending PII to the wrong address, maybe a rocket up the rear will get them in gear.

big_D Silver badge
Facepalm

Just wait, she'll be stuck in the pool one night and you'll have to express her some money over Western Union to get her out! :-D

big_D Silver badge
Thumb Up

Re: TV

Esther, sausages!

Apple's credit card caper probed over sexism claims – after women screwed over on limits

big_D Silver badge

I experienced some of this, when I moved to Germany. I went from being a good credit risk (mortgage and paying off my credit card every month) to a clean slate with no history.

I had to get a friend to co-sign my first mobile phone contract, because I wasn't a good bet. Once that had been running for a few years, things were better, until I tried to get a mortgage, luckily I had a brother-in-law who was a mortgage broker and we managed to get a bank to accept the risk. I'm guessing now, after 10 years of mortgage payments with no defaults and 20 years of mobile phone contracts without problems, I have a relatively good rating.

big_D Silver badge

Re: We trained our scoring algorithm...

Currently reading that. Interesting, but most of what she is telling us is already well known, but she sums it up nicely and uses some very pertinent examples and puts the whole Schlamassal into context.

big_D Silver badge

Usually it is an trade secret that they cannot divulge, because it would allow the competition to compete unfairly.

That certainly has worked for the likes of Google and its search ranking algorithm.

I'm currently listening to Cathy O'Neal's Weapons of Math Destruction.

Teachers: Make your pupils' parents buy them an iPad to use at school. Oh and did you pack sunglasses for the Apple-funded jolly?

big_D Silver badge

When I was at school, the textbooks were provided by the school. The exercise books as well. We'd get issued with the textbooks for each subject in the first lesson, we'd then put a paper cover over them to protect them.

If you were very lucky, you'd get a brand new textbook, but 90% were re-issued from previous years.

We only had to pay for the logarithms and trigonometric tables book (I still have mine) and pens and ink - although I had a fine-tipped Italian fountain pen in primary school and I could get around 50 words to a line, I was told to use a "sensible" pen and write bigger!

big_D Silver badge

Our daughters had to have an exact model of Texas Instruments scientific calculator, here in Germany. A cousin needs one now, but it is, of course, a different model now.

These things cost over 100€ each! For a poxy calculator!

You can't use an App on a smartphone or tablet and you can't use a different make or model of calculator, they all have to have the same one.

Hyphens of mass destruction: When a clumsy finger meant the end for hundreds of jobs

big_D Silver badge

Because back then the logs were dumped to a dedicated printer and it was suddenly killing off thousands of jobs and printing a line for each one on a fast, loud dot matrix or daisywheel printer (I suspect the former).

big_D Silver badge

Re: Nostalgia ain't what it used to be...

Mainframes are still around today for large TP loads.

On the other hand, think about that "paultry" mainframe back then, then ask yourself, how many hundred users can work at the same time on a modern PC, which has hundreds of times the theoretical power of those ancient machines...

Modern servers are based around PC technologies, not high throughput technologies used in mainframes. Which is one reason a lot of banks etc. still use them. They are still faster and more cost effective for some scenarios.

Think of it more like a sports car or a big rig. The sports car can get you from A to B faster than the big rig, but if you have to transport several tonnes of data, the big rig will still get there first, whilst your sports car is zipping backwards and forwards transferring small amounts of data at a time.

big_D Silver badge

I had been working on a COBOL program. I took a backup of the original code (file.cobol) and worked on the normal file.cob version. After 2 days of coding and testing, the thing was finished, so I went to delete the backup (file.cobol) with del file.cob;* Hmm, anyone see the problem? I had to redo the 2 days of work again, although it went much quicker the second time, because I knew what I had to do, no more testing different approaches.

Another time, I was working on an OLAP system (Arbor/Hyperion Essbase). It had real problems recalculating a hypercube, it was much quicker to export the bottom rows, clear the cube, import the bottom rows and calculate (4 hours as opposed to 48 hours without clearing).

So, clear database... Whoops! ARRGH! Luckily we had the previous backup from 6 hours earlier. My colleague told me to just put in the old backup and recalculate and blame the missing data on the users, a real PFY!

I went to the head accountant, explained the problem, we then loaded the previous export, replayed the audit log and, in the end, we lost 2 transactions.

big_D Silver badge
Paris Hilton

Don't two minuses make a plus?

big_D Silver badge

Re: George 2+

Flags, I would assume, like "kill -9"

What do you get when you allegedly mix Wireshark, a gumshoe child molester, and a court PC? A judge facing hacking charges

big_D Silver badge

That trust in IT people comes from 39 years working in IT...

big_D Silver badge

Re: "Her computer"?

If you are doing something illegal, like installing spyware on somebody's PC, the last thing you want to do is rope somebody else in on the crime, unless you absolutely have to - and then you probably wouldn't want to use the internal IT staff, they'd probably report them.

big_D Silver badge

Re: "Her computer"?

She suspected a District Attorney had installed the spyware.

big_D Silver badge

Shirely he'd need to get the Judge to sign off on a warrant to install the spyware, before he could order the IT staff to install it?

big_D Silver badge

Re: Oh come on...

Usually not, because it isn't their equipment or network and doing an investigation would break company policy.

If the employee thinks the company is illegally spying on them, they should contact their union rep, if there is one, the police, an employment lawyer or the data protection authorities etc. there are a lot of legitimate avenues open to them.

big_D Silver badge

Re: Oh come on...

An authorized pentester has a contract that stipulates exactly what is and isn't in scope. Exactly what thex can and can't do. They have a letter of authorization and they have a list of contacts who can verify they are working legally - unless you are in Dallas County, Iowa, it seems.

In this case, she did not get authorization, she did it off her own hat, bypassed the IT department and didn't inform her superiors that she was performing an illegitimate analysis of the PC and the court network. That would be a sacking offence here.

big_D Silver badge

Re: Jeez

You are partially correct, but she should have approached the IT department in the first instance and when there was no satisfaction, then she should have gained authorization to perform her own investigation. Covering her arse.

As a judge, she should have known that.

big_D Silver badge

Re: "Her computer"?

I agree with the first sentence, not with the second.

Surely there was an IT department, and they would be responsible, in the first instance, for searching the PC for spyware? And they would have to be informed, before she or her gumshoe, put any unauthorized hardware or software on the network.

Certainly she would have been dismissed and prosecuted, had she tried that at my employer.

big_D Silver badge

Re: Nuance

On the other hand, it isn't her PC or her network, it is a PC provided by the court/county/state and she probably has no right to do such an investigation on her own.

Certainly here, it would come under the equivalent of the UK Computer Misuse Act, if an employee started using Wireshark or any unathorized hardware or software in our company network or on company devices.

Surely her first stop should have been the court's IT department. They should be capable of scanning the device for spyware. If not, they would be able to authorize an external specialist.

It seems naive of her to have got her own investigator in, without informing those responsible for the PC and the network. Certainly here, she'd have been out on her tail, if she had tried something like that.

Microsoft has made a Surface slab that mere mortals can dismantle

big_D Silver badge

Re: Oh dear

It depends, a lot of servers today are virtual. You have dozens of virtual servers running on a hypervisor (VMWare ESXi, Microsoft HyperV, KVM, Xen etc.). For that you need a fairly meaty server and ARM just isn't there, with the raw power, yet - at least not in numbers, there are a couple of manufacturers making big ARM server chips, but they are up against AMD Epyc and Intel Xeon Platinum designs.

I have a Rasberry Pi at home running as a DNS server, but apart from that, I haven't seen a bare metal server in several years.

At work we currently have a 3-way VMWare cluster at each site running all the servers we need on top.

Hosting is often the same, dozens of clients running on one physical server.

I think it will come, eventually, but at the moment it is still niche, because of the power/performance ratio. If you need a low powered, dedicated server, there are some options, but for most businesses, they want the most bang they can get for their money.

big_D Silver badge

Re: Oh dear

It is a chicken and egg situation.

The PC is a new generation of ARM Windows PCs, but it needs ARM software. Until ARM software starts appearing, running Intel software under emulation is going to be a disappointment.

I.e. the testers are "doing it wrong", to paraphrase Apple. But until common applications start to appear, they can't really do it right.

When the IT department speaks, users listen. Or face the consequences

big_D Silver badge

Re: Desktop or Laptop?

It still have 2 original Intellimouse Explorers from the turn of the century at home in my cupboard. Great mice. I used to use one with my Surface Pro 3.

I currently have a Logi MX Master 2 as my day-to-day mouse, but the Intellimice are great.

big_D Silver badge

Hats off to Phillippe! Oh I wish I could do the same

I do do the same. :-D

big_D Silver badge

Re: Beautiful

It is the same one I implement today. 2 years ago, at a previous company, a user got a virus on her machine that encrypted the bootsector. We removed the drive, quarantined it and put a new drive in the laptop and rolled out a new, standard image.

The user had been told many times that the company policy was that all files had to be stored on the network and any local files would be lost in the event of a disaster.

So she just had to suck ít up and live with the fact that any files she hadn't saved on the file server were gone.

Sure, we made your Wi-Fi routers phone home with telemetry, says Ubiquiti. What of it?

big_D Silver badge

Re: at least they admit it

I don't say they don't have any blame. In fact, I think it stinks. But at least they are reacting quickly to the problem, which a lot of companies don't do.

I'm not giving them a pass, especially as a customer, I am not happy at all with the situation. But at least I have a workaround to deal with the problem.

big_D Silver badge

Re: I have been removing these for a while now for other reasons

I put them in at home, because I had given up on trying other domestic mesh solutions, which have pants throughput. I had tried 2 or 3 different solutions, none got over 50mbps mesh link over the 10M between the base station and the APs (all current 1.5gbps AC kit).

I had had good experience with Unifi at a previous employer and like the configuration controller. With the Unifi mesh, I get around 110mbps over the same distance. Not brilliant, but better than the domestic stuff. It also adds full VLAN support into the mix, which is a great bonus.

big_D Silver badge

Re: A lot of pissed-off people

I installed a USG and 2 APs about 3 weeks ago at home. Very happy, apart from this bit.

I've used them in the past and we have 2 large crates of Unifi gear at work, which needs to be installed...

With the relevant block as suggested by Ubiquiti (see my other post), there shouldn't be a problem.

They screwed up by not making it opt-in and not clearly informing people. But at least they are reacting responsibly. I'll blacklist the trace.svc.ui.com address in my DNS server and on my USG, that should deal with the problem, for now.

big_D Silver badge

Re: A lot of pissed-off people

They will be making it opt-in and they have released a workaround for those affected, which is in the link in the article, although El Reg didn't mention it and just mentioned blocking all IPs for Ubiquiti...

If you do not wish to participate/provide this data, we will add an opt-out button in upcoming versions that will make it easy to opt-out of providing this data. In the meantime, you can block traffic from UniFi devices to trace.svc.ui.com.

big_D Silver badge

Re: another workaround to this

The blog piece linked to in the Register article states:

If you do not wish to participate/provide this data, we will add an opt-out button in upcoming versions that will make it easy to opt-out of providing this data. In the meantime, you can block traffic from UniFi devices to trace.svc.ui.com.

A bit late, but at least they admit it and have a workaround until the new update is released - more than can be said of Microsoft and its Windows 10 telemetry.

Europe to straggle Japan, China, US and Korea in 5G adoption stakes

big_D Silver badge

Re: Lag Behind?

You are lucky. On a good day, I get Edge at work, on a normal day, under 200 bytes/second.

big_D Silver badge

Re: I still don't understand

Exactly. I'd rather the networks would get around to finishing the upgrade to 3G, then 4G, before dumping them for 5G.

In Germany there is something like 1,500 "not-spots", where there is no coverage, not even for calls to emergency services. On top of that there are still big holes in the 4G coverage. I'm on Vodafone and at work I get 2G coverage with under 200 bytes per second throughput - so slow the Vodafone Speedtest app claims there is no data signal to test.

Given that Vodafone sold me the contract with the promise of "up to 500MB/s", 200 bytes is several orders of magnitude behind what I am supposed to get!

I'd rather the networks get their acts together and deliver what they have already sold, before looking to the next generation. It was the same going from 2G to 3G.

big_D Silver badge

Re: Europe to straggle

Fairphone, which is Dutch, I believe.

Morrisons tells top court it's not liable for staffer who nicked payroll data of 100,000 employees

big_D Silver badge
Coat

Today Morrisons, tomorrow the Pentagon...

I know jurisdiction gets in the way... But if Morrisons lose, could the Pentagon be held liable for Wikileaks Pentagon Papers and the NSA for Snowden?

Dough! Jobs microsite for UK's data watchdog set hundreds of cookies without visitors' consent

big_D Silver badge
Facepalm

Sounds like the IT bods from ICANN have found a new position...

Remember the Uber self-driving car that killed a woman crossing the street? The AI had no clue about jaywalkers

big_D Silver badge

Re: remember the initial status of a new object is "static"

Agreed. The protocol is a complete head-slapper of incompetence.

big_D Silver badge

Re: Surely

Oh no, not again.

big_D Silver badge

Re: Don't forget the orientation

It does need the classification at some point. More important is the movement. Is it moving to intercept our path? If you know it is going to cross your path, you have to prioritise its classification. But you don't keep deleting the knowledge that you are going to collide with it, if you change it classification, which is what the Uber software seems to do.

big_D Silver badge

Re: Reasonable defaults

You would have thought so, wouldn't you... But the protocol in the article definitely says "static" is the default condition.

big_D Silver badge

Re: Surely

I used "usually" for brevity. It is the initialisation of the object "car" or "bike", it would assume at the time of creation that, if it isn't side on, that it will stay in its lane, until it starts getting movement data - remember the initial status of a new object is "static", so a new vehicle object spotted in the next lane is assumed, by the model, to be moving in that lane, until its movement history indicates otherwise.

Unfortunately, deleting the movement history every 1/10th of a second isn't going to help get it right!