* Posts by big_D

6775 publicly visible posts • joined 27 Nov 2009

Not a good look, Google: Pixel 4 mobes can be face-unlocked even if you're asleep... or dead?

big_D Silver badge

On the other hand, fingerprint readers have allegedly been used on dead people to unlock phones in the past, likewise if you are asleep, someone could press the reader against your finger. If you are a deep sleeper, you wouldn't notice.

Think your VMware snapshots are all good? Guess again if you're on Windows Server 2019

big_D Silver badge

Re: Backups

I agree with you in part. But on the other hand good backups are important and not that expensive, in context.

Veeam, as mentioned in the article, is fairly cheap, compared to the outlay for VMWare licenses, Windows Data Center licenses and the hardware. We use a two-stage backup, the VMs are backed up to a NAS and the NAS is backed up to external drives which are swapped out daily and stored off-site. All-in-all, the backup solution probably costs less than 10% of the total cost of the VMWare infrastructure.

At home I snapshot my VMs, copy them onto spinning rust, which in turn is synced to a NAS and backed up to Carbonite, along with all my important data.

Hundreds charged in internet's biggest child-abuse swap-shop site bust: IP addy leak led cops to sys-op's home

big_D Silver badge

Re: Fair play to the authorities

Blaming TOR is like blaming the Internet, telephones and post for the distribution of illegal material.

TOR has its place, and, as you rightly say, it was an American Government/Military project with the goal of hiding communications for good reasons. Like any other technology, it can be misused.

Well, well, well. Fancy that. UK.gov shelves planned pr0n block

big_D Silver badge

Re: No. Parenting is not about relying on devices.

I agree, up to a point. The talk must take place, but putting in a filter that does away with such sites, for all users or specific devices is a good secondary measure.

I have a Raspi with Pi-Hole installed, which blocks malware, tracking and porn sites, oh, and all 1500 Facebook domains. It doesn't bother me, I never visited such sites anyway, so I left the option activated. Apart from the Raspi, it is a free service (donation-ware).

Stopping access to unwanted domains, as well as having the discussion is a good two-step way of ensuring they are not accidentally exposed. Even if they "know" not to go to pr0n sites, there is always the possibility that they accidentally click on a link.

Obviously that only helps at home, but there again, they probably shouldn't be surfing alone at that stage anyway. Once they are "young adults", some form of trust has to exist. If the discussions are open, the filters can be gradually relaxed as they grow up - gradually whitelisting a few "verified" sites, for example and viewing them together and discussing what they see. Then, when they are ready for their own device, they already have a healthy understanding of what is right and wrong and what is acceptable.

We're free in 3... 2... 1! Amazon unhooks its last Oracle database, nothing breaks and life goes on

big_D Silver badge

Re: Unlike Aurora

Which is compatible with MySQL/Maria DB and PostgreSQL.

A spot of after-hours business email does you good, apparently

big_D Silver badge

And as the MD of Hoskyns (now Cap Gemini) used to say, if you have to do overtime (and checking your emails outside of office hours is overtime), you boss has screwed up.

Obviously there are exceptions, like a go-live or an upgrade/maintenance that can only be carried out when nobody is using the system.

big_D Silver badge

Employer...

I think it also has something to do with the employer and whether they expect people to work outside of office hours and whether those working outside of office hours are praised or told to get a life...

At a previous company, the workers turned up at 8, the boss between 10 and 11 and he worked through until 6 or 7 in the evening. Anybody, especially management, leaving before him was a slacker... He also expected 24/7 availability for all workers. I had real problems, because my wife said no smartphone upstairs, let alone in the bedroom, in the end, I just left the phone downstairs.

My last couple of jobs have been much better. There is no out-of-hours support. There is no need to read email out of office hours. And you definitely better not get caught reading (or replying) to emails if you are on leave!

The company philosophy is that life is there to be lived, so don't waste your free time worrying about work. I still find that difficult after the previous job above, but I am feeling much better about myself, more relaxed and more able to look after my private life.

Hands off our phones, says Google: Radar-gesture-sensing Pixel 4 just $999 with a 3-year lifespan – great value!

big_D Silver badge

Re: Stop it Reg!

I do, however, give them kudos for saying 13mm thick, as it is a measurement of thickness, and not 13mm thin, like many sites.

big_D Silver badge
Paris Hilton

6GB?

Why are they being so stingey with RAM? My current phone is 3 generations old and has 8GB RAM...

Apple insists it's totally not doing that thing it wasn't accused of: We're not handing over Safari URLs to Tencent – just people's IP addresses

big_D Silver badge

Re: This is a non-story

No, the hashed information, on its own, is fine. It is when that is combined with PII (in this case the originating IP address). That is why Apple, acting as an intermediary and just passing on the hash and not the users IP address would be in compliance.

The IP address is required. That is why the site the user visits can have it. They just can't store it or pass it on to third parties without the express permission of the user. That is why the whole web advertising model is currently up in the air.

big_D Silver badge

Re: This is a non-story

Yes and no, sending the information to Google is also not allowed, under GDPR, in Europe without an explicit opt-in from the user. If this is a default setting and it wasn't explicitly stated, when activating, what the data will be sent to Google, it would contravene GDPR.

If Apple acted as an intermediary, that would solve the problem as they are not passing on PII to a third party without explicit permission.

big_D Silver badge

Re: "the actual URL of a website you visit is never shared with a safe browsing provider"

Who is to say that the source database doesn't also have the original, unhashed URL, in full? And all sites, whether malicious or not are stored and it only returns information on malicious sites?

big_D Silver badge

Yes and no. As long as the DNS server doesn't log your IP address, that is fine.

If the IP address is stored, for example in a log file or a database, that would contravene GDPR.

There might be a get-out for ISPs, if it is in the T&Cs that customers sign when they get broadband, but it wouldn't cover 3rd party DNS servers, such as Google, Cloudflare etc.

big_D Silver badge

Re: It is...?

IP address, for a start. That is classified as user identifiable data under GDPR.

Even website log files have to anonymise the IP address, in theory.

Welcome to the World Of Tomorrow, where fridges suffer certificate errors. Just like everything else

big_D Silver badge

Yep, we put most of the supplies in the cellar, where it is cool and dark, but not fridge cold.

Then potatoes and onions, for example, live in earthenware pots with a cloth draped over the top under the worktop.

big_D Silver badge

It is the same with any "IoT" white good. The white goods should last a couple of decades, but you'll be lucky if the IoT side of the device is still getting security updates after 2 years...

I refuse to buy anything with IoT built in. If I'm going to "IoT" it, I'll buy a good quality, non-intelligent device and couple it with a dedicated IoT device that can be swapped out, cheaply, when its time has come.

E.g. a good TV and then something like a FireTV or a Raspi for media playback.

I don't need an intelligent fridge, dishwasher or washing machine. I still have to fill the washing machine with laundry and put in the washing powder. If I do that, I can start it - or set the inbuilt timer to start so that it will be finished when I get back home to hang the stuff out.

big_D Silver badge
Coat

64-bit

If this hack's elderly fridge was forced to count the calories contained within, we're pretty sure the subsequent numeric overflow would make a missing certificate seem minor in comparison.

That's the problem when you only have 64-bits to play with. :-P

How do we stop filling the oceans with Lego? By being a BaaS-tard, toy maker suggests

big_D Silver badge

Re: Lego is heirloom material

I think the last house I had in the UK probably had Queen Truss. My current German house seems to have a King Truss construction - single pillars in the middle of the space.

big_D Silver badge

Re: Lego is heirloom material

Yes, I lived in a modern building in Bavaria and it had a loft/attic. Our house has one as well.

My nephew built a new house this year and that has a very big loft/attic.

big_D Silver badge

Exactly. As a kid, I had a big box of Lego, it had stuff from the early 60s through to the 70s and early 80s, by the time I grew out of it and it was passed on to my cousin's kids.

The same for my wife, we have a big Ikea tub full of Lego, that her kids played with, in the loft, which is going to go to our grandchildren.

I don't think there is any problem with using plastic on products which will be used for decades. It is using plastic in product packaging and disposable products that is the problem. We use re-usable nets for fruit and vegetable, we take containers to the supermarket for fresh meat and cheese and we use cotton or hemp bags or a wicker basket for carrying the shopping. We also avoid products with excessive packaging, where possible.

Microsoft Teams: The good, the bad, and the ugly

big_D Silver badge

Re: Facts and figures or forced feeding

It is malware. We have it deactivated at all levels and it still autonomously installs itself on all our PCs.

big_D Silver badge

Maifest...

We have it as part of Microsoft 365, but it is disabled in the management portal, it is disabled for each user and the installation manifest says Teams shouldn't be installed...

Last month, it suddenly appeared on all PCs in the organisation! De-installing it didn't help, at next boot, it was installed again! In the end, we blacklisted the installer .exe and the client app in our AV software.

Lies, damn lies, and KPIs: Let's not fix the formula until we have someone else to blame

big_D Silver badge

Because that is how such things always turn out.

Best practices and good intentions have nothing to do with reality.

Oh dear... AI models used to flag hate speech online are, er, racist against black people

big_D Silver badge

Dialects always have. Maybe AAE is a general over-classification for local ethnic dialects.

Manc, Cockney, Brum, Scouse, Hessisch, Platt, Schwäbisch Bayerisch etc. there are thousands of dialects around the world that have the same problems, they aren't official languages, they don't have spelling checkers etc. in software and, whilst recognised, they aren't official languages.

big_D Silver badge

Thanks for that. I knew there should be a direct translation, but I couldn't think of it as I was posting.

big_D Silver badge

Re: “I saw his ass yesterday”

That is a big part of the problem. The other problem is how do you differentiate between AAE posted by an African American and a piece of racist text not posted by an African American, when all you have to go on is the text, and possibly a nondescript pseudonym?

big_D Silver badge

The problem is, those words in AAE that are acceptable are derogatory or racial slurs in standard English.

The text being provided to the AI has no way of declaring itself as being AAE instead of English, so the AI can only apply English rules.

And even if the AI says that "hey nigga" could, in all probability, be AAE, how does it know, from 9 ASCII characters, whether an African American posted it or not?

Dialects are too diverse and specialized to be able to differentiate in a few characters. You need the identity of the person saying it - and given Twitter's ability to disguise your real identity, it is a Sisyphus Arbeit (German, never-ending job).

big_D Silver badge

This has nothing to do with the race of the programmers.

This has to do with language detection, English is an official language, AAE is a dialect that the user posting the message can't declare in Twitter settings, so the AI can only treat it as English, or let all racial slurs slide, because it could be AAE...

big_D Silver badge

Re: Is anyone surprised ? Really ?

And AAE isn't an official dialect that you can select in most spellcheckers. It would fall under American English and therefore fall under those rules. Unless Twitter lets you define your input language as African American English (and that is a flag that is passed to the AI), it can only look at the sentence, work out it is English and work out whether it is profane.

big_D Silver badge

Re: “I saw his ass yesterday”

And I haven't seen a setting in Twitter that lets me define what language I am posting in - I post in Germany a (British) English.

If AAE is not an official language and if the text isn't marked as AAE, how is it supposed to differentiate between plain English and AAE? The only thing you can do is try and recognise the base language and then flag any derogatory or racial words.

Given I don't live in America, the whole topic of AAE was new to me, upon reading this post.

Not a death spiral, I'm trapped in a closed loop of customer experience

big_D Silver badge

Re: This requirement for paper bills/statements...

It is a legal document. If you move, you must register your new address. Failure to do so is a criminal offense.

big_D Silver badge

Re: This requirement for paper bills/statements...

Full address is on the rear of the card.

big_D Silver badge

Re: This requirement for paper bills/statements...

In Germany, it is a proof of identity and residence.

big_D Silver badge

Re: This requirement for paper bills/statements...

I finally got my ID card a few months back, after 18 years of living in Germany. Now I only have to carry around my ID card, not my passport and proof of residence (the benefits of dual nationality).

The ID card is very useful when collecting parcels or signing up for new contracts, utility changes etc. No fuss, no muss.

big_D Silver badge

Re: This requirement for paper bills/statements...

That is one of the things I like about Germany. When you move, you go down to the council offices, with your ID card (or passport for foreigners), a copy of the rental agreement or sale contract and register yourself at the new address.

You get a piece of paper with your name, new address, an official council stamp and a signature. You ID card will be re-issued with the new address, but until that time, the piece of paper + old ID card are enough evidence for all concerned.

Kiss my ASCII, Microsoft – we've got one million fewer daily active users than you, boasts Slack

big_D Silver badge

Re: I use Slack, but I'm not an Office 365 user

We aren't allowed to use Skype either.

big_D Silver badge

Re: I use Slack, but I'm not an Office 365 user

We are an Office 365 (well, Microsoft 365) customer, but we don't use Teams - we don't use Slack either.

At my previous employer, they had their own private Jabber server. They were a security company and no confidential communications or data storage was allowed over cloud services.

The safest place to save your files is somewhere nobody will ever look

big_D Silver badge

Re: Been there. Done that.

I had one user, she judiciously saved her document, before printing it and starting on the next one...

Only process was: Type text into "Document1", save, print, select all text, delete text, type new text, save "Document1", rinse and repeat... Then surprise, when she couldn't find all of her text, because she had saved each document!

Thankfully she had printed everything. But it was still a painful learning experience.

Europe publishes 5G risk assessment; America scrawls ‘Huawei’ on the side of a nuke and goes for a ride

big_D Silver badge

Re: China?

Exactly. The report essentially says that, to be safe, we should only buy equipment from Nokia and Ericsson, and then only when 100% of the supply chain is within the EU.

No parts from China and no parts from the USA. But that doesn't have the same ring for Americans as Huawei bad, USA good.

That lithium-ion battery in your phone or car? It has just won three chemists the Nobel Prize

big_D Silver badge
Joke

Re: Goodenough is still working

Going by his name, I thought he'd now be resting on his laurels. ;-)

Talk about a calculated RISC: If you think you can do a better job than Arm at designing CPUs, now's your chance

big_D Silver badge

Re: "I did not know that ARM actually prohibited adding instructions"

The point of a CPU ID check is to ensure that you never get into the SIGILL situation in the first place. The executing code looks to see if the instructions are supported and if so, it uses them, otherwise it will have to use a software emulation library, using standard ARM instructions, or exit gracefully.

Nix to the mix: Chrome to block passive HTTP content swirled into HTTPS pages

big_D Silver badge
Holmes

Privacy issue...

Even if the attacker doesn't alter the content of your site, you still have a large privacy issue

Yes, that would be Chrome.

Euro ISP club: Sure, weaken encryption. It'll only undermine security for everyone, morons

big_D Silver badge

Re: Simpler

And the reason why warrantless tapping in any civilized country is illegal.

big_D Silver badge

Re: Simpler

Also, AFAIK, that only goes for things in their head. If it is stored on a device, then they can get access - assuming it is fingerprint or face recog. locked. If they have to enter a password, they are safe.

big_D Silver badge

Re: Simpler

I don't live in America, so it isn't my problem. My data being p4wn3d by hackers because of backdoors and poor encryption is.

big_D Silver badge

Simpler

This situation is simpler. The user has the keys, the user is being investigated, so the judge only has to sign off that the user has to hand over their keys...

Heavy data protection regulation looms in Labour plans for post-Brexit flows and IoT devices

big_D Silver badge

Re: Whatever the future of IoT and/or data regulation

It is also a statement to the companies that if they get in power, those anonymous brown envelopes better be a fatter than last year.

big_D Silver badge

Re: There is an issue with IT...

That is the problem, we've spent so long looking for the cheapest possible deal, that many have lost sight of what really matters and that quality has its price. The only expensive things these days are brand labels, the quality often isn't any better than the non-branded products and is often made in the same factories, but because of the name, people are willing to pay 3 - 4 times as much.

But actually give them a quality product at a quality price, but doesn't have some hip brand stuck on it and people will baulk and not pay. We don't buy things that we expect to last 20 or 30 years any more, because next year the colour will be unfashionable, so we buy the "next" model, with the "next" colour, even though it isn't really any different to what we already have.

We need to take a step back and actually look at what we are doing and make informed decisions... But it won't happen. Because people have short Ooooh, shiny!

big_D Silver badge

Re: "compared the rise of the IoT to the Industrial Revolution"

Call me an IT professional Luddite.

I've worked long enough in IT to spurn IoT in its current form.

Maybe I should change my name to Butler and start a Jihad against the machines. /Frank Herbert.

Android dev complains of 'Orwellian' treatment as account banned after 6 years on Play store

big_D Silver badge

Google is always right; so they don't have to listen.

It is incredibly hard to get in contact with Google if they affect you. When we got DOSed, it was quicker and easier to change our external IP address than to get Google to sort out their server!