* Posts by big_D

6775 publicly visible posts • joined 27 Nov 2009

Alexa, can you tell me how many Chinese kids were forced into working nights to build this unit?

big_D Silver badge

Children?

Where I come from, the examples would be young adults, not children.

It is shocking, what they have to go through, and how the teachers are involved. I don't think the title needs kids in it, as such it comes over as misleading, for me, kids are under 13 years of age, after that, they are teenagers and, for the examples given, young adults.

Reading the article, I was thinking, "yes, that's bad, but where are the examples with kids?"

I wonder what the teachers and school would do if all of the students quit at the same time... Foxconn also needs to feel the consequence of their actions. They are ruining the lives and the chances of the students involved. They really should be taken to task for damaging the future economy for a short sighted, short term gain.

Chap uncovers privilege escalation vuln in Steam only to be told by Valve that bug 'not applicable'

big_D Silver badge

Re: Running a gaming PC without local admin rights is frustrating

That was the case with the Windows 3/9x code base, but Windows NT was built with user rights from the ground up.

Sloppy programming practices and people learning to code on Windows 9x and never learning to do it "properly" resulted in most users having administrator accounts up until XP days. Since then, most programmers have learnt how to code correctly and use access rights.

Talk about unintended consequences: GDPR is an identity thief's dream ticket to Europeans' data

big_D Silver badge

Agreed, these companies would be in breach of GDPR if they provided this information, without formally verifying the requesters identity.

A PostIdent (Postal identity verification), in Germany, for example would be a good way of confirming the identity. The person requesting goes to a post office, provides their identity card or passport and their ID will be validated by the Post and they send the confirmation to the requester.

How powerful are Russian hackers? One new law could transform global crime operations

big_D Silver badge

What about them?

Russia will have its own, as they do now, and when they they close the shutters, it is only their own domains that are important anyway. That is the whole point, although international big business might see it another way, when they can't contact their office on the other side of the firewall...

Brit couch potatoes increasingly switching off telly boxes in favour of YouTube and Netflix

big_D Silver badge

Re: Brilliant?

Thanks for the correct.

Too long not in an English speaking land. Here it is Kolumbien...

big_D Silver badge

Re: Brilliant?

I'm sort of glad that Grand Tour is finished. The first couple of episodes were reasonably good. But they just kept re-hashing the same old jokes - sabotaging each other's vehicles, doing stupid things, where you could see the punchline before they even started with the joke.

The last season was pretty embarrassing. It took me ages to actually get through it, because I'd start with an episode, find it too banal, them come back to it a couple of weeks later, watch another 10 minutes and so on.

The Jim Clark episode was a real highlight. Wheelspinning through a vegetable garden, not so much... The Columbia episode could have been great, but it was just rehashed kindergarten idiocy with some breathtaking scenery.

US court nixes Google's $5.5m court payoff over Safari Workaround – no one affected saw cash

big_D Silver badge

Re: Good

This wasn't a fine, this was a settlement in a civil suit. The money should go to those bringing the case, plus their lawyers... Or, more usually, the lawyers grab the lions share and those affected get a fraction of a cent on the dollar.

big_D Silver badge

Re: Fck Google

They are probably looking to see if they can write the fine down as a charitable donation!

Neuroscientist used brainhack. It's super effective! Oh, and disturbingly easy

big_D Silver badge
Boffin

Re: Sod it, wheres my datajack?

I always found the concept of microsofts fascinating, both tempting and repelling at the same time.

Funny, I was just reading Neuromancer again the other week.

I'm jacked in... I'm jacked in...

There's fraud, and then there's backdoor routers, fenced logins, malware, and bribing AT&T staff seven figures to unlock 2m phones

big_D Silver badge

But bribery, theft, computer misuse etc. are.

big_D Silver badge

Re: Deliberate greed

You are not obliged to pay the monthly lease, if the credentials are stolen... Or if the phone is stolen - AT&T should then put the IMEI on the blocked list, but most carriers ignore this.

Over here, the carrier can lock the phone to their network for the duration of the lease purchase. When that runs out, they either have to automatically unlock it or unlock it for free upon request.

That said, most people I know buy the phone outright from a discounter, like Amazon, Alternate etc. or a local electronics shot, nowadays and just stick their SIM in it. Company phones are about the only ones I know that are still on contract (although I know a couple of companies that now buy phones in bulk and issue them to their employees and get SIM only contracts. The days of heavily subsidised phones are long gone, here.

BOFH: Oh, go on, let's flush all that legacy tech down the toilet

big_D Silver badge
Flame

Re: Sounds like...

That will be ten quid, sir.

Burning it isn't free, but better than putting it through the shredder... Security, you know.

Class-action sueball flung at Capital One and GitHub over theft of 106 million folks' details

big_D Silver badge

Re: Chuck it all at the wall and see what sticks...

Yes, GitHub is a repository, the code there is uploaded by users. I'd be very upset if they randomly started deleting my code, just because it might look like exploit code.

And, according to the news, the "information" on GitHub was demonstration code on how to compromise the bucket, not data from the bucket.

When GitHub was informed that they had exploit code, they checked it and removed it from the repository. I don't see that they could do more.

I miss him already, says judge as Mike Lynch's court marathon ends

big_D Silver badge

Re: Thinking of the poor children ..

And, I seem to remember from one of the first trial reports, that Mad Leo signed off on the purchase before the auditors had a chance to file their completed audit reports.

It's Black Hat and DEF CON in Vegas this week. And yup, you know what that means. Hotel room searches for guns

big_D Silver badge

Re: Why Las Vageas

Yeah, that was my thought as well. Hackers being arrested, people barging into room unannounced... It certainly isn't a place I'd want to visit.

big_D Silver badge

Re: Oh America

Yeah, I was watching the news last night and there was a report on the Dayton mass shooting, the 250th this frigging year!!!

Looking at the statistics for 1999 to 2016, there were around 13 incidents of mass killings in Germany

Y2K, Windows NT4 Server and Notes. It's a 1990s Who, Me? special

big_D Silver badge
Coffee/keyboard

Re: DEC Engineer

Not enough coffee, it went whoosh for a couple of seconds, then I wished I still had my old orange and black VAX to clean my keyboard.

big_D Silver badge

Re: Shutting down the wrong server

We do this for every device we send out, servers, SANs, tape drives, NAS, PCs, laptops, monitors, printers, smartphones. They also get the asset tracking number and the Redmine ticket number with the devices configuration information.

Those that have a static IP-address also get a label with that.

big_D Silver badge

DEC Engineer

I've given this story here before...

But we had a DEC engineer turn out to upgrade a VAX 11/780, one of about half a dozen in the computer room on that floor (there were two floors full of VAX hardware).

He turned up, all the jobs and users were shunted across to the next machine in the line, the ops shut it down and the power off message appeared.

The DEC engineer went behind the wall of hardware that was the VAX and threw the power switch on the wall... It became quieter.

For a moment, as he re-appeared, the ops stared at him, stared at the console saying power off, stared at the engineer. Then the screaming started. From the next VAX in the line. Yes, he had thrown the wrong breaker switch and the VAX with the extra load and users had gone bye-byes.

It's Friday lunchtime on International Beer Day. Bitter hop to it, boss'll be none the weiser

big_D Silver badge

Re: 66.5 litres = 117 pints

I probably drink less than a bottle of beer a month...

big_D Silver badge

Map...

London seems to be very big.

When I lived in the South, it was HSB, where I grew up, then, when I moved to the Southampton area, it was Ringwood Badger and a few other local ones. London Pride didn't get a look-in.

When I went on a sailing holiday in Scotland, the captain took along 2 cases of malt whiskey and a case of Kestrel (because you need something light to drink in the mornings, before the sun was over the yard arm).

Google to offer users a choice of default search engine on Android in the EU – but it's pay to play

big_D Silver badge

Re: Except Google is shite (and getting shiter)

I gave up on Google over a year ago. I mainly use Duck Duck Go, with some Bing and Ecosea for good luck.

Interestingly, Bing seems to be the worst at searching for information on Microsoft products... :-S

big_D Silver badge

Re: Except Google is shite (and getting shiter)

The best are when you are searching for support or documentation on a product. Enter "handbook for <device>" or "<device> error code 123" and the page will be littered with online shops, comparison sites, reviews of the product, you have to dig a long way down to find anything relevant to the search.

I mean, if you are searching for help on a product, especially an error code, chances are that you won't be looking to buy another one!

big_D Silver badge
Holmes

Re: Bah!

The best result would be if nobody bid and they had to take 3 random search engines each time.

big_D Silver badge
Mushroom

Re: Solution made by beancounters

You are abusing your monopoly position, stop it!

Okay, how about we let others in, but they have to pay us for the privilege?

Erm... WTF?

big_D Silver badge

Not just the browser

As a result, consumers in Europe see an option screen when they first set up an Android device offering them the chance to set the default search engine for the Chrome browser.

Isn't it also for the search bar / standard search in Android. There is also supposed to be a choice of browser, so it won't necessarily be for Chrome, either.

Our hero returns home £500 richer thanks to senior dev's appalling security hygiene

big_D Silver badge
Angel

Re: Ahhh passwords...

When I left one of my jobs, my replacement Skyped me a couple of months later, thanking me for the thorough documentation I had produced...

big_D Silver badge

Re: Ahhh passwords...

Plaintext or encrypted. Hashing, as you rightly surmise wouldn't work.

big_D Silver badge

Re: Ahhh passwords...

I started work at one company, as their first IT Manager. Until that point, they had had external contractors running their IT. This was a company with a couple of hundred employee, working on 3 sites.

When I started, the first thing to do, was to change the administrator password - but the accountant didn't want that, because all the wanna-be admins wouldn't then be able to log on! Then there was the user passwords. The consultant had set everybody's passwords to "12345" and they couldn't change them "for ease of support."

I then checked around the server configurations and the first thing I spotted was, that all of these user accounts with password 12345 also had Exchange mail, with OWA exposed and mobile device access open... So anybody, anywhere in the world, with the email address of an employee of the firm could log onto the web portal and give the password 12345 and they were in...

A hectic morning of going through all accounts and disabling OWA and mobile access and setting the "change password at logon" flag... Followed by wailing and gnashing of teeth and a stern word from the CEO for "disrupting" his business...

Curiously, the company went into receivership shortly thereafter...

Lyft pulls its e-bike fleet from San Francisco Bay Area after exploding batteries make them the hottest seat in town

big_D Silver badge

Re: Works for me

Or Paris... There was a report that the current fun pastime for the youth of Paris is to hurl e-Scooters and bikes into the Seine.

Omni(box)shambles? Google takes aim at worldwide web yet again

big_D Silver badge

Re: I reckon the proper term is 'institutional stupidity'

The other thing is, the DNS server is on the local network, doesn't have much load and would return the correct ip address a lot quicker than Google can return a complete search page and me click on the correct result...

big_D Silver badge

Re: I reckon the proper term is 'institutional stupidity'

The point being, Google are arguing that all the stuff around the name, like the https:// and the trailing / are irrelevant and shouldn't be shown to the user, but if the user leaves them out, it breaks.

big_D Silver badge

Re: I reckon the proper term is 'institutional stupidity'

What I really hate with the Omnibox is the way it will ignore DNS and go to the search page if you enter a local server name.

Enter myserver and you get Google.com search myserver.

Enter myserver.mydomain and you get Google.com search myserver.mydomain

Enter http(s)://myserver and you have a good chance it will actually resolve to your server.

If the http(s):// is not relevant, why won't it go to a local website when you enter just the server's name. If that name doesn't resolve, by all means display a search page, but if it resolves to a local website, display that first!

What's the last piece of software you'd expect to spy on you? Maybe your enterprise security suite? Bad news

big_D Silver badge

Re: Stop spying on me!

We have to delete all emails over 10 years old.

big_D Silver badge

Re: Stop spying on me!

For our smartphones, the policy is no third party apps, no private data on company phones and no company data on private phones.

For email, we are warned that we can use the company account for private emails, but we have to remember that in an emergency a supervisor can be given temporary access to the account to retrieve business critical emails.

That said, the company also tends to set up departmental accounts for important functions, such as purchasing, sales etc.

big_D Silver badge
Black Helicopters

Re: Stop spying on me!

Agreed. It should be defined.

And, in general, management / other employees shouldn't be able to read your email, although there may be extenuating circumstances, such as if you are long term sick or on extended leave and your emails/documents need to be checked to ensure the smooth running of the business. But, again, that needs to be defined in the IT guidelines, which you receive when starting at the company.

On the other hand, we often get paranoid users saying that they are sure management are reading their email. We then politely point out that management doesn't have enough time in the day to do that...

Or the BOFH anyswer, we could look at your emails, if we wanted to, but they are too boring for us to bother...

He's coming for your floppy: Linus Torvalds is killing off support for legacy disk drive tech

big_D Silver badge

Re: I remember floppy disks

Ah, Viglens! I remember them, we had some that were great, especially the early 386 models, then we had the 486 models and Pentiums and they were just shoddy.

I had a Compaq Deskpro 386 at the time and my colleague received a new Viglen 486 tower and was going on about how good it was... So I ran some benchmarks on it (I was in the middle of benchmarking around a dozen different laptops for our sales fleet). It turned out the processing speed was a bit quicker than my Compaq, but the Compaq ran rings around it, when it came to disk performance!

Then we had a bunch of 386DX machines in, where the jig used to align the motherboard and case was out of alignment, which meant we couldn't add the network cards, because the expansion slots didn't line up with the openings in the case!

big_D Silver badge
Pint

Re: I remember floppy disks

You might well be right, it was a long time ago.

big_D Silver badge

I was working on one project, doing OLAP with Essbase in the late 90s. I had just bought a new PC at home a Pentium II/400 with 16MB RAM.

At work we had an HP ProLiant server with dual Pentium Pro processors. Recalculating the OLAP cube on that took over 4 hours. In the end, it was quicker to export the bottom row data, save it to a ZIP disk, drive an hour home, load it up on my machine, re-calculate the data, export everything, drive back to the office and re-load the cube!

The Zip disk proved very useful, and I luckily never suffered from the click-of-death with my drives (external parallel and internal IDE)

big_D Silver badge

Re: I remember floppy disks

I had an A500 + A590, with the memory also installed. I used to "borrow" SCSI drives from the Macs at work, just to see how quick they would make things. I kept one at home, until someone new came along and the old Mac Plus was assigned to them and I had to take the drive back.

I then got an A1200 - I wanted a 4000, but just couldn't afford it/justify the price.

big_D Silver badge

Re: I remember floppy disks

Dragon's Lair came on half a dozen or so floppies on the Amiga. At my local computer store, in Southampton, the dealer set up an A500 with 5 external drives daisy-chained together, so you could play "uninterrupted", if you call waiting 10 seconds+ for the next scene to load uninterrupted - but at least you weren't constantly swapping floppies.

big_D Silver badge

Re: I remember floppy disks

I remember installing the Windows 95 beta from a pile of 3.5" floppies!

The combo 5.25"/3.5" drives were useful for their time.

I have to say, I threw away my last couple of floppy disks a few weeks ago, when cleaning out the cupboards. I don't think I've actually used a floppy disk for nearly 20 years.

People of Britain: You know that you're not locked into using the same ISP forever, right?

big_D Silver badge

Re: Sometimes simply the devil you know

With Amazon Prime and the media libraries for the various TV channels, we get through over 500GB most months.

big_D Silver badge

Re: move to a better deal

When I moved to Germany, I automatically went to Telekom, it was pretty much the only choice back in 2002. I had a standard ISDN with ADSL package, with 2mbps. I stuck with that for about a decade. Then, after moving, I found out my local telco could offer me 50mbps for the same price.

After being a customer for over a decade, I went back to Telekom and asked them what they could offer. The answer was 3mbps + satellite TV!

I had luck, the local telco had run their own cables throughout the town. In the meantime, I could also switch to cable, but they have repeatedly, falsely accused my wife of watching illegal cable TV (she had freeview satellite), so she won't let them anywhere near the house.

Hack a small airplane? Yes, we CAN (bus) – once we physically break into one, get at its wiring, plug in evil kit...

big_D Silver badge

Who needs to be in the aircraft, when it is flying? This would be something you could rig-up, when the plane is left unattended at an airfield. You set it up and walk off. It is only after the plane is flying that the box would become active and cause havoc.

big_D Silver badge

Re: Physical Access

I agree with you, in principal. But, if you are looking to sabotage an aircraft, it provides more ways that will be harder to discover - such as nothing to see in pre-flight or even an inspection, but hide a black box that starts working after an hour of flight, above a certain altitude or at specific coordindate and it is much more difficult to spot, until it is too late.

Again, this is only for a very serious case of sabotage, this isn't hi-jinx or fun and normal sabotage will be easier to carry out, although more easily spotted before it is too late.

big_D Silver badge

Re: Physical Access

Given that security at many small airfields is poor to non-existent, I would say this is a relatively easy hack to perform. And judging by reality-TV like the aircraft repo series, getting onto a guarded airfield and flying away isn't all that difficult either.

What the hack allows is for the "easy" fixing of an aircraft to sabotage it. If you mess with the wings, fuel, flaps, fuel in the oil etc. you can cause it problems, but they could be discovered in pre-flight. Hide a small black box attached to the CAN bus that has a 30 minute or hour delay, before it becomes active and you have a much better chance. Make it radio controlled and you can change things on the fly.

Hacker swipes personal deets of 20,000 peeps from under Los Angeles Police Dept's nose

big_D Silver badge

That was my first thought as well. Exposing details of undercover officers to organized crime would be a lot more harmful that pure identity theft.