* Posts by Velv

2756 publicly visible posts • joined 21 Jan 2010

Facebook flat-out 'lies' about how many people can see its ads – lawsuit

Velv
Gimp

The irony of Advertisers complaining about someone massaging the figures is just delicious.

DXC Technology asks field-based techies if they'd like to leave

Velv
Childcatcher

And there was me thinking DXC (and its predecessors CSC and HPE) redundancy programmes were pretty much like sales at DFS - a new one comes along every month.

Bitcoin backer sues AT&T for $240m over stolen cryptocurrency

Velv

Re: One thing I don't get though...

The trouble with using mobile numbers as 2FA...

is that the mobile number is used as the out of band communication for ANY verification.

1. Criminal gains control of mobile number.

2. Criminal goes to website and clicks “forgot password”

3. Website sends out of band password confirmation to mobile number to verify person requesting password reset is the person on record.

4. Criminal receives request on mobile number and confirms they requested the password reset.

5. Criminal logs on with new password

6.Website sends out of band logon verification to mobile number

7.Criminal receives request on mobile number and confirms they requested the logon

UK chip and PIN readers fall ill: Don't switch off that terminal!

Velv
Headmaster

Re: Whaaattt? Turning it off and on again is not allowed???

"88.6% of all statistics are made up on the spot" (Vic Reeves)

Hackers manage – just – to turn Amazon Echoes into snooping devices

Velv
Big Brother

Re: Hmm 'permanently'...

rather than require it to listen for the "wake word" before listening

Fixed it for you!

Apple pulls iOS 12 beta 7 after less than 24 hrs

Velv
Trollface

iOS 11.4.1 borked the WiFi on the 6s (and maybe others) and Apple confirmed they’re not planning on a fix until 12.

Sounds like plans for 12 are borking stuff too.

Oh what a glorious few months we’re in for...

Velv

Re: Rollback

If you backed it up to a computer before applying the OTA upgrade then yes.

No backup? That’ll be a no then.

UK taxman told: IR35 still isn't working in the public sector, and you want to take it private?

Velv

pay tax on all the rest.

They generally don’t pay NI, so taking the Employee and Employer parts that’s roughly 25% rate not paid.

I presume you also feel they don't need compensated for all the other costs (insurance, accountants), risks (laid off with little notice, for no reason or redundancy) or lost benefits (sick pay, maternity/paternity, pension, etc).

One reason contractors receive a higher rate in the first place is to cover “all the other costs” via their own limited company or their own self employment. Even taking a fair comparison adding pay and benefits value it is generally true that contractors still receive a higher rate that covers the greater risk and uncertainties.

Can we talk about the little backdoors in data center servers, please?

Velv
Boffin

Of course, data center managers aren’t stupid,

True, but how many installs are undertaken by data centre managers directed by properly architected security policies and how many are installed by “the IT guy or girl” who is already run off their feet keeping up with the latest business changes to the company technology. Substantial chance for failed configuration or open access even if only within the company network.

Android ain't done until Samsung won't run? 9.0 Pie borks Gear watch app

Velv
Coat

Is it version 9 or version 3.14, I wish they’d make these things clear!

Emma's Diary fined £140k for flogging data on over a million new mums to Labour Party

Velv
Coat

Re: ICO huh?

Perhaps the ICO could randomly contact a load of people and find out if they’ve been approached about accident claims?

Bank on it: It's either legal to port-scan someone without consent or it's not, fumes researcher

Velv
Gimp

Re: I'm not.

Fnarr. Being port probed is “wear and tear on my equipment

ZX Spectrum reboot latest: Some Vega+s arrive, Sky pulls plug, Clive drops ball

Velv
Coat

Re: Give it 10 years

Judging by the commentary in the article and elsewhere, "boxed" is a loose term

Amazon meets the incredible SHRINKING UK taxman

Velv

Re: Turkeys stage a referendum on Christmas.

Civil Service Pensions remain among the best available in the UK. They might not be what they once were, but that too can be said about almost every public and private pension scheme in the UK.

Hot US deal! IBM wins $83m from Groupon in e-commerce patent spat

Velv
Headmaster

Isn't there something about patents lapsing if you don't enforce them?

While Amazon, Facebook and Google may have paid up, how many other "marketplaces" have not had any enforcement action taken against them by IBM?

Early experiment in mass email ends with mad dash across office to unplug mail gateway

Velv
Angel

It's one of the reasons that everywhere I've worked I've reconfigured Outlook to send on a schedule and not instantly. That 10 minutes of mail sitting in the Outbox has saved a little embarrassment on more than one occasion.

No big deal... Kremlin hackers 'jumped air-gapped networks' to pwn US power utilities

Velv
Holmes

OK, does anyone here not think there are state sponsored operatives in America (or most other countries) attempting to gain access to almost every service in most other countries in the world?

You’re not going to tell me the US doesn’t have thousands of (patriotic) people who’s job is to investigate foreign entities.

Or are we only meant to believe it’s other countries that undertake such underhand and covert operations. Bad.

UK.gov commits to rip-and-replacing Blighty's wheezing internet pipes

Velv
Coat

Re: ROFL

Openreach are installing fibre up the walls of the tenements in my street as we speak, so I’m alright

Sysadmin sank IBM mainframe by going one VM too deep

Velv
Childcatcher

And the moral of the story is...

There's no such thing as a development machine, they're all "production" to somebody. The impact of breaking them may be less, but you've always got to consider who's going to be pissed if you break something.

'Fibre broadband' should mean glass wires poking into your router, reckons Brit survey

Velv
Headmaster

"last few hundred yards being served"

If you're not going to use The Register standard units of measurement (in this case, length in linguine), then at the very least you should be using the metric system and using metres. We haven't left the EU yet, y'know!

Scam alert: No, hackers don't have webcam vids of you enjoying p0rno. Don't give them any $$s

Velv
Headmaster

Re: speaking theologically of course...

“This just shows why religion is a load of old wank.”

You forgot to update the title...

Are you ready for some sueball?! NFL opens wallet, makes vid stream patent spat go away

Velv
Coat

Sounds like the NFL took a knee

Mastercard goes TITSUP in US, UK: There are some things money can't buy – like uptime

Velv
Headmaster

Re: Cash is King

You try buying a Mars bar with a £50 note

Velv
Headmaster

Re: Backups and redundancy, FFS

“They told me they could only call in the engineer if it failed completely.”

Yanks cable.

“Oops”

Velv
Boffin

With the new Open Banking regulations taking shape and banks starting to offer services there’s an opportunity for a new product here. Patent application starts here!

You have your main account with Bank A. Since Bank B is an approved Third Party Provider under Open Banking, Bank B provides you with a “contingency card” that has been validated to your account with Bank A and knows your status and ability to pay. You don’t need to keep money in Bank B, they know they’ll get it back from Bank A when everything stabilises.

Assuming they use different schemes (Visa, MasterCard, Amex, JCB, etc) then this should provide a customer contingency against 99% of all outages (Bank A card processing, scheme processing, card acquirer).

So you have to carry two cards, but they’re both ultimately linked to one account so you only have one account to maintain. And given the way cyber problems are going, outages are only going to increase...

Vodafone emits new wearable ... kid-trackers

Velv
Childcatcher

"battery that provides three days' power"

And this for me is where the major problem with these devices remains. Until there is something that can last a month+ then the usefulness is limited. Ethics? we'r all tracked by our phones today, we just can't access the data (unless you have the iCloud password).

Cops suspect Detroit fuel station was hacked before 10 drivers made off with 2.3k 'free' litres

Velv
Holmes

Re: What about switching the pump off?

Pumps in the UK have physical locks to secure the handle into the holder, or at the very least holes for padlocks.

Call me cynical, but when they track down the 10 "customers" who got free gas I'm predicting they all know the station attendant in some capacity.

Banks told: Look, your systems WILL fail. What is your backup plan?

Velv
FAIL

Re: That is not what should be regulated

@Pascal Monett there will be a bit of a mess

Do you actually understand the fundamental connectedness of everything?

More than half of the payroll in the UK starts or ends in an RBS group account. Yeah, just let them fail. Doesn’t matter that half the country doesn’t get paid this month, they don’t need to pay for food, energy, shelter, they can take their government refunded money elsewhere when it’s all fixed six months later

Northern Rock was considered “too big to fail” due to the direct impact to the day to day operations of society in the UK, and they had less than 5% of the market.

Velv
Boffin

Re: Wrong Question!!

The question is:

“What are your plans to continue in business when X, Y, Z or other things occur?”

There is no single answer.

Velv
Boffin

”UK... I don't pay any fees for banking.”

True , you don’t pay any fees.

You simply pay all your money into your account every month and the bank leverages that positive treasury position on the money you’ve lent them to play the stock marke until you need it back, at which point they give you back only what you need without any recompense for the loan you’ve made to them.

“Free”. Dream on. It’s like the “free” iPhone you get on a £50/month mobile contract.

Google Chrome update to label HTTP-only sites insecure within WEEKS

Velv
Boffin

The problem with marking sites as “Not Secure” is that the vast majority of users then assume that everything else is secure.

We know that there are varying degrees of secure. https has its vulnerabilities, it is not the answer in and of itself.

While this is on the whole a good thing, we cannot stop the messages to Joe Public to consider security.

Boffins want to stop Network Time Protocol's time-travelling exploits

Velv
Childcatcher

Re: Simply fit all computers with sundials.

You're not familiar with British weather, are you...

Micro Focus offloads Linux-wrangler SUSE for a cool $2.5bn

Velv
Boffin

Revenues of $164.4m a year and growing at 13%. OK, I know I don't fully understand business markets, that's why I'm in IT, however even if $164.4m was profits that's nearly 15 years for a return on investment.

So either the new owners know something we don't, or something smells very fishy here.

Startup bank Monzo: We warned Ticketmaster months ago of site fraud

Velv

Up to 40,000 customers could have had details stolen.

I find this number suspicious. Given the number of events Ticketmaster cover, the size of said events in terms of raw tickets, and the length of time, I’d expect the number to be substantially higher. And I’m assuming these customers don’t include the many football and rugby clubs that use tickmaster as their ticket engine, many of them can have 40,000+ tickets at one event (ok, so many customers will be buying more than one ticket, but unlikely to be in the 10s)

UK Foreign Office offers Assange a doctor if he leaves Ecuador embassy

Velv
FAIL

Disappearing

The chief WikiLeaker has always said he feared the allegations were a way of getting him into the legal clutches of a country that might turn a blind eye if he disappeared and reappeared in an American prison

Of all the countries likely to permit this to happen, I'd put Sweden lower down the list than the UK, and both below Ecuador. But hey, his fans can keep pushing the same fake news until Uncle Donald really does get hold of him. Sad.

UK taxman has amassed voice profiles of 5.1 million taxpayers

Velv

Re: So....about these recordings.....

Q division got there years ago. Diamonds Are Forevery anyone?

But seriously. Is there a deep fake available yet that can voice change as we speak?

Velv
Coat

Penalties for breach of GDPR

Up to €20,000,000, or 4% of annual turnover, whichever is higher.

HMRC Annual Report 2017, £574,000,000,000 (£574billion) total tax revenues

4% fine is £22billion

So that’s where the government is getting the extra funds for the NHS #sarcasm

Oracle's new Java SE subs: Code and support for $25/processor/month

Velv
Paris Hilton

At that price I’d be expecting real java, in a mug, every day, delivered by a cute Barista

Ailing ZX Spectrum reboot firm kicks crisis meeting into long grass

Velv
Boffin

However as the company is currently not in administration/liquidation (i.e. legally solvent) any CCJ issued has the highest chance of being enforced before any other claim against the company (not saying its great, its just greater than unCCJ'd claims). There's a good chance an £800 can be covered by some kind of asset if the High Court Enforcement officers are appointed (e.g. computers, cars, office furniture), although it's probably nearer £1,200 once the fees are added.

Once the business enters administration the claim then joins the other creditors seeking a return.

It's time for TLS 1.0 and 1.1 to die (die, die)

Velv
Childcatcher

Yeah, tough.

In the UK all cars go through an annual safety inspection (MOT, Ministry Of Transport test). If they don’t meet basic safety standards they’re not legally allowed on the road. You can still drive them (off the public road), you make your own risk assessment over how that may impact your life versus how much it will cost to fix.

Yubico snatched my login token vulnerability to claim a $5k Google bug bounty, says bloke

Velv
Coat

Re: Donate

It’s all Hitlers fault. (so many negative comments, we had to get here some point, Godwin’s Law)

But seriously. Saying “Women Who Code” is segregation is like saying “Alcoholics Anonymous” is segregation. Have they got bouncers on the door keeping teetotallers out? While WHC promote the industry to females they don’t exclude males specifically from their efforts. Some men just have a chip on their shoulder these days.

Apple hauled into US Supreme Court over, no, not ebooks, patents, staff wages, keyboards... but its App Store

Velv
Gimp

The developer is required to grant Apple sole sales rights. The developer cannot sell their application through any other channel (or even give it away). The customer is therefore unable to purchase directly from the developer, they must purchase from Apple. Apple is the seller.

Indiegogo lawyer asks ZX Spectrum reboot firm: Where's the cash?

Velv
Go

Re: What do they expect?

What a closed attitude.

Crowdfunding absolutely has its place, small investments in small businesses has existed for centuries, with the Internet opening new opportunities to contact potential investors. And investors is what they are - you risk a small amount of money up front for something later. And therein lies the rub - is it made clear enough what level of calculated gamble the investor is making?

Vapourware? Let’s not forget RCL had previously successfully released the Vega, and had videos of the Vega+, so it was not a wild gamble on Vapourware, it was a relatively comfortable punt.

Shops? I’m pretty sure we’ve all bought something from a shop and been disappointed. Belkin comes to mind for me, won’t buy their stuff again, fairly sure others could name their disappointments. There’s plenty crap everywhere, so a punt on something not quite there could still be a good punt.

No fandango for you: EU boots UK off Galileo satellite project

Velv
Coat

Re: Dictionary anyone?

@LucasNorth

RULE BRITANNIA, BRITANNIA RULE THE WAVES

Except we don’t now know exactly where the waves are

Cardiff chap chucks challenge at chops*-checking cops

Velv

Re: ANPR Tagging and strategic use of ANPR at grid "pinch points" is becoming commonplace.

between towns where the number of potential routes is limited

Cheaper than deploying a couple of Plod in a car with a notebook and pair of binoculars.

There are continued cries for the Police to be out catching criminals and not wasting time and money on silly things, and ANPR technology delivers excellent value for money in spotting vehicles of interest. If you want to pay significant more tax we can have thousands more Police on the beat, and they can gather the same data manually.

So the problem is not the technology, but the use, or misuse of the data however it may have been captured. And that’s a Policy decision.

Computer Misuse Act charge against British judge thrown out

Velv
Headmaster

Re: Black and white or various shades of grey?

Reading the Judge’s response, it would be difficult to prove the defendant accessed the records illegally, There appears to have been no guidance or policy on the records judges could access, and there were no access controls in place to prevent unauthorised access. A good lawyer, (and she should know a few) has clearly argued that case.

Not saying it’s right, just stating the facts, and as said in the article, the chances of a Jury convicting were practically zero.

Velv
Boffin

It’s missing the word “caught”

In Jersey anything’s legal as long as you don’t get caught”

Tweeter and the Monkey Man, by Traveling Wilburys

Woman sues NASA for ownership of vial of space dust

Velv

So two things:

1. It says nothing about who pays to retrieve any part of the Moon

2. Does this prevent any organisation or person in procession of some Moon from selling it?

Facebook and Snap jam Blackberry patent suit

Velv
Coat

Alice?

Did anyone else need to go google to find out who Alice was?

Every bloody gadget in the house is ringing. Thanks, EE

Velv
Boffin

From the EE blurb this appears to be different as it is an extension of the wifi calling and uses your existing EE mobile number. There is no additional cost to either the subscriber or the person phoning them, outbound calls coming out of your allowance or at your standard rate.

Apple has provided a similar hand-off between devices on the same wifi for a while. It annoyed the hell out of me when the iPad rang for phone calls so it got turned off sharpish.

(I have no connection to EE)