* Posts by phuzz

6730 publicly visible posts • joined 23 Feb 2010

Cops storm Nginx's Moscow offices after a Russian biz claims it owns world's most widely used web server, not F5

phuzz Silver badge

"They are actually no more dysfunctional then american courts"

I assume you meant that as a complement, but as a non-American it really makes me worried.

phuzz Silver badge

"The burden of proof is actually on Ramblet to show paperwork that they directed to write nginx."

How hard can it be to produce a piece of paper sating just that?

Sure, Sysoev and his lawyers will claim it's a fake, but he's working for US company and this is a Soviet Russian court, so who are they more likely to believe?

'Truth' and 'facts' don't mean much any more.

Xbox Series X: Gee thanks, Microsoft! Just what we wanted for Xmas 2020 – a Gateway tower PC

phuzz Silver badge
Gimp

It's clearly a 2013 "trashcan" Mac Pro, but without rounded corners.

(Or to look at it another way, the 'chimney' design is an efficient way of cooling a computer).

It's time you were T0RTT a lesson: Here's how you could build a better Tor, say boffins

phuzz Silver badge

Re: Tor

TOR was never a 'tool' in that sense. Anyone looking for suspicious activity will spot it straight away.

This isn't something that their spooks would use, it's something they might pass to a source who they didn't much care about.

Now that it's used more widely, it's possible their spooks might use it as an extra layer of obfuscation.

phuzz Silver badge

Re: Tor

I think part of the thinking was that TOR would be useful to people in regimes with very locked down and surveilled internet access, eg Iran and China, and that in general, anyone who needed something like TOR in those countries would probably be anti-government, and therefore the enemy of the US's enemy, - a friend. That it's also good publicity, ("look at us helping these people get uncensored internet access!"), probably didn't hurt either.

Also, the more take up it had, the easier it would be for US agents in those (and other countries) to use TOR to hide their traffic without sticking out like a sore thumb.

Attention! Very important science: Tapping a can of fizzy beer does... absolutely nothing

phuzz Silver badge
Windows

Re: So many flaws

Real Beer drinkers must have more money than me then :(

I'll buy bottled beer, but I usually switch to cheap canned stuff after a few bottles, because by that point I won't notice the difference.

Why is the printer spouting nonsense... and who on earth tried to wire this plug?

phuzz Silver badge

Re: It's always DNS unless, of course, it's some ham-fisted wiring.

Mind you, a lot of cert problems are caused by DNS. problems

phuzz Silver badge

Re: The user replied: "The same electrician who changed that plug rewired my house last week!"

My work computer is plugged into a 4-gang extension lead, which is plugged into another extension, which is plugged into another extension, which is finally plugged into the wall. (Why didn't the builders of this Regency town house, two hundred years ago, bother to put in extra sockets eh?)

When the large laser printer next to me (also at the end of the chain), fires up to print something, it causes one of my monitors to click off and back on again.

I'm sure its fine...

phuzz Silver badge

Re: Not on the wall socket

The other important thing to note is that PAT stands for "Portable Appliance Testing", and it's supposed to involve testing portable devices, like laptop chargers etc.

That UPS that's too heavy to move without removing the battery? That doesn't require testing.

You also don't need to have a qualification of any sort, you just have to be "competent".

Not to mention, it's stressed several times in the guidelines that a visual inspection is the most important part. Even if your charge passes the tests, if the insulation is flaking off, you should probably get it fixed or replaced.

Source: The Health and Safety Executive.

100 mysterious blinking lights in the night sky could be evidence of alien life... or something weird, say boffins

phuzz Silver badge

Are you sure? Politicians keep blaming everything on illegal aliens.

NPM swats path traversal bug that lets evil packages modify, steal files. That's bad for JavaScript crypto-wallets

phuzz Silver badge
Gimp

Given that you can't just fire up calc.exe like on Windows, how do Linux hackers show off their proof-of-concepts?

OK. We're off. Water ice found just below the surface of Mars. Good enough for us. Let's go. Impulse power, Mr Sulu

phuzz Silver badge

Re: "Arcadia Planitia [..] has [..] a thicker atmosphere"

It's a relatively low lying area (up to 3km below datum), so the air pressure is higher.

Basically the opposite of air pressure being lower on top of a mountain, it's thin at the top, thick at the bottom.

phuzz Silver badge

Re: Minty

They why can't I get the stuff to grow in my garden? :(

phuzz Silver badge

Re: Mars.

Magnificent!

Revealed: NHS England bosses meet with tech and pharmaceutical giants to discuss price list of millions of Brits' medical data

phuzz Silver badge

Re: Thankfully..

"Labour always blame the Tories for everything so why not?"

Only one of those parties has been in power for the last nine years.

phuzz Silver badge
Headmaster

Re: Thankfully..

"so it's develved to a UK Labour govt,"[sic]

I'm not sure if you've noticed, but Labour haven't been in power nationally since 2010. Unless you mean the Welsh assembly, which as the name suggests, only covers Wales and not the whole UK.

phuzz Silver badge
Trollface

Re: The S

"Why not start with a subset of data[...]CEO's and politicians?"

Because the data is useless if it doesn't cover actual human beings.

ERP disaster zone: The mostly costly failures of the past decade

phuzz Silver badge

Re: Can ERP actually be a perfect fit for any company ?

The UK branch was a 'wholly owned subsidiary' whatever that is, so as I understood it (ie not much), none of the money came from our company.

Either way, they didn't have to make anyone redundant which is the important thing.

phuzz Silver badge

Re: Can ERP actually be a perfect fit for any company ?

Why not both?

The last place I worked at moved from Sage 500 to SAP. They took a middle approach, changing business processes to align with the defaults in SAP where it was easy and made sense, and getting customisation where the business processes couldn't be changed.

Of course, it still went wildly over budget, but the move was mandated by head office so they picked up the bill.

I was only on the periphery of the project, but I did finally get some budget to go buy a proper VM system out of it :)

Microsoft movie tried to Azure Ignite attendees about CPU side-channel flaws, but biz wouldn't be drawn on details

phuzz Silver badge

Re: "We could never ever put our customers at risk"

I've not heard of an attack that can get access to data from a separate CPU in a multi-CPU machine. Any links you can point me towards?

phuzz Silver badge

Re: "We could never ever put our customers at risk"

If they used the same mitigation as the other cloud providers, ie, only allowing one customer's VMs per processor, then that should work, regardless of Hyperthreading (or SMT etc.). An attacker could only attack their own VMs.

(Unless they'd somehow gained access to one particular machine belonging to a target company, in which case they could potentially use speculative execution to move laterally to other servers owned by the same company. Of course, there would probably be easier more conventional ways of doing that).

As far as I know, the Azure hypervisor is based on Windows Hyper V, but the majority of VMs are Linux. Either way, any malware trying to make use of speculative execution would probably have to be custom written for a particular cloud platform.

Given that the most likely scenario is an attacker creating a malicious VM in an attempt to steal information out of other VMs on the same CPU, I wouldn't be surprised if the attacking VM was running some variety of linux because that's the OS I've seen most PoC code running on..

Space Force is go, go, go! Because we have a child as President of the United States

phuzz Silver badge

Correction

"the president’s son-in-law Jared Kushner took time away from restoring peace in the Middle East"

Dear elReg, it seems you've misspelt the phrase "lining his pockets with blood money and cosying up to dictators".

ALLEGEDLY

phuzz Silver badge
Thumb Up

Re: It Is With Such Baubles That Men Are Led.

Build the wall along the southern border (ignoring the geological impossibilities for now).

Then build one along the northern boarder to keep out those damn commie Canucks.

Then build one down each coast to safeguard the purity of American essence, and finally cap it off with a big dome going right over the top.

Go on. Please do it.

Signed

The rest of the World.

Colorado cryptocoin execs spark up blunt '$722m ponzi scheme' criminal charges after investments go up in smoke

phuzz Silver badge

Re: How is it possible

Scams will stop working the day after the human race goes extinct.

This particular scam revolved around crypto currencies, but Ponzi schemes have been around for years*, and they'll keep on suckering people for years to come.

* technically they were around for at least a hundred years before Charles Ponzi was even born.

How much cheese does one person need to grate? Mac Pro pricing unveiled

phuzz Silver badge

Re: Well

Then Apple's marketing department has failed! You're supposed to feel inadequate about your puny iMac, and ready to drop ten times as much on a Mac Pro.

Then next year they show you the new shiny and expect you to haemorrhage your wallet yet again.

phuzz Silver badge

Re: Under the desk

Not unless it's some designer desk that cost at least four figures itself.

Bad news: KeyWe Smart Lock is easily bypassed and can't be fixed

phuzz Silver badge

Re: Lots of bog-standard locks are easy to bypass.

Every lock can be bypassed, the important part is, how long will it take, and how much noise and commotion will a potential thief make doing so?

Careful with that Axe, Eugene: Excessive use of body spray causes school bus evacuation

phuzz Silver badge

Re: London's finest subsurface transit system

Would a pedestrian tunnel count? There's a few of those. And a few car tunnels too.

Microsoft's Teams goes to bat for the other team with preview on Linux

phuzz Silver badge
Gimp

Re: Ah, Git ...

Imagine how upset they'll be when they find out there's Microsoft code in the Linux kernel (5th biggest contributor), and that the majority of Azure VMs are running Linux...

phuzz Silver badge

Useful, but it's OneDrive I'm waiting for.

Although, I'm probably the only person to ask for that.

In tribute to Galaxy Note 7, BBC iPlayer support goes up in flames for some Samsung TVs

phuzz Silver badge

Re: " how this works? "

My brother's got a Logitech K400 wireless keyboard+trackpad, and that works really well. It looks like there's quite a few different models out there though (although no left handed models that I've seen).

phuzz Silver badge

Re: DIY

Pretty much all our living room watching is done on a PS4, but that's a bit of a pricey option for most people. As far as I know though, the last generation of consoles still do just fine, and they're pretty cheap second hand.

phuzz Silver badge

Re: I'm not sure why the BBC would announce a Samsungoclypse

Are you saying you've missed all the arguments over whether the BBC has a left- or right-wing bias?

Lobes carry the load, says IDC: 'Hearables' sector accounts for half of all tech clobber sold

phuzz Silver badge

Re: Cheap stuff actually not too bad

"Gartner : What a load of crock, what do they really do ? Just lift some numbers from Amazon's current high selling list and then publish an article, cmon most of us here could do that within a few minutes..."

Yes, but we wouldn't have the chutzpah to invent spurious 'trends' based on the data, and then sell that hogwash to clueless companies.

Oi, Queenslander who downloaded 26.8TB in June alone – we see you

phuzz Silver badge

We've managed to hit 1TB in a month once in a house of four. Normally it's around the 7-800GB/mo mark.

I've not looked for a while though, I should probably check.

Another senior Gov.UK bod makes a dash from public sector, falls into AWS's arms

phuzz Silver badge
Thumb Up

Re: Revolving door has long been a thing

Private Eye do good work, but it's good to see elReg covering the same ground as well (from a tech angle).

Boffins find proof that yes, Carl Sagan and Joni Mitchell were right, we really are all made up of star stuff

phuzz Silver badge

Re: All or nothing logic

Hey, can I borrow a fiver? There's a 0.000000000000000000000000000000000000000000000001% chance that I'll pay it back, but it's not an 'all or nothing' thing right?

With a warehouse of unsold AR goggles, Magic Leap has a brainwave… let’s rebadge ‘em and sell to business!

phuzz Silver badge

Re: AR in table top games

"Though I suppose it will allow different players to game with each other without the need to actually go to one of the players houses, clubs etc."

That's a pretty big deal for a lot of people. Either your friends have moved far away, or they've settled down with a family, and getting together to play a board game is pretty tricky, with weeks of organising to find a time when everyone can actually get together.

Doing it online (eg, via Tabletop simulator) is one way around that.

When is an electrical engineer not an engineer? When Arizona's state regulators decide to play word games

phuzz Silver badge

Re: AKA Libertarians

"hairdressers in most of the world don't have to be licensed"

And for professions where sometimes licensing is actually a useful idea, which can include engineers, those people can call themselves 'licensed engineers', or 'certified', to differentiate themselves from anyone who managed to pass an engineering degree.

This way you get the best of both worlds, licensing and certification where necessary, without making it pointlessly difficult for someone to use the word 'engineer' in their job title.

It's the end of the 20-teens, and your Windows PC can still be pwned by nothing more than a simple bad font

phuzz Silver badge

Re: More lipstick on the old OS

Well, I suppose this is what we get when there's no one in the thread complaining how a Microsoft update broke their software. Instead complaints that Microsoft aren't changing their OS enough.

Americans should have strong privacy-protecting encryption ...that the Feds and cops can break, say senators

phuzz Silver badge

Re: If politicians were mathematically literate

It's not really an enforceable debt if you are a country with it's own military, and your creditors are not.

Intel might want to reconsider the G part of SGX – because it's been plunderstruck

phuzz Silver badge
Thumb Up

I have to admit, that's a bloody clever attack. Not much that you can do to prevent it either, other than "don't allow an attack full access to your machine".

Oh noes! Half the NHS runs on Windows 7! Thankfully, here's Citrix with a virty vaccine

phuzz Silver badge

Re: Same old reason

To run on Windows 10 requires cash to pay for new versions of software...assuming that it is possible to even buy an updated version of the software, and that the original vendors haven't long gone out of business.

FTFY

Mind you, it's amazing what you can do with the app compatibility shims.

I'll take your frame to another dimension, pay close attention: This AI auto-generates 3D objects from 2D snaps

phuzz Silver badge

Release deliberately flawed publicity pictures.

Internet jerk with million-plus fans starts 14-year stretch for bizarre dot-com armed robbery

phuzz Silver badge

Re: Second of his name.

It does make me wonder how ego-centric someone has to be, to name their kid with their exact same name.

Is giving them 50% of their DNA, and probably much of their upbringing, not enough?

Brewing in spaaaaace: SpaceX sends a malting kit to the International Space Station

phuzz Silver badge
Devil

Rocket Lab

"as the stage was slowed to less than 900 km per hour" (emph mine)

Less than nine hundred kilometres per hour eh? Practically walking pace!

phuzz Silver badge

Re: Prelude to Mars

Some of the ice locked up in glaciers might be old enough that it's not gone through any organisms.

Apple sues iPhone CPU design ace after he quits to run data-center chip upstart Nuvia

phuzz Silver badge
Facepalm

Re: Another language

Apple (or their lawyers) didn't use that word. It was from the defence (ie the person that Apple are suing).

It's still a fucking stupid neologism though, when the word 'recording' would have fitted the sentence perfectly, and is an entirely cromulent word.

Apple tipped to go full wireless by 2021, and you're all still grumbling about a headphone jack

phuzz Silver badge

One other advantage is that it will be much easier to waterproof the phones.

Of course, it will also make them even harder for repairers to open. I wonder if iFixit's scale can go negative?

Worldwide, perpetual, irrevocable and royalty-free: Amazon's Alexa NHS contract released

phuzz Silver badge

Re: Wow

"Both of whom got stitched up like kippers"

What was the downside for the Conservatives? They had to have a referendum on proportional voting (which kept the status quo, so no impact really), and they introduced the plastic bag tax (which doesn't seem to have had much political fallout), but as far as I know that was the only concessions they made to the Lib Dems.

The LibDems on the other hand, ended up losing most of their voters (most of whom in my experience would have been happy with anything except forming a coalition with the Torys). They went from 57 seats in 2010, to 8 in 2015.

The Lib Dems came off much worse from that team-up.

As for you comments on Corbyn, I'd broadly agree, but don't forget that he has managed to inspire a (very) hardcore bunch of people who weren't Labour voters before. Almost certainly not enough to win an election, but significant none the less.