* Posts by phuzz

6732 publicly visible posts • joined 23 Feb 2010

DEF CON hackers' dossier on US voting machine security is just as grim as feared

phuzz Silver badge

Re: Centralized incompetence

Perhaps there's a case for the federal government setting some standards ("your voting machine must be this secure to enter"), and leaving it up to the individual states to come up with whichever way they like to meet those requirements.

Looking after the corporate Apple mobile fleet? Beware: MDM onboarding is 'insecure'

phuzz Silver badge

Re: This is easy to fix.

"Any corp that deploys a sensitive app onto a mobile device will require the user to authenticate with corporate credentials"

Unless, and bear with me here, unless they're not very good at security.

You might as well say that Wordpress sites are secure because anyone that uses them will keep up to date with security patches. They should, but a large number organisations won't.

'Incommunicado' Assange anoints new WikiLeaks editor in chief

phuzz Silver badge

Re: How to leave an embassy

There's an easier solution, the Ecuadorian ambassador could just invite the Met in to arrest him. It's their embassy, they can invite the UK police in if they feel like it.

Don't get THAT personal, says personalised cards firm Moonpig. Dick pics. They mean dick pics

phuzz Silver badge
IT Angle

Re: T&Cs?

One of our customers has a "Time and attendance" system.

Cue funny looks from me when I'm first asked to check out the "T and A server".

Blueprint of modern construction can be found in a tech cluster... of 19th century England

phuzz Silver badge

Re: Wow! Go Shrewsbury!

"It was in use as a maltings/brewery right up into the late 80s"

There's something lovely about the smell of a brewery, I used to go past one on my way to school, and the smell still takes me back.

'This is insane!' FCC commissioner tears into colleagues over failure to stop robocalls

phuzz Silver badge

In the UK I get one call a week maybe. Usually from a London number that hangs up as soon as I make a sound.

No one in my house is over forty so we don't have a landline.

Pain spotting: Russia's Aeroflot Docker server lands internal source code, config files on public internet

phuzz Silver badge
Thumb Up

Re: How responsible of you...

Don't bother with Stonehenge, pop down to Avebury instead. Stonehenge doesn't have a village pub in the middle of the circle.

Eat my shorts, watchdog tells every city mayor in the US – FCC approves $2bn 5G telco windfall

phuzz Silver badge

Re: Is anyone surprised?

Ahem. Might as well use the full sentence, "States rights to keep slaves".

(For example, the declaration of causes for secession of the state of Texas)

NASA to celebrate 55th anniversary of first Moon landing by, er, deciding how to land humans on the Moon again

phuzz Silver badge
WTF?

Re: That's no space programme ...

the vision and moral fibre of [...] Nixon

What, Richard "Cancel Apollo, cancel MOL" Nixon?

Richard "prevent peace in Vietnam until after the election" Nixon? The guy who is most well known for Watergate.

What vision and moral fibre did 'Tricky Dicky' have exactly? He'd have sold his own granny for a vote.

Working Apple-1 retro fossil auctioned off to mystery bidder for $375,000

phuzz Silver badge

Re: Buyer unknown?

It's less than half a million dollars, that could be afforded by any number of Silicon Valley types. Hell, that's probably less than cost of a small house in San Francisco (I assume).

A story of M, a failed retailer: We'll give you a clue – it rhymes with Charlie Chaplin

phuzz Silver badge

Re: Profitability

The shop staff in my local store in Bristol were pretty knowledgeable, but given the massive range of stuff they sold, there's a limit how in depth anyone's knowledge could be.

Of course, the big reason I didn't go in there much was the prices, but they did have one advantage which was speed. If I needed (eg) a SATA cable on a Saturday morning, I could pay a couple of quid to get one from Amazon, but it would take until Monday. Or I could walk five minutes down the road and spend about £8, but be home and plugging in my harddrive five minutes later.

Building your own PC for AI is 10x cheaper than renting out GPUs on cloud, apparently

phuzz Silver badge

So what you're saying is, you could just bring your gaming rig in from home for a couple of days to do the tricky bit, and use a second-hand laptop for the rest.

MI5: Gosh, awkward. We looked down the sofa and, yeah, we *do* have intel on privacy bods

phuzz Silver badge
Headmaster

Re: GDPR

The max GDPR fine is €20 million. (src)

phuzz Silver badge

I'm still going with Hanlon's razor here. Cock-up before conspiracy.

Secret IBM script could have prevented 11-hour US tax day outage

phuzz Silver badge
Paris Hilton

Well, they would have been if they'd been working, but they weren't, so no taxes were being taxed, so your tax dollars weren't at work.

See?

That scary old system with 'do not touch' on it? Your boss very much wants you to touch it. Now what do you do?

phuzz Silver badge
Pirate

Re: 6 point plan?

It can help you get a migration budget if your legacy system starts to become less reliable. If it starts falling over every few weeks, (and only coming back up due to your heroic troubleshooting obviously), then you'll get some more leverage with manglement to ask for more money.

Of course, I'm not suggesting you make it crash yourself, oh no! And I'm definitely no suggesting that occasionally 'bumping' the power supply, or 'snagging' the network cable would be the way to do it.

Because a real BOFH doesn't need my suggestions ;)

Bug? Feature? Power users baffled as BitLocker update switch-off continues

phuzz Silver badge

Re: seen it

Run shutdown -s -t 0 to get a proper shutdown.

Cisco sneaks hardcoded secret root backdoor into vid surveillance kit

phuzz Silver badge

Re: 3 Letters

Hanlon's razor: Never attribute to malice that which is adequately explained by stupidity.

ie, it's more likely they fucked up than it is that the government is spying on you.

Good news: Sub-surface life on Mars possible, moons from big impacts. There is no bad news

phuzz Silver badge
Thumb Up

Re: Very interesting stuff!

I guess a sample return mission from one of the moons will be a good trial run for a Mars (surface) sample return.

Brexit campaigner AggregateIQ challenges UK's first GDPR notice

phuzz Silver badge

Re: An amazing coincidence

According to the link smartse posted, AIQ's registere'd address is "320-1070 DOUGLAS ST VICTORIA BC V8W 2C4 ". That's actually number 1070 on Douglas street (320 must be the office number), which is a generic looking office block.

Baddies just need one email account with clout to unleash phishing hell

phuzz Silver badge

Re: Unnamed University

I felt sure that someone would have named the victim in the comments, I doubt there's a single UK uni IT department that doesn't have at least one elReg reader in it.

That syncing feeling when you realise you may be telling Google more than you thought

phuzz Silver badge
Megaphone

Re: The problem isn't "google slurp" alone

@bombastic bob

I'm sure I'm going to regret telling you this, but you have a silver badge, so you can use html tags (such as em, and strong) in your posts, so you DON'T need TO capitalise random WORDS any more, ok?

At least we can all be thankful elReg doesn't implement the <blink> tag.

UK.gov won't Airwave bye for another 3 years, plans to phase in ESN services

phuzz Silver badge
Facepalm

As predicted, the move means the Home Office has had to ink a deal with Motorola to extend the Airwave network for three years to 31 December 2022, which the firm said was "on substantially similar terms".

The government has also extended an agreement with Motorola Solutions by 30 months to 2024, as part of its delivery of some of the ESN User Services.

So let me get this clear, we (the UK taxpayers) are paying Motorola for Airwave, and also paying Motorola for part of the replacement for Airwave?

So every year that ESN slips means another year of payments to Motorola for Airwave, plus another year of payments to implement ESN?

Well, I'm sure they're working as hard as possible to get it finished soon, right?

Never mind Brexit. UK must fling more £billions at nuke subs, say MPs

phuzz Silver badge

Doesn't some of what the SAS does, or has done, come pretty close to that?

As far as I know they're not deployed on UK soil. The famous Iranian Embassy siege would be considered Iranian soil technically.

They were deployed in Northern Ireland during the Troubles though (along with the regular army), but I don't think they were enforcing civilian laws so much.

phuzz Silver badge
Trollface

China doesn't provide aid to Africa. China provides loans at commercial rates with inflated price tags (i.e., corruption), to get Chinese companies to build infrastructure, that they will eventually convert into owning all of the country.

The nerve! Why can't they just march in there and colonise it like any normal country?

Some credential-stuffing botnets don't care about being noticed any more

phuzz Silver badge

Re: If it's connected to the internet, somebody will notice it and try to get into it.

A honeypot will waste their time a bit, but given the scale of the attempts, is it really going to dissuade anyone?

Spent your week box-ticking? It can't be as bad as the folk at this firm

phuzz Silver badge

Re: “were quoted a ridiculous price and told it would take four months”.

isn't that covered by the non-compete clause?

As far as I know they're non-enforceable in the UK. Either way, they can't do much more than bolt the stable door.

Bouncing robots land on asteroid 180m miles away amid mission to fetch sample for Earth

phuzz Silver badge

Re: Need help

In my head I was pronouncing it as Minerva two one.

Dead retailer's 'customer data' turns up on seized kit, unencrypted and very much for sale

phuzz Silver badge
Happy

Re: QED

Disk shredders are so much fun :)

Renegade 3D-printing gunsmith Cody Wilson on the run in Taipei from child sex allegations

phuzz Silver badge
IT Angle

Puritans vs sex

But the USA has such weird taboos around sex, it's not surprising that they all seem to have such weird kinks. (For example.)

Of course, for the conspiracy minded, this would mean that 'they' can always guarantee they'll find some sexual weirdness if 'they' ever need to smear someone. Or what would be perfectly normal behaviour in another country (eg, being gay), can be used as a slur in the US.

Flying to Mars will be so rad, dude: Year-long trip may dump 60% lifetime dose of radiation on you

phuzz Silver badge
Boffin

Re: Career != Lifetime

Radiation doses are a lot more complicated than a single number. Not only are there the various different types of radiation (alpha/beta/gamma etc. and that's ignoring things like high energy neutrons), but where on the body you're irradiated makes a big difference to the outcome. Of course, timespan also plays a part; a single high dose in one day could be less than your monthly/annual limit, but will likely be medically worse for you than someone who gets a constant low dose which sums up to be higher per month.

Hence, dosage limits are an estimation of risk, based on an aggregate of all the different radiation studies that have been done. They're deliberately simplified to a single number to make the regulations feasible. The end result is that the medical issues of (for example) an aircrew who'd reached their monthly dose and a worker in a nuclear plant who'd received the exact 'same' dose would be quite different Because they'd both likely have received different types of radiation, in different ways, over different timespans.

tl/dr radiation dose numbers are approximate and can't necessarily be directly compared between different jobs/situations.

What's that smell? Oh, it's Newegg cracked open by card slurpers

phuzz Silver badge

Re: Optional

are there potentially other sites out there that were also running the dodgy Neweggstats script?

If you read TFA, you'll see that the neweggstats domain was specifically created to exfiltrate data in this hack. When they hit BA they had a similarly misleading domain name (baways.com). So this looks like a consistent MO for these crooks, and I'm sure that if they're not using it on another site right now, they're preparing to.

So, all you have to do is check every single site that you might input your credit card into and make sure that none of them are connecting to an unauthorised third party site, bearing in mind that many websites uses scripts on different domains to function, and that you probably won't be able to guess which are legit and which are bogus without at least checking the whois records for every single one.

HPE support website is down

phuzz Silver badge

HPE support website is down

So, support.hpe.com is offline right now. Is this a recent thing or have HP just completely given up at this point?

While we're at it, can I just add that adding a big red light to a disk caddy, which means do *not* remove the drive, is not very helpful unless you've already been told about it. To the untrained eye, looking for the dead disk to replace, the big red light screams "error", so that's the one I removed. Erm, I mean that some hypothetical person would remove...

(Yes, I pulled the good disk out of a RAID1, and replaced it with a blank one, learn from my fail. Fortunately putting the good disk back in with the replacement and rebooting started a rebuild).

Put your tin-foil hats on! Wi-Fi can be used to guesstimate number of people hidden in a room

phuzz Silver badge

Given the wavelengths that mobile phones use, it's not that much use as radar, except at short distances like this study. Not to mention that mobile masts are usually omnidirectional, making them more useless as a radar.

London tipped to lead European data market. Yes, despite Brexit!

phuzz Silver badge
Headmaster

Where?

"Report puts English capital ahead"

London is the capital of Britain.

While I suppose it's not incorrect to say that it is the capital of England, it's not an independent country any more than Scotland, Wales or Northern Ireland are.

Trump pulls trigger in US-China tit-for-tat tariff tiff: 10% slapped on $200bn of imported kit

phuzz Silver badge

Re: Since when did being a bully become "a strong bargaining position"

Since when did being a bully become "a strong bargaining position"

Well, to be fair, it's worked for the USA for the last 30+ years so we shouldn't be surprised that the idiot is trying it too. It's just that previous administrations used a certain amount of subtlety and tact (ie made their threats behind closed doors).

First Boeing 777 (aged 24) makes its last flight – to a museum

phuzz Silver badge

Re: Is "designed by computer" better ?.

The KC-46 is a military procurement program. It's supposed to go over budget.

phuzz Silver badge
Thumb Up

Re: More than 8 hours

They've got two B-52's (plus another one in what looks to be the non-public section)! I'm pretty sure I can spot three Harriers too, and there's a Super Guppy and a whole row of choppers which are a bit too small for me to make out. See here.

I'm pretty sure I could spend two weeks going round the US just looking at aerospace museums, and I'd still have to miss some off the list.

Oh Smeg! Hacked white goods maker resurfaces after system shutdown

phuzz Silver badge
Megaphone

Re: We are down to cat milk

Nothing wrong with dog's milk. Full of goodness, full of vitamins, full of marrowbone jelly. Lasts longer than any other milk, dog's milk.

Microsoft: Like the Borg, we want to absorb all the world's biz computers

phuzz Silver badge
Facepalm

You'll still need on-site sysadmins even if every single machine is being managed by Microsoft, because users typically need to be coached just to turn a monitor on or off. When they say there'll be 'one-click application installs', what will actually happen is that the user will click on ever possible piece of software, which will all be downloaded at once, knocking their computer and half the office offline in the process, before finally filling up the disk and crashing their computer, all while somehow not installing the one program they wanted.

Yeah, we'll still have jobs in the future too.

Revealed: The billionaire baron who’ll ride Elon’s thrusting erection to the Moon and back

phuzz Silver badge
IT Angle

Re: I watched the broadcast

"By the nipples of Musk!" has a slightly better ring to it I feel. Just imagine it being said/shouted by Brian Blessed.

Brit airport pulls flight info system offline after attack by 'online crims'

phuzz Silver badge
Thumb Up

Re: Landing at Bristol as a foreigner

As long as you remembered to say "cheers drive!" to the pilot as you got off the plane.

NHS smacks down hundreds of staffers for dodgy use of social media, messaging apps

phuzz Silver badge

Re: Wow

Today's generation of social media users seem not to think even as far as who sees a post immediately, let alone the long term.

Ah yes, it's all the fault of those meddling kids. Incidentally, is this your lawn I'm standing on?

Sysadmin misses out on paycheck after student test runs amok

phuzz Silver badge

Re: Why...

based in what was then said to be the longest corridor in Europe

I suspect there are a lot of those.

In much the same way that I know of at least two universities (Exeter and York), where a library was constructed without taking into account the weight of the books, and so the entire building is gently sliding downhill. I'm not sure if this is more than just a rumour at either though.

Trump shouldn't criticise the news media, says Amazon's Jeff Bezos

phuzz Silver badge

Re: Poor Jeff is so right, nobody takes his leftist hate pamflet seriously anymore

I, too, find Fox News too close to the centre and afraid of taking a clear stand on the hard issues. Thank God we have Breitbart for the honest man's opinion.

I want to believe this is sarcasm, but it's really hard to tell sometimes.

Microsoft accidentally let encrypted Windows 10 out into the world

phuzz Silver badge
Facepalm

Re: How dare you!

"I will not download any release from Microsoft until at least 3 months after it has gone Gold."

And certainly don't try running beta software as your main operating system.

(In a VM, as a test, or for fun, sure. But as your main OS? Crazyness)

GDPR v2 – Gradually Diminishing Psychotic Robots: Brussels kills Terminator apocalypse

phuzz Silver badge

Re: Countering the threat from the real culprits

Well, some EU countries (*coff* Britain *coff*) are big arms manufacturers, so this will at least cut down on the number of AI-based weapons systems being sold to despotic regimes.

(Last year the UK sold around £1.5B worth of arms to countries on it's own list of human rights violators)

Card-stealing code that pwned British Airways, Ticketmaster pops up on more sites via hacked JS

phuzz Silver badge

I'd always imagined that the 3rd party code had been downloaded, checked and installed.

Even if it was being run off their servers, can you imagine the conversation?

developer, running into the room: We need to update foo.js to version 3.4.7.1.8.

sysadmin: Have you checked that it's got no security issues?

developer: Marketing want us to have the flibble text flashing and the new version of foo reinstates the blink tag. They want it live half an hour ago because they've already got the adverts running.

sysadmin: I really think we should test this...

developer: No time, just put it live!

Martian weather has cleared at last: Now NASA's wondering, will Opportunity knock?

phuzz Silver badge
Pirate

WAKE UP

45 days of 'WAKE UP'

I read that as NASA just playing Rage Against The Machine on a loop for a month and a half.

It would get me out of bed :)

Microsoft: You don't want to use Edge? Are you sure? Really sure?

phuzz Silver badge

Re: More bloat in an already over bloated OS

Microsoft need a legal lesson that our computers are not theirs to control and run as they see fit.

No one is stopping you from installing another OS on your computer, you are in control of that.

And if you have installed Windows, why are you complaining? You should have known what you're getting in to.