* Posts by Roland6

10727 publicly visible posts • joined 23 Apr 2010

AMD performance plummets when relying on battery power, says Intel. Let's take a closer look at those stats

Roland6 Silver badge

Re: Passparm test show it's true - but so what.

>With mains on, I got 13923. WIth just battery, I got 10252.

Did you changed the power scheme to max. performance etc. for both mains and battery?

Roland6 Silver badge

Re: RUGs

"where AMD's chips proved 29 per cent slower "

They might have been, however Intel's own graphs show that they still outperformed the Intel CPU's...

Roland6 Silver badge

Re: Lies, Damn Lies, and Statistics

>It's notable that this time around AMD kit that has a USP of excellent price/performance is consistently priced considerably above the Intel prices on the main suppliers websites,

That, I suspect, is a function of the time of year and the need to get rid of stocks of intel-based systems that AMD have effectively made obsolete...

Circa 2 months back Lenovo were offering a Ryzen 7 Pro 4750U based Thinkpad at the same price point as their Intel i7 10510U version, namely circa £900+vat. Naturally, the AMD variant quickly sold out...

Cyberup campaign: 80% of infosec pros fear they might fall foul of UK's outdated Computer Misuse Act

Roland6 Silver badge

Given an increasing amount of IT is now done "in the cloud" on other peoples systems, which are often locate overseas, rather than in UK located company owned data centres.

I wonder if people are more concerned about getting UK legal black-and-white which can be used as a defence against foreign law and extradition, specifically the US "wire fraud" catchall and charge sheets full of imagined offences that disappear when the case finally gets to court - several years later...

Addition:

I see from rereading the article a big area where consent is unlikely to be forthcoming is where people are probing 'adversaries' infrastructure which could be operated by criminals or state entities. Ie. I've found something odd, so I will investigate it back to source and then determine just what exactly is that source.

i therefore expect the government to listen, given their commitment to military cyops...

When even a power-cycle fandango cannot save your Windows desktop

Roland6 Silver badge

Re: a perfectly understandable error

>My mother in law can't use a mouse because she hammers the buttons so hard the mouse moves an inch or more, performing an unwanted drag'n'drop instead of a click. We explained it, she still hammered the buttons and complained. So I bought her a trackball, which she loves because "it works".

How long was it before she stopped moving the trackball like a mouse?

Had to swap out my mother-in-law's ergonomic trackball as she just couldn't get to grips with moving the ball rather than the 'mouse'.

Roland6 Silver badge

Re: a perfectly understandable error

>That said, it would have probably been beneficial for the PFY to hang around a bit in the morning to witness just exactly how she managed to mangle her desktop icons like that every single day.

Well from the article it is obvious, the mangling was most probably associated with the way she was powering off her PC, namely via the monitor on/off button...

CodeWeavers' CrossOver ran 32-bit Windows Intel binary on macOS on Arm CPU emulating x86 – and nobody died

Roland6 Silver badge

Re: How long before Apple stop this

>Especially since ...if it works for the most popular Windows apps, will help smooth the way for all of the Mac userbase to migrate to ARM...

So does this mean CodeWeavers could be receiving some rather expensive handcuffs to become a part of Apple?

Dell online store charges 16 million dollars for new laptop with paint job

Roland6 Silver badge

Re: Some would say

Useful HTML reference:

The a target attribute

Worth bookmarking the website.

Apple to halve commission for developers turning over up to $1m in sales via App Store

Roland6 Silver badge

Re: Still, I'm not going to turn down a 20% increase in revenue from Apple.

I suspect part of Apple's reasoning is to ensure developers and especially hobbist/pre-startup and startup/small developers to continue to develop for the Apple ecosystem, first.

We can expect similar inducements from MS and Google in the near future.

Roland6 Silver badge

Re: The good old days

>The good old days when you could purchase software online.

I think the original AC was referring to the norms of the 80's and early 90's.

But yes, back when companies ran their own store, direct sales were much sought after as they could mean you actually got circa 80% of RRP to maintain the development team, compared to 20~30% via third-party retailers...

Watchdog signals Boeing 737 Max jets can return to US skies following software upgrade, pilot training

Roland6 Silver badge

It's very clear that only the bare minimum has been done to fix the issues with the aircraft. The end result is an aircraft which is a hodge podge design largely dating back to the 1960s, with all the frailty that implies.

From what I've read there is nothing fundamentally wrong with the airframe - dating back to the 1960's. The problems stem from Boeing decided to install engines that fundamentally were too big for the airframe. To achieve this, they did a hodgepodge design and mounted the engines further forward and higher, changing the flight characteristics and handling of the plane, to mitigate this they installed additional sensors and automation. The problems arose because these systems were poorly designed and implemented...

Thus the obvious solution is to replace the engines with smaller - but less economical - engines (ie. engines of a size the airframe was originally designed to take) and largely strip out the additional systems...

Worn-out NAND flash blamed for Tesla vehicle gremlins, such as rearview cam failures and silenced audio alerts

Roland6 Silver badge

>There really will come a time when you can't leave for work because your car's stuck doing updates.

The time is already here where you can't be sure if the Tesla you intend to drive to work in, will behave the same as it did when you parked it on the drive last night; it caught James May out...

Roland6 Silver badge

Re: Uh-huh

>Tesla are not only replacing free of charge

This time around...

Tesla have form for removing functionality and then charging the user to reinstate said functionality... Ask Grant Shapps, the (UK) transport secretary, about his rear seats that were heated until an OTA software upgrade...

Not on your Zoom, not on Teams, not Google Meet, not BlueJeans. WebEx, Skype and Houseparty make us itch. No, not FaceTime, not even Twitch

Roland6 Silver badge

Re: What does videoconferencing provide

>I'm glad I've missed it so far, but if/when I return to my consulting business I will really be annoyed if the "new normal" is that everyone video conferences. I'll have to clean up my office so it doesn't look like such a mess behind me, worry about what I'm wearing..

Yes, ElReg has missed a sales opportunity.

Where can people buy the t-shirts and mugs which regularly appear in ElReg pictures?

Roland6 Silver badge

Re: Yes, but no, but ....

Another good thing to come out of VC, is the realisation of just how rubbish the majority of PC/laptop/Android phones webcams are, along with their audio capabilities - this is one of the areas that Apple does seem to be doing better....

Perhaps in 2021 laptop vendors will be fitting 1080p 3D webcams as standard, rather than claiming HD but only delivering 720p (even on their top-end machines), along with decent audio circuitry.

Roland6 Silver badge

Re: Unfair

>When people haven't had hair cuts for months on end and growing lockdown beards, surprise video requests are a bit unfair.

Too many years back I discovered one of the best ways to get people (of different grades and jobs) to communicate etc. was to get them to give up a day and do a gardening/house redecoration project (aka community service) where the dress code was "wear clothes that will get dirty".

Roland6 Silver badge

> if the local user is muted, and their microphone starts picking up audio ... then put a conspicuous notice on the user's screen that they're muted

My partner was on a Zoom cookery class earlier, I overheard the tutor telling people to mute their mike's because their vigorous vegetable chopping was causing audio problems....

Roland6 Silver badge

Re: Yes, but no, but ....

>You don't talk to many programmers or engineers, do yo?

And even f2f not many of them actually looked at you for more than a split second...

Roland6 Silver badge

Re: Yes, but no, but ....

>-eye contact doesn't work, because the camera and the screen are not in the same place.* Even if they were, your pupils would appear to the other person to be looking at a point in space roughly halfway between them and you.

That's just a function of the current state-of-the-art, the level of tech that can be mass produced and the price people are willing to pay. We already have the technology to resolve this problem, just that currently it doesn't fit within the constraints of desktop/portable devices.

The fact of the matter is that times-are-a-changing, just as they changed from letter writing to telephone and radio to TV.

One of the good things to come out of lockdown is the widespread use of Zoom et al has exposed the limitations of the current Internet. Interestingly, if you believe all the hype about 5G, it will also suffer because it too is crippled by the constraints of the IPv4/IPv6 Internet. The time really is coming for Inter net v3 [Aside: V3 to distinguish it from the talk back in the late 90's of Internet V2.]

Roland6 Silver badge

>And for those of us who lip read - it's really rather useful

Also rather useful to those who use sign language...

Lockdown bidder block shock: Overzealous parental filters on Virgin Media and TalkTalk break eBay for UK users

Roland6 Silver badge

Re: Trust issues

>"...endemic problems in ISP-supplied parental filtering software, which routinely block legitimate and innocuous content."

It also works the other way...

One widely used content filter, will block gambling sites.. however, a quick test of the filter wil demonstrate that yes it will block the big name sites but not the more locally focused sites. Additionally, due to the lack of granular controls in the filter, you have to disable the block if you want to access the National Lottery to submit a funding bid or to report on funding received...

Microsoft warns against SMS, voice calls for multi-factor authentication: Try something that can't be SIM swapped

Roland6 Silver badge

Re: More clueless "password replacements"...

But in reality, they couldn't login with *just* those things; they also need the device which contains the private key.

And therein lies the problem: lose the device - a relatively common occurrence, and how do you regain access?

Roland6 Silver badge

>MS phone my home number. Which I ported to VOIP a year ago and can access from any device, anywhere as long as I know the password. Why not just ask me for a second password?

Seems that what you've got is more secure(*) than a second password, which would naturally have to reside on an MS system (probably the same system as the first password, the answers to your security questions and your address/contact details) and hence available to a third-party to download etc.

(*) It bears comparison to a public key (your VOIP phone number) and private key (your password).

Roland6 Silver badge

So a targeted social engineering attack that enables the spoofing of a genuine SIM, not an actual attack on the SMS service...

How about a working example of an SMS attack that can intercept the SMS from MS to my phone which provides sufficient information for someone to access my MS account - last time I received an SMS from MS it didn't contain my MS Account username...

Transport for London dangles £1.1bn carrot in pursuit of suppliers for new revenue collection deal

Roland6 Silver badge

Re: London?

Its actually Istanbul, however since neither are in "Europe", 'London' is technically the largest "European" city. Mind you if Turkey ever joins the EU...

Zoom strong-armed by US watchdog to beef up security after boasting of end-to-end encryption that didn't exist

Roland6 Silver badge

Re: Anybody else noticed

Interestingly, it would seem they weren't demanding that Zoom was made an example of etc., but more that the FTC didn't really know what it was doing and so specified and agreed a settlement with several obvious obmissions.

Roland6 Silver badge

Trouble is that Teams and many other collaboration tools are designed to be used within a single organisation.

Work in an organisation where the norm is to work collaboratively with other organisations (in both ad-hoc and more long-term arrangements) and you can quite quickly find yourself restricted to: phone, email, Zoom, Dropbox...

Mind you, I don't see why the IT department needed to be involved, Zoom like Teams installs in user space... So it would have made more sense for the IT to discover that the reason why Teams isn't being used is because users had voted with their feet and installed Zoom...

Yes the media have played a part in establishing Zoom as the defacto tool, but Zoom took off initially because there wasn't really any other app ready to roll back in March - the media merely picked up the success story and amplified it...

Roland6 Silver badge

Handled correctly this could be a boon to Zoom...

So which other video conferencing, collaboration tools are going to receive the same level of third-party security scrutiny?

I would turn this around and sell it as a benefit of the Zoom product and thus encourage the Federal Trade Commission to do similar with the other vendors and establish a full regulatory framework....

Let's Encrypt warns about a third of Android devices will from next year stumble over sites that use its certs

Roland6 Silver badge

Re: Mitiations?

Surely a certificate store update app is a standard part of Android, thus all that is necessary is a certificate update release as part of a Play services update.

Okay some other method will be needed to support non-Play devices, but don't see why this is causing an issue - unless Google cut one too many corners on Android...

Huawei sues US govt over claims Trump administration ignored company's Freedom of Information requests

Roland6 Silver badge

>It should be obvious that Huawei isn't really a member of the voting public.

You are making assumptions about how the FOI requests were made. I would expect that they were made by a named US citizen, albeit one being paid to do so by Huawei.

Suspended sentence for bank IT worker who broke into his boss's webcam because he didn't get a payrise

Roland6 Silver badge

Re: I agree it seems like very light punishment

>It will be 3 years before his conviction is spent, he won't be able to get a job in IT in the interim period and would then need to explain to a future employer why he was out of IT for 3 years that would be a red flag for me as a recruiter.

Easily hidden given he was just 23 and a "Service desk analyst":

Startup a computer support business, only needs a few friends to be clients, spend the time getting a few relevant qualifications (many online courses are currently discounted/free). Alternatively go to college and get an IT qualification.

In 3 years time there will be no career gap, just some more relevant experience...

With less than two months left, let's check in on Brexit: All IT systems are up and running and ready to go, says no one

Roland6 Silver badge

Re: re: anyone who leaves their club has to be punished.

> It is obvious to everyone that to trade with the EU we need to respect EU rules

But not blindly obvious to BoJo et al. - hence why they needed the UK Internal Market Bill to contain clauses that would breach international treaties...

Roland6 Silver badge

The original lyrics were:

"Rule, Britannia! rule the waves" - an exultation, because at the time the Dutch ruled the waves/seas.

The Victorians changed it to "rules".

However, we should remember it was written by a pre-Romantic poet and playwright and thus 'waves' could mean "move one's hand to and fro in greeting or as a signal", which puts another spin on the lyric.

US govt ups minimum H-1B tech salaries to $208,000 a year, more than startups can hope to afford, say VCs

Roland6 Silver badge

>Dear VCs: if your business can't pay an H1B wage premium then you could always invest in another startup that trains US workers in the skills your first business needs?

Roland6 Silver badge

Dear AC, a base (fixed) income at more than 30% above market rate makes it not sustainable, especially at the beginning when companys hardly make a profit.

Well the obvious solution to the problem is if you really need foreign labour is to not base your start-up in the USA.

Brexit Britain is due to go-live in a couple of months, suggest you take a look, it isn't a bad place for a tech startup...

Voyager 2 is back online after eight months of radio silence

Roland6 Silver badge

Re: Pretty reckless

>The second question is where do you build it.

Patagonia - okay its a region shared by Chile and Argentina, so you could include it in 'Chile'.

Antarctica - although the scientists working at the south pole might object.

The Huawei Mate 40 Pro would be the best Android flagship on the market – were it not for the US-China trade war

Roland6 Silver badge

If Huawei somehow finds itself able to license Google Mobile Services once again, this would easily be the most compelling Android flagship on the market:

Surely all that is needed is for Huawei to provide relevant information to the XDAdevelopers Forum,given they have already demonstrated the ability to install Google Play Services on other Huawei handsets...

Windows Server robocopy to gain auto-compression ahead of big file moves

Roland6 Silver badge

I remember doing autocompression on SunOS back in the 1980's so it looks like its only taken MS 30+ years to implement something that is blindingly obvious - hence will most probably have submitted a patent application...

Why, yes, you can register an XSS attack as a UK company name. How do we know that? Someone actually did it

Roland6 Silver badge

Re: We have taken immediate steps to mitigate this risk.

>If you can't create an application that won't choke on bad XML, then you shouldn't use XML.

From the evidence I've seen over the years, I would agree - the majority of XML developers need to be taken outside and shot!

Now what to use instead of XML..

>you open yourself up to differences between the way the filter parses it and the way the actual application parses it

That's life in the absence of conformance testing! You need to look no further than reading a DOC/ODF file in MS Office and LibreOffice and their differing levels of feature support.

The problem here isn't so much as to assure correctness, but to guard against malformed or as we have here, mischievous XML.

With B2B interfaces both the XML forms and their syntax and semantics should be well defined. So that all you are loading into the XML checker is the schema - it's basically what we did with EDIFACT and ASN.1 ie. standard defensive programming practice...

In this case it also forced both the business and software developers to actually document the XML form (which takes thought and time) rather than simply embed their assumptions in the code. A side effect of this is to introduce a basis for coding efficiency and trust.

An additional problem with the B2B space is the acceptance handshake, namely the broker will deem a form (eg. an order) has been correctly delivered on successful transfer to a third-party system which due to normal DMZ fiewalling isn't typically the end system that will be processing the XML form. So being able to flag that certain forms are incorrectly completed, prevents the broker from raising a 'success' flag (and starting an order fulfilment countdown clock) and will/should cause it to report the failure back to the originator. The issue is generating the error report at the right application level so that in this case the business user placing the order knows their order has failed. In this instance the use of a gateway was deemed appropriate as the receiving XML applications were part of the whitelabel infrastructure underpinning about 30 different websites, so the extra overhead was deemed preferrable to having a malformed XML file taking the whole show down...

Roland6 Silver badge

Re: We have taken immediate steps to mitigate this risk.

>Why any system tries to process any data without sanitizing it is beyond me.

Especially if that data originates from outside the organisation.

I was unpopular back in 2005 when implementing a B2B gateway on insisting on having an "application firewall" ie. an appliance that did "deep packet" inspection of received XML files/streams.

Roland6 Silver badge

Re: We have taken immediate steps to mitigate this risk.

Surely the only reason why this particular company name is an issue is because of the lack of character substitution rules ie. the XML is insecure/open to abuse by design...

Marriott fined £0.05 for each of the 339 million hotel guests whose data crooks were stealing for four years

Roland6 Silver badge

Interestingly, the ruoured £99M fine, only values the individual records at £0.25...

Lenovo to slap ThinkShield security standard for laptop line-up on its Motorola mobiles

Roland6 Silver badge

Re: Call me a skeptic but...

From the article, it would be best to treat ThinkShield as the branding of a particular feature set, that is associated with the ThinkPad brand, and is also clearly an enhancement of the Google Android One programme.

>Also, Lenovo doesn't have a very good track record when it comes to them installing extra crap on their PC line of devices

Take away, never buy a vendor's consumer range of devices; never had this problem with business-grade IBM/Lenovo/HP/Dell systems...

Zoom finally adds end-to-end encryption for all, for free – though there are caveats

Roland6 Silver badge

Re: Rush job

Remember they engaged an expert security consultancy - who I expect would have relevant security patterns in their bag that just needed tweaking to fit the Zoom model. Given the pressure, I would have focused on getting something out and so they've gone for a barebones but usable within the given constraints, solution. I would hope that they maintain the 6 month cadence in enriching the security solution and making it more user friendly.

Roland6 Silver badge

Re: What flavour is the source?

>open source the code

There is the Jitsi video conference software suite and the 8x8 service - however just a small problem of catching up with the ubiquity of Zoom...

Gartner Magic Quadrant for Meeting Solutions 2019

Gartner Magic Quadrant for Meeting Solutions 2020.

Brit accused of spying on 772 people via webcam CCTV software tells court he'd end his life if extradited to US

Roland6 Silver badge

Re: Sharp admins!

Agree, although I assume what was unusual about the traffic was the 24x7 outbound stream.

The other aspect of this that draws attention is the contacting of the local police - did they do this before or after talking with the student.

With Cammy being based in Oz with a UK office, there has been some international police co-operation to identify the individual who was operating the Cammy hub account(s). Which brings into question whether there has been some behind the scenes gentleman's agreement as to where the guy gets charged etc.

Roland6 Silver badge

Re: Laptop shields

>It really is about time that every laptop had a little slide shield over the webcam.

A slide shield has been a feature of Thinkpads for some years now, I suspect from a small sample of colleagues that many people don't use them and have probably forgotten they exist.

What I find a little surprising, is how people are treating laptops/desktops and where they have set them up.

Roland6 Silver badge

Cammy seems to be a legitimate cloud-centric CCTV application

"A Briton is reportedly fighting extradition to the United States after deploying webcam malware"

Be interested to know more about how victims were tricked into installing a legitimate application and pass on relevant access information to a third-party ie. was it via a link in a spam email, hidden download from a website, phone 'support' call. Interestingly, if people thought they were purchasing/installing some form of CCTV surveillance service he may not have actually committed wire fraud...

Looking at Cammy.com, it does look that these types of services will increasingly be targetted; either directly (service access account compromise) or as seems to be the case here, getting user's cameras to associate with your "security service".

5 months later, 37.7% of Windows 10 PCs are running the May 2020 Update... Wait, people are still on 1809?

Roland6 Silver badge

Re: Takes a while...

>Realistically, for many organisations, they would only have the capability to do this once a year.

Realistically, many organisations just don't see the point in wasting monies on the constant new release churn. MS seemed to have a better understanding of business needs back in the W2K/XP/2K3 days, until it tried to force the W7 refresh and things haven't been the same since...

Yes, we have a 5G iPhone now. But that doesn't mean 5G has arrived

Roland6 Silver badge

Re: Bad coverage limited to UK?

>I've not been having 4G coverage problems in Iceland

Stepped outside Reykjavik?

Mind you Iceland is relatively flat so you probably can get some form of 4G in Vatnajökull - I seem to remember getting some GSM coverage on my travels around the country in the 90's.