Re: Passparm test show it's true - but so what.
>With mains on, I got 13923. WIth just battery, I got 10252.
Did you changed the power scheme to max. performance etc. for both mains and battery?
10727 publicly visible posts • joined 23 Apr 2010
>It's notable that this time around AMD kit that has a USP of excellent price/performance is consistently priced considerably above the Intel prices on the main suppliers websites,
That, I suspect, is a function of the time of year and the need to get rid of stocks of intel-based systems that AMD have effectively made obsolete...
Circa 2 months back Lenovo were offering a Ryzen 7 Pro 4750U based Thinkpad at the same price point as their Intel i7 10510U version, namely circa £900+vat. Naturally, the AMD variant quickly sold out...
Given an increasing amount of IT is now done "in the cloud" on other peoples systems, which are often locate overseas, rather than in UK located company owned data centres.
I wonder if people are more concerned about getting UK legal black-and-white which can be used as a defence against foreign law and extradition, specifically the US "wire fraud" catchall and charge sheets full of imagined offences that disappear when the case finally gets to court - several years later...
Addition:
I see from rereading the article a big area where consent is unlikely to be forthcoming is where people are probing 'adversaries' infrastructure which could be operated by criminals or state entities. Ie. I've found something odd, so I will investigate it back to source and then determine just what exactly is that source.
i therefore expect the government to listen, given their commitment to military cyops...
>My mother in law can't use a mouse because she hammers the buttons so hard the mouse moves an inch or more, performing an unwanted drag'n'drop instead of a click. We explained it, she still hammered the buttons and complained. So I bought her a trackball, which she loves because "it works".
How long was it before she stopped moving the trackball like a mouse?
Had to swap out my mother-in-law's ergonomic trackball as she just couldn't get to grips with moving the ball rather than the 'mouse'.
>That said, it would have probably been beneficial for the PFY to hang around a bit in the morning to witness just exactly how she managed to mangle her desktop icons like that every single day.
Well from the article it is obvious, the mangling was most probably associated with the way she was powering off her PC, namely via the monitor on/off button...
I suspect part of Apple's reasoning is to ensure developers and especially hobbist/pre-startup and startup/small developers to continue to develop for the Apple ecosystem, first.
We can expect similar inducements from MS and Google in the near future.
>The good old days when you could purchase software online.
I think the original AC was referring to the norms of the 80's and early 90's.
But yes, back when companies ran their own store, direct sales were much sought after as they could mean you actually got circa 80% of RRP to maintain the development team, compared to 20~30% via third-party retailers...
It's very clear that only the bare minimum has been done to fix the issues with the aircraft. The end result is an aircraft which is a hodge podge design largely dating back to the 1960s, with all the frailty that implies.
From what I've read there is nothing fundamentally wrong with the airframe - dating back to the 1960's. The problems stem from Boeing decided to install engines that fundamentally were too big for the airframe. To achieve this, they did a hodgepodge design and mounted the engines further forward and higher, changing the flight characteristics and handling of the plane, to mitigate this they installed additional sensors and automation. The problems arose because these systems were poorly designed and implemented...
Thus the obvious solution is to replace the engines with smaller - but less economical - engines (ie. engines of a size the airframe was originally designed to take) and largely strip out the additional systems...
>There really will come a time when you can't leave for work because your car's stuck doing updates.
The time is already here where you can't be sure if the Tesla you intend to drive to work in, will behave the same as it did when you parked it on the drive last night; it caught James May out...
>Tesla are not only replacing free of charge
This time around...
Tesla have form for removing functionality and then charging the user to reinstate said functionality... Ask Grant Shapps, the (UK) transport secretary, about his rear seats that were heated until an OTA software upgrade...
>I'm glad I've missed it so far, but if/when I return to my consulting business I will really be annoyed if the "new normal" is that everyone video conferences. I'll have to clean up my office so it doesn't look like such a mess behind me, worry about what I'm wearing..
Yes, ElReg has missed a sales opportunity.
Where can people buy the t-shirts and mugs which regularly appear in ElReg pictures?
Another good thing to come out of VC, is the realisation of just how rubbish the majority of PC/laptop/Android phones webcams are, along with their audio capabilities - this is one of the areas that Apple does seem to be doing better....
Perhaps in 2021 laptop vendors will be fitting 1080p 3D webcams as standard, rather than claiming HD but only delivering 720p (even on their top-end machines), along with decent audio circuitry.
>When people haven't had hair cuts for months on end and growing lockdown beards, surprise video requests are a bit unfair.
Too many years back I discovered one of the best ways to get people (of different grades and jobs) to communicate etc. was to get them to give up a day and do a gardening/house redecoration project (aka community service) where the dress code was "wear clothes that will get dirty".
> if the local user is muted, and their microphone starts picking up audio ... then put a conspicuous notice on the user's screen that they're muted
My partner was on a Zoom cookery class earlier, I overheard the tutor telling people to mute their mike's because their vigorous vegetable chopping was causing audio problems....
>-eye contact doesn't work, because the camera and the screen are not in the same place.* Even if they were, your pupils would appear to the other person to be looking at a point in space roughly halfway between them and you.
That's just a function of the current state-of-the-art, the level of tech that can be mass produced and the price people are willing to pay. We already have the technology to resolve this problem, just that currently it doesn't fit within the constraints of desktop/portable devices.
The fact of the matter is that times-are-a-changing, just as they changed from letter writing to telephone and radio to TV.
One of the good things to come out of lockdown is the widespread use of Zoom et al has exposed the limitations of the current Internet. Interestingly, if you believe all the hype about 5G, it will also suffer because it too is crippled by the constraints of the IPv4/IPv6 Internet. The time really is coming for Inter net v3 [Aside: V3 to distinguish it from the talk back in the late 90's of Internet V2.]
>"...endemic problems in ISP-supplied parental filtering software, which routinely block legitimate and innocuous content."
It also works the other way...
One widely used content filter, will block gambling sites.. however, a quick test of the filter wil demonstrate that yes it will block the big name sites but not the more locally focused sites. Additionally, due to the lack of granular controls in the filter, you have to disable the block if you want to access the National Lottery to submit a funding bid or to report on funding received...
>MS phone my home number. Which I ported to VOIP a year ago and can access from any device, anywhere as long as I know the password. Why not just ask me for a second password?
Seems that what you've got is more secure(*) than a second password, which would naturally have to reside on an MS system (probably the same system as the first password, the answers to your security questions and your address/contact details) and hence available to a third-party to download etc.
(*) It bears comparison to a public key (your VOIP phone number) and private key (your password).
So a targeted social engineering attack that enables the spoofing of a genuine SIM, not an actual attack on the SMS service...
How about a working example of an SMS attack that can intercept the SMS from MS to my phone which provides sufficient information for someone to access my MS account - last time I received an SMS from MS it didn't contain my MS Account username...
Trouble is that Teams and many other collaboration tools are designed to be used within a single organisation.
Work in an organisation where the norm is to work collaboratively with other organisations (in both ad-hoc and more long-term arrangements) and you can quite quickly find yourself restricted to: phone, email, Zoom, Dropbox...
Mind you, I don't see why the IT department needed to be involved, Zoom like Teams installs in user space... So it would have made more sense for the IT to discover that the reason why Teams isn't being used is because users had voted with their feet and installed Zoom...
Yes the media have played a part in establishing Zoom as the defacto tool, but Zoom took off initially because there wasn't really any other app ready to roll back in March - the media merely picked up the success story and amplified it...
So which other video conferencing, collaboration tools are going to receive the same level of third-party security scrutiny?
I would turn this around and sell it as a benefit of the Zoom product and thus encourage the Federal Trade Commission to do similar with the other vendors and establish a full regulatory framework....
Surely a certificate store update app is a standard part of Android, thus all that is necessary is a certificate update release as part of a Play services update.
Okay some other method will be needed to support non-Play devices, but don't see why this is causing an issue - unless Google cut one too many corners on Android...
>It will be 3 years before his conviction is spent, he won't be able to get a job in IT in the interim period and would then need to explain to a future employer why he was out of IT for 3 years that would be a red flag for me as a recruiter.
Easily hidden given he was just 23 and a "Service desk analyst":
Startup a computer support business, only needs a few friends to be clients, spend the time getting a few relevant qualifications (many online courses are currently discounted/free). Alternatively go to college and get an IT qualification.
In 3 years time there will be no career gap, just some more relevant experience...
The original lyrics were:
"Rule, Britannia! rule the waves" - an exultation, because at the time the Dutch ruled the waves/seas.
The Victorians changed it to "rules".
However, we should remember it was written by a pre-Romantic poet and playwright and thus 'waves' could mean "move one's hand to and fro in greeting or as a signal", which puts another spin on the lyric.
Dear AC, a base (fixed) income at more than 30% above market rate makes it not sustainable, especially at the beginning when companys hardly make a profit.
Well the obvious solution to the problem is if you really need foreign labour is to not base your start-up in the USA.
Brexit Britain is due to go-live in a couple of months, suggest you take a look, it isn't a bad place for a tech startup...
If Huawei somehow finds itself able to license Google Mobile Services once again, this would easily be the most compelling Android flagship on the market:
Surely all that is needed is for Huawei to provide relevant information to the XDAdevelopers Forum,given they have already demonstrated the ability to install Google Play Services on other Huawei handsets...
>If you can't create an application that won't choke on bad XML, then you shouldn't use XML.
From the evidence I've seen over the years, I would agree - the majority of XML developers need to be taken outside and shot!
Now what to use instead of XML..
>you open yourself up to differences between the way the filter parses it and the way the actual application parses it
That's life in the absence of conformance testing! You need to look no further than reading a DOC/ODF file in MS Office and LibreOffice and their differing levels of feature support.
The problem here isn't so much as to assure correctness, but to guard against malformed or as we have here, mischievous XML.
With B2B interfaces both the XML forms and their syntax and semantics should be well defined. So that all you are loading into the XML checker is the schema - it's basically what we did with EDIFACT and ASN.1 ie. standard defensive programming practice...
In this case it also forced both the business and software developers to actually document the XML form (which takes thought and time) rather than simply embed their assumptions in the code. A side effect of this is to introduce a basis for coding efficiency and trust.
An additional problem with the B2B space is the acceptance handshake, namely the broker will deem a form (eg. an order) has been correctly delivered on successful transfer to a third-party system which due to normal DMZ fiewalling isn't typically the end system that will be processing the XML form. So being able to flag that certain forms are incorrectly completed, prevents the broker from raising a 'success' flag (and starting an order fulfilment countdown clock) and will/should cause it to report the failure back to the originator. The issue is generating the error report at the right application level so that in this case the business user placing the order knows their order has failed. In this instance the use of a gateway was deemed appropriate as the receiving XML applications were part of the whitelabel infrastructure underpinning about 30 different websites, so the extra overhead was deemed preferrable to having a malformed XML file taking the whole show down...
>Why any system tries to process any data without sanitizing it is beyond me.
Especially if that data originates from outside the organisation.
I was unpopular back in 2005 when implementing a B2B gateway on insisting on having an "application firewall" ie. an appliance that did "deep packet" inspection of received XML files/streams.
From the article, it would be best to treat ThinkShield as the branding of a particular feature set, that is associated with the ThinkPad brand, and is also clearly an enhancement of the Google Android One programme.
>Also, Lenovo doesn't have a very good track record when it comes to them installing extra crap on their PC line of devices
Take away, never buy a vendor's consumer range of devices; never had this problem with business-grade IBM/Lenovo/HP/Dell systems...
Remember they engaged an expert security consultancy - who I expect would have relevant security patterns in their bag that just needed tweaking to fit the Zoom model. Given the pressure, I would have focused on getting something out and so they've gone for a barebones but usable within the given constraints, solution. I would hope that they maintain the 6 month cadence in enriching the security solution and making it more user friendly.
>open source the code
There is the Jitsi video conference software suite and the 8x8 service - however just a small problem of catching up with the ubiquity of Zoom...
Agree, although I assume what was unusual about the traffic was the 24x7 outbound stream.
The other aspect of this that draws attention is the contacting of the local police - did they do this before or after talking with the student.
With Cammy being based in Oz with a UK office, there has been some international police co-operation to identify the individual who was operating the Cammy hub account(s). Which brings into question whether there has been some behind the scenes gentleman's agreement as to where the guy gets charged etc.
>It really is about time that every laptop had a little slide shield over the webcam.
A slide shield has been a feature of Thinkpads for some years now, I suspect from a small sample of colleagues that many people don't use them and have probably forgotten they exist.
What I find a little surprising, is how people are treating laptops/desktops and where they have set them up.
"A Briton is reportedly fighting extradition to the United States after deploying webcam malware"
Be interested to know more about how victims were tricked into installing a legitimate application and pass on relevant access information to a third-party ie. was it via a link in a spam email, hidden download from a website, phone 'support' call. Interestingly, if people thought they were purchasing/installing some form of CCTV surveillance service he may not have actually committed wire fraud...
Looking at Cammy.com, it does look that these types of services will increasingly be targetted; either directly (service access account compromise) or as seems to be the case here, getting user's cameras to associate with your "security service".
>Realistically, for many organisations, they would only have the capability to do this once a year.
Realistically, many organisations just don't see the point in wasting monies on the constant new release churn. MS seemed to have a better understanding of business needs back in the W2K/XP/2K3 days, until it tried to force the W7 refresh and things haven't been the same since...
>I've not been having 4G coverage problems in Iceland
Stepped outside Reykjavik?
Mind you Iceland is relatively flat so you probably can get some form of 4G in Vatnajökull - I seem to remember getting some GSM coverage on my travels around the country in the 90's.