* Posts by Roland6

10749 publicly visible posts • joined 23 Apr 2010

Zoom's end-to-end encryption isn't actually end-to-end at all. Good thing the PM isn't using it for Cabinet calls. Oh, for f...

Roland6 Silver badge

Re: To be clear ...

>I presume it's all about the slurp.

No I suspect Zoom does it that way because that was the way they did it in Webex (remember Webex and Zoom are like WhatsApps and Signal).

I suspect it was done this way so as to keep the client small and have a single stream from the client to the streaming server, thus able to execute on a wide range of systems. Also, architecturally it makes sense - Webex is effectively just an enhanced streaming server - remember webex was designed before today's obsession with communications security. So having the streaming server save a copy of the stream in massive purpose built storage array not only makes technical sense, but also commercial sense as you can make this a chargeable feature...

Also remember Skype was originally a one-to-one telephone call replacement, not a one-to-1000's conferencing solution.

Leaving Las Vegas... for good? IT industry conference circuit won't look the same on other side of COVID-19 pandemic

Roland6 Silver badge

Re: "Why the heck did we buy loads of desktop PCs"

>Some time ago I got a lot of downvotes for suggesting my company was doing the right thing by replacing desktops with laptops (while keeping the peripherals) so we'd be mobile if needed.

Depends on your meaning of mobile.

Having a office full of laptops doesn't help when most people leave them on the desk overnight and a terrorist bomb goes off and staff are prevented from returning to the (unsafe) building to retrieve said laptops. This is just one business continuity scenario made real in the 1996 London Docklands bombing.. .

Roland6 Silver badge

>In my sector (HE) the question is: Why do we need a big campus anymore?

Because the management wanted a big campus (same-place same-time working) and dismissed same-time different place working (ie. working from home) as being too difficult, requiring too much management overhead etc..

>The other question our place is asking: Why the heck did we buy loads of desktop PCs?

Because they were cheaper than laptops and because as all your people worked on campus at desks, they didn't need laptops.

Basically, this last month management has had to face the reality of what technology can actually do now.

I wager, if you had asked the same management in January ie. before CoViD19 spread outside of China, they would have found many reasons why they should continue to require all staff to work on a big campus and thus have desktops; suggestions that events in Wuhan (never heard of it - they probably would have said) might have a massive impact in a few weeks on the business would have been dismissed as scaremongering...

Microsoft qualifications will pad the CV for another year, Teams for ventilator boffins, and Windows 10 threatened with very retro news app

Roland6 Silver badge

Rise of Windows 10 1909

"New shiny aside, the latest production version of Windows 10, released last year as 1909 or 19H2 depending on your preferred naming convention, saw a considerable jump in usage from 22.6 per cent usage to 28.2 per cent in the latest batch of figures from AdDuplex."

I expect next month's figures will show a significant increase in 1909, and a massive decline in Win7 as people rushed to install systems with Windows 10 and Teams.

Roland6 Silver badge

>Wow that News Bar is just awful.

And a total waste of screen estate.

Lets hope that both end users and GPE can easily turn it off permanently.

UK Information Commissioner OKs use of phone data to track coronavirus spread

Roland6 Silver badge

Re: Not sure how it can be anonymised

The assumption is that either you will succumb to SARS-CoV-2 within 7 days of the first person becoming ill or you won't, in which case you have developed a resistance to it and can no longer be a carrier.

Remember the person who becomes ill will have been spreading SARS-CoV-2 for several days around your house before they became ill, so an assumption is that at the point the first person becomes ill all other members of the household will already be carrying active SARS-CoV-2, just not displaying CoViD19 symptoms.

Roland6 Silver badge

Re: Wedge

Haven't you realised, a 'smart' phone is your identity card...

I suspect that in the near future the government will provide free 'smart' phones to every one and legislate that they must be switched on and carried at all times outside of your home...

Roland6 Silver badge

Re: Bugger

Surprised given his other comments on his government's response to CoViD19 he didn't mention the word 'pray' once.

What happens when the maintainer of a JS library downloaded 26m times a week goes to prison for killing someone with a motorbike? Core-js just found out

Roland6 Silver badge

>Could this apparent apathy kill OpenSource as a tool?

It depends on whether project overseer's fully appreciate the change in their status and thus role once they make an open source project's on-going development open to community contributions.

A conscientious overseer would put in place continuity plans and thus try to ensure the survival of their project(s). However, I suspect that currently many, whilst wanting to ensure project continuity, are uncertain about the bests ways of achieving this.

I think that GitHub and others have a role to play and probably need to develop and promote the services they can offer - users with project overseer responsibilities, in this area. In view of CoViD19, I suggest they need to get something up and running within a week or so. Looking at Abandonware's adoption process, a process that utilises the consent of a project's supervisor is trivial.

So a well orchestrated response and some good marketing, CoViD19 might actually benefit some open source projects. Certainly it would beat negotiating your own escrow arrangements with each and every supplier of proprietary code.

Roland6 Silver badge

Re: Simple solution

There is no copyright issue - the escrow contractual clause handles that; which the project leader will have signed up to on creating their project on GitHub et al.

The issue which the clause needs to resolve, is as you note, is the maintenance of the dependency network so that core-js(2020) can simply take over from legacy core-js(Denis Pushkarev) and users don't see any change.

Given the age of many open source projects, and their leaders, I expect we will be seeing this handover problem occurring regularly in the coming decade.

Roland6 Silver badge

Re: Simple solution

Escrow isn't new or rocket science. Github (and other open-source repositories) simply need to amend their standard terms of service for projects to include an escrow clause, allowing them once certain conditions have been satisfied to transfer the ownership of a project in the absence of the project's designated lead maintainer...

Internet samurai says he'll sell 14,700,000 IPv4 addresses worth $300m-plus, plow it all into Asia-Pacific connectivity

Roland6 Silver badge

Re: Civilian note

>It turns out that IPv6 works OK and dual stack works fine.

I think Jun Murai, an "IPv6 advocate" would agree with you.

>That /n has absolutely no value whatsoever.

Clearly Jun Murai disagrees with you here. Perhaps because he wants money to fund a pet project: "boosting Asia-Pacific connectivity and online services".

Roland6 Silver badge

Re: Old blocks that not abide to current rules should not be routed

>Making them non routable will drop their usefulness and value to 0.

Might get a call from the US military/defense establishment - they seem to be sitting on rather a lot of /8 address ranges...

Roland6 Silver badge

>For one, the pool is in no way free.

Given the recent events at ICAAN, can't help but think Wilson was thinking more of his potential slice of the resale revenues such a cache of IP addresses could deliver...

Roland6 Silver badge

Re: In 3.. 2.. 1..

>The guys who learned from Cisco seem to put the gateway at .1.

Given the origins of Cisco, I suspect they just picked up a pre-existing convention, which was probably set by Jon Postel et al: ".1" is only two characters to be keyed, ".254" is four - important in the time before DNS and RIP...

Don't believe the hype: Today's AI unlikely to best actual doctors at diagnosing patients from medical scans

Roland6 Silver badge

Re: Don't believe the hype indeed...

>"Furthermore, think about this: the major part of a medical treatment is is the human aspect. Just consider this example: got corona? Please input your data at the screen at the entrance of the hospital... Processing... Our triage protocol shows that you will not be treated at this facility. Next patient please... "

If you replaced entrance to hospital with NHS 111 and a real person at the end of the phone, you've got the current situation. Given the state people have to be in to be admitted to hospital, the "your condition isn't serious enough to be admitted, please call back if they worsen" responses must be difficult conversations...

Surge in home working highlights Microsoft licensing issue: If you are not on subscription, working remotely is a premium feature

Roland6 Silver badge

Re: Home PC accessing the corporate network? Hell no!

>it's just moving the point of attack slightly.

But it is a useful move for Internet facing services.

It also changes the attack. With a MS RDS Server directly visible on the Internet, you are enabling the full range of RDP/RDS exploits to be tried directly against a live server. The addition of a VPN gateway, means an attacker has to mount a (successful) VPN attack before they gain access to the RDS server.

Roland6 Silver badge

Re: Home PC accessing the corporate network? Hell no!

Bet they allow OWA...

If you're prepared to take the licencing hit, WS2012 and later supports the Remote Desktop web client...

Roland6 Silver badge

Re: The most simple way is not mentioned here?

>The next level is what you talk about, a full Windows Terminal Server, which require your mentioned RDP CAL.

Which (if memory is right) is concurrent user-session based not actual machine, named individual or location based. Hence if you have a correctly licenced RD or TS (without without gateway systems) for normal office use, it is correctly licenced for remote access by those same users.

So the licence issues only really appear when under normal circumstances an organisation with a large user population but low level of concurrent RD/TS users changes to one with a large level of concurrent RD/TS users.

About the only licence issue an organisation may encounter is if they decide to use a Windows server as the VPN host, but who in their right minds would do that when dedicated VPN appliances are readily available and can be up and running in minutes compared to building a Windows VPN server.

Forget about those pesky closures, Windows 10 has an important message for you

Roland6 Silver badge

Re: The long, dark teatime of the next few months

>or having a big family

Expect a large number of babies in Nov~Dec..

Roland6 Silver badge

Re: "not giving Windows 10 enough headroom"

>Partitions ? Yeah, it's heard of them

But only for its own comsumption.

A clean install of W10 will happily create 4 partitions, only 1 of which is "C:\" and user accessible.

It amused me that doing a vanila install from MS supplied media that W10 automatically creates an OEM recovery partition without giving me any option in the matter; furthermore I'm not aware of any OEM that provides a recovery partition image (and tools) that I can download and install into this reserved partition.

Roland6 Silver badge

Re: "not giving Windows 10 enough headroom"

>Windows will remove old files and update-related downloads after a month.

Bet when W10 is showing the error seen at Ikea, normal housekeeping procedures such as this get put on hold or even better actually get done but the update process displaying the message doesn't get updated to the new state. So when some poor engineer takes a look there is a practically empty HDD...

It's time to track people's smartphones to ensure they self-isolate during this global pandemic, says WHO boffin

Roland6 Silver badge

Re: Pesky thing...

>"or the right of the people peaceably to assemble"

Says nothing about the size of an "assembly", nor anything about people not having to be at least 2 metres away from others in the 'assembly'. Naturally, the instance someone demonstrates with an official about their "peaceful assembly", they are no longer "peacefully assembling"...

Equinix closes data centres to customers, contractors in France, Germany, Italy, Spain amid coronavirus pandemic

Roland6 Silver badge

> "What happens when due to illness the staffing levels for the cloud suppliers falls below the minimum needed to maintain service"

Nothing until something happens and there is then something to be done that requires more than the staff on duty can handle to restore service...

Currently, creating tertiary continuity provisions - although currently only the FinDir at one client has the password to the payroll system... But there is a point where you do have to decide just how many people need to know where to obtain the combination to the safe containing the master access codes and are these the same people that know the access codes to the building and room containing the safe...

Thought you'd go online to buy better laptop for home working? Too bad, UK. So did everyone. Laptops, monitors and WLANs fly off shelves

Roland6 Silver badge

Prices are being to make Maplin (the deceased high street store) prices look like bargains.

Roland6 Silver badge

Re: I Hate This Panic Buying!

Hope it was the superduper one - complete with a variety of useful attachments so you can offer your services in the coming weeks and months to the "Good Life" brigade...

A friend once complained the shaver they brought, whilst good and came with lots of attachments, was missing the attachment to use it on your boat. As he didn't own a boat or have even stepped on a boat, he naturally got the p*** taken and still gets reminders.

Roland6 Silver badge

>Ourselves we ended up with 9 Dell Vostro's.

Seem to be solid systems, whilst not particularly exciting specification-wise or visually, the do seem to take the knocks and last - one client has been using Vostros as their mobile classroom laptops since 2012 about a third of their current classroom laptops are from that original batch.

Roland6 Silver badge

Re: Delays

For one client I've just completed going through their store of "for disposal" laptops - I've been pleasantly surprised just how easily windows 10 installed on Dell Latitude/HP ProBook laptops (i3 and better variants) dating back to circa 2012 and yes the impression is that Win10 (1909) - after it has sorted itself out is slightly snapper than the pre-installed W7/W8 images.

Obviously, the laptops have received a physical clean - superclean keyboard cleaning gel is surprisingly good at its job - plus your hands also get a good cleaning. But people have been really pleased to be given a laptop and not really cared that it might be 'ancient'.

However, my experience with doing similar with HP/Dell desktops isn't quite so positive.

Roland6 Silver badge

Re: and desks and chairs at IKEA

>Swedish doesn't do grave or acute accent marks.

You mean Ikea product names are actually correct Swedish and mean something in Swedish?

Education tech supplier RM smacked by UK schools closure

Roland6 Silver badge
Pint

Re: Garbage

@Will - Gave you an up vote as I think I get where you are coming from :)

Roland6 Silver badge

Re: Garbage

>The concept of RM is sound: a series of machines that are consistently built, tested and configured, allowing them to be scaled up in number and supported by a team who don't need to worry about a million Frankensteined configuration and specifications when troubleshooting.

It has been a little surprising that RM didn't grasp the post-2012 education environment with both hands and promote the usage of systems based on Rasberry Pi's and so support and enhance its UK-based ecosystem.

UK government puts IR35 tax reforms on hold for a year in wake of coronavirus crisis

Roland6 Silver badge

>Therefore all the effort and money they put into doing this the right way, ... is likely wasted.

If the senior staff are half decent consultants, they will be able to translate all that work into learning and this into an IR35 service proposition to their clients...

Roland6 Silver badge

Re: The number of p155 takers ruining it for genuine contractors

>Any staff carpark below exec level makes it transparent - the good cars almost always belong to a contractor.

Going all the way back in the 1980's this situation made me wryly smile; being aware of the monthly lease cost of company cars. The only reliable conclusion I decided wasn't so much the saving of the £10~20 p/month - which could be funded by employees (ie. for £200pcm fully funded by the company you can have a Ford Focus, contribute an additional £20 pcm from your salary and you can have a BMW 5 series instead... Yes I know I'm exaggerating to make my point, but it's not totally off the truth of the matter) but the maintaining of differentials and perceiptions; customers form a different perception of a company (and its representatives) if for example the engineers drive BMW's as opposed to Vauxhall Cavaliers.

Roland6 Silver badge

Re: One-nation Barmy

>Sick pay is a taxable benefit?

Don't pay NI, don't get SSP!

Sick pay is treated as income for tax purposes, so is fully subject to income tax.

Roland6 Silver badge

Re: So they know it’s damaging...

>I think the disease is COVID-19

Yes that is the official name, however you will see both the mainstream media and social media also using #Corvid-19., my mistake in not double checking what I was actually typing...

Roland6 Silver badge

Re: The number of p155 takers ruining it for genuine contractors

>So long as your paying your correct taxes contract all you want, but pay your correct taxes like non contractors do.

But what exactly does this mean?

A contractor employed by a major SI can easily be on a £100K package (including overheads) ie. cost £500 per day, but sold at £1200 per day. We can assume (as HMRC assumes this) this employee (and employer) are paying the correct tax on these £500 pday.

Now I can undercut the SI and charge £800 pday for an identical level of service and pay myself (the employee of my company) the £500 pday rate out of this.

For some reason HMRC with IR35 has deemed that this arrangement doesn't satisfy the "broadly the same tax as those employed directly" criteria...

Roland6 Silver badge

Re: So they know it’s damaging...

>But in fairness, would you rather want to run the gauntlet of travelling into work by virus-infected public transport and then onto the infested open plan office ?

That's normal life (ie. running the gauntlet of travelling into work by virus-infected public transport and then onto the infested open plan office), the only difference is today that there is the potential to pick up SARS-CoV-2. [Yes, the virus is officially catalogued as SARS-CoV-2, the disease it causes is Corvid-19.]

European electric vehicle sales surged in Q4 2019 but only accounted for wafer-thin slice of total car purchases

Roland6 Silver badge

Re: Range & Time for a FULL charge

>If you want thinner leads, you increase voltage, not add more leads.

A few years back, I was surprised at the thinness of the leads used to connect an electric locomotive's pantagraph to the 25,000v overhead supply cable.

BT CEO tests positive for coronavirus, goes into self-isolation after meeting fellow bosses from Vodafone UK, Three, O2 plus govt officials

Roland6 Silver badge

Re: Sounds awkward

It is obvious 'parts' imply servers and PC's - I had to read it a couple of times as I had misread it on the first scan to imply:

BT revealed it is working closely with Public Health England to initiate a "full deep clean of relevant parts" of the group's PHE's HQ in central London....

The Reg produces exhibit A1: A UK court IT system running Windows XP

Roland6 Silver badge

Re: Hitching a ride on the Gravy Train

>How does Win 10 negate the need for a VPN?

It doesn't; however, given the NHS is using Vodafone Secure Remote Access - which is more than just a VPN, it doesn't require the NHS to pay Vodafone to maintain support for the 2000/XP client etc.

Roland6 Silver badge

Who is Ben Rowe?

"I was informed today that DARTS, the system which makes and stores recordings of all Crown Court matters runs on Windows XP - the operating system that is no longer supported by Microsoft and is particularly vulnerable to ransomware attacks (e.g. NHS)."

If Ben had read the report on the NHS randsomware attack, he would of known that it was the Windows 7 systems that were compromised not the legacy XP systems. Not saying that XP is wonderfully secure, just that it isn't as bad as some would like to make it out to be...

House of Lords push internet legend on greater openness and transparency from Google. Nope, says Vint Cerf

Roland6 Silver badge

Re: Cerf returned a polite, but firm no

>Understanding an algorithm developed by machine learning?

Er, no - the algorithm was developed by humans, the machine is merely executing the algorithm. Remember, for example, bayesian and neural networks and how they process data and 'learn' is well defined and understood; however the specific current state of a specific network and its current 'calibration' is much less certain, in part due to complexity ie. read determining the behaviour requires a significant amount of human effort, which we are not prepared to .

>By this point, Google themselves have no idea how the algorithm works and what it does.

Google will most certainly know "how the algorithm works" (although they may not know precisely how it will treat a new previously unseen input) as it is them who regularly tweak the algorithm to keep it relevant as the need for new filtering categories arise.

Roland6 Silver badge

Re: Cerf returned a polite, but firm no

>There's no doubt that Vint is a bright guy and that he's scrupulously correct and polite face to face, but, like Rees-Mogg...

He's not that bright.

It is clear the Vint who serves Alphabet,i is just a shadow of the younger Vint who helped lay the foundations of the Internet.

There is really no reason why Alphabet couldn't "publish information about algorithms and neural networks", there are plenty of people out-there fully capable of reading and understanding them, however, the real problem is that these would reveal the full extent to which the human hand is still necessary to manipulate the "complex interconnection of weights that take input in and pop something out to tell us you know what quality a particular web page is".

Hello, support? What do I click if I want some cash?

Roland6 Silver badge

Re: Barclays don't dogfood their IT

Just be thankful that Turbotax doesn't also require a business office 365 subscription to work - like some other accounts packages...

Roland6 Silver badge

Re: Windows appears in the most unlikely places

>And of course a photocopier must retain, somewhere, images of documents of which it is producing copies...

Yes and so do many printers,. It is a big headache in designing fully functional secure infrastructures for those that require (and demand) real security.

However, if you speak nicely to enterprise secure printer sales at HP and other vendors. you will find they do sell versions which support certificate-based HDD encryption and memory overwrite etc. to remove all traces of (the de-encrypted) print file from disk & memory. Most companies don't use this style of machine as they are both expensive and tend to require a user (and 'owner' of the print file) to be present to oversee the printing.

Grab a towel and pour yourself a Pan Galactic Gargle Blaster because The Hitchhiker's Guide to the Galaxy is 42

Roland6 Silver badge

Re: The benefits of working for the company

>I had tapes of the every episode, recorded straight off the PCM feeds to Sutton Coldfield...

I assume that includes the entire live to air first series, (broadcasted on Radio 3 at 10pm on friday nights)?

Memory says that they forgot to turn on the recorders on one episode which caused subsequent problems as with last minute (ie. minutes before spoken live by the actors) script changes and live sounds, recreating that episode for the replays was fraught.

You've duked it out with OS/2 – but how to deal with these troublesome users? Nukem

Roland6 Silver badge

Re: Timing is off..

No need to reverse engineer it, the BIOS assembly language source was printed in the back of the IBM PC user manual.

IIRC, the process went: Clean room team writes a spec, based on reading the source, then second team implements from the spec.

A good example of how the 1980s was so very different today; today this behaviour could form the basis of a copyright infringement court case - like the Oracle v Google one over Java.

Don't be fooled, experts warn, America's anti-child-abuse EARN IT Act could burn encryption to the ground

Roland6 Silver badge

Re: *shudders*

>I "prescribe" a purge ITYM.

This is the US not the USSR, so suspect a witch hunt would be more readily taken.

More than a billion hopelessly vulnerable Android gizmos in the wild that no longer receive security updates – research

Roland6 Silver badge

Re: And in comparison...

>Admittedly it's a bit shit, but it works,

Just updated a set of identical HP desktop systems with mid-range generation 2 i3's from Win7, performance is definitely better if you do a clean install, letting the installer repartition the HDD and find relevant drivers from the web.

Want to own a bit of Concorde? Got £750k burning a hole in your pocket? We have just the thing

Roland6 Silver badge

Re: Makes me wonder

Also its history does raise the question as to why it isn't in the Seattle Museum of Flight. Followed by the question as to the location of the other 3 engines from this airframe.