* Posts by streaky

1745 publicly visible posts • joined 5 Jul 2010

Java and Python have unpatched firewall-crossing FTP SNAFU

streaky
Facepalm

You had me..

at FTP.

I love that this protocol is something you can discuss and people know what you're talking about.

UnBrex-pected move: Amazon raises UK workforce to 24,000

streaky

Re: What's the Brexit angle?

Whatever your view, this is neither in spite of nor because of Brexit.

I tend to agree generally but they'll have to stop billing UK sales to Luxembourg when we leave which defeats the purpose of not setting up in the UK in the first place. Why be in Luxembourg when you can not be? It's a little of both. I'd expect to hear more stories like this over the coming years, especially from multinationals wishing they weren't in Ireland. Google and Facebook have already jumped, there's a few others that must be considering.

Also FWIW all those at the back that weren't listening the 40 times it's been discussed: right now is a good time to invest in the UK using foreign currency reserves - and it's caused by the GBP having been under attack by speculators since the vote. Maybe next quarter lads keep trying!

WTF is up with the W3C, DRM and security bods threatened – we explain

streaky

Sure - people do occasionally rip streams for themselves and friends, but this is not where pirate torrents or bootleg DVDs or any of the other horsemen of the media apocalypse come from.

Sorry but most do honestly, iTunes, Amazon et al. There's enough HD network-exclusives out there to easily contend this is exactly what happens. Like I said it's not an argument *for* DRM, it's an argument against it, but it is the reality.

streaky

Problem is, and I should have mentioned this in my post - there's no general purpose computing solution to the problem "people are copying my ip/data/movies/music/books". If there's no general purpose computing solution then either the entire platform has to change so we can't do whatever we want (i.e. we must all go out and buy apple tablets) or this stuff doesn't belong in a situation where w3c are wasting time (and I guess funding) trying to prove god doesn't exist. Tell them to piss off and move on.

streaky
Black Helicopters

No pirated content is actually sourced from online streaming services

Lets be honest, it actually is, but that's why it shouldn't exist not why it should.

Problem is the stuff they're already using is about as useful as a chocolate teapot. Open standards won't make that worse or better; DRM's sole purpose - and it has been this way since *at least* CSS - has been to screw people who buy stuff legally whilst having zero impediment to piracy and create an environment for users where if they want a better experience they should pirate. The "web" doesn't need a standard, open or otherwise, that contributes to this shitshow, get it out my browser.

This repeated failure to learn the lessons of history or listen to anybody outside the bubble (Trump could take note too) is really starting to get my goat. Anybody at the W3C involved in this should be ashamed of themselves, try telling truth to power and clearing the decks.

Is your child a hacker? Liverpudlian parents get warning signs checklist

streaky

Re: Being a criminal has little to do with the list as given.

The most competent whitehats were blackhats first. The end.

My thing is what exactly is it parents are going to do to stop this? You've identified your kid is a "hacker". Great. Now what? When I was a kid back in the heady days of dialup my parents thought they could stop me using computers and the internet; and they were extremely wrong - I write software for a living now what's the problem?

The key here isn't teaching kids not to be hackers it's about ensuring they can tell the difference between right and wrong, and I still contend we do need blackhats even for those who can't be taught that - there's no uni courses that teach the competences blackhats acquire from being down in (and causing) the shit, and there never will be.

US visitors must hand over Twitter, Facebook handles by law – newbie Rep starts ball rolling

streaky

Re: Huh?

"I'm sorry sir/madam but you are not allowed into the US. By the way, you'll have to pay for your own flight home."

And then you have to explain to the kids why they don't get to go to Disneyland.

That's a nice tourist industry you have there, it would be a shame if anything were to happen to it.

All because they didn't get to see me calling out Mark Clattenburg for being a shit ref or Facebook for not enabling U2f unless you tie a phone to your account. No doubt I'm some sort of threat to the republic.

They're welcome to go search but I won't be telling them.

streaky

Re: Huh?

Before you go, create brand new, fake accounts, posting comments about your undying love for the USA, and everything American.

What mean is "I don't have any".

Now what? Smart bunch these republicans.

As Microsoft touts Windows Insider for biz, let's take a look at W10's broken 2FA logins

streaky

That kit is an integral part of whatever your employer does. It would cost hundreds of thousands or upwards of whatever currency units you work in to replace and there's no money in CAPEX for several years. It's controlled by a PC using proprietary S/W and protocols connecting PC and machine together. That proprietary S/W only runs on XP, or is only certified to run on XP and regulatory considerations mean you have to follow the certification.

Are you a nutty if you (a) continue to run on XP, (b) scrap a hugely expensive piece of kit and discontinue the service it provided or (c) consider users in this situation who continue running XP to be nutties?

I know how I'd answer that question.

I would say you didn't do your due diligence when you bought and probably should be doing this technology thing. Next!

You've not heard of LTS builds for Linux?

Microsoft supports compatible stable platforms far longer than any Linux distro ever has which is circular to see above and also you're still screwed when that LTS support ends, hell Ubuntu is already killing off 14.04. Orignal point still stands you're either on the code changes train or you're running old broken things (gl with the whole new ciphers thing in OpenSSL). Next!

This way people do tech business isn't compatible with code realities, is I guess my main issue.

streaky

Anyone who's business relies on this unfinished OS with its ever changing forced updates, is in for a world of pain. Pick an OS, make your applications work with it, don't change until something demonstrably better comes along.

I say this as somebody operating stacks of Linux boxes so don't think I'm being obtuse or aything but:

Welcome to Linux.. wait nope. Welcome to BSD.. wait nope.. Welcome to Apple OS-whatever-we're-calling-it-today.. wait nope.

Welcome to HP-UX? Not many options for your worldview. Actually I don't think there's any. OSes change because technology changes. If you want to get off the train you're going to lose support for new hardware and end up with broken crypto stacks like those nutties still on XP.

Global IPv4 address drought: Seriously, we're done now. We're done

streaky

Re: IPv6 usage soaring?

6 thumbs down - everything I said was 100% true. I didn't know the Trump white house team were such avid readers of the register.

By "going out of their way" I assume you are referring to the common practice of rolling their own build of Linux rather than simply ensuring that suitable drivers are pushed upstream each time they use a new piece of hardware

No I mean that the routers fully support it.

streaky
Alert

Re: IPv6 usage soaring?

It's only very recently that IPv6 support has become anything but hard to find in domestic/SOHO networking hardware

Nonsense, it's been in there for decades they've just been going out of their way to turn it off. We used to have an ancient hub for adsl in our old apartment that was owned by our company which had been there for years, had full IPv6 support, looked reasonably competent - it was all turned off and you literally couldn't pay BT to enable it. At the latest it was a 2005 model. Latest.

Meanwhile we're on hyperoptic right now, all their gear was probably bought when at least Europe had run out of IPv4 addresses - IPv6 had been a thing in production for years at that stage - and they just inappropriately enabled CGNAT on probably the most competent inet service the country had (emphasis on the *had*) and they keep saying IPv6 "soon". There's no hardware or software issues in play they're just too moronic to enable RAs and call it job done.

All the consumer ISPs are minimally competent when it comes to literally any degree of networking technology is the real issue here.

Two words, Mozilla: SPEED! NOW! Quit fiddling and get serious

streaky

Re: Fair comment.

I use Firefox as my default browser, and I like it.

+1 but damn it's hard work sometimes..

Deafening silence as Smart Hosting support tickets keep piling up

streaky

Re: Interesting

It's 2017, the idea of having one server for one website and hoping for the best that it doesn't go down is long long gone.

I've been advocating this for years and I tend to agree but the problem is it's not always that simple, especially if you're doing financial transactions and the like.

Russia and China bombard Blighty with 188 cyberattacks in 3 months

streaky
FAIL

I can't even figure out the scope of these numbers. What I do know is if it's only 188 in 3 months then Russia and China aren't trying very hard. I could do billions in minutes without even really trying. Again, scope is at question.

Love the idea of GCHQ telling people that we're under attack, we were all wondering when GCHQ were going to notice, stop looking at people's cat pictures, and actually contribute. (Also that GCHQ are the planet's biggest threat to UK corporate IT; we've all seen the slides).

SQL Server on Linux? HELL YES! Linux on Windows 10? Meh

streaky

Re: Gut feeling

Gut away.

It makes it easier for people like me who develop from the windows desktop for linux servers to use linux tooling. That's what it's mostly for and it doesn't hurt anybody any more than running a linux vm from windows does. Quibbling over it does nothing, it's happening and there's nothing anybody can do about it.

Long term hope (but AFAIK not stated goal) is it improves both standards and interop at microsoft (people give them shit but they've been trying very hard for many years).

FWIW the believe it or not stuff is because people think there's some war going on that actually ended like 20 years ago when Bill Gates bailed out Apple. I know enough senior people with Apple and Linux gear at Microsoft to know that the Haskell nerds perception of reality has no basis in it.

Streetmap loses appeal against Google Maps dominance judgement

streaky

Nice to see the downvotes coming... I understood you are enraged if you realised your map options are all crap compared to what people in a puny East European country enjoy. It is hardly my fault but... Whatever. Be enraged if it helps. You cannot take our superior map service from me.

Get over yourself it's just openstreemap's data rebranded.

streaky

Streetmap has nice maps (they're Ordnance Survey maps so no shit..) - but the UI is bad and always has been (swear it hasn't been updated since the 90's, you can do better pulling map serving code Open Source off the shelf for gratis) and the data contained within the maps is badly digitised (or rather completely lacks it excepting advertising). Only sensible alternative to google maps is Open Streetmap where satellite imagery isn't a thing - the maps are of high quality, cover the planet (well, y'know) and all the data is very well digitised.

The idea that merely favouring your own products on your own service is somehow an "abuse" is ridiculous

Microsoft and Apple will be pleased to hear it, and they thank you for your service.

Speaking in Tech: So. Hard-boiled Brexit... will tech firms scramble?

streaky

Well I have heard that France and Germany want to poach our staff.

And those of us who work in tech laughed and laughed and laughed - it never stopped. Tech companies in the UK are here for a reason and none of those reasons are "the UK is in the EU". Not one. Most people in tech - especially internet related tech - work on the principle that the regulatory and standards framework is global, in English - and can happen anywhere, if you're moving it aint to Paris or Frankfurt; it's to the Caymans or California (oops Trump) or New York. France is off the beaten track for the internet and Germany is worse.

Unrelated but I wish the banks every luck with the FTT and the shorting bans that the EU is going to slap them with when they move and the UK is no longer involved with the regulatory framework. No not really.

Feds snooping on your email without a warrant? US lawmakers are on a war path to stop that

streaky

Re: Glass house?

I believe there's a saying about throwing stones when one lives in a glass house...

Our privacy protections in the US of A are actually quite robust (excepting, apparently, NSA surveillance). Of course, US contract law is more robust, and so makes it quite easy to sweep away privacy rights.

My response to that..

RethinkDB is dead? Rethink that thought: NoSQL database is back

streaky

Re: AGPL...

Yeah the problem is the AGPL doesn't say that, it especially doesn't say it in RethinkDB terms. The only problem with the AGPL is there's huge amounts of misinformation about it which I do and have recognised.

streaky

Re: RethinkDB was never really dead

RethinkDB the corporate entity was dead; code wasn't. The code could have potentially been dead according to some* without the rights purchase and relicense. I am happy with the relicense though it obviously opens up a lot of opportunities.

* IMHO I thought I did a reasonable job of countering the argument that the AGPL hurts anybody but corporate freeloaders (not the ones that use code to provide services - this is fine under AGPL terms - but the ones that bundle code into other products without supporting the core project like vmware have been accused of time and time again)..

Microsoft's DRM can expose Windows-on-Tor users' IP address

streaky

WMV DRM

Literally a million miles from the worst thing it does, if you have to watch wmv files (ouch why it's 2017) - do it via a competent video players like vlc.

Fear not, Europe's Privacy Shield is Trump-proof – ex-FTC bigwig

streaky
Mushroom

Wrong..

All three points are factually incorrect. It wasn't even Obama proof and it's sure as hell not Trump proof.

Trump signs 'no privacy for non-Americans' order – what does that mean for rest of us?

streaky

Privacy Act/Privacy Shield

"The US Privacy Act has never offered data protection rights to Europeans"

Neither has Privacy Shield. The fact POTUS can just issue whatever he likes and we don't know what he's repealed/issued in secret is the entire problem. The EU can't get it's act together on this and never will.

Caspar Bowden will be spinning in his grave

streaky

Re: Executive orders and SCOTUS

Except we don't know the content of all the orders he's issued in secret? Which is why privacy shield is a loljoke in the first place.

Windows code-signing tweaks sure to irritate software developers

streaky

Re: "will only let apps be installed via their App store and devs are expected to pay lots of £££"

some people even defend it strongly here

Rule 1

Many things that have worked for other companies that people have thought Microsoft should have copied have turned out to be bad for Microsoft. Hell - that's how windows 8 happened. Doesn't fit microsoft's business model or what made them a very large company in the first place.

'Exploding e-cig cost me 7 teeth, burned my face – and broke my sink!'

streaky

Re: Sounds like me to be a good reason....

But.. nicotine is safe (on the scale of things) to vape. You're in more danger eating a salad than vaping. Not that I'd suggest people just take up vaping who aren't already smokers because why bother but lets find a grip.

streaky

Re: Was that vaper built by Samsung?

400% chance whatever happened it was nothing to do with heat in the place it's supposed to be created.

streaky

Re: Damaged his sink?

Yeah likely the mod is at fault. Don't use mech mods kids they hurt. I personally think they should be illegal because dumb people need protecting from themselves and I say this as somebody who was very vocal about the TPD's relevant sections.

My well-versed theory on this is fake batteries given the model is commonly faked and the chemistry of HG2's (INR/NMC) is very stable. No kidding the HG2 is very commonly (and very well) faked. I just bought 4 of them coincidentally a few days ago (from a trusted reputable source) and despite testing them to prove they're legit I'm still slightly paranoid they might be fakes - because that's where the danger is. Reality is even when those specific batteries catastrophically fail they shouldn't fail in that manner.

When these events come up the people involved never completely list their gear publicly very conveniently.

Ex-Autonomy CFO pleads not guilty to charges he inflated the company's value

streaky

Re: Accountants eveywhere need to watch out

In all fairness when you offer yourself up to acquisition to a US company you have to expect you might come under jurisdiction of US law. Problem is as I've said before the US legal establishment's penchant for abusing wire fraud law - they'll use it when there's no wire and no fraud involved. UK criminal justice system only really does that with terrorism legislation.

Accidentally dropped some litter on the floor whilst making a call to a relative? Wire fraud! Go directly to jail for 145 years, do not pass go.. What boggles my mind is how okay US citizens are with this stuff.

Worst part is it's all HP's fault anyway which is why the class action..

Brexit contributes to backup appliance sales fall

streaky

Re: Sterling devaluation triggered a move to cloud backup?

Yeah it's absolutely nothing to do with Brexit, that's the starting point.

UK Parliament suddenly remembers it wants to bone up cyber security *cough* Russia *cough*

streaky

Re: Re-inventing the wheel

It's 2016 and you really have to ask that?

Better question is wtf are GCHQ doing given it's supposed to be half their job. Oh yeah that's right I 'member...

Crumbs. Exceedingly good cakes, meat dressing price hike in wake of the Brexit

streaky
Mushroom

Re: it's easy to resolve...

instead cut back on illegal wars

I get that people think this stuff is funny but our illegal wars are actually a large portion of UK GDP- both in terms of keeping people directly employed and being able to produce stuff that can be exported. World peace would cause world depression - and tech advancement would grind to a halt fwiw.

streaky

Rates of inflation are a myth in the real world. Basket prices used to measure don't necessarily match the cost of things we're actually buying and have no relation to volumes people are buying at.

If the rate is 5% it doesn't automatically mean people are having to spend 5% more to get the same items - because there isn't much stopping people switching brands and yes that does drive the importers nuts; but it should. Not that there's a better way of measuring price increases at a macro level. Well we probably could with supermarket data but only supermarkets have that...

You have the right to be informed: Write to UK.gov, save El Reg

streaky

Technically speaking it's to make it so cases are less likely to go to court. Skipping arbitration (by either side) would be assumed by the courts to be somebody trying to abuse process. Very few people who don't work in news media should or would have a problem with any of it. In fact I suspect if you polled the general public one would find that most people would think it doesn't go nearly far enough.

Much as I enjoy reading the 'reg; claiming you're not Murdoch press so it shouldn't apply is a pretty sorry excuse - the potential for damage is so extreme in these cases something needs to be sorted out and there shouldn't be any exceptions. Think before you publish is what the media forgot in times of twitter that would protect them from all of this.

The right to publish freely has been abused by people calling themselves journalists - I don't think any of what the government is doing is going to solve any of the problems in the world but it does improve access to redress when it goes wrong. If journalists have a problem with this stuff they should talk to their peers; this stuff is legitimately the absolute minimum that could be done.

Gluster techie shows off 'MySQL of object storage' Minio projects

streaky

Re: anyone using mysql for simple key value store

I'd dispute that in various cases honestly, there's all sorts of good performance, infrastructure and data integrity reasons for doing it. 'reg readers very anti-MySQL though so send in the downvotes.

Landmark EU ruling: Legality of UK's Investigatory Powers Act challenged

streaky
Boffin

Re: Yup...

ECHR is a Council of Europe body, UK will remain in the Council of Europe when it leaves the EU.

People still making faulty assertions about what EU membership actually means, ECHR [the convention] is full of derogations that UK constitutional law doesn't allow for - they can do more whilst we're in that they would if we were out.

I realise that 'reg commentards are generally quite pro EU but at least do a *little* research before you downvote.

Support chap's Sonic Screwdriver fixes PC as user fumes in disbelief

streaky

First Line

But first line support had to sign off on every job

Revenge of the dumb processes. If your first line support is so smart why are they in first line. That's not how this works.

"sign off" yeah thanks bruh.

Firefox to give all extensions their own process in January

streaky

Re: From memory...

Unlikely, if anything I assume it'll get worse. Does anybody actually care though?

Why so much is going on when all I'm doing is typing in a text box (or even not using Firefox) is a total mystery to me.

Leaks plus GC one assumes. Gotta love JS.

Banks 'not doing enough' to protect against bank-transfer scams

streaky

So what is the argument for making the banks liable anyway?

They'll be insured against losses plus the banking system can do things internally to clawback losses that consumers can't - for starters.

Give us encrypted camera storage, please – filmmakers, journos

streaky

Re: Shouldn't be hard for Nikon to do

The problem with your argument is that bandwidth is a limiting factor. Most places where photojournalists report on stories that are liable to endanger them, don't have enough of a communications network to instantly transmit a 64Gb + card full of pictures safely out of the way.

Right but it was an *or* - I think it's viable to do it securely at the technical level I just don't see the value in it. Carry a tablet, carry a laptop.

streaky

Re: Shouldn't be hard for Nikon to do

Know what, just don't leave data on your cameras. Strip the images off the memory cards, put them on tablet/laptop/phone and crypto them and/or use this thing called the internet the cool kids are talking about to ship them securely somewhere. If they gave a toss we wouldn't be having this discussion because photographers would actually be trying to secure their data. Yeah on thinking about it there's no reason for any of this to be part of a camera's system.

streaky

Re: Shouldn't be hard for Nikon to do

At rest it's very very easy, given we're talking about crypto at rest... Entirely possible to do securely in firmware, if you trust the firmware - if you don't you're boned either way.

I'd say the main problem is it doesn't really change anything, if you're talking about photos in countries where there's not a sane rule of law what's to stop them cutting pieces off you in a room somewhere until you give up keys or forcing your finger onto the reader or whatever.

Higher tech prices ARE here to stay. It's Mr Farage's new Britain

streaky

Re: Brexit means brexit.

could I respectfully suggest that includes those who think their legal understanding exceeds that of the members of the UK Supreme Court?

No for two reasons: firstly that we don't know what the supreme court thinks yet and secondly that I'm not entirely sure the government has put it so succinctly that it's easy to understand to them. They're going to have their for/against biases either way - they're fairly well documented but hopefully they can view the case on legalities rather than those.

I'm in a low wage job or unemployed. They can't come after me for the money, I haven't got any. Someone else will have to pay for this. Someone else will pay for this. No skin off my nose

That's interesting, I'm high wage employed working for an international company - difference is I understand the economics. There's no left or right wing case for continued membership which is why the centre ground is owned by brexiteers.

Apparently the young are so much smarter than people who have been round and round with the EU; or those of us who have worked for companies that have been munched up and asset stripped and all the jobs moved to Germany. There's many fundamental problems with the UK economy and the EU isn't the only one but it is the biggest elephant in the room and it's charging around breaking the tea service - then we're supposed to want to stay in because roaming charges and we don't have to get a visa (pretending for a second there won't be a visa-free travel agreement anyway).

The UK will be far happier and richer out.

streaky

Re: Brexit means brexit.

In case you haven't noticed we still don't have a definitive answer to the constitutional way to invoke Article 50

We have a definitive answer, just waiting on supreme court to do it's job right and confirm that essential truth. It's a legal argument, some people who think they're smarter than they are think that invoking article 50 is the job of parliament because it affects people's rights. It's fundamentally legally flawed because invoking article 50 doesn't change a thing and fwiw parliament can't invoke article 50 even if it wants to. If it held a vote today and decided it wanted to and created a law it would have to ask the executive to do it because it can't. This stuff doesn't have to be complicated.

FWIW on all the other nonsense in this thread - yes some of us leave voted that people probably don't get the actual situation but also we have no problem with people doing the right thing for the wrong reasons. I still think Starkey summed up the non-economics up best recently.

Snowden: Donald Trump could get pal Putin to kick me out of Russia

streaky

Re: Live by the sword.

He chose not to go after Trump like he did Clinton, that's for sure. The third party nonsense was Snowden being far more naive than he thinks he is.

Greenwald similar approach. Too busy attacking Clinton to see what's coming in the back door. I don't care beyond the comedy value of it. Greenwald is still doing it in fact. Live by the sword; there are worse things than Clinton if you're this kind of actor. Unless Trump really is the Russian agent he tries his best to look like - in which case you're good, carry on.

streaky

Re: Live by the sword.

I follow him on twitter, pro-Trump, anti-Clinton was the way I read it. I couldn't care less even if I tried but I read what I read.

streaky

Live by the sword.

Shame that he was so anti-Hillary in the campaigns.

That being said Snowden probably safer that ever given Trump is just a Russian agent.