* Posts by Halfmad

881 publicly visible posts • joined 16 Jan 2013

Page:

Want to kill your IT security team? Put the top hacker in charge

Halfmad

The NHS sort of does this in my area, the trust has managers who are on a grade below some of the staff they manage as those staff are specialists in their area. Sadly this isn't the case in IT departments though.

Halfmad

Re: So the obvious solution is...

This is how healthcare tends to handle clinicians. Sadly it doesn't extend beyond that so we end up with the best staff going into management and making an **** of it. Many of the dreaded NHS "Middle managers" I know were fantastic in their fields and the only option to progress was to move out of it into managing the staff working in that field.

Then they themselves can no longer contribute anywhere near as much.

Flight Centre leaks fliers' passport details to 'potential suppliers'

Halfmad

Don't forget it's not just about the potential to leak that data

There's a debate over whether people testing system readiness should have access to person identifiable information. They have no need to access that particular data, so they should really be using randomly generated data.

Ubuntu Linux now on Windows Store (for Insiders)

Halfmad

I know I'll be down voted for this

But at least it gives more exposure to Linux. I know two of my friends kids will be all over this as it gives them a way to tinker with Linux more readily without annoying their windows obsessed dads until they get their own PCs. Both currently use live linux CDs to mess about.

Bloke takes over every .io domain by snapping up crucial name servers

Halfmad

"Bloke takes over every .io domain by snapping up crucial name servers"

then a few paragraphs down

"It's worth pointing out that owning four of the seven authoritative name servers doesn't grant full control over .io."

So which is it el 'reg?

Good luck building a VR PC: Ethereum miners are buying all the GPUs

Halfmad

Re: Not to worry

Generally less stressful for the card than the hot/cold of gaming. Buy card, reapply fresh thermal paste and a new cooler and it'll be fine.

I've still got a couple of 7950s in Crossfire on a PC which ran for 3 years overclocked at a friends house.

Largest advertising company in the world still wincing after NotPetya punch

Halfmad

Re: Is it just me...

Those local IT staff don't need to understand it, they need to have a process in place and training to say "look guys, you use your admin account when you need to do admin work, at all other times you use a standard account". Nice and simple, also don't give access to network shares etc from the admin accounts to stop them wanting to use their personal shares etc. Typically these accounts require local admin rights and very little rights on the network.

Hell I can monitor admin account usage due to the way our transparent proxy picks up anyone launching a browser or windows looking for updates.

Judge used personal email to send out details of sensitive case

Halfmad

Re: A digital watch?

80085

Had to be done.

Halfmad

Re: At least it seems it's an exception

If companies don't want staff to use things like cloud then policy/guidance is only the first step. Step two is to block them on work computers.

This is typically where things get messy as there's almost always exceptions to be made as companies you collaborate with start supplying information only via cloud based solutions.

PCs will get pricier and you're gonna like it, say Gartner market shamans

Halfmad

Re: Value for money?

We get semi-decent PCs at work, although an SSD would be a massive help when juggling a VM and a large unwieldy spreadsheet people demand I use.

The biggest problem without a doubt though is the f*cking monitors. They're all widescreens, it's like looking through a letterbox compared to the 4K monitor I have at home. The one I'm using just now is 1600x900

900! I'd rather have a 1080P monitor than this sh!t.

'Bio-hacker' embeds public transport ticket under his skin

Halfmad

Re: Easy fix

Or sown it into the cuff of a jacket he regularly wears etc.

Clothing in general with little zip pockets near the cuffs would be ideal for this sort of thing.

#gonnagointoretail

Ubuntu 'weaponised' to cure NHS of its addiction to Microsoft Windows

Halfmad

Re: Terminal servers?

We use to do this, problem is reliance on boardband connections, even with failover circuits when it happens you can have many hours or even days of outages.

That's frankly unacceptable but no amount of stamping of feet and pointing at an SLA helps in that situation.

Halfmad

Re: Good luck.

Not for clinical systems rules out 95% of computers in most health trusts/boards as clinicians have to have access to clinical systems, not just in wards.

They can say that but the way these places work means it's not possible WITHOUT including those and preferably as early as possible as frankly many developers dont have a linux client from my experience so far. Sure they can make one, but that costs money and takes time.

Halfmad

Good luck.

But for many places 2.5 years isn't long enough to move over even if it was a proven option right now. Existing contracts for many clinical systems are 3 years+ as a minimum and moving off those will have a major cost in terms of finding an alternative system and training etc.

I'd love to have the flexibility of not being on Windows but no way will anyone be fully off it by 2020 for this, not without a huge chunk of additional funding and staff.

London suffers from 'sub-standard' connectivity - report

Halfmad

Stop comparing to the best.

Compare to the average across the country, that's what most of us are stuck at.

Dixons Carphone stirs PC Curry, reports 10% profit gravy

Halfmad

Re: Actually not terrible

As long as you're selective you can get what you want with just a little numpty-surcharge over internet sites.

It's things like whole systems, cables and audio stuff that's usually insanely price and of course those warranties!

Murdoch's £11.7bn Sky takeover referred to competition regulator

Halfmad

Re: Why not just say NO?

You require a politician to say no to the media? are you mad?

He'll get enough stick for referring this to the competition regulator.

Halfmad

Re: NowTV

I recently got a box with a 3 month pass for £10 in sainsburys. I've cancelled my current subscription and will then register a new account to claim the 3 month pass.

Should be noted that Now TV and sky share customer information.

Cisco and McAfee decide users just can't be trusted not to click on dodgy attachments

Halfmad

Re: Won't work

That's why this is part of a layered defence, although I doubt Cisco and McAfee will call it that.

Can't rely on any one vendor to save you, especially McAfee IMHO it's an odd teaming up.

Watchdog slaps NHS for failure to tackle correspondence backlog

Halfmad

ICO should step in.

Any patients asking for copies of their own records wouldn't have been able to be given complete sets due to this missing data sitting at the SBS but nobody would have known that other than the SBS.

They have fundamentally failed to care for the data in their possession whilst data controllers.

US voter info stored on wide-open cloud box, thanks to bungling Republican contractor

Halfmad

Re: Voter registration data is not confidential

That's fine but they started tagging things onto it, some true, some not and now that's public.

Whether it can be considered sensitive is another matter but it's certainly embarrassing for the firms involved.

Banking websites are 'littered with trackers' ogling your credit risk

Halfmad

Re: I think we need to know...

Don't investigate yet, wait until GDPR kicks in..

Apple gives world ... umm ... not much new actually

Halfmad

Microsoft are like the mad uncle

In their shed banging out ideas, doesn't matter if most are awful you need to at least give them credit for trying some of their whacky sh!t. Every so often they come up with something clever and then someone else actually makes it useful.

Apple have become incredibly safe and scared of trying out new things, they'll happily buy a company that's already done that - but rarely push any boundaries themselves.

IBM: ALL travel must be approved now, and shut up about the copter

Halfmad

Re: Again

It'll be sold as a brand and used in future years to flog products made by others. Wait? erm, I'll get back to you.

UK trigger-happy over fines for data breaches compared with Europe

Halfmad

As it's almost entirely dependent on self-reporting I'm willing to bet a lot of it is down to companies just not owning up. The UK public sector is particularly good at reporting itself to the ICO quickly, within hours usually, knowing that if it does so there's far less chance of a monetary penalty at the end of it.

Whoops! Microsoft accidentally lets out a mobile-'bricking' OS update

Halfmad

Well on the brightside

At least it's more secure now.

UK council fined £150k for publishing traveller family's personal data

Halfmad

Re: Named council employees?

As the guy who works in public sector at the moment and who reports my organisation to the ICO when there's a breach I'd love for staff to face disciplinary when it happens. I rarely see that though.

Mistakes happen, genuine "shit I sent that to the wrong person" mistakes, should people lose their job over it? Well personally I think that should always be an option when they've caused actual harm by their actions. However I have yet to see it happen.

Staff names are typically removed from reports the ICO get, I'd love them to demand those and public those involved. My name will be on the ICO multiple times - as the person reporting it and the contact for the organisation, but others should be up there for having been held responsible for the breach.

This shouldn't just be the chief execs though, it has to include those who have direct line management responsibility if training was permitted to slip, if policies were not up to date and staff not aware of them etc. Putting a single name up won't be enough, it has to be the "chain of command" from top to bottom that could have prevented it.

There are also typically prosecutions that could be brought but again never are. Section 55 of the DPA is one such area but there are many others - we simply done' hold people accountable, but then again we don't for virus infections either even when it's personal USB sticks brought in from home - because the organisation should simply have tools to block those working right?

But surely if that sort of thing isn't permitted by policy (rules of your employment essentially) then you should be sacked for doing it?

IT breaches in general are seen as trivial when it comes to disciplinary action, I've seen people hit far harder for mistakes on their time sheets or breaking a window by accident..

Halfmad

Re: Grrrr

NO but what those at the top can do is fire people for gross misconduct or have HR policies written to state that a breach will be handled as gross misconduct.

It never is though.

Halfmad

Re: Grrrr

Your argument makes little sense, if you've ever been involved in a breach you'd know that it's typically down to one persons mistake initially then a series of mistakes over the course of the next few days as people try to cover it up. The "best" breaches are those where staff put their hands up so you can try to contain and get control back over that information (usually not possible, but sometimes it is), you can then notify the ICO and you can talk to those involved most importantly the data subjects who's information has been spewed.

In terms of "taxpayer coughing up" the monetary penalty goes from the council to central government, it doesn't go to the ICO and then essentially through loans etc to councils will end up back there eventually.

The public need to start understanding that public sector organisations, (especially the NHS - and I'm excluding GPs as those are PRIVATE contractors) are very good at self-reporting to the ICO. This is why the stats typically show that the public sector are AWFUL at handling information but in reality they are generally better than private firms, just that they are far happier to notify the ICO when something happens.

Having worked in private and public sector over the past 25 years I can honestly say I've personally reported my organisations to the ICO half a dozen times, yet never had approval from private companies to do so - even when the incident was arguably far, far worse. It comes down to money and lack of "give a toss" about data subjects.

Acronis adds automated ransomware protection to latest Backup version

Halfmad

Re: True Image?

Confusing?

I think you mean "feature rich" !

BT considers scrapping 'gold-plated' pensions in bid to plug £14bn deficit

Halfmad

Yeah but they don't want to have to put that money into the pension scheme they've been managing for years do they? Let's just reduce the payments to those who have been paying into this scheme the company agreed to manage.

Cos that's fair, right? :-/

Halfmad

Much like my pension, which I'll likely never get.

Yet I've been paying in at a higher rate than any of those currently retired, the pension age will keep increasing and I'll probably die before it.

The country as a whole needs to take pension funding more seriously, for starters they should NEVER be allowed to run in deficit.

'Major incident' at Capita data centre: Multiple services still knackered

Halfmad

Thing is with these companies that although they may include agreeing to have failover sites etc when sh!t happens and those don't work they just say "hey sorry, won't happen until the next time it happens" and as the NHS is f*cking awful at contract law they have no monetary clause to hammer them with.

Seen this so often in the past 10 years.

‪WannaCry‬pt ransomware note likely written by Google Translate-using Chinese speakers

Halfmad

Re: More to the point

Well tells them an IP, might not tell them where the people actually were though.

Info commish: One year to go and businesses still not ready for GDPR

Halfmad

Re: Pointless fines

I've been saying this for years but it also has to apply to public sector organisations, as right now they get fined - they go to government ask for a loan for that amount (since it's the government who essentially fined them anyway) and they are back to square one.

Public sector are great at reporting themselves compared to private companies but they also have nothing personally to lose, we need to change that for directors and chief execs.

IT firms guilty of blasting customers with soul-numbing canned music

Halfmad

I don't mind beeps, I don't mind music.

Just don't keep me hanging on for 30 minutes telling me every 30 seconds how ******** important my call is whilst I'm 305th in the queue also sort out the damn volume level between that message and the music so I'm not deafened by one or the other, then unable to immediately hear the call handler who's whispering in afterwards.

Gig economy tech giants are 'free riding' on the welfare state, say MPs

Halfmad

Re: 'worker' status to the drivers

Autonomous vehicles will need R&D and more frequently - maintenance. You can also bet your behind that the government will come up with new ways to extract money from them in new taxes etc.

UK outsourcing market hits record levels

Halfmad

Re: This is where the lack of training and head hunting ethos has got companies.

You could say the same for any department which is generally not "front of house" such as information security, information governance, cleaning, estates/facilities management, HR, occupational health etc.

They are all being outsourced where possible to "save money" but in reality I doubt any money at all is saved and the service is usually poorer and less flexible as a result.

Oh lordy, WD just SCHOOLED Seagate in running a disk drive biz

Halfmad

Pepperidge Farm remembers

When Seagate drives were considered some of the quietest, reliable drives on the market.

Them were the days, long gone now.

Don't stop me! Why Microsoft's inevitable browser irrelevance isn't

Halfmad

Re: My work Windows 7

If they have sites that only work on older browsers go to IE11 and use Browsium.

While Facebook reinvents Sadville, we still dream of flying cars

Halfmad

Re: Flying cars? Pft.

Why the f*ck would I want them flying above my house? Not like they'll be restricted to specific routes and of course the governance for it will take years and start happening properly AFTER it's started and AFTER several high profile crashes no doubt.

PC sales are up across Europe. You read that right. PC sales are up

Halfmad

Re: Brexit or not...

It's not cretinous to not know about computers especially since many of those buying them for grand children didn't have access to them until they were well into adulthood. I'm sure a few of them could teach our millennials a few things about how even modern car engines worked as they are far more likely to have had to get their hands dirty maintaining their own car.

Using the wrong terminology is one thing, fact is they knew what they meant - storage space as that's typically what's marketed as good as it holds all the kids "college work", it's not as if other goods aren't marketed as equally daft at times, cars for example are typically done on fuel efficiency none of us ever see and on glamour when it's a tool most of us don't think twice about until it breaks.

Police Scotland and Accenture were at odds over ill-fated IT project i6

Halfmad

Re: "at odds"?

Quite impressed that the Police had a contract sewn up like that, good on them - now if only whitehall could start doing that.

Flaws found in Linksys routers that could be used to create a botnet

Halfmad

Smart eh?

It's always the smart ones which are dumb.

Have we got a new, hip compound IT phrase for you! Enter... UserDev

Halfmad

Re: Success!

Not security, training and likely not following policy.

No, Microsoft is not 'killing Windows 10 Mobile'

Halfmad

They don't have to kill it off.

It'll die on it's own.

Free health apps laugh in the face of privacy, sell your wheezing data

Halfmad

You'd at least think they'd want to stifle the competition for it..

Londoners will be trialling driverless cars in pedestrianised area

Halfmad

Re: Make use of...

Personally I have nothing against cyclists, I do however hate this them v us attitude from both sides. I live in a fairly rural community and what really grinds my gears (insert Peter Griffin here) is that planning it done almost entirely focused on cities when cycling clubs won't go out in the city for fun, they'll head to rural roads, as will family groups. Those are generally very poorly catered for, yeah you can get to cycling routes, if you shove your bikes on a car first.

There's shit cyclists, there's shit drivers and there's shit pedestrians. The sooner we tackle the main problem - namely many of us having to commute for a job we could likely do at home the sooner we'd all be a little happier. productive and fatter.. I mean less stressed.

Consumers go off PCs as global shipments continue their decline

Halfmad

Re: Yet again...

I also find I'm increasingly being asked to build PCs for people, they may not have the confidence to do it themselves so just want me to hang out and double check things for them. I've no problem doing this as I'm the sort these days who says "I'm not private IT support" and I stick to that. But I'm happy to help give them confidence to tackle their build.

I've recently helped my 71 year old dad build his first gaming PC, he was bored after my mother died last year and he's gotten right into Skyrim and the Total War series since (with a bit of rocket league thrown in).

He was able to build the PC he wanted, with the monitor he wanted etc and without software he didn't want or pressure to buy "tech support" etc during the after sales pitch.

Company wise we still replace PCs in a cycle, which I think is increasingly mad and even our directors are starting to see it that way, PC slow? shove in another gig of RAM if it's a 64bit OS and an SSD, job done 99% of the time.

HMRC beer duty bungle leaves breweries struggling to pay online

Halfmad

I'm disappointed that El'Reg didn't jump on that one to be honest.

Page: