* Posts by Lee D

4261 publicly visible posts • joined 14 Feb 2013

Tesla big cheese Elon Musk warns staffers to tighten their belts in bid to cut expenses (again)

Lee D Silver badge

Re: I don't get it...

It's easy to give away the farm and make a loss by supplying a decent product to people below the actual cost of production.

You just have to have a rich idiot bankrolling it... or pulling it out of bankruptcy a couple of times, or maybe a few investors convinced that "one day we'll be selling thousands upon thousands a day"...

No different to "Moviepass" in the US - that was a great deal for anyone who was a consumer. Pay a pittance, then watch as many movies in as many cinemas as you like! Wonderful! Doesn't mean it's a good business idea.

For centuries people have implemented business models that resulted in wonderful value for the consumer, and great product, but at a loss. It's nothing new. The whole dot-com boom was basically the same thing. Here, have everything, for free, because it's "online". Now... whoops... who's paying for that?

Musk bankrolls all his companies, he has legitimately insane amounts of money from his youth, most of his places have neared bankruptcy at least once, he's injected huge amounts of cash into them, because to him it's just a hobby / vision, not a business. Some of them "profit" in the short term (e.g. SpaceX) but most never see their full investment back ever. Even if they did, the investors would want their money back first before prices started to drop for the consumer.

There's a reason that the shareholders in Tesla aren't particularly sad to see him gone from the board, and why they immediately raised prices and/or cut costs once he'd gone.

Tesla, SpaceX, etc. are Musk's toy projects to spend his billions on. That's it. When the funding goes, the business underneath is basically unsustainable in the condition that it's currently run in. He's like the rich kid running a lemonade stand from his dad's Porsche and never making a cent. When he pulls out, and takes his funding with him, all that's left is a vastly unprofitable business. But, sure, he makes good lemonade with only the most expensive and finest Sicilian lemons...

Lee D Silver badge

Re: Servicing

Are we saying that electric cars don't need, say, oil, brake fluid, hermetically-sealed systems, moving parts, etc.

Most of what I've ever taken a car to be serviced for consists of:

- Consumables (brake pads, oil filters, air filters, tyres, aircon, etc. - almost all applicable to electric cars)

- Failures of the car itself (e.g. suspension, exhaust, starter motor, radiator - mostly applicable, or analogous to, parts in electric cars)

When a head gasket goes, or the gearbox fails, you throw the car away if the price is above what you consider acceptable for a non-MOT repair if you're a normal person, or get it serviced under warranty if it's vaguely new or the work still affordable. Few people rip out their engines, change pistons or anything like that in anything approaching a modern car, even people like my father who worked on nothing but car / lorry engines for 40+ years.

On an electric car, no matter how fancy, there are still the same forces involved, still the same failures involved, still the same structures and parts and functions involves, they just might be on a different system. No different to a Wankel vs a 4-stroke, "electric" is just another type of engine. I can replace a dead battery myself, for instance, but I wouldn't be touching a Tesla's battery. The service work has just shifted to proprietary systems under electronic control, serviceable only by Tesla, that's all.

Tesla driver killed after smashing into truck had just enabled Autopilot – US crash watchdog

Lee D Silver badge

Re: Stop this sort of accident

If you hit a truck at 70mph, whether or not it has side-bars, you're likely dead or seriously injured.

Side-bars are there to stop cyclists, pedestrians, motorcycles, etc. going under and people being trapped underneath by the following wheels. Hitting the vehicle at 70mph side-on is not more than a minor use-case for them.

Yes, they're a good idea. No, they aren't a factor in this case, really.

Lee D Silver badge

Re: "If it can't see a huge truck, it isn't going to see a small child, or a motorbike."

When you're "AI" has to be told "the rules don't apply at this GPS location", what you have is a anti-death whitelist, not an AI.

And to reply to the other comment - the driver clearly wasn't paying attention and died, hence he got the "easy way" out of all the responsibility. But was mistakenly thinking that the functionality must be sufficient because of Musk's advertising and comments on it.

Tesla's features failed to function in any significant manner. It's like saying "the driver didn't press the brake, but the brake would never have worked anyway, so we don't need to do anything about the brakes not working, or hold anyone responsible for that, or ask questions about that, because obviously it's all the driver's fault anyway".

When this kills a kid, are we still going to only ever blame the driver? Or is Musk going to stand up and say "We need to fix this, drivers CANNOT have their attention veer for even a second as our system can't identify quite obvious obstacles and therefore is unfit for purpose"?

The driver was a prat. He died for being a prat. But the box that's still sold as "this is safe to be steering your decisions with only minor oversight at 70mph" is *not functioning* and goes unpunished?

Lee D Silver badge

All the other stuff doesn't matter:

Autopilot could not "see" an 18 wheel truck. Literally, didn't even know it was there, couldn't tell it was an obstacle, still drove straight at it.

No matter what the driver should or should not do, no matter what the truck was doing (e.g. merging, crossing the road, or anything else) there's no suggestion of any foul play on the part of the truck driver and yet - the Tesla DID NOT EVEN SEE IT.

If that does not immediately make you turn the damn system off, I don't know what does. If it can't see a huge truck, it isn't going to see a small child, or a motorbike.

Your conscience is not good enough to "explain away" your complete inattention when you have deliberately trusted a computer not to kill people, and it does. Whether that's yourself or - as is always worse - people who made no decision at all about what kind of car to risk driving.

Because of the driver deaths, we aren't prosecuting. One day, we're going to need to start prosecuting because we'll be killing others than the idiot in the car not paying attention at 68mph (and quite possibly "driving with his knees while not looking").

All the camera tech in the world and the post-mortem doesn't have the facility for the most important camera of all - one facing the driver, primarily to detect fatigue, but really there to record when they are utter suicidal, murderous morons. Maybe if we had that, we'd have a few less irresponsible drivers taking their hands off the wheel and engaging autopilot to pick up the sweet that dropped down the seat...

Bloke accused of conning ARIN out of 750,000 IPv4 addresses worth $9m+ to peddle on black market

Lee D Silver badge

Re: *COUGH* "Now if everyone would just move to IPv6... "

Nice to see that my efforts to push The Reg in this regard are not alone.

Every six months or so, I get a comment from a Reg person underneath a comment like this, that says something like "We're looking into it", or "We're working on it".

I think we're coming close to ten years or more of such comments now. And not even a "prototype, don't blame us if it's broke, www.ipv6.theregister.co.uk" or similar.

I hesitate to take my industry news, advice and updates from a place that cannot heed their own dire warnings in that regard. It's like frequenting a site running on Gopher saying how wonderful HTTP is and how we should all be moving over, but without a HTTP presence of their own, for ten years after HTTP was released.

Lee D Silver badge

Re: Using IPv6

Do you honestly think that even 1% of 1% of people even handle an IP address or know what it is?

Hex is simpler to check, to type, to copy, to handle than binary - nobody deals in binary for IPv4 anyway! I'm a mathematician and the times I actually need to subnet, I just use an online tool - even though I'm perfectly capable of masking the binary myself, nobody WANTS to use binary anyway.

IPv6 is there, it works, it's in every major OS, it's REQUIRED in DOCSIS (cable Internet, since 2006! 13 YEARS!) and 3G/4G services (even if it's not used, but your phone probably already uses it and you don't even know). There is no excuse, but certainly "hex vs binary" doesn't even come close to consideration.

Any IT guy managing any significant number of networks or computers barely touches a binary number in his life, and probably deploys entire networks with only two or three locations even containing or requiring an IP address (DHCP ranges, Gateway machine, DNS servers). I honestly don't know, care or need to know the IP of any of the hundreds of machines, dozens of servers (virtual or otherwise), VPNs, outside servers or anything else that I manage. I copy paste the output from my DNS server when I need to (e.g. I nslookup server.domain.com, copy the IP and paste that into the VPN or whatever - and that's assuming it's so dumb that it can't resolve that itself!)

And... internally... it doesn't matter WHAT I use. All I need is a gateway that does 4->6 translation, that's it. Done. Online, forever, via IPv6, who cares what my internal numbering is? One device, one IP address range, plugged in once, when I set up an Internet connection / router. Most people *never* have to do even that. They get a router in the post, plug it in, join the specified wifi, and they are up and running. There is literally no change required to that process to allow every home user to use IPv6... all that changes is the *external* address, you're all still using 192.168.x.x internally anyway!

The poor arguments trotted out against IPv6 are honestly pathetic. Turn it on. Add an AAAA record (if you can manage DNS, you can copy/paste an IPv6 address from the output of ip addr/ipconfig). Ensure the final connection upstream has an IPv6 address and appropriate network translation (which you're GUARANTEED doing anyway, because you'll be using the reserved ranges inside the network), done. And that's for the frontline, techy staff running huge businesses, offices, etc.

ISPs are the hindrance. They just don't want to turn it on. Datacentres have been onboard for years. Outside websites are a cinch (my own personal website is 6 already, as well as the time-server I provide, VPN I use, my dynamic DNS account, etc. etc. ) ISPs are the one category of business that needs to hire people who understand IP addresses (and "binary" as you put it). That's it. If your existing guys implementing your ISP on a national basis don't understand IPv6, just sack them now, immediately, totally, no-questions.

The reason is - it's a business expense to change it, and they won't do it while they're hoarding IPv4 addresses because... shock, horror... they could always make the whole thing work for everyone by deploying IPv6 at their boundary and carrier-grade NAT could do 4->6 as well.

Stop the pathetic excuses. Enable services. Turn the little switch on in Windows. Done. The only thing stopping people like me (who have IPv6-capable internal networks, IPv6-capable services all over the place, and barely a line anywhere that even mentions IPv6 except by default (e.g. Apache binds to all the local network addresses itself already anyway!)) is that my ISP do not provide me with an IPv6 address. They carry the packets, they do everything else. They just don't offer an IPv6 allocation.

But they're already doing it for every mobile phone carrier, their back-end networks for cable customers, even their VDSL networks, etc. They just won't run the IPv6 equivalent of a DHCP server for their customers. Hell, most of them run the 4->6 addresses!

It's been out for 20 years, working fine for over 10, been in every major OS in that time. That's more than enough time to "learn binary", especially given that you only need one guy per ISP who actually understand "binary" to start implementing it.

Lee D Silver badge

Re: Does ARIN have more IP4 addresses available?

Many major allocations are gone, now.

What you have is what there is, effectively, if you're a huge gatherer of IP addresses. There are few to be had, and they are expensive, and you can't just request more. There's the main block allocations (IANA), and then each regional numbering organisation (e.g. AfriNIC, ARIN, RIPE) etc. holds millions of addresses (as they should, they always had to hold a reserve to account for sudden demand), who then issues them to ISPs etc. in smaller groups, who then issue them to customers etc. in tiny groups of single allocations.

But, any sensible organisation in that chain is now reclaiming all the IPs that they can, because the top-levels (IANA) and some regional-levels (AfriNIC) aren't giving them out any more. They are hoarding what they already have. They may still issue to those below them, but on much stricter terms, and they have millions in reserve, but those reserves are no longer replenished. Once they go, there is no authority to go to who will give them more (hence the black-market trade in them).

It's like all the oil in the world has been extracted and there literally is no more left. It doesn't mean that the world collapses overnight. There are regional stocks and reserves, which are rationed and controlled and eeked out, and raise in value by doing so. But even some regions are now "oil-less" promoting a black market for the resource, and it's only a matter of time before the others follow suit as they have a limited resource and natural growth means they are still allocating them out on a daily basis.

ISPs are now using carrier-grade NAT, so all their customers only get an "private" address and not a world-accessible address. This buys time. Numbering authorities are stricter on allocation, this buys time. IP addresses are sold back and reused, this buys time. And then you have Apple, et al, sitting there with some stupendously large allocation that could breathe life back into the main registries for a few more years, but they're not giving it up and neither are they using it to any significant extent.

We're all living on borrowed time on IPv4. The source dried up, and we're Mad-Maxing over the scraps leftover until they run out too.

(And then you have The Reg, still publishing articles on IPv6 and STILL not actually even piloting it alongside their IPv4 site.)

Freed whistleblower Chelsea Manning back in jail for refusing to testify before secret grand jury

Lee D Silver badge

"others with better connections (ie: certain people close to Trump) are simply argued with when they refuse to testify."

Who didn't testify when issued a demand to do so?

Because as far as I know, all the demands resulted in someone testifying. Maybe not what you wanted. Maybe not answering every question to the detail they desired. Maybe just saying "No, I will not provide that". But they testified.

You can testify without having to accede to responding to every question in the positive. You testify and say "No, I won't tell you that." or "No, I don't know." or "No, I couldn't say what he said with certainty". But *not* testifying when requested is just dumb.

Same way that failing to appear before court will see you arrested.

Lee D Silver badge

"It is telling that the United States has always been more concerned with the disclosure of those documents than with the damning substance of the disclosures."

Indeed.

It is.

But note that "the United States" here not only refers to the government of said country, but to its citizens too. Nobody is up in arms about it. It made the news, it died off, that was it. Nobody cares (generally speaking, of course there are people who care).

That's why they can continue, because nobody's really surprised, shocked, or even disappointed... the average American or indeed their allies just don't care about that.

That's my problem with all the Wikileaks stuff - they claim it's ground-breaking, world-changing, risk-your-life-for stuff and - actually - nobody cared. Was it really worth whistleblowing for the response obtained? And doing so so badly and amateurishly (trusting Assange, for a start, not to mention just chatting about doing it with random people online). Same with Snowden, Assange himself, etc. was it really worth it? All they've done is taught every whistleblower to shut their mouths because hardly anyone will back them, and the full force of the law will descend on them, until they are living under Russian "hospitality", imprisoned after exile inside an embassy, or imprisoned indefinitely.

Not to mention "refusing to testify" is the most ridiculous thing ever (are you listening Mr Trump?). You testify. You note your objection at the start (about whether or not you think it's a kangaroo court) and then you testify everything you're willing to. You co-operate. Because in no other circumstance are you ever going to see daylight.

You're not being asked to lie. You're not being asked to arrest Assange personally. You're not even being asked to drop him in it. You can refuse or deny certain knowledge if you like. That's what people do, even in the full face of the cameras, in such things. But "not testifying" is just going to hurt you and only you, and hurt bad, and for a long time.

C'mon, UK networks! Poor sods have 'paid' for their contract phones a few times over... Tell 'em about good deals

Lee D Silver badge

RPI + tvHeadEnd + tvhClient on my phone + VLC on my laptop + Kodi on the RPi itself.

Watch, schedule, record and playback TV from my phone abroad, in this country, at home over 4G, on a laptop/tablet over Wifi, or directly on the machine itself.

Cost: ~£50 but less when you consider I already had bits to do it if I wanted to.

Ongoing cost: Nothing but a TV licence.

Happiness: A+

Able to record/stream live TV when abroad without VPNs and faffing about: A+

Able to keep, store and replay any particular recording as a bog-standard MP4 file indefinitely: A+

Actually considering doing this at my employers, where we're licensed for TV usage but have no real TV... but a huge multi-gigabit network, and would only need one DVB dongle per "bouquet" of channels to receive and record EVERY channel simultaneously to as many and varied TV clients as we like.

Would save me an awful lot of hassle when everyone wants to watch the football or Brexit debate or Budget or Royal Wedding or whatever it is that people are allowed to watch by their employer. Slap it in, forget about it, let people stream it over the local network rather than faff about organising TVs or specific streams.

Lee D Silver badge

I have to say, in the last twelve months, I've stopped paying mobile providers almost everything.

Even down to a GPS tracker / house alarm that were each costing me £5 a month to keep the SIM active, I found a M2M SIM which did the same job for £30 one-off and then £10 a year to keep the number active (guaranteed, not like those "after 90 days if you don't top up, we may remove your number" you get everywhere else).

I keep bumping my phone tariff down (but that's giffgaff so it's really easy to ramp up if I need it), I own all my devices outright, and I have no intention of buying one of those new-fangled sealed-battery heaps of junk.

I get why they are vying for business, but I also don't understand why they care about voice etc. any more. Put out bigger data tariffs, especially on SIM-only, and price them sensibly. A 100Gb tariff should cost no more than a 50Gb one. Or literally charge, say, a fixed price per Gb or per 100Mb that's in the same range and let me use whatever I want to use - because that's the only sensible charging system anyway and automatically charges directly proportional to my usage.

When a business is propped up by an pretty unrelated contract service, then you know that they are struggling for business. If a telecoms operator has to get into loans for phones and tablets (which is what we're really talking about when we say "contract") to keep its head above water, it's doing something wrong.

Lee D Silver badge

I prefer to use companies that, as a loyal customer, I don't have to threaten to get a better deal which they could offer me at any time.

Lee D Silver badge

Re: Just be grateful you aren't in Germany

Yeah. that's what normally happens in the UK.

That's why OFCOM are acting.

Wine? No, posh noshery in high spirits despite giving away £4,500 bottle of Bordeaux

Lee D Silver badge

@Alister: OMG... upvote for the belly-laugh if nothing else.

There's a certain kind of audiophile that no amount of reason will beat sense into their head / ears. And if there was, they'd only complain that the rubber mallet was "more tuneful".

Lee D Silver badge

If you can't tell the difference between £4500 and a couple of hundred quid bottle, maybe it's just NOT worth that amount to people?

I have the same argument over wine, artworks, HDTV, MP3, all kinds.

If someone actually couldn't tell the difference, then the value isn't there. Sure, a "collector" might think they can tell the difference and so want to pay more, but virtually everyone else who's just buying a bottle of wine? No difference at all.

This is why I won't pay more for something if *I* can't tell the difference, whether or not someone tries to convince me something is obviously better, or pulls out statistics and facts, and even things like speaker frequency response graphs.

I'm sure it's "different". But I can't tell. Same reason that I really don't care whether it's a Pepsi or a Coke, but do care about if my beans are Heinz. I can actually tell the difference between both, but the former I just don't care because it tastes nice anyway.

Do I care that I've not *actually* got a Da Vinci on my wall? Not really. Do I like the picture? If so, I might get a reproduction, print, giclée, or just print out a copy on my own printer and put it in a frame. If the original creator is still around, I'll buy from their official store if they're reasonable, if not I won't.

If you can't tell the difference, the extra "value" in the difference is zero.

Want a good Android smartphone without the $1,000+ price tag? Then buy Google's Pixel 3a

Lee D Silver badge

"Want a good Android smartphone without the $1,000+ price tag?"

No, I want a phone that doesn't cost even £399 (half that is about right), has a removable battery, an accessible SD card slot (what's all this stick-it-under-the-battery nonsense? It's *REMOVABLE* storage), a headphone socket, a standard USB charging socket (USB-C is fine), ONE DAMN CAMERA LENS unless the others are literally free, a flashlight, maybe an IR blaster, a battery that lasts a decent time, a non-curved screen, a physical home button (all that in-the-screen nonsense just makes things expensive), something with a bit of ruggedness and bounce (I'm already paying hundreds, I shouldn't need to wrap it in a third-party case!), that fits in my pocket even if it's a bit chunkier than these slivers (and that means a non-ridiculously-large screen too), that runs bog-standard Android, has an entry on CyanogenMod/LineageOS, no force-bundled apps, and which is from a name I vaguely recognise.

The same as I've wanted for the last 10 years, plus. Closest I get is the Galaxy S5 Mini, but all their successors are naff. Mix up an S5 Mini with an XCover and I'll buy tomorrow. Literally. I'll buy it just to have it, just because it's such a rarity in the market, even if I don't use it immediately.

One day the market will learn, but by then what I'll actually have in my pocket will technically be a tablet, not a phone, with a 5G connection. TBH, in this day and age, that's basically what phones are, and we have no need for the actual phone bit so long as WhatsApp/Skype/VoIP etc. work on the network. I can just as easily put a SIM in a tablet as I can a phone nowadays, and just as easily get a "real" phone number on a SIP account than I can sign up to a mobile contract.

To be honest, by the time it gets there, I can see things like the RPi being small enough that I just buy a "5G" module for one and stick it in a pre-fab case and I'm done.

Cloudflare gives websites their marching orders to hasten page rendering automatically

Lee D Silver badge

Re: Errr

The HTTP protocol has always been quite inefficient, as soon as we got past "I just want a single plain HTML page from a single-IP domain name with no security", it became inefficient and a mess.

We added gzipped content, we added TLS and SNI, we added cached content, cache control and all kinds of X-headers, we added multiple request streams which overwhelmed things so we added pipelining multiple requests in a single stream, etc.

It needed a reboot.

I quite understand the problem - watch the GIF. Edge just waits until it knows where everything goes. The earlier versions of modern browsers just splatted to the screen and moved things later (which creates a mess of movement and wrong-clicks). The new versions now protoype page layout based on available information, request resources in the background, and fill in the gaps as they come in.

There's nothing in HTTP2 that's ground-breaking. We've just gone from a single human-readable conversation to an encrypted, shared-pipeline channel with all kinds of content typing and prioritisation.

What gets me is that with all that reduction in latency, compression, etc. we still don't have anything approaching a website that actually loads fast. If I made an HTML table with a couple of optimised JPGs for the page in that GIF, I could splat that on screen over even the slowest connection way before those browsers manage to render it (I'm guessing that demo is exaggerated by using a very low connection speed, because modern browsers aren't THAT slow), just by making sure that I send the least amount of data I can in the simplest format.

All that CSS, JS, etc. nonsense results in megabytes of load for a simple page, plus conditional display and execution based on running that code, which has to be done after downloading from half-a-dozen different places.

Though it's a step-forward, we're still just making unnecessarily bloated sites.

Even this page - a list of forum comments, a handful of links to other articles, and an ad or two, is currently running 30Mb of JS virtual machine while I type this comment, not to mention downloading dozens upon dozens of images and JS files.

One day we're gonna hit a physical limit, and then people will have to learn to optimise again.

Another TITSUP* on this lovely Tuesday: Virgin Mobile takes time out to enjoy the sunshine

Lee D Silver badge

Re: There is a solution

Virgin is very much location-dependent.

I have had a leased line out in the sticks for 5 years and nary a blip. As in not even one, in all that time.

But elsewhere they re-use Openreach services to provide (for broadband and/or leased line believe it or not, yes, I have a "Virgin-managed" but Openreach-provided leased line at another site). My previous workplace also had Virgin via a reseller - no problems. Had Virgin at home for years. One spark-out on a VoD movie once, and that was the little cherubs down the road pulling cables out of the cabinet.

VM get horror stories based more on geographic location (i.e. what old duff cable they inherited from NTL) and who else actually *provides* the service than they ever do on their native lines.

Home Office cops an earful for emergency network feck-ups - £3bn overbudget and 3 years late

Lee D Silver badge

Of course.

But a 24/7 serious-levels-of-uptime national radio network has been done before, is being done already, and will be done into the foreseeable future.

Why - all of a sudden - do the companies involved not know how to quote proper prices, why do the government departments suddenly not know how to procure, specify, contract and budget, and why are they all unable to do something that every country in the world has done to some extent?

This is complex stuff. But if you gave £1bn to pay for a room of 1000 engineers, £2bn to do it, and the timescales given, they could probably get you way past anything ever being provided here... just on the OVERBUDGET, let alone the original budget. And would be handsomely recompensed for doing so on that basis!

Lee D Silver badge

For £3bn I could buy every man, woman and child in England a £40 radio/phone.

For £1.7m a day, I could give them all a SIM and contract too.

And yet it's not enough to provide *just* emergency services with an equivalent that's better than a mobile phone + contract?

Double-sided printing data ballsup leaves insurance giant Chubb with egg on its face

Lee D Silver badge

Re: They ought to teach this in schools.

I work on the "apology is not a solution" basis.

Saying "Sorry" doesn't fix it. Tell me why it happened, what you've been doing to stop it happening before, and what you're going to do to stop it happening in the future.

Because if the answer is: "We pressed the wrong button in Word, we've never imagined it could be a problem for a multi-national company to use Word mail-merge and not check the 'double-sided' option on our major print runs, and we'll slap the wrists of the intern involved but the next run will probably be done by a different guy anyway", then I have absolutely no interest in retaining your services.

Rail companies do this all the time. Don't apologise for it being late. Stop it being late. Even if that means it still gets there at 8:08 and waits for 15 minutes before leaving, but at least we *know* that because you just re-time the route accordingly and tell us what to expect.

You wanna convince me... do a full post-mortem, publicise the results (with suitable redaction), highlight the weaknesses you *had* and then post the plan and timeline to fix those weaknesses *and others of the same type* that you can imagine now you've sat and thought about it. Then I might accept the apology attached to that document.

In the claws of a vulture: Nebra AnyBeam Laser Projector

Lee D Silver badge

Re: Uhh

Personally... I'd hook it up to my Canon EOS camera body, which is attached to my telescope.

Just because you're "camping" doesn't mean you don't need entertainment, can't benefit from technology, and aren't just "on a cheaper kind of holiday".

I would happily camp with nothing more advanced than a box of matches and a tent. But equally I always take my smartphone, and things get dark much earlier in the middle of nowhere than in your artificially-illuminated home. Snuggle up in a sleeping bag, project a Netflix episode of something on the side of the tent before you go to sleep.

Camping isn't always minimalistic. In fact, it's infinitely more enjoyable to have at least some tech (e.g. artificial lights, camping stoves, smartphone/GPS with pre-loaded OS maps, etc. etc.)

If the thing you were doing earlier is 'drop table' commands, ctrl-c, ctrl-v is not your friend

Lee D Silver badge

1) "We don't need no steenking backups!" - Sacked. Get out.

2) Log in as full privilege user to update a minor database table. Sacked. Get out.

3) Doesn't even bother to do it in a transaction that you could, probably, roll back. Sacked. Get out.

4) If pasting to a remote SSH session, doesn't just edit a file and paste into there (because if that string had anything in it, you could have ended up quitting out of the SQL shell and executing all kinds of stuff! It's easy to paste something with a handful of line returns, but quite hard to paste something that'll Ctrl-X you out of an editor, though). Sacked. Get out.

5) Executing SQL live on a production system underneath the application without prior testing on the staging system he admits he was working on! Sacked. Get out.

The excuse of "Oh this was before the days..." ... so pathetic. What you going to do? Roll back an in-production social network main database server via a Hyper-V checkpoint and "just forget" about all the transactions that occurred on it after the checkpoint but before it was rolled back?

Seriously, this is just people who have a habit of working dangerously around production systems and think it's funny. I use everything I can to make sure I don't mess up - checkpoints to backups to replicas to saving the table contents first to every privilege separation possible to literal-typing (prone to errors but you double/triple-check) to safety-hash (Putting a # before any dangerous command that you're tinkering with so you don't automatically execute it... SQL equivalent is "SELECT" until you're happy and THEN "UPDATE"), to literally never deleting a file in my professional life (rename / move it out of the way, sure, but why delete?). And sometimes there are still gulp moments.

These kinds of people are exactly why I do tight permissioning and delegating on admin functions, filesystems, table and database security, etc. My technicians have always hated it (having to ask to do certain things, and only getting a permanent permission granted once they'd proved themselves and acquired the same habits) right up to the moment that it saves their backside ("Thank God, I only had write permissions to that one table!").

A2 Hosting finds 'restore' the hardest word as Windows outage slips into May

Lee D Silver badge

Re: Servers..

It always amazes me that people "lose money" over a system that - for way less than even a day's outage money - could be doubled in resiliency by putting some inactive server in a disparate cloud, or on their own site, or whatever.

Even a VM replica, syncing every 15 minutes or so but otherwise idle, could have been spun up quickly even if it wasn't the fastest server / connection that it was sitting on.

I did a calculation once - my employer's entire systems could be stored and booted up on a single laptop. Not claiming it would be "fast", but it would be up and you could carry on business in a reasonable manner.

Literally, for the cost of a laptop with a copy of Windows Server, VMWare or whatever, I could have an entire on-site warm spare of everything we run. Built-in UPS too! When you then get into "we need a real system", then it's a cinch to spin up instances in a handful of separate cloud servers and have the same.

But, these people are complaining about "losing money" when they could most likely have just turned on a cheap laptop and got access to all their data, a recent backup of everything they had (e.g. web transactions) and maybe even got a chance to operate their services from anywhere in the world (sure, it'd take a little tweaking of settings, but at least you'd have the option).

Julian Assange jailed for 50 weeks over Ecuador embassy bail-jumping

Lee D Silver badge

Re: £16m of taxpayers' money

£25,000 per copper.

£5000 an hour for lawyer's fees to consider the question of what the police / Home Office are legally able to do about the situation without causing an international incident or getting accused of over-stepping the law and thus (potentially) letting a criminal go free because of a legal ballsup.

To be honest, I've always thought that once found guilty you should be charged for the police and court time in dealing with you. When you get kids smashing through streets in a stolen car, with half-a-dozen cops spending a day chasing you, arresting you, charging you and doing all the paperwork and legal side, I don't see that a £200 fine and a "driving ban" (though they aren't allowed to drive anyway) is sufficient or sensible.

Like "victim surcharge", we should have an "enforcement surcharge". You co-operated, handed yourself in, came to the station quietly, etc.? No charge. You were found not guilty? No charge.

You resisted, and were later found guilty? 10% of everything it cost to apprehend and charge you, reparation for damage caused (whether insured or not), etc. Maybe then our police would actually have a lot less hassle, proper funding, and criminals would give themselves up rather than run away.

And if you go to prison? Cool, you don't get out until you have worked off the fines and charges, even if you served your sentence. Paid at minimum wage for each hour of work you complete in the prison without causing hassle for the prison officers.

Lee D Silver badge

Assange, Snowden and Manning have shown you only one thing:

If you discover your country doing something illegal, never reveal it unless you want to spend large portions of your life on the run, in prison, or at the behest of the Russian authorities.

They are *TERRIBLE* whistleblowers. Incompetent, amateur, unable to even cover their own tracks, and resulting in literally *nothing* happening. But they all now have spent a significant amount of their lives in fear of authorities, one way or another.

And, I'm sorry, but the man in the street is hardly in uproar about everything they "revealed". They'd literally be more shocked at Trump's tax return.

I think Wikileaks hasn't changed the world - if anything, they've merely revealed the dangers of trying to do just that. Which consists of US prison, 7 years in an embassy and 1 year in prison plus extras, or having to flee your entire life to Russia where you then get told *exactly* what you can and can't do because you're now their political prisoner and they can screw you to the wall any time they like.

Sky customers moan: Our broadband hubs are bricking it

Lee D Silver badge

Re: It's been years since . . . .

"So modem mode on the router for Virgin. I have an older Vigor but it's not a cable one. Can I still use that on the Virgin setup? As I assume the Vigor just connects via cable to the Virgin?"

Yes. If it has Ethernet, you plug it in the WAN Ethernet port. Done.

That's the exact config I had for a number of years.

Lee D Silver badge

Re: It's been years since . . . .

Worked in IT for 20 years, installing all kinds of lines. Not once have I ever been asked for the original equipment. And, for ADSL, it's a £20 box... they're not going to lose thousands of pounds of custom over a £20 box that they produce en-masse and change every year. Not if they have half a brain.

P.S. So long as your router is certified compatible (e.g. BT SIN 498 MCT), they have no just reason to insist on a particular box.

Lee D Silver badge

Re: It's been years since . . . .

+1 for Draytek. The Vigor range of routers are amazing.

If you have a "BT fibre" line, then you just plug it into the VDSL port, plug in the broadband login info, off you go.

Using the stock supplied router is very old hat, I haven't done it since about 1999, whether home or at work. I just bin their junk day one, put a "real" ADSL/VDSL/Ethernet router on the connection and off you go.

Not quite as easy on Virgin DOCSIS networks, etc. but then you put the Superhub into Modem mode and just pipe that through to the Draytek (or whatever).

Most importantly, Drayteks will check that your upstream routers are using DNSSEC if you let them... and then offer it out over your local network as just normal DNS. So you know that no amount of tinkering at your ISP end is fecking with your DNS requests/responses, but you don't have to reconfigure your entire network. You still need to encrypt or use another protocol for proper privacy of your lookups, however (VPN to a proper DNS server under your control, use DNS over HTTPS, or trust places like 1.1.1.1 or 8.8.8.8?).

But using a stock router on an ISP DNS? That's very 1990's.

Sorry, but I don't let my own bank snoop my information, why on Earth should I be letting my ISP do the same?

Customers furious over days-long outage as A2 Hosting scores a D- in Windows uptime

Lee D Silver badge

Re: Uptime is not easy

Not just that.... your systems need to be 100% isolated from those you're managing AND those from each other AND from each other.

If you can't manage that, then for all I know, Joe Bloggs who rents a £2.99 VPS next door to my server is actually living in my server scot-free and wreaking whatever havoc with my data. Or your call-center agent is one-click away from knocking my server offline and losing my credit card details in the process.

Security is about isolation - VLANs, filtering, port-settings, firewalls, VPNs, administrative back-end networks, privilege separation, etc. etc.

If you fail at that in the design stage, it really doesn't matter what happens in the implementation stage, I wouldn't want to touch you.

And then you get to the backup scenario - why are you not able to rebuild every hypervisor machine back from an clean image with deployment tools, and then suck individual backups of the machines back, and restoration of the machines themselves is on a huge grandfather-father-son basis or - worst case - you restore an image and tell you clients to restore from their own backups.

Windows malware able to run riot through a datacenter unchecked enough to affect every customer is an indication of an amateur-hour setup.

I can't even fathom a reason how it would be able to spread from one machine to another, or why the backend control and administration systems would be using Windows at all.

There's NordVPN odd about this, right? Infosec types concerned over strange app traffic

Lee D Silver badge

You want to VPN because you don't trust the third-parties who are transiting your connection.

So you VPN with a random third-party who is subject to those other third-party's whims.

Great idea! Thumbs up! Well done! Top security!

A VPN is for you to place OVER an untrusted connection to form a trusted connection between two computers / network. As soon as you insert a random third-party app, or indeed VPN provider, into that connection it's even-more-untrusted than it was before, and there's another party who you have to trust entirely with all your data which - as this and many other incidents show - is a really, really, really poor idea.

And, let's be honest, to do what? Watch YouTube or BBC past geographical restrictions? It's just not worth the effort, just stop consuming their media.

Anything more nefarious, you're really an idiot to trust that intermediary with that information, you're basically flagging yourself up and THEN handing them your data on a plate.

If you want to do something "private", insert as few third-parties as possible into the trust chain. Hell, the reason I run my TV from a RPi is so that I can dial into it from abroad and do that same kind of thing, rather than have to trust anyone not-to-dob-me-in (I used to use TVPlayer.com, but half the stuff is content-restricted still EVEN THOUGH I'm paying for it... and often with Irish local programmes and adverts... I can literally do a better job with an aerial and a Raspberry Pi).

And I'll tell you something else... rent a server and pretty much nobody cares what traffic you do on it, so long as you don't flag up. You can rent a VPS or dedi for next to nothing nowadays, in any country you like, and they'll often pre-load VPN access for you.

And if you value absolute anonymity, for anything more cheeky than a bit of British TV, you can't use any connection registered to your name, or your normal desktop browser, it's as simple as that. Paying NordVPN to offer you a VPN is literally just handing your name to the authorities if you're doing anything remotely naughty anyway. If you're gonna do that, Bitcoin a dedi (plenty of people doing that), Tor the connection, access it as a "desktop" from nearby public wifi (not your home connection) and use it that way.

You can't trust even the people you pay to give you a privacy-secure VPN.

You can't use any paying service to give you a "criminally"-secure VPN.

So stop trying. Either do it yourself (a VPN device at home and a VPN in a VPS somewhere), or actually do it properly with no association to yourself whatsoever.

Parents slapped with dress code after turning school grounds into a fashion crime scene

Lee D Silver badge

Re: walked to school by myself

Been a standard practice in most (primary/prep) schools across the UK that parents have to collect or explicitly notify of an authorised person coming to collect (e.g. in some prep schools, they will organise a driver or PA to come collect, I kid you not!). Not secondary, where you're pretty much left to your own devices.

Worked in state and private schools for 20 years. It's the exception to be allowed to walk to school in primary/prep (the school would certainly raise concerns about it).

Lee D Silver badge

Worked at a school in the UK that did exactly the same.

Parents who aren't dressed appropriately weren't allowed on-site (and the pickup/dropoff was inside the school grounds and the kids were little so weren't allowed to leave until someone appropriate came and picked them up / dropped them off).

Nobody really complained, and it stopped the onesie / dressing gown mums.

Seriously, people, your kid's expected to be washed, dressed, in a smart uniform, with their kit, on-time, and ready to go. And you can't even throw a pair of jogging bottoms and a t-shirt on?

But then, I've also worked in schools where it's not at all uncommon for kids to arrive un-fed, not having slept all night ("because mummy doesn't tell me to go to bed"), in filthy clothes that are weeks unwashed, etc. etc.

Sophos antivirus tools. Working Windows box. Latest Patch Tuesday fixes. Pick two: 'Puters knackered by bad combo

Lee D Silver badge

Sophos Enterprise Console is in every LGfL (and many other similar networks across the UK) school, as it's given away free, who often (stupidly) have automatic updates just set to roll out without any control.

The people who work in that industry and have for years been saying to me "Yes, but why don't you just push out all the updates immediately" have had their answer several times over, and just got it again.

That's a massive, stupid boo-boo, that's very difficult to revert in any automated fashion whatsoever, across thousands of organisations running thousands of machines each.

I refuse to be a Microsoft beta tester, so WSUS is the first thing I install when setting up a new network.

Cheapskate Brits appear to love their Poundland MVNOs as UK's big four snubbed in survey again

Lee D Silver badge

Unlimited data only applies to phones, not to tethered devices.

Read their gumph and "unlimited" really means "9Gb" in those circumstances, or thereabouts. I have a mobile data SIM designed for tethering, I burned through 40Gb (which is unusual for me).

Giffgaff et al are all the same in that regard - once they detect you tethering, they charge you, stop your data, or terminate your contract.

Though quite why is beyond me - a tethering client using 100Gb is no more a burden on your network than a phone using 100Gb, surely?

Lee D Silver badge

I don't see that.

I have a giffgaff SIM in my 4G phone... I get more than good enough download speeds to do anything I like.

My Three-based Huawei hotspot device is only slightly faster, in fact.

Given that I have *no* fixed broadband, only the above two, I think I'd notice.

Giffgaff are cheap and flexible, which is why I use them. I could get a ton more data if I cared, but I can't really fault their service and speed, even if they have had the occasional hiccup like everyone else (they're only re-selling O2 after all). At least they don't even *pretend* that it's worth their while manning huge call centers for the idiots that can't activate a SIM online.

Gimme three different giff-gaff-like places and I'll switch between them when there's slowness/a problem if it really came to that.

P.S. just this week I used up all my Three data, and then spent the last two weeks on my giffgaff SIM as a hotspot - for EVERYTHING from watching Netflix to doing work, to every bit of browsing, to roaming around 100miles with it in my phone. Speedtest says 18Mbps at the mo, but I'm literally sitting in the middle of a 28 acre-site in the middle of nowhere, far from anything that could be a mobile tower and right next to some HUGE power lines. At home, I generally get 30-50Mbps.

IT sales star wins $660k lawsuit against Oracle in Qatar – but can't collect because the Oracle he sued suddenly vanished

Lee D Silver badge

Re: Wow just wow.

That's fine.

Who paid the lawyers? The entity that vanished? Oh well, recoup it from them. Or another entity that spontaneously started up and is now funding the lawyers? Whoops.

Legal entities like companies may vanish, but the lawyers, (former) directors and others can still be held to account if there are matters outstanding. In some cases, such "winding-up" can be forcibly reversed, in fact, until such matters are dealt with.

And the prime case of doing such things is exactly when people do it to evade justice.

Lee D Silver badge

And these are the people who you want to do business with?

People who screw over their own sales people on a regular basis, and up-sticks-and-move without telling courts that they are being sued within?

Sorry, but if that's how they treat their OWN people and the legal establishment, why the hell would I want to subject myself to their behaviour as a *customer*?

Micron's new 9300 SSDs are bigger, faster and simpler... which is nice

Lee D Silver badge

Re: 16 TB. And if it fails?

In that instance, neither is tape - if the tape catches fire.

But if you put that RAID *in another building*, like you would a tape, then it's a perfectly adequate backup.

Lee D Silver badge

Re: 16 TB. And if it fails?

RAID is a perfectly adequate backup. As a SINGLE unit. Two drives in a RAID is *NOT* a backup of one of those drive. But one RAID set backing up to another RAID set that you then take offline is a not-unreasonable (and pretty damn fast) backup solution as a single, solitary backup.

It makes for a very timely restore, quick access to single files, and doesn't require huge expense with tape libraries and the like. Most especially, the equipment required to recover it is positively minimal even in the worst case scenario (whereas a new tape library on short notice of a very particular model / compatibility is going to cost you big).

If you have half a brain, you have a "live" RAID set, a "secondary" RAID set to provide redundancy elsewhere, maybe a handful of little offline RAID sets, and if you want then you can have your tapes and other stuff for more "emergency" type restores.

But two drives in a RAID is not a backup. Because each drive only contains (for example) 1 sixth of the full RAID6 set. And in restoration / resyncing, you can easily (in fact it's likely that you'll) lose drives and that means nothing might restore at all.

But having a "copy" RAID set as a quick-restore, poke-around-the-backups, staging and non-critical (No single backup type, unit, media or technology should be "critical" and the only way to restore something! That's the point of a backup!) backup... another RAID set is fine.

Technically, one of my many backups is literally a RAID set on a portable device, which offers the RAID over iSCSI, such that I could - in theory - run every VM and data backup I have off a single portable device without having to do anything more than turn it on and add the iSCSI address to a server. No "18-hour restores". Not saying I rely solely on that for business continuity, but it's saved having to do a full or even partial restore from other technologies and provided direct access to the file from a backup at basically network-speed, many a time.

Lee D Silver badge

And why do the links go via Google? Cached?

Lee D Silver badge

How much?

Until I know that, I have absolutely no way to judge whether they are suitable.

Given that I can find a 1.6Tb 9200 for about £800, I'm guessing that new / bigger ones are also stupendously expensive too.

It was that gosh-darn anomaly again, says SpaceX as smoke billows from Crew Dragon test site

Lee D Silver badge

54% success, overall, to date.

So as I clearly stated "for years, more often than not" it failed.

Or 84% success. IN THE BEST INSTANCE. If we let them just say "Oh, we never intended to land that time". Or even if we go back a year or so (hey, sorry for not watching EVERY launch ever), that percentage tends back towards the 50% and maybe even below that for quite a while.

Which is fecking appalling for space-faring. NASA's record since the 1960's was way better and they were literally doing it for the very first time ever with nothing but a handful of silicon chips and an awful lot of engineering.

And yet still, just last year, these things are still crashing, or in this year so far - exploding.

Either recognise that it's a stupid thing they are TRYING to do, they are doing it sloppily, or they're just not as good as you want to believe even when you KNOW the numbers.

Lee D Silver badge

SpaceX have been sweeping bad news under the carpet since the start.

Their amazing "auto-landing-on-drone-ship" for years, more often than not, was more likely to have taken out the drone or the rocket. They just never said when it did, and made an awful fuss about how brilliant it was whenever it happened to work properly.

Nothing different to any other Musk property... don't listen to what they *are* saying, because it's mostly nonsense. Listen to what they aren't saying, and check for yourself.

Not another pro-Brexit demo... though easy to confuse: Each Union Jack marks a pile of poo

Lee D Silver badge

"#1 is bin collections; but that's 90% lying bastards that have forgotten to put theirs out."

Allow me to describe a complaint I filed against my council:

- They didn't collect bins from 12 houses for a period of 3 months.

- Collections were sporadic, random, and never at their assigned times.

- I complained, they ignored.

- Neighbours complained, they ignored.

- So I did my usual - full, no-holds-barred, complaint-flurry with follow-up.

Literally, the bin lorries were taking it upon themselves to not bother with the last part of the street, because that would mean doubling-back down other roads they've already done (it wasn't a dead-end, just the end of a street that met another two streets). They never came back and didn't bother to collect unless an enormous fuss was made, when they'd collect once at random and then claim "the bins weren't out" (of course not, we get fined if we put them out on a non-bin day!).

Full-complaint mode revealed that they'd rather target me explicitly, trying to fine me for putting the bins out wrong, throwing the wrong stuff in the bin, letting bins overflow (YOU DON'T BLOODY COLLECT THEM!), etc. etc.

However, there was one teensy, tiny downside to their assertion:

I had CCTV footage, 24/7/365.25. Covering the entirety of my front garden, the road beyond and anyone collecting (or not) my rubbish. Going back six months. When this was revealed, they hastily retracted all such claims. They also claimed that "I'd put non-recyclable rubbish in the recycling bin hence why it wasn't collected". Either they have long-distance X-ray vision, or they never even actually turned up to look at the bin, much less make a decision on its contents. And, as I pointed out, even if true, just "not taking" the rubbish is no good unless you put a flag or leaflet or something explaining one (because otherwise people could make up any old cobblers not to take it and how the hell would I know?).

Then I got them into the papers with my complaint letter, and handily revealed the fact that the councillor in charge of waste management just-so-happened to own the waste management firm (and hadn't properly registered that interest *cough*). I received a very hasty apology and not once was our rubbish left uncollected again.

The best part, though. "Oh, you live in XXXXX Lane? Well, our manager lives in that same road, so obviously he's collecting your rubbish!". Really, mate? You give me the time, date, vehicle registration, and I'll provide you the footage of him doing just that. Because I *do* have footage of every time, date in the last six months. And he's not on any of them. Do you want that footage?

Bloke faces up to 20 years in the clink after gun held to dot-com owner's head in robbery

Lee D Silver badge

"The armed robbery went wrong when the domain owner, Ethan Deyo, thought that the gunman, 43-year-old Sherman Hopkins, was going to kill him and fought back."

Yup, sorry but you have to 100% assume that someone pointing a gun at you is not faking either the gun or their intent, and that they have very real intent to harm you, whether or not you comply.

If they weren't going to fire on you, they likely won't fire on you when you try to overwhelm them.

If they were, or they are panicky enough to fire on you anyway, then they could have done that at any time - better to be a time of your choosing.

If you comply, you have no guarantee whatsoever that the madman with a gun talking about domain names in your house is going to do anything other than kill you once he has what he wants - or maybe even before then.

The exception is the police who *SHOULD* know better than to fire on a compliant person, but even that's not necessarily true in the US.

You have to operate on the basis that you're dead anyway / whatever threat they make to your family will be carried out anyway. May as well take them down with you as, as this article says, even with several shots to the chest, the guy still survived long enough to stand trial and go to jail.

UK comms watchdog mulls 5G tweaks: Operators want moooooar power

Lee D Silver badge

Re: I keep my mobile

Which is why my glovebox-phone is:

- Tiny (about an inch long, but fully functional, multi-SIM, bluetooth, etc.)

- Literally just a keypad, it doesn't need anything more but it can store contacts etc. if you wish (but it's next to the bit of card with the breakdown etc. numbers on it).

- Charges from a standard USB cable but also has an internal battery you can change.

- Even without a SIM, you can call 999 from it.

- On a SIM card that doesn't expire (so long as you pay the £4.99 a year explicit renewal that they email you specifically about, it's yours - you just pay slightly more for calls on a PAYG basis).

Should be a standard piece of kit for most people, even if just to call 999 (e.g. you're in an accident). As it stands, my car automatically picks up programmed Bluetooth phones and uses them if the airbag ever deploys to report my GPS location automatically to 999 / 112 / 911.

A phone like that should be part of any emergency kit. Hell, if you're hillwalking you should have that at minimum, let alone if you're driving along dark country roads at night and hit a flock of stray sheep (nearly happened to me).

Hey criminals, need a getaway vehicle? There's an app for that... Car share tool halts ops amid crime wave, arrests

Lee D Silver badge

Pigeons home to one roost... it would be positively idiotic because they could only lead people in a straight line right back to where you're intending to pick up their stuff. And you'd have to train them to do that, which would be quite telling and require a lot of preparation and meant you wouldn't be able to move around much from the training location.

Plus... weight, bulk - how are you going to pack more than a little bag of diamonds on them? Even half a kilo would be pushing it for a pigeon to get any distance with. There's a reason we curled up little slips of paper and put them in tiny holders on their leg, rather than used them to just carry a book.

A drone can literally fly at random, only honing into your location when you explicitly instruct it to and the big ones can almost carry a man.

Strong-willed field support op holds it together during painful customer call

Lee D Silver badge

A good example of when customer services (which is an *expense*, remember) really pays off.

It probably didn't hurt that much for them to do, and if they got a couple of meals out of it, likely it paid dividends for them.

On several occasions I've done the "Look, honestly, it's nothing to do with me/my employer, but I'll help you out..." and given equipment, advice, phone numbers, referrals, my time. Not to everyone (you have to be polite still) but it got a few people out of really hairy situations not of their own creation when I could have just shrugged and walked off. It usually resulted in a much bigger payback, whether that be a box of chocolates biscuits at Christmas or them singing their praises to my boss.