* Posts by Lee D

4251 publicly visible posts • joined 14 Feb 2013

Wi-Fi Alliance ditches 802.11 spec codes for consumer-friendly naming scheme

Lee D Silver badge

Re: If it is not broken...

Exactly.

We should have stuck with the original naming scheme.

802.11 a, b, ...

Like all naming scheme, it started out well, then ended up in a mess of non-intuitive junk (g, n... is ac better or worse than a?), then has logic re-applied to it when people realise that it's just stupid.

CONSECUTIVE INTEGERS, or letters if you prefer. Minor versions being near-consecutive decimal upgrades to the existing version (i.e. either consecutive 10ths or 100ths depending on the "size" of the update... 3.1, 3.2, 3.3, or 3.3.1 being a minor update to 3.3).

Any other version naming scheme is a nonsense - excluding minor versions (e.g. 98SE, etc.), and often cycles back to common sense.

Windows: 1, 2, 3, 95, 98, NT/2000, XP, Vista, 7, 8, 10...

Office: 1, 2, 3, 4, 95, 97, 2000, XP, 2003, 2007, 2010, 2013, 2016, 2019... (not even including some Mac, etc. versions!)

Linux: 1, 2, 3, 4.

There's no need for it. Even 2G/3G/4G recognises this. Nobody cares about LTE, HSDPA etc. they just want to know if it's one of the "new lot" or not. 4G > 3G > 2G > "G".

Anything else is literally marketing gumph designed to mislead, confuse and obsolete. It's even mocked - no movie sequel is ever anything more than "Movie 2", "Movie 3", unless it's literally taking the piss: Naked Gun 33 1/3rd.

Free for every Reg reader – and everyone else, too: Arm Cortex-M CPUs for Xilinx FPGAs

Lee D Silver badge

Isn't the Cortex M3 the chip used in the Arduino devices?

https://en.wikipedia.org/wiki/ARM_Cortex-M#Cortex-M3

Basically, this means you can make an Arduino-compatible board from an open-core processor.

That's a pretty big plus for the hobbyist electronics people.

Location, location, location... technologies under the microscope

Lee D Silver badge

Re: BlueTooth? No Thanks

Even most people who have bluetooth don't have it enabled to be always-visible, hence they don't get pairing requests anyway. So they can listen to their bluetooth headphones, join to their car's bluetooth, etc. without ever caring about those people trying to spam them over bluetooth.

Lee D Silver badge

Not without me accepting a pairing request, and pretty much I don't have pairing requests enabled unless *I'm* the person trying to add a device.

Also: What's the point? Hey, guy just about to buy a bottle of ketchup. Here... have an offer and make that ketchup cheaper so we make less money? I don't get it. Or you could just put a barcode in the ketchup aisle if you want to do an offer on a particular brand (hey, put a screen in there and you can change the offer as often as you like).

Maybe some Bluetooth passive monitoring but, again, what's the point? This guy lingered in the ketchup aisle for 20 seconds and then bought some ketchup. You can pretty much tell the important part of that from the checkout receipt anyway, can't you?

I remember studies saying that, pretty much, all the brand loyalty cards, etc. doesn't really give anyone that much information that they don't already know. ASDA (Walmart) - one of the largest - don't even have one, do they? You know what goes through your tills, when, and in combination with which other items down to the last iota nowadays, surely? The value in anything further is pretty minimal, just joining someone to their previous transactions on a voluntary basis rather than, say, matching on credit card.

Pretty much spamming someone who's ALREADY in your shopping mall / store is a pretty dumb idea and just going to drive people away.

VirusTotal slips on biz suit, says Google's daddy will help the search for nasties

Lee D Silver badge

Re: so..

Because licensing VT for such use would likely be very expensive.

It's not about "can you", it's about "how much does it cost".

How much did you pay for your browser? How much would you be willing to pay "per download" that you use it to do?

Precisely.

Sync your teeth into power browser Vivaldi's largest update so far

Lee D Silver badge

Re: Good news

Chromium then.

Even has auditable source code.

Lee D Silver badge

Re: Good news

Same.

I've given up waiting really. I just need a mail client as I've got used to using Opera for mail/RSS and Vivaldi/Chrome as browser - I'd love to have them integrated but it's never going to happen now.

In that circumstance, Vivaldi offers me nothing spectacular at all over Chrome, so it'll likely be ditched. I had it and used it BECAUSE of the promises of getting the Opera-like mail integration and it's been years and there hasn't even been a single step in that direction and it looks like they want me to use a web-based Vivaldi-branded mail now.

Bye lads. I'd have paid like I did for Opera. But you are most interested with changing the logos/icons (three times in two years) than you are actually actually functionality that makes you different from "Chrome + some extensions".

Perfect timing for a two-bank TITSUP: Totally Inexcusable They've Stuffed Up Payday

Lee D Silver badge

Re: Rather that waste time tweeting...

"And then you need to jump through hoops to get your company payroll to acknowledge your new account, keep both open at least until the next payday to play "which account gets paid?" lottery, transfer money from one to the other, wait the requisite 2 days for a bank-to-bank transfer etc."

No... Current Account Switch Guarantee includes:

"Redirect any payments accidentally made to your old account and get the sender to correct your details"

So no... you switch, close the account, done. Not saying it's 100% perfect, but the only thing stopping you is your own paranoia about "what if my old bank..." which is exactly why you should switch away from them.

Lee D Silver badge

Exactly. Vote with your feet.

I have eliminated most of the high-street banks that way. The one that survives has only had stuff that doesn't affect me (e.g. business banking problems), etc.

However I also have a few of the more niche players on the sidelines ready to move all my accounts to if I should get disillusioned.

Lee D Silver badge

Re: Rather that waste time tweeting...

Not really.

Current Account Switch Guarantee.

Go to new bank. Sign up. Instruct them to move your account over. They have a required number of days in which to do it, including all your existing payment arrangements.

Including business accounts.

If you're still with TSB now, I judge you.

Attempt to clean up tech area has shocking effect on kit

Lee D Silver badge

Re: Electrifying

In a school. One of the offices has a fuseboard that kept popping. We had electrical problems all over because we just kept expanding and expanding, but we slowly eliminated all the causes (things like crossed-phases on a two-plug heated canteen trolley, etc.) and got them fixed.

But one continued to baffle me - when the office woman put her fan on, sometimes the fuse popped. But not immediately. Often some hours after being plugged in. Even when there was nothing else on the circuit. It took months to narrow it down to the fan and I still kept thinking the fan was faulty somehow, but it always checked out and worked fine elsewhere.

Traced the problem eventually. Someone had re-wired the plug on the extension lead at some point and got it back-to-front and got the brown and blue mixed up - the PCs and printers wired into it didn't care. But the fan somehow did*. I was always amazed that it lasted that long, that such a low-wattage item could take out the whole circuit, and that it would run happily for days at a time without popping.

Rewired the extension lead properly, and everything has been good since.

(*maybe because it was a metal guard on the fan if it spun and touched something that was earthed? I don't know, I can't imagine that the fan guards are electrically connected at all, and the earth pins were fine).

Your specialist subject? The bleedin' obvious... Feds warn of RDP woe

Lee D Silver badge

Re: Hard not to agree...

I run RDP through an IPS system, it then goes to a limited machine that's only used for RDP clients, where they are asked to login via a brute-force protected login, using an AD account that would give them credentials enough to log into webmail or other services anyway. That then not only notify logins to a monitored account, but also challenges them for 2FA (using multiOTP) before they can actually proceed with the login.

Even "in theory" complete compromise of the underlying machine gives you - access to a client machine. It's not a server. It's literally a client image. If you do proper RDP-farm Terminal Server VM's, that machine is nothing more than a clean-imaged client VM every single time you log in with no history / other user's present on that VM.

People who use RDP for administration - yes, that's different and you want to remove that visibility at all. But TS access to clients, you can log it - it's just like that authenticated client logging into any other machine. No matter WHAT their remote machine has installed and listening on it, or the state of their local network.

Lee D Silver badge

Re: re: sucking data

But you can do nothing that you couldn't do INSIDE the network, on a machine, as that same user.

If the software doesn't let you export that data, or copy to clipboard, then you're literally into screenshot territory. Plus all your monitoring, auditing, etc. software is there installed on the machine that's being copied from, not to mention you could in theory be monitoring that session.

VPN, that's not true. It's just network access.

RDP to servers, etc. yes you want to limit to administrators only via secured channels. But general users over RDP inside limited VM's? So much safer than a VPN for the same users.

Lee D Silver badge

I'm not convinced.

RDP = "look at this picture of secured and configured internal system that is compliant to all our policies" and if you disable file sharing "no, you can't just suck the network data out of the connection".

VPN = "send whatever traffic you like down our wires from whatever machine you might want to, which might have anything on it and might pull any traffic or data is sees".

RDP can also be secured against non-protocol problems (e.g. brute-force password attacks, etc.) using 2FA, and "protocol" vulnerabilities are rare and patched against.

I still think the attack surface of RDP is not only much lower, but much easier to secure, much less damaging and keeps everything internal - your data is less likely to wander off without a trace. Imagine: A rogue program on someone's machine gets access to their remote access method. There's credit-card info of a million customers there. You discover that. Now you need to make a disclosure.

With RDP - it's whatever that session accessed, as that user, over whatever programs are available, on what could be a freshly-imaged VM (basic terminal server functionality in Server editions allow you to wipe a bunch of VM back to image and use a new one for each connection that comes in) inside a session, and then - whatever method it used to extract and distribute that data using whatever programs are available on that VM only.

With VPN - that's a complete traffic trace (if you could even store that amount of data) and a huge amount of potential access to internal systems.

And both have flaws, need patches and can be badly configured.

"Show me a picture of a machine like one I use in work" will always seem less damaging than "join me to your entire network" (even if you put in firewall controls, etc., if they are to access a shared drive, you're allowing the CIFS ports and traffic, and bang you've opened up whole new classes of vulnerabilities). If you're using RDP, you need to hope that the remote machine is even *capable* of executing the program you want to use to steal information, and that they haven't whitelisted the software on those machines such that you can't even try to plant a virus or email yourself an executable, etc.

Android Phones are 10: For once, Google won fair and square

Lee D Silver badge

Amazon deals - unknown make and model - I think one was an "Opera" tablet (yeah, that was just the brand-name they emblazoned on the back). The other was a managed kid's smartphone that was just Android which some MDM and control apps. Same place - Amazon, random brand (but can't tell you which one as my kid has it over in Spain nowadays!).

Lee D Silver badge

Android won because iPhones are stupidly expensive.

Not because Android was "free" because it wasn't, and it certainly isn't by the time it gets to the consumer.

The reason Android is 90% of the market is that they can literally be 10% (or even less) of the cost of the iPhone or iPad, brand new. Simple as that.

(Holds a £10 Android 7" tablet in his hands. Bought from brand-new. Works fine. Once bought a £20 Android kid's smartphone. Bought from brand-new. Works fine. Looks at the stack of iPhone screen repair tools in his office - costs £50-70 each time you break it. And that's just the screen)

'Incommunicado' Assange anoints new WikiLeaks editor in chief

Lee D Silver badge

"arbitrarily detained"

To detain:

- keep (someone) from proceeding by holding them back or making claims on their attention.

- keep (someone) in official custody, typically for questioning about a crime or in a politically sensitive situation.

- officially seize and hold (goods).

None of the above are applicable to Mr Assange. He is not being held back by the Ecuadorians, or in official custody, or being seized or held.

In fact, being where he is is STOPPING him being in custody, which is kind of the problem.

Sorry, Jules, it's really time to come out because even the Ecuadorians are sick of you now.

The 2018 ThinkPad X1 Yoga: A bendy-legged workhorse walks into a meeting

Lee D Silver badge

If I'm paying £1500 for something, I want something a damn-sight bigger than a 14" display.

My last laptop cost me £800, still wipes the floor with those specs (12-core i7, 12Gb), and has a 17.3" display, proper nVidia graphics, two SATA drive bays, etc. And that was a 2011 model from Samsung! Do Samsung even make laptops any more?

Honestly, people, I like Lenovo/IBM and the Thinkpad (still have an old-school one somewhere), but prices of these things for what you get are an absolute shower.

A story of M, a failed retailer: We'll give you a clue – it rhymes with Charlie Chaplin

Lee D Silver badge

Circa 2000, I would have spent days poring over the Maplin catalogue ("the tome") and/or just idly browsing through their stores. I spent a fortune with them online when they launched there, and used to organise my electronics components by their Maplin catalogue number because it was easy to reference the datasheet like that... either from the catalogue itself (I mean, who puts a circuit diagram of intended use into the catalogue image?!), or from their CD which often had links or PDFs of all that kind of stuff.

Circa 2010, I stopped and never went back in one. They were full of over-priced tat. Nobody on staff ever manned their electronics counter. The catalogue was a thin pile of shite that resembled a Betterware catalogue more than anything else. Datasheets and other information was just non-existent. The online presence was basic and basically whatever they had in a store, with not much other information. Even the in-store bargain bins were full of 90's-era hardware with stupendous price tags.

It all seems to coincide, sure. But it wasn't just "taking out loans" that killed them. It was forgetting who their customer base was, i.e. not people enamoured with service assistants bothering them when they walk in, people who need a techy behind the counter, and are likely to want something that they can't just buy online elsewhere and get more information by doing so. Maplin's used to be a "CPC/Farnell". Then they just turned into a poor Argos / MenKind.

Contractors slam UK taxman's 'aggressive' IR35 tax reforms

Lee D Silver badge

Re: What you would hope for...

I think you'll find their intention is to push everything that comes under IR35 to make you taxable.

In that they have succeeded in a number of ways - whether all these stories on here alone about "So I gave up and went properly employed" or otherwise, they are seeing a simpler tax structure and blanket taxation and more tax on an industry that they... well... were seeing less tax from before. And it's only cost them a small piece of admin and a couple of court cases for the borderlines.

Pretty much, they got what they wanted. Is there anyone here paying LESS tax while subject to IR35 than they were before? At the very minimum, people have moved and made the taxation of them much simpler by being subject to PAYE.

From a tax-collection-authority's point of view, I think it's a win all around. The man in the street doesn't really know or care, either. Accountants are quite happy to "take that off your hands" while handing the liability straight back to yourself too.

Now, whether that's "fair" or whatever, that's an entirely different question. Whether you can *isolate* it to just looking at the "income from IR35" box on the national tax receipts or not is largely subjective. I would say that you can't. But tax receipts have grown every year except for 2008/9/10. IR35 came in in 2000, so you can't say that it's affected their overall receipts for the negative at all.

IR35 is not there to "get money from IR35". It's there to discourage a particular way of working that can let you wheedle out of paying the tax that other methods don't. And it does that spectacularly well. Because people go out of their way to avoid being classed under IR35 if they can help it, and such "confusion" actually aids the process - people will say "I don't want to risk a huge backdated bill, so I'll make sure I'm nowhere near that". Bringing them into much more easily-taxable categories.

It never set out to make money. It set out to stop people from avoiding giving them money. And it does just that. It just doesn't appear as a little box marked IR35 on the balance sheer. It manifests itself in overall better tax receipts. I wonder how many companies are registered differently, people moved to PAYE, etc. to avoid IE35? Only HMRC would really know.

It's a deterrent law. And, judging by the comments here, it quite clearly works as everyone hates the mention of it and lots of people have stories of their money being demanded or held citing IR35. That's gonna scare off a lot of people.

Lee D Silver badge

Re: Loan Charge?

No, it's the same as saying "the limit is 70". Then some barrister / website somewhere says "Hey, if you do 20 while on the back of a long lorry that's doing 70, you can technically do 90!"

Then after putting in expenses claims for "long lorries" for X number of years, claiming that it should be legal to drive at 90 so long as *you're* not doing more than 70 on the back of a lorry doing less than 70. Then finding out that's NOT what the law says when the first speed camera goes up. Then having to pay back all those speeding offences you just admitted to doing while you were boasting about your scheme.

It may have been *recorded*, that does not mean it's legal, nor does it mean that HMRC's "absence of enforcement" is somehow a legal "let".

Yeah, it's sneaky to back-date quite so far. But it's also incredibly sneaky to play games to get around paying tax, even if some lawyer says they "should" be legal (e.g. all the celebrities pumping money into tax schemes later ruled illegal - they didn't escape scrutiny and back-dated demands either).

Unless HMRC say "Yes, you can claim that", then you likely can't. Just putting a number on a box on a tax form is not HMRC rubber-stamping your processes.

Mac users get to join the OneDrive Files On-Demand festivities

Lee D Silver badge

Re: What I have learned from reading the comments section on El Reg

Not what I see.

There's a ton of (justifiable) Apple hate on here too.

Microsoft are pretty "meh" nowadays - they're just software, and the XBox. Their global monopoly influence has been reduced to the core OS and office suite. Everything else is secondary, and it shows in their hardware offerings and purchases (e.g. Windows Phone, Nokia, etc.). And Windows Server is undeniably pretty decent at all the things you want a server to do nowadays. Sorry, but it is. And I spent the 90/00's on Linux almost exclusively. Not saying it's perfect, but it's incredibly manageable and very powerful and stable.

Apple, in comparison, just can't get much right at all. I've never seen anything I consider a "good" Apple product. There isn't a single Apple product on the market that I wouldn't rather have the equivalent money for. You couldn't "give them away" to me... I'd just sell them, buy an equivalent and pocket the difference. I'm far from the only one on here like that.

That's why we may mock, but we really don't care that Apple don't talk to The Reg. It honestly makes no difference to me.

How do some of the best AI algorithms perform on real robots? Not well, it turns out

Lee D Silver badge

All of these things are still just statistical models.

People hope that by training on enough data, these things will produce inferences. But they don't. They just train on the data.

A baby who grows up to the age of, say, five doesn't need to know that a baseball bat on the head hurts just as much as a Tonka toy or whatever else. It infers that from the data it has and applies it to everything it sees.

This is the crucial step that we can neither define, detect or induce in our "AI" of today. People just hope that a complex enough system will somehow display this trait that we can't define without us doing anything different to what we're doing now. I can't see it. I'm not even sure it's possible with classical computing.

960 hours of training is also NOTHING for a system that is itself only a slow-running tiny-sliver mockery compared to even insect-sized neural networks running in real-time.

We honestly need to just find something new... anything that needs ANY human parameter-tweaking or hand-holding obviously is not sufficiently able to make its own inferences about what those parameters should be, what's important or not, and what's going to lead to success.

National Museum of Computing to hold live Enigma code-breaking demo with a Bombe

Lee D Silver badge

Re: Message Reads -

What phrase is in every message? Heil-bloody-Hitler!

(P.S. Great movie and I don't care whether it's inaccurate).

That syncing feeling when you realise you may be telling Google more than you thought

Lee D Silver badge

Good, maybe it'll stop my boss moaning that he "never has his favourites" when he wanders onto some arbitrary computer.

No, apparently, remembering to sign-in to the browser is too difficult.

iFixit engineers have an L of a time pulling apart Apple's iPhone XS

Lee D Silver badge

They changed their network twice (so three networks in total).

It still cut out every single time they ever called. They changed their handset with every upgrade possible. They lived in London, same as me, in fact they were closer.

Whenever I heard "Hello, hello? Are you still there?" I would just ask "How is XXXX?".

Sure, it's one datapoint, not something to hinge a national telecommunications strategy on, but it *literally* happened to the point that all parties concerned saw the same pattern and joked about it - to this day.

Lee D Silver badge

It is a running joke that the only person I knew who had to have "the latest iPhone" ALWAYS - and I mean, statistically ALWAYS - cut out about 20 seconds into the conversation and had to call back.

Once or twice, or if we were always taking their calls at home, I could understand that possibly there could be other factors. Literally the only difference was the iPhone.

Maybe they had Wifi-calling or something, maybe, I don't know, I refuse to help people with Apple devices (isn't that what you pay the premium for - to get "better support" and "more intuitive" devices?). But it became a running joke and I used to countdown when they were phoning us.

Fallover Friday: NatWest, RBS and Ulster Bank go TITSUP*

Lee D Silver badge

Re: Back now

And back-out plans means the worse that happens is the upgrade doesn't go through tonight, try again tomorrow.

In case you didn't notice - ABSENCE of a rapid, pre-approved back-out plan... got them into the papers.

I'll be much more worried about a place that requires approval of a back-out plan (rather than taking care to only approve plans with a safe back-out) - when the change is slowly churning through the entire database causing widespread corruption and affecting more and more and more records, and you have to wait for "approval" from someone to back that out.

Hey... maybe that explains TSB, eh?

Lee D Silver badge

Re: Back now

So you make a firewall change.

The alarms and monitors all go off that your outside connectivity is now non-functional since the change.

You wait 30-seconds to see if it's just the config taking effect.

The alarms are still going off.

You go to your change management log, see that the change in question is the cause of the problems in question (and it's not just a lucky time correlation), and back out the change made.

That should *not* take five hours. On a multi-million pound banking system. With a competent team and proper processes. Where it's literally *costing you money* each seconds it's done.

Curiosity's computer silent on science, baffling boffins

Lee D Silver badge

"I'm holding your data to ransom until you pay me a fair wage, you horrible people."

30-up: You know what? Those really weren't the days

Lee D Silver badge

Re: Umm ...

Did you have room for the talk-home DRM, the background service running all the time, the media indexing-against-online blacklists, the constant file-search process running, etc. in those 4096 bytes?

Lee D Silver badge

I would be quite happy if some physical limit had prevented processors ever going past, say, 100MHz. Like, literally, it's just not possible to operate at a speed faster than that.

And some physical limit on "memory you can fit inside a handheld/computer size device".

Then maybe we'd actually see some decent attention to the user and their needs and the hardware capabilities than just "recompile Android, sling it on".

Deliveroo to bike food to hungry fanbois queuing to buy iPhones

Lee D Silver badge

Yes, I think "I took a day off work to buy a status symbol" pretty much ranks just as high in the list of problems I have with it too. :-)

Lee D Silver badge

I find it more worrying that people spending such money generally aren't at work from 9-5 in order to queue all day for, and collect, said phone.

What we have is either a nation of already-retired millionaires splashing their money on tat and pizza and enjoying sitting in a London street in a queue, or a nation of people who really have nothing else better to do spending money they don't actually have or should be spending on other things.

I'm not entirely sure which one I find more disturbing.

The obvious problems (YOU HAVE NO IDEA WHAT YOU'RE ACTUALLY BUYING and whether it's even any good) pale in comparison to "how/why have you afforded to have a day off work to queue in the British wind and rain to buy a phone that I would have to seriously check my bank balance before I even thought about purchasing it?"

That said, this year alone, Apple's support has cost them hundreds of iPads and dozens of Macs from my workplace, because we're ditching them all purely because of their ridiculous and totally uninterested, and not even compliant with Companies Act support and communication (i.e. I was refused the address of the company's head office and they do not have any kind of proper complaint process. As the Head of Written Complaints, Apple, Ireland - that's all I could get out of him on the phone - REFUSED to confirm to me in writing the most basic of information, or even acknowledge that they'd received my complaint. They literally took zero action except to phone and tell me they wouldn't even reply to the recorded-delivery letter demanded mandatory details of their company).

Why anyone would ever do business with Apple, I absolutely cannot fathom.

Brits pay £490m extra for mobes they already own – Citizens Advice

Lee D Silver badge

Re: Astonishing isn't it

Charging for a promised service that isn't delivered is an entirely different thing.

The contracts will be clearly written, however, to say "you will pay X per month until Y when you will pay Z per month". And "After N months, you will own the phone".

NOWHERE will it say that you're still paying for the phone with the surplus after those months. You're not. You're paying for a contract which contains items which include, to whit, the provision of one telephone over the life of the contract. That you then continue to pay it unnecessarily for years afterwards is completely different to, say, VM charging you for a line you don't even have.

Lee D Silver badge

Re: Astonishing isn't it

Do you know how many people I know who have "bought a new car" on only to realise three years later that they didn't read the small print and now they have to pay some huge portion of the overall cost or lose the car entirely?

If people sign up to a long agreement and then FORGET that they've done so... and then let that linger for any significant portion of time, when they were given the contract, had it all explained, have it there in writing in front of them? Yeah, I think there's an element of "learning experience" there for them.

The exact people who get those agreements are the exact people who can't *afford* to be sloppy with money because they couldn't even afford to buy their phone outright. Though that might flag as something we should babysit for them, I really think we'd be better off just leaving them to it.

There isn't a court in the land that would demand the mobile companies "pay back" that unnecessary extra paid as every piece of paper they have clearly lays out what they're paying, how long for and what it'll cost. That people just let that roll over, without even phoning up the company and saying "I seem to have been paying for this an awful long time now" or "I can get a better deal elsewhere", means they don't care.

And it's for something that I consider a luxury item. Smartphones don't have to be luxury items, but the ones you need to take out finance just to purchase them? Yeah, that's a luxury item for you, I'm afraid.

Lee D Silver badge

Re: Astonishing isn't it

People are stupid.

There's free money in doing it for the mobile companies.

Anyone with a brain buys their phone outright or via a separate loan agreement (e.g. giffgaff offer completely unrelated loans on all the top brands of phones).

I have literally met 18/19-year olds who are paying more for their phone each month than they are food. I mean, hell, sometimes even the parent's Sky package is cheaper!

There comes a point where it's just a stupidity tax that we should let those people pay.

DNSSEC in a click: Cloudflare tries to crack uptake inertia

Lee D Silver badge

Re: in large part because DNS providers don't see much of an upside to offering it

Depends what you're trying to do.

I imagine if, say, the government wanted to quietly take over a "secure" forum of dissenters, whistleblowers (e.g. Wikileaks) etc. for whatever reason, they could easily get a CA of their choice to sign a certificate, if indeed they don't already have a trusted root cert they can issue under in every single browser already.

Then they could hijack the DNS for the website in seconds and you'd never know.

CAA would not combat this (they could just "encourage" the right CA). Certificate-pinning/HSTS might. But DNSSEC would also... as there is a similar effort to record keys that were used and it's trickier to change them even if you own the root TLD.

Think not "guy trying to get into your Wordpress" but, say, China trying to capture everyone who logs into a proxy site.

Lee D Silver badge

Re: El Reg writes "In some respects it is like IPv6...."

My work here is done, and I pass the reins on to others....

:-)

Vodafone sues Ofcom to reclaim 'overpaid' mobe spectrum fees

Lee D Silver badge

Re: So that means...

Vodafone I have severe problems with.

I couldn't order the above SIM via their website because apparently I've "already ordered one" and it's impossible to complete sign-up. I've tried four times on four different emails / set of details.

Today, their website (despite promising what you say) won't let me continue to the checkout as there are no provisioning dates (and literally the page breaks and you can't continue because of that). I'm not even doing anything unusual - fresh Chrome browser, tried 3 times, it takes my address and then you can't proceed because it says "We'll inform you of your start date" but won't let you continue until you select a start date... of which there are non.

Their online services are all like this every time I used one. It worries me that simple things that are GIVING them business are broken like this and have been for a while now (the SIM thing is still broken after a year).

That aside, those deals do exist for FTTC areas, which I'm supposed to be, but that's an 18-month contract. In theory I could get 35Mbps if I paid £30 a month. But... I already get that on 4G. Easily. And I can take that 4G box everywhere I go.

Plusnet: I won't touch with a bargepole (always bottom of the awards, along with TalkTalk, despite being my go-to for over a decade back before they were BT-owned).

Sky: £25 "and then £38.99", 12 or 18 month minimum term. Guarantee of 25Mbps.

I'd rather pay more for 4G on a monthly-rolling contract.

Lee D Silver badge

Re: So that means...

I'd happily pay more if they got rid of or vastly increased the stupid data limits.

But you can't really argue with £20-something a month for 40Gb plus several data-not-measured services (Netflix etc.) via Three, or even £30-something for 50Gb and LOTS of data-not-measured services via Vodafone (with their pass things that exclude everything from Amazon Prime to Netflix to Spotify to Whatsapp from your data usage).

Bear in mind that I *only* have a 4G Internet connection and no landline, and it's actually cheaper for me that way. Sure, if I had a big family I'd want more but I'd also pay more too. Cheapest broadband I can get from any kind of decent name (i.e. not TalkTalk) is £20-something plus £20-something line rental, plus install, plus a 2-year-contract, plus buying a better router, etc. etc. etc.

Early bird access to .NET Framework 4.8? Microsoft, you spoil us

Lee D Silver badge

Re: Despite coding in it ...

From a non-developer point of view, it's just a HUMONGOUS library, no different to any other, except that for some reason it takes 30+ minutes to install / update sometimes.

There are also numerous (and seemingly "not compatible") versions of it that all have to be installed to actually run that tiny little program that does not-very-much (e.g. run https://simplednscrypt.org/ on something that's a fresh machine) and where you have to keep around a copy of all the previous .NET Frameworks (some of which no longer install nicely on modern Windows, some of which are integrated into Windows as a "optional feature" that you have to install, etc.

And which multiple major software vendors either a) don't upgrade so you have to keep .NET Framework 3.134784374387 around because that's what they base their code on and reinstall it on every machine you want to run the program on or b) have to do a humongous Framework install / Windows Update / etc. every time they change it.

Then you call all those frameworks the same thing with slightly different numbers (3.0, 3.5, etc.) and hide them on the Microsoft site, and hide the "full installers" even further away so people spend half their life downloading them all.

Then, at the end of it, you get something approaching an "ordinary" Win32 program that may or may not work depending on whether you go it all right, with no clue as to what was wrong except from the developers who have a "recipe" for installing their particular variant of it in the right order.

Meanwhile, you've downloaded 5Gb of Framework, wasted hours of your life, churned the disks on the machine for hours while it "searches for previous installs / updates components" and can't push the software that uses it in any sustainable fashion as you can't guarantee that the end machine will have the right version at the right time.

Honestly, just statically compile the damn thing into the binary because I'm sick of it by this point...

Check out this link! It's not like it'll crash your iPhone or anything (Hint: Of course it will)

Lee D Silver badge

"there's zero reason why anyone should be unwilling to upgrade..." "and 12.0.1 would inevitably follow to clean up any lingering issues"

(raises hand)

Oooh, oooh, me, sir, I've seen the answer!

Brit airport pulls flight info system offline after attack by 'online crims'

Lee D Silver badge

Re: The weakest link....

We really, desperately need to stop making systems where a browser-click compromises the system.

For a start, if all this stuff does is show flight info, why the hell is there even a browser installed?

Until we relearn least-privilege principles, where people don't get any button they don't need and programs don't get any access they don't absolutely require, we might as well just hand the hackers an open pass now.

UK networks have 'no plans' to bring roaming fees back after Brexit

Lee D Silver badge

The magic words they have "no plans" to.

Give it a week and I'm sure someone could knock up a plan now that it's been mentioned.

I have no plans to marry a supermodel, but you can be sure if the opportunity arises it will become a serious consideration, especially if - as in this case - there'll be almost no obstacle to doing so at all.

Lee D Silver badge

If Brexit were so simple, it would have happened already.

You wouldn't have watered down proposals of how to do it.

You wouldn't be reliant on the EU bending to your will.

You wouldn't have done things like "forgot" that you have to get it past the House of Lords, when if you'd just done that a year before anyway, you could have pushed it through a second time and their objections that time would mean nothing as it could just become law anyway.

There wouldn't be stories about what could happen *now*, that everyone could have told you years ago would happen in this case.

"Amazingly, when we pull out of the EU, all those EU-wide agreements mean nothing any more". Gosh, I'm shocked.

It doesn't have to be the end of the world to be a silly idea.

And if we did everything that 50%+ of people vote for, you'd end up with men having to look after all babies at home, and towns in Sweden voting themselves free money instead of having to work (literally just happened!).

If we're gonna vote on these things, I'd infinitely prefer a vote on "Should we go to war with country X" (with a min 75% threshold for ceratinty), which we never seem to get.

Do not adjust your set, er, browser: This is our new page-one design

Lee D Silver badge

It's almost like we should have a way to isolate the content of the news articles from the design.

And then mark upgrades to the formatting / layout as a particular version people can look at.

And then people can choose how they want the page to look without at all affecting the way the content is produced and handled on the backend.

And thus letting people choose whether they want the old Reg fixed-width thing, or the shiny-new, or the shiny-new-that-we-broke-but-we'll-fix-it-later.

And then, maybe, we could come up with a catchy name for those formatting layouts. Like...

Themes.

SERIOUSLY. Stop faffing with the website doing things that instantly alienate 50% of people, and instead focus on the content and making the site work and have useful features (like searching through my old posts, etc.).

Then let your designers run riot on a theme. And then you can change what the DEFAULT theme is to your heart's content. And we can still view The Reg as if it were a site to convey news and not have GIGANTIC side-bars on it, or unnecessarily large "highlighted" stories when we just want to view them all as a list.

2-bit punks' weak 40-bit crypto didn't help Tesla keyless fobs one bit

Lee D Silver badge

Re: Problem-solution dichotomy

Have you people not heard of trolleys?

First it was hashtags – now Amber Rudd gives us Brits knowledge on national ID cards

Lee D Silver badge

I have no problem with ID cards. I effectively have one in my wallet already.

I have a objection to you JOINING THAT INFORMATION, exactly like the cookie problem you describe.

Literally, just give people driving licences when they turn 18 that don't have entitlements on them - that's the ID card problem solved.

What *you* want, though, is a central system to tie in everything I do to that number. I don't currently have to provide a driving licence number to, say, rent a house. Or file a complaint against my council. Or ring my bank. Or access an adult site. Or rent an 18 movie.

What I'm concerned about is not another bit of plastic. That's just an expensive exercise in redundancy, we can knock those up today if you want to pony up the money for them.

No, it's that once you get an "official" ID card, what are you going to join together, and what new things will suddenly be linked to / require my ID? The first that springs to mind is things like website access, ISP records, etc. Government are pushing for mandatory ID for such things, rather than just proof of age (entirely different thing). Currently, it would be suspicious and a deliberate act to join, say, my Internet credit card purchases to my running for local councillor. It would involve court orders to banks, police records, etc. etc. But once you join the databases it's "too easy" for someone to do that just playing about on the ID database - we know this because as NHS goes digital the number of people being done for "just looking" at celebrity details are far too common.

And then you want to tie it in via NHS number? Bang, there's my medical records for you too. Benefits. Driving record. All kinds of things currently held at different places which are all formally recording requests for access and providing the minimum information required. Join them together and those guarantees won't survive. It'll be a free-for-all.

We know, because everything from council bin collection agencies to food standards agencies are putting in requests that they never used to be able to before to track and trace people. Join them all into "one easy number" and you will end up with cops sneaking into your celeb profile, linking it to your purchases from your Amazon account for sex toys, your online browsing of legitimate and legal porn, and leaking it to media. Hell it happens WITHOUT those connections, with them just makes it worse. And no amount of log-keeping, warnings, etc. has yet proven effective at stopping people with access doing such things.

Now, there are obviously advantages to linking things. If nothing else, spotting financial fraud, etc. But it has to be controlled and justified. Tying everything to an ID number is a dangerous and stupid thing to do.

I don't care about the card. But it is another worthless piece of plastic. Like Manchester trial of ID cards where people effectively threw their own money in a bin on something that nobody ever really recognised.

I care about the data connections. The government does not, and has no need, to know my Amazon account, emails I use, domains I own, movies I watch, etc. Even if they could legitimately obtain that information if a court so ordered, they don't need to. And I have to trust that the courts wouldn't allow it unless it was necessary for law enforcement. That's my safety barrier.

Linking systems and centralising an ID bypasses that, if all those systems have to query the central database for authentication, they are basically advertising the records that join together. While they are separate, they don't advertise the connections to a single, central authority.

Now, I have "nothing to fear". I trust law enforcement and the courts. You can see my posts on that everything. I really don't care about someone potentially finding out that I earned £X but claimed £Y in income for tax purposes because for me X=Y at all times. That's not the issue. The issue is that the potential for misuse is too great and tempting for a nation state. By not having it, they can't do it, certainly not without expense and a paper trail which is our primary safety barrier. But the second there's a central authority that everyone has to authenticate against and which links into every bank, every contract, every shop, every thing you do in everyday life... that potential can and will be misused.

Even if it's to tax people who buy too many plastic items, or chase why they bought 100g of plastic this week but only put 80g in their recycling bin. Whatever it is, however petty, that potential is damaging.

And I object to *that*.

Chromebooks gain faff-free access to Windows file shares via Samba

Lee D Silver badge

Re: DFS

I've never had a problem with DFS on Linux.

The \\domain part just resolves to a server within the AD heirarchy, which handles the request (even if it's not serving that share itself).

Googling around, people have been doing that just fine since at least 2012, and it doesn't involve Samba at all, just the CIFS filesystem modules, the kernel keystore using "keyutils" and a WINS server setting. Certainly none of those are doing any clever interrogation or whatever.

http://mattslay.com/connecting-ubuntu-to-windows-shares-and-dfs-trees/

Literally set up your system properly, connect to DFS shares the same as you would any SMB share.

It's about setting up the system to trust that one machine is capable of giving you Kerberos tickets valid for a share where you may have to use another server in a little while. Nothing to do with the SMB protocol, really.