* Posts by Lee D

4251 publicly visible posts • joined 14 Feb 2013

The future of radio may well be digital, but it won't survive on DAB

Lee D Silver badge

Re: just receive an IP stream, buffer as necessary.

Live radio is already buffered.

Seven-second delay to cut out obscenities, etc. when they have phone-ins.

Literally just delay it by a few seconds (okay, you'll have to adjust the clocks in the studio but I imagine they already do).

Nothing important ever happens quickly enough that you can't afford even 20 seconds of delay, and if you do it properly (it being broadcast) you won't even notice (just say it's the 10 oclock news at 9:59:40). This then gives all receivers 20 seconds to gather packets and retries in order to keep the buffer full so that it play seamlessly for you.

Honestly not rocket science, and already in use (which is why people have to turn their radios down if they are phoning in - the safety delay lets you hear 7-second-delayed feedback).

Lee D Silver badge

Still haven't worked out how DAB came into being in an era where we could transmit the same kind of MPEG-compressed streams, buffer them properly, and have small retransmissions necessary to fill in the gaps.

Thus, though your radio might be a few seconds behind, at least it won't completely cut out just because you go through a tunnel, or go funny because you're near a big building.

Sorry, but everything now should be over IP. There's no reason not to. DAB could easily have been that - just receive an IP stream, buffer as necessary.

I have a car with radio and DAB built into the entertainment system. I can honestly say I've only ever used either by accident (stupid voice control, and bad placement of the "mode" button on the steering wheel", right next to vol up/down).

But the car has its own Wifi, can interface with 3G etc. sticks, bluetooth PAN, connects to my phone as soon as I start the engine, etc. As such, DAB is really a dead-middle-ground.

To be honest, I think it's also "listening live" that's dead, rather than "listen on demand". People don't want the waffle and adverts and talk-overs and the "most popular" song on constant loop. They want to listen to what they want to listen to. Again - possible on IP technology, but not on DAB.

Give it another generation for the current kids to grow up and get their own cars, etc. and you'll see that DAB is dead. Nobody cares about it. If it's not on-demand, it's dead, and we're all carrying on-demand music/podcast streaming devices on our person that connect to cars and hifis, and are much more likely to be with us than a DAB-capable radio.

Now that's old-school cool: Microsoft techies slap Azure Sphere IoT chip in an Altair 8800

Lee D Silver badge

Yes, but there's a model that nobody ever does:

- Purchase the game/video/whatever. You "own" it. It's yours. You don't need to pay again.

- Subscribe with a minimal fee to access the service.

- If you don't pay, you lose access to the service BUT YOU CAN RESTORE IT, even ten years down the line, by paying for it again, and get access to your purchases back.

1) Only users actually using the service need pay.

2) You don't need to keep servers running "in case" someone jumps on quickly. They have to pay first.

3) Users don't lose their purchases, so they're more likely to make them.

4) You can price it so that 1 month of access costs more than just keeping the existing subscription going.

This stops the problems of "I paid once I want to access that movie at any time in perpetuity so keep the servers running" vs "If I stop paying even once, I lose all my stuff".

Lee D Silver badge

Side-note:

Would happily pay for a cloud-emulator filled with licensed game titles that I could purchase, for all the retro consoles.

So long as it wasn't a recurring subscription, it ran at decent speeds (hell, why not an HTML5 version?) and it was from a big name that wasn't going to disappear tomorrow.

Do you know how much faffing some platforms have to go through to play a simple game?

Then could then sell it with their consoles, etc. (e.g. Nintendo's one could replace all that Virtual Console nonsense that they keep reinventing for all the new platforms) and have one service that basically pulls down all the old content but works on anything.

IPv6 growth is slowing and no one knows why. Let's see if El Reg can address what's going on

Lee D Silver badge

Re: I can take a stab at it..

3. No real business case, when everything is sitting behind a thumping big NAT / NetScaler.

4. The additional cost of making sure every wheezing business app is IPV6 compliant

Sorry, but if 3 is true, then 4 is a lie.

Because if you're behind NAT, only your gateway need be IPv6-capable. It's providing the service to others (quite literally translating the network addresses!).

So your creaky old business apps don't need to change one iota. At worst, the gateway will still send them out via IPv4.

But if you IPv6 JUST THE GATEWAY, you're golden. Done. No further changes required. IPv6 access now and in the future, and billions of addresses to use internally.

The whole IPv6 / NAT argument has ALWAYS BEEN horsecrud.

Lee D Silver badge

Re: Software

Consumer firewalls like Comodo Free?

There's a box right in the options for IPv6 support.

Lee D Silver badge

Which is exactly the argument people used to use for supporting new web technologies and browsers.

"By our statistics, nobody uses Opera anyway".

Well, no. Not if it doesn't work on your website because it's non-standard HTML anyway.

Lee D Silver badge

4G telephony has IPv6 support as a requirement.

DOCSIS 3 has IPv6 support as a requirement.

Google sees 20+% of its users come over IPv6.

https://www.google.com/intl/en/ipv6/statistics.html

Just because YOU don't see very many doesn't mean that most people's phones don't, by default, go via IPv6 without anyone even knowing. Maybe not when they're on your home wifi, but when they are mobile they do.

Lee D Silver badge

Well, Reg, it's because no sod ever IPv6 enables their website despite it not taking very much at all to do so.

Of course, a large, famous tech news site which constantly posts IPv6 articles with a mocking tone and uses an IPv6-capable host and CDN etc. would never do that right? They'd be right on it, like they have said every year for the past... 6 years I think?

IPv6 validation for http://theregister.co.uk

Tested on Mon, 21 May 2018 22:03:20 GMT

AAAA DNS record no AAAA record

This website is not ready for IPv6

High-end router flinger DrayTek admits to zero day in bunch of Vigor kit

Lee D Silver badge

Re: DrayTek routers are considered high end in the UK

I admin a prep school.

One of our remote sites runs everything over VPN (so we don't have to pay for more licenses and controllers), including telephony, via a Draytek.

Works marvellously, even if they are little clunky to configure sometimes (e.g. VLANs).

Currently running a bunch of desktops (all servers are on main site), managed switches (all uplink via the Draytek back to main site for all traffic), all the telephones (IP to main site controllers), all the CCTV (all 4K IP cameras back to main site controllers), access control (IP back to main site) and all the ancilliary little bits that go with it.

Ethernet connection over leased line, 4G backup, and (wonderfully) direct SIP access if we needed it and analogue backup for if that goes down too (meaning the Draytek is the critical 999 path for all phones on that site with no less than 4 ways to dial out). We could also use ADSL/VDSL on the same device but that would be slight overkill.

Been using similar model at home for years... literally never had a problem with it. In fact I used my freebie Draytel SIP account to show the main site SIP trunk provider how a real telephony company does things because that "just works" while theirs needed all sorts of forwards and NAT helpers and proxies and junk.

I also used their managed wireless at home and they worked just as well too.

Either they've come on since you last used them, or you chose a spectacularly bad model.

Lee D Silver badge

They're great.

I use them at work and at home. Tons of features and rock-solid, and regular firmware updates. Can't fault them, or their response here.

However, it does beg the question - who's leaving their admin panels open for the world to attack? Especially when the things have VPN built in.

Domain name sellers rub ICANN's face in sticky mess of Europe's GDPR

Lee D Silver badge

Re: Whois necessity

Given the amount of C/O GoDaddy/Tucows/etc. entries on WHOIS, I imagine that's all they ever do anyway.

I could say I'd Fred Bloggs and register a domain, it doesn't mean I actually am them. But if you needed to establish the legal owner, someone somewhere paid on a credit card, and only the registrars knows what card, and only the banks can link that to an account, and only all of those taken together will tell you who actually is responsible.

Hence WHOIS lost its purpose many years ago, the second they allowed C/O entries, or didn't verify that the domain owners are who they say they are. Which was basically day one.

Try it. It doesn't take long to register a domain and put the registration info as Microsoft (UK) Ltd. or anything else you care to make up. It doesn't mean they're responsible for it.

Lee D Silver badge

Re: Why bother

They say "Your nameservers operating throughout Europe will be blocked. All .eu, .uk, .fr, etc. domains will come under our control. You will therefore lose 50+% of your revenue overnight because nobody will have to pay you a damn thing. P.S. please list the TLD nameservers as our own, if you fail to comply we will initiate legal action, seek redress from the WTO and block access to all non-EU domains".

You can't claim to be operating TLD naming and then not listen to the countries that control those domains.

P.S. That won't happen precisely BECAUSE they are operating in the EU, and claiming to represent it to. They are basically doing business with the EU. So, yes, you actually CAN fine them into oblivion, severely restrict their trade, freeze their European assets and arrest their directors if they ever visit the continent or apply for extradition.

Nobody says that it will get that far, but they are far from immune. And they could lose half their business overnight by failing to comply.

Sysadmin hailed as hero for deleting data from the wrong disk drive

Lee D Silver badge

I've not lost data (yet!) because I rely on bog-standard paranoia.

As in, I'd have removed the drive I thought it was, booted it back up, seen what happened / what was on the disk that was left in the machine.

It's far too easy to break stuff, and relying on "undelete" tools is the refuge of the stupid. Even in work, whenever I Ghost or WDS something, I *always* remove the existing drive and put in a known-blank one before I re-image. Because then when the inevitable "Oh, I had some files somewhere that they shouldn't be and they weren't on the network and they're critical" happens, I still have their drive. And I keep it for 6-12 months before it ends up on the recycle-pile to be used as a blank one.

When I bought a Samsung SSD the other year, I put it in my second drive-bay and ran the official tool. Which basically detected my identically-sized hard drive and showed me this:

Source: Samsung EVO 850 1Tb

Destination: Samsung EVO 850 1Tb

I mean... if I could afford two, then I'd be over the moon! But in this case it seemed to be looking up the disk types by the size of them (for some reason) and - down to the byte - the drive I had was the same size as the SSD. And, no, there was no way to change it, or select another option. It put the SSD as the destination and then looked up the only other drive as the source, and decided that it was a Samsung.

At this point, I could imagine a vast amount of things going wrong, so instead I cancelled out of the tool and made another backup (I had a backup, but in this case I sourced another 1Tb hard drive and bit-for-bit copied the existing drive to it. I'm not taking any chances with software activations, partitions, etc.). Once I'd done that, then I let the Samsung software loose on the drive.

It worked, flawlessly, even though it still thought my Hitachi drive was a Samsung SSD. It copied everything over, removed all the swap files, shuffled partitions about and resized things, and when I booted up the laptop with just the SSD it worked first time as miraculous speed.

But right next to me I had a full copy of the source hard drive ready to go. Because if it had somehow numbered those drives the other way round, I'd have been copying a fresh blank SSD over the top of an existing years-old configuration and data.

I even still have that other hard drive around today. You never know.

US Congress mulls expanding copyright yet again – to 144 years

Lee D Silver badge

Re: For those who are unable to figure it out...

That's fine.

Enforce that everyone needs to pay for your art, into perpetuity.

Nobody has any problem with that. It's the situation for almost everything already.

But the single, logical, only possible outcome: All the rights for every piece of art and music in the world end up in the hands of a DeBeers-like conglomerate. Because you'll die. Your heirs will take it on, it'll get sold off to fund someone's gambling debts, and then there will be "The Art Corporation" saying you have to pay £10 to view the Mona Lisa for a fraction of second. No pictures. No postcards. DMCA takedowns on every image and parody of it online.

P.S. This includes all the future artists. They won't be able to hear music, see paintings, admire sculpture, handle artefacts, etc. without paying to do so. And that just destroys the whole point of art to begin with.

Nobody's saying "Hey, you, independent artist releasing their first album, give me and my mates a copy for nothing so we can copy it around the world". We're saying "Hey, that stuff that's LITERALLY ANTIQUE (100 years old), with untraceable lineage, sold on 20 times to people who have absolutely no relation to the artist, or any appreciation of beyond how many T-shirts they can sell with it on, maybe it's time that people were allowed to appreciate that for themselves now and tuck it into the legacy and history of the country, rather than still selling it for 99c on iTunes".

Literally 0.00001% of smaller of all the art that's ever been made survives to the modern day. Preserving it all into perpetuity, though a noble cause, means that all the important stuff gets swamped in the dross of YouTube channels and Spotify mixes.

It's not about not compensating artist for their work (for the record, I compensate all artists whose work I use - I have paid for music that goes into games I make, every pixel of artwork I utilise in them, hell I literally paid for a licence to use my avatar image that I use on every website forum, etc. because I like it and I found the original artist. I pay for every game I play, every book I read, every film I watch. I don't listen to music at all, but I protect music rights where they occur during my workplace - e.g. licensing for public performance of tracks, etc.). It's about not gaining a perpetual right that you can sell off to anyone.

You can't patent a warp drive without, in a relatively short amount of time, anyone being able to take your innovation and copy it. You think that your scrawl on a bit of a paper, your idiocy captured on YouTube, or your written opinion on the Reg forums should have greater protection, into perpetuity? It's just not a reasonable view of the situation.

If you have any appreciation for art of any kind, you'll realise that you can't OWN it. You can lease it for a short while, you can be inspired by it (with appropriate attribution), and you can use it. But you can't ever really own it to the point of control. Even if you created it.

What's up with that ZX Spectrum reboot? Still no console

Lee D Silver badge

Re: Social media content

Work in a workplace that allows adults to control themselves when at work.

Lee D Silver badge

Re: Is it just me or is this bloody saga going on and on and on...

I was thinking more like Scotch video tape:

Re-record, not fade away, re-record, not fade away, re-record, not fade away, re-record, not fade away, re-record, not fade away, re-record, not fade away, re-record, not fade away, re-record, not fade away,...

Blood spilled from another US high school shooting has yet to dry – and video games are already being blamed

Lee D Silver badge

Britain has the same video games as the US.

No school shootings in 22 years.

However we banned private handgun ownership 22 years ago because of a school shooting.

Something tells me there's some kind of correlation there that they're missing.

Brit ISPs get their marker pens out: Speed advertising's about to change

Lee D Silver badge

Re: It's no good BT complaining 'WiFi'

That's like most people having treacle driveways to their houses and then complaining that their cars "don't do the 0-60 advertised when they drive off in the morning".

Wifi is a SHARED MEDIUM over UNREGULATED radio frequencies. There's no possible way it can reflect the reality of what they delivering to you down a customer-specific cable via their own certified equipment.

P.S. General rule of thumb I use as an IT Manager... wifi is 20 times slower than a cable. It doesn't matter if you deploy stupendously expensive stuff (we have Cisco Meraki... £600 for a basic AP) or have a clear field (we are a 28 acre sites set in farmland), there is no way for wireless to provide the performance you need the second ANYONE (not even your own devices) walks into range.

There are only THREE possible non-interfering channels on 2.4GHz, for instance, and the channels themselves are unregulated so people can use them for ANYTHING (not just Wifi, video senders and all kinds of crap). Guess what frequency most people have on their router? 2.4GHz.

So before you even start, in a typical residential street, you are dividing the maximum theoretical throughput on your wifi device by about 5-10, in a spiky, unpredictable, unregulated way, to get the speed you might actually achieve with timeslicing, channel-sharing, interferences, etc. If you're lucky. And though you "might get" a speed test that's a high number, it's by no means reflective of real world usage, or what will happen if you click it again.

Then consider that most households have 5-10 devices connected to wifi - everything from phones to computers to consoles to cameras to doorbells to tablets to Chromecasts etc. etc. etc. You don't stand a chance of getting any accuracy at all, and your neighbour waking up their phone next door will drastically affect your speeds.

Wifi is 20 times slower than a cable. Always. Think of that when you tell people to log onto a network over their home wifi into a VPN... literally multiply your normal logon etc. times by 20 before you even start.

TalkTalk ups the (dis)satisfaction ante as UK folk wake up to borked email

Lee D Silver badge

Re: ISP email

So you'd rather the people who have your credit card, telephone number and home address run your email, rather than the people who you just signed up to a free account for with no details required.

(P.S. Don't make me prove that you can get a GMail address with no personal info again, I was able to create one in ten seconds last time someone asked, without providing real name, any address at all, nor phone number, backup email or anything identifying beyond - presumably - my IP address).

Tech support made the news after bomb squad and police showed up to 'defuse' leaky UPS

Lee D Silver badge

Generally petrol won't explode entirely in a single few seconds. Though you can get a bang, it has to be aerated and dispersed to make a single fireball.

In general, it will burn fiercely and slowly for several minutes with maybe a bang every now and then. Sure, your car will be totally burnt but generally you have time to get out.

A battery, especially Li-Po etc., can disperse its entire energy and hit runaway temperatures in seconds. There are videos of laptop batteries catching fire and going bang on people's laps - you'd think that would be the kind of thing you could feel coming. And a guy was just killed by a vape thing exploding: https://soylentnews.org/article.pl?sid=18/05/17/1242259

Yes, the energy density of both is high, and petrol is nearly twice as much (I believe), but it's how it burns. You need something catastrophic to set fire to your fuel lines, and even worse to the tank. But you just need a stray bit of metal in the wrong place, or for some kind of contact with the chassis, with a battery.

Plus, lead-acids generally release hydrogen when charging, and lithiums can't contact water, which doesn't help.

P.S. So many people don't follow the right procedure for jump-starting a car... sure, they get away with it an awful lot. One day they won't.

Lee D Silver badge

Re: You were lucky...

You're not wasting time if you genuinely think it could hurt people.

If you've never seen a Li-ion or lead acid properly go up in flame or go bang, you might reconsider quite how likely they are to hurt people.

See my stories above.

Lee D Silver badge

I do think people underestimate the risk of such batteries.

Such, the PROBABILITY of such an accident is incredibly low, almost immeasurable if they are properly maintained.

But the IMPACT of such a thing can be incredibly dangerous, more so than people think because they are so used to them "just working".

The energy density, however, is very high... a small box can power lots of heavy servers for quite a while, considering. People really underestimate the power these things hold. In the normal course of things, if all safety measures are working, they are pretty benign. But if that energy is released all at once, plus the chemicals in use, etc. then they can be bombs.

My dad tells a story from pre-H&S days, when he worked in a huge warehouse maintaining goods lorries. One day, they had a fork lift that was being retired on a site they were demolishing the next week anyway. They decided to have some fun with batteries... everything from shorting out a lorry battery with a spanner, to the same on the forklift battery (which was just multiple of the same in parallel).

Generally speaking, the spanner turned red-hot, then white-hot and then shattered explosively into two from the lorry battery, observed from the comfort of a makeshift bunker, which is scary enough. So they moved on to the forklift. Apparently, the resulting explosion (conducted via a large metal spanner and a long piece of rope) completely obliterated the fork-lift, nearly deafened them, and sprayed battery acid on all four walls and the ceiling of a huge empty truck warehouse. It took them two days to wash it down, and they kept finding parts of the fork-lift in odd places, and lodged in the walls.

Sure, that's the EXTREME end, but that's just ordinary lead acid batteries in tandem. The lorry battery thing is scary enough, that it can melt/bend/explode a fitter's spanner in seconds. That kind of power discharging into, say, water, metal shelving, etc. is a scary thought.

I've always been wary of large batteries because of such stories, I've never had trouble myself but I don't want to have. The nearest I got was a Macbook with a battery that bulged so much that it destroyed the casing and kept visibly expanding once released. We dropped it into an empty wheelie bin a long way from anything and it ended up going to the skip months later when it had stabilised and calcified and leaked all over the inside of the bin (it was suggested to pour water on it, but that was hastily rebutted, being lithium).

Especially UPS batteries - the APC one I have had a large battery tray that one man can barely lift and - taking it apart to look at the individual battery modules (which is just a bunch of RPC6's wired together to give 48V and more capacity), there is no fuse on the battery itself. The fuse is in the cable on the UPS side that it connects to, not the battery. So when changing those things out, it's quite possible that you could drop something into the casing (e.g. a screwdriver) and short that battery out with no safeties.

Anything with energy density like that is a dangerous thing. I've seen 9v NiMH batteries explode when charging and cover a primary school classroom in acid (fortunately, no children in the room at that point). I've shorted out NiCd AA batteries using a basic science kit (intended for alkaline) as a kid and literally set the battery casing and wires on fire in seconds. Sure, you have to do something stupid, but it's relatively easy to do something stupid by accident. And then you're into "fire hazard" as a minimum and, with large lead-acids, potential bangs that can fire metal shards around a room.

Boffins bash out bonkers boost for batteries

Lee D Silver badge

Oh look a battery technology breakthrough that will double the power of my batteries.

Can I buy it in the shops? No.

Will I be able to in ten years time? Probably not.

Will this be the last such story in that time? Definitely not.

Honestly, when you can list battery chemistries from memory, and the overall capacity hasn't changed in years, all of these breakthroughs would be welcome but it's quite obvious that NONE of them scale to production.

Ten years ago I bought a high-power handheld gaming console. It used AA batteries but you needed special, serious ones to make it work for any length of time. They were expensive. I have AA batteries from that time that I paid for a fortune for that were 2800mAh each. That's 2.8Ah. That's a lot of power for a AA.

What's the most powerful AA format battery I can buy on Amazon today? Search for "High capacity AA battery" sort by Price Highest to Lowest. The top page (excluding the stray D-cells)... 2700mAh. Now, I'm sure there's probably a stupendous capacity one there somewhere, hidden away, but it's not exactly jumping out at me, all these technological advances in the last 10 years.

Sure, the 2700mAh batteries are much cheaper than my 2800mAh ones were... but such advances have not translated into any more actual power per cubic cm.

Alkaline. NiCd. NiMH. Li-ion. Li-Po.

I can't even find a Li-Po AA battery. Only ones that cost £25 each because they are USB rechargeable and they're only 1100mAh.

Almost every battery paper ever written describes a technology that literally contributes nothing towards the technology of general batteries. Which is why we still use lead-acid in UPS, and why our AA's don't hold any more power than 10 years ago.

Great Scott! Bitcoin to consume half a per cent of the world's electricity by end of year

Lee D Silver badge

Re: Great Scott

I bet a good percentage is spent on, say, displaying white pixels on computers for Google's home page.

On World Eco day they once went black and estimated the savings worldwide and it was a significant chunk.

Fact is, it's not money wasted if you profit from it personally, and many people who use Bitcoin are profiting from it even if they aren't millionaires or immune to the risk of it tanking overnight.

An alternate shot-in-the-arm is "Bitcoin creates jobs and increases product demands at electricity suppliers". It's not like they aren't PAYING for the electricity. And if people choose to pay for it, it gets taxed and (you would hope) invested into the electricity network. And, of course, they choose to pay because someone, somewhere will give them MORE money than the electricity costs to do it themselves, or they wouldn't bother.

I never get these anti-Bitcoin arguments. If someone was staring at a screen for 8 hours a day catching silly balls when they could be working - yes, we have a problem as a culture. That someone legitimately pays for a product, transforms it, and sells it on... why is that a problem?

If we then say "Oh, well, look, we're short of electricity", then surely it means the electricity company needs to profit as much as it can so they can provide more of it and investigate new ways to make more, and more cheaply.

It's like complaining that bookshops exist. If people weren't buying their product, they wouldn't exist.

1.5m Brits pay too much for mobile and crappy broadband – Ofcom

Lee D Silver badge

Even worse - no contract, little obligation whatsoever after a year of paying for it.

I know you had no choice, as such, but it's not a consumer rights issue to pay for a good that was delivered according to the terms and conditions (which is a contract) just because you "could have" got a better deal if they'd performed better.

Lee D Silver badge

If you signed a contract agreeing to "whatever speed I get" for that price, and then didn't complain / cancel the service IN A SOLID YEAR of having it, then you don't have any consumer rights to fall back on.

The service provided was as stated ("up to"), it was delivered, and you didn't deem it inadequate for an entire year.

Sorry, I can see your point of view, but that's not how service contracts work.

Additionally, complaining retroactively doesn't necessarily entitle you to a full refund for the whole year anyway, unless you complained on day one and kept that same complaint open all that time (in which case, why were your continuing to pay for it?).

Otherwise, quite literally I could get 30Mbps on a 75Mbps theoretical line, not say a word for 10 years, and then sue the ISP for half my monthly rental back as far as my contract start when they upgrade kit or make my line better or force me onto a better package. Literally NO ISP would bother to upgrade you or fix your connections in such instances.

Lee D Silver badge

Honestly, you know you're in trouble when it starts to look like a monthly charge for Sky.

Lee D Silver badge

Re: People can't be bothered

I shopped around when I moved into a new flat.

Then the flat management agency pushed me back to their original meter provider because they do that for all new tenants as they take possession, but I "could just change it back".

To be honest, the faffing about wasn't worth it. There's literally pence in it and it's not worth my time on the phone to cover that difference.

I don't know about anyone else, but my hourly rate is more than I would save on any number of comparison sites (I know, I ran it and though not "the cheapest", the rest came with caveats, long contracts, was only an introductory deal or involved lots of hassle switching everything else).

And that's when I'm *WORKING*. My free time costs a lot more.

Though I am a CHAMPION complainer when it comes to it, just as a hobby if nothing else, I think I'm one of the few people who works out what it would cost me and realises that the hour spent moving things (even if it all goes perfectly) just isn't worth the saving and risk of something going wrong / costing me more / etc. in the grand scheme of things.

Same for current accounts, car insurance, etc. etc. Once a year (when I get an annual statement or renewal notice), I click around and compare on the bigger sites. If the difference is more than £50 a year, it might be worth looking into it. Anything less just isn't worth the bother if I've had satisfactory service. If the saving is significantly more, however, I'm the first to just ditch a company I've been with forever, if nothing else than to inform them that my loyalty only extends so far - when I'm being given a duff deal, I will move.

There's also a big difference between "cost" and "value". I could save a fortune if I moved to TalkTalk's cheapest tariff. I imagine that would be the worst possible thing I could do. (Again, the time and effort spent working around the problems that would cause isn't worth the monthly saving).

Lee D Silver badge

Make ISP's charge per megabyte.

Then watch as they all scramble to shove as many megabytes down your line as theoretically possible, and telling you about every upgrade possible to the line speed as soon as they are available.

Lee D Silver badge

"Yet average monthly household spending on comms services has fallen by 8 per cent to £117, over the last decade."

Wow. That's a ridiculous figure.

I don't pay half that. (Which, by definition of averages, suggests that somewhere someone is paying twice that).

Three-hour outage renders Nest-equipped smart homes very dumb

Lee D Silver badge

It's called X10.

Lee D Silver badge

Re: This story should be mandatory reading

Your insurance needs to see evidence of forced entry anyway, BS lock or not.

Lee D Silver badge

Re: Did I read that right...

Insurance is very simple.

No forced entry, no cover.

Whether you left a window open, they bypassed your doors entirely, or your NEST door lock was open.

Unless someone FORCED entry, there is no cover for you.

Pretty standard insurance terms, even if you can claim "Well, someone must have picked the lock", etc. You either have to prove that (CCTV, scratches on the lock, etc.) or they won't pay out.

Git push origin undo-my-last-disaster

Lee D Silver badge

Re: Nothing new here...

Yep.

And I imagine it's not that difficult to "patch" a branch to include a configuration item, and then pull that patch into all the similar configurations to solve problems globally.

Sure, you wouldn't be able to guarantee to blanket-remove every instance of a conflicting config, but you could push 99.9% of the problem out of the way with one commit.

I do still wonder, though, why configuration is random files of plain-text and not database-driven for almost anything. Because then this is literally a transaction you can rollback at any point, and you could do things like:

UPDATE * FROM Apache_sites WHERE SSL = 'enabled' AND SSL_Private_Key.expiry_date < NOW()..... etc.

Lee D Silver badge

I've been doing that in everything from CVS, BZR, SVN, Git for years.

It just seems common sense and a natural part of change management - revision control and rollback.

It's one of the first things I do on a new Linux machine that I'm about to tinker on, over the whole /etc/ folder.

And then every change you make, you can do an "svn commit --message 'Why I am doing this'" or equivalent.

Sure, rollback isn't super-automated and amazing but there's no reason I couldn't make it so.

If I was that bothered, I'd have it auto-commit once a day too, just in case I forgot to do so. That's one cron-job which - if there was no change - literally doesn't take a single byte extra in the repo as it won't bother to commit. And, hey, that cron-job is also subject to the same revision control...

When even the little guys like me have that, and things like VM snapshotting, replication and rollback, it's actually quite disappointing to realise that someone running the bigger things thinks that this is somehow amazing.

Now... if you wrote some code that automatically detected downtime, attributed it to a recent commit, and auto-rolled-back without human intervention or losing data... now THAT I'd be impressed by. But not much.

Trump’s new ZTE tweets trump old ZTE tweets

Lee D Silver badge

Re: Most Politicians-:)

Rolls a 1. Critical hit to common decency. Make a saving throw using stupidity factor.

Oh, great, now there's a SECOND remote Rowhammer exploit

Lee D Silver badge

Re: Is it actually viable outside the lab?

"On the rowhammer forums there's practically no comments, and appears not to be a particular problem in the real world. Maybe if you're a nation state guarding something particularly valuable, but for the average user?"

Pretty much this sums up almost all security problems, doesn't it?

I can't remember the last time people were sent to scramble for something. WannaCry hit those people who don't run Windows Update. Nothing really came of BEAST and POODLE, but obviously yes we do need to patch our services and remove the vulnerability, etc. Spectre and Meltdown - sure, they'll generate new ways into the system but they're already being patched out and I'm not sure anything is actually exploiting them on any kind of large scale yet as they're not that easy to exploit and rely on already running arbitrary code on a system.

Pretty much, the average person just needs to do what they've been told to do. Update. Install some kind of defence (this could mean just Windows Firewall and Windows Defender, for instance, but most people know to go the extra mile and get something else). Nobody is saying it'll be guaranteed, but you're kinda done at that point and anything further is not something you could expect the average home user to do or understand.

This is why I don't get the publicity over some of these things. Y2K never affected home users. You could patch it and fix it and workaround it as a techy and nobody would ever have known it was a problem. Since then, every exploit has a big fuss made of it, and pretty much only us techy guys who have to fix the problems / apply the fixes really care, and we get to know about it anyway (all the "brand-name" exploits are really just hype, from what I see, and yet things like the Windows CredSSP exploit against RD and VPN seems much more serious and is only known about by a CVE number).

Do you really think that the answer is ever going to be more than "yes, it's a problem, yes, we're trying to patch against it, no, we can't fix every possible avenue, yes, we'll combat it in the next generation of hardware/software, in the meantime make sure you keep up to date" for any of these problems?

Lee D Silver badge

Re: Remind me what memory ECC is for

Dear person who couldn't do a 2-second Google:

"Tests show that simple ECC solutions, providing single-error correction and double-error detection (SECDED) capabilities, are not able to correct or detect all observed disturbance errors because some of them include more than two flipped bits per memory word."

You're welcome.

No new 3PAR weirdness found behind crashes at Australian Tax office

Lee D Silver badge

So, incompetence then.

BT bets farm on consumers: Announces one network to rule 'em all

Lee D Silver badge

Re: BT Plus

I'm with Three (not my first choice). I don't pay much (£30 a month) but I have a 40Gb allowance.

However:

- I pay month-to-month. It's £25/month if I sign up to an annual contract.

- It doesn't include Netflix and a handful of popular sites (SnapChat, etc.) at all (unlimited usage of those).

- Vodafone have a very similar deal where it's £25 a month, 50Gb, and for £7 extra it doesn't include ANYTHING you've heard of - YouTube, Facebook, WhatsApp, Spotify, Prime Video, etc.).

I imagine the latter is more than sufficient for any household whatsoever - the heavy stuff is video for most people and removing that from the allowance by buying a "multimedia pass" (or whatever it's called) saves you an awful lot of data.

I didn't go with Vodafone as they were too stupid to organise a SIM and then their website won't let me in again because it thinks I already have an account but I can't order another SIM or sort it out except in a store and I can't be bothered. They were my first choice because it's so viable, but Three works just fine.

Of course, you have to buy a Wifi router too and it's not at all difficult to find one that tracks usage on the screen, or limits it to certain people / amounts, etc. I have a little battery-powered Huawei thing (instant power-cut backup!) and it shows usage on the front screen all the time and refuses to let you go over-data (as does the Three account itself, so you don't get nasty shocks).

If/when I do go over, it lets me piggyback off any other Wifi network seamlessly - so all the devices, including laptops with Steam, Chromecast, etc. are all set up to connect to the router, and the router can actually switch and get its data from my phone, a hotspot, my neighbours, etc. with one setting change.

I also get a consistent good speed - small enough latency to game over (I play CS), more than enough to stream a movie in HD, do fast downloads, browse the web etc. and the wifi it offers can connect 10 devices by default and get full 802.11n speeds (e.g. I have a Chromecast that can stream from the laptop, SteamLink, CCTV DVR, etc. and friends join the wireless when they come round).

You have to be a LITTLE careful, but with that Vodafone package I imagine I wouldn't even need to consider use of it at all.

Worst case, I stick my phone in hotspot mode, the router picks up that network and it takes priority, and I can carry on but using the spare data on my phone instead.

Lee D Silver badge

Re: BT Plus

I solved that problem another way.

I don't use BT for anything, and my broadband is a mobile 4G router.

Broadband, mobile and Wifi in one box, from one provider, with one bill.

Honestly, it's just another show of how when you buy something up, you should integrate it and brand it with your main brand, and if you own several types of business, you should do your best to merge them all together rather than break them into bits and spin them off all the time.

An ISP, a telephony provider and a mobile cellular network should all just be part of one big brand/company, rather than faffing about spinning off Cellnet/O2/etc. and then having to provide the same services to them but now on the basis of entirely different underlying infrastructure.

The fact that those three are ALL so similar nowadays that they are moving to entirely-IP networks for even home telephony just shows you that you should have done that decades ago when it was still in its infacy and saved yourself a lot of money in the first place.

BT seem to actually be making some sensible choices for once. Pity it's about 30 years too late, and only because they are losing money. I mean, bringing your customer services back home? Obviously GDPR/Brexit related, but other companies worked out 10 years ago that they needed to do that.

Julian Assange said to have racked up $5m security bill for Ecuador

Lee D Silver badge

I imagine we've subtracted that amount from any and all renegotiated trade deals with Ecuador in the intervening time.

Lee D Silver badge

WRONG.

UK law applies in all foreign embassies in the nation.

It's only amabassadors who are immune to prosecution (and only under certain caveats).

Otherwise, you could literally sneak people into a foreign embassy, torture them in front of an open window, and nobody would be able to stop you.

The "foreign soil" thing is NOT TRUE. Stop perpetuating it. The premises are subject to UK law at all times.

Lee D Silver badge

Re: Stupid Question Time

Correct.

Which is why they don't. Because then every country hosting an embassy would do the same for every minor disagreement.

It's "politics" not "law".

Lee D Silver badge

Re: Stupid Question Time

No such thing as "embassy soil" etc.

Honestly, that's just a myth, like ship's captains being able to marry people.

The Ecuadorian embassy is subject to the rule of UK law, even if the ambassador himself may not be (he enjoys some immunity).

What stops the police just walking in is *convention* - it's considered rude and a bad precedent to do so, even though it's entirely legal.

Plus, the UK can deem the embassy "not an embassy" any time they like, totally legally.

And THIS is how you do it, Apple: Huawei shames Cupertino with under-glass sensor

Lee D Silver badge

Re: Priority P1 Severity S1 - yep, that's a bug Jim

Again... there just aren't enough people affected to care.

If literally Huawei phones couldn't run Google Maps, or some popular app that uses them (everything from OKCupid dating apps to games use that interface in the background!), then it would flag rather heavily with everyone who buys an Huawei phone.

It doesn't. So it hasn't. Nobody is saying "your problem doesn't exist". We're saying that it's not as prevalent or as affecting as you seem to think. There are 200+ notes on that bug report. I'd expect THOUSANDS, tens of thousands, if it was actually impacting app developers to the extent you suggest.

It's a niche issue that has happened to affect you and your uses. Nobody else (here or other places) even realised it was a problem.

UPnP joins the 'just turn it off on consumer devices, already' club

Lee D Silver badge

Re: Thanks GRC

That was more about a service running exposed to the Internet by default, back in the days of XP/98 when people used to connect via modems and be their only defence against network-borne packets

Doesn't mean that UPnP isn't an atrocious idea. But GRC was more concerned with "why is there a new, by-default, always-on, Internet exposed service on all Windows PC's" and would let you turn it off via software. Nothing to do with UPnP on routers, networks in general etc.

Lee D Silver badge

Re: another lesson

Your phone is not a server. If you nmap it, it likely has zero ports open unless you turn on Wifi hotspot functionality.

Your Playstation is neither (though if it claims that peer-to-peer network requires a port forward because some games producers are cheap and won't run matchmaking servers).

Your DVR may well be. But only if it's not capable of talking out to a central server which acts a proxy like most DVRs do for their mobile apps. Hint: Have you seen the stories for the last 5 years about how insecure DVRs are, the article on BBC News yesterday about the guy who had a DVR open to the world and didn't know, etc.? There's a reason we don't let ordinary people run servers).

Your lightbulb - if you're stupid enough to have networked lightbulbs - I'd hope they only operate internally on your Wifi, but if not then see the DVR answer.

Sorry, but nothing you have REQUIRES a port-forward, unless you are providing an actual service. Running a web server. Running an email server. Running a games server (not just playing games online on other people's servers). All of which require more care about how you do so than the average person can ever give them, which is why we put people behind NAT on home routers.

And if you're doing those things, you want well-known port-number statically entered, the server running all day long, and for it to be advertised to the world. UPnP is not the answer.

I literally turn off UPnP on all devices. Not one person has ever complained, even the couple who brought their XBox 360 to my house and connected it to play multiplayer online. Everything that "needs" port-forwarding doesn't. Unless you are trying to run a server from your home connection and thereby exposing yourself to much worse than anything UPnP can do to you anyway.

Lee D Silver badge

Re: Doctor, where have you been all this time ?

"Applications that needed to accept connections from the outside would probably include instructions in how to place your PC in the DMZ and disable its internal firewall."

And no such novice computer user has any programs that require that.

That's exactly my point.

Unless you are expecting to be a host server for something, you don't need to bypass NAT at all. Even SIP etc. will work inside NAT and that's a horrible protocol.