* Posts by Lee D

4259 publicly visible posts • joined 14 Feb 2013

There's a way to dodge Fasthosts' up-to-160% domain renewal hike but you're not gonna like it

Lee D Silver badge

Personally, I use Tagadab:

.uk domains at £10.00 + VAT for 2 years

.com for £7.99 + VAT for 1 year

There was a time I used to use a much better niche company (justhename) but they got bought out and ended up being under the PlusNet brand when BT took over. Needless to say, they're just completely gone now. But they had cheap, simple, easy domain management and didn't try to faff with anything else, and they had one really cool feature they called "URL Masking" (which was actually an Apache reverse proxy set up at their end, so that you could forward the domain to, say, cheappwebhosting.com/~username/folderpath/, and it would retrieve all requested files from there and present them as youdomain.com/filename - it was a fabulous way to make your domain very portable (store the same files anyway, change the path), without anyone knowing where it was actually hosted).

If anyone knows a company with a feature like that, give me a shout, or I'm going to have to read up on the Apache docs and do it myself.

Lee D Silver badge

Re: Price gouging.

Simple. Non-standard domain names TLDs are the vanity plates of the Internet world.

You are paying for "ownership" of an arbitrary string. Certain strings are "worth more" because the people in charge of writing the strings down say so.

It's literally that simple.

Lee D Silver badge

Or... just take your domains elsewhere.

Apple Mac fans told: Something smells EFI in your firmware

Lee D Silver badge

A cloud-managed network (e.g. Cisco Meraki) would be able to provide anonymised version information on all kinds of things without having to actually interfere with a customer's network.

It's a real FAQ to ex-EDS staffers: You'll do what with our pensions, DXC?

Lee D Silver badge

Final salary pensions are an unsustainable joke.

You spend your life from age 20 getting to a figure, slowly raising and raising from minimum-wage (or better) to the highest you're ever likely to earn. Then you retire at 65. That's 45 years of salary earned. And at that point you expect that probably-maximum salary to continue for free until you're... what... 90?

That's 25 years of full-salary paid back to you.

Then you need to pug away AT LEAST 56% of your earnings from 20-65 to sustain you in that amount from 65-90. And probably a whole lot more, if you ever earned less than the final salary at any point.

Even if you assume you'll only get to 75, that's 22%.

22% of EVERYTHING YOU EVER EARNED EVER (not even counting tax, interest rate rises, depreciation, etc.). Likely 30-40% by the time you take that into account, even for someone who is expected to die at 75. By the time you work out the odds, profit for the insurance company, sustaining those who live into their 100's on salaries much higher than yours but paid for out of the same pot... 40% seems positively generous.

40% of every you ever earned, from the time you started work / left uni. If you reach even the bare bottom of life expectancy. Hint: Those likely to be offering final salary pensions probably have good jobs, and therefore will have lived better and therefore for longer.

It's not sustainable. And it's being funded by screwing over the generation below (by the companies going bust, the pension offers being made worse, etc.).

There's a reason that state pensions are a pittance, aren't final-salary, and yet represent huge percentages of the total money paid out by government - more than healthcare or education and FOUR TIMES that of defence:

https://www.ukpublicspending.co.uk/chart_central.php?title=UK_government_expenditure&meta=government_expenditure

Final salary pensions are entirely unsustainable. And yet we offer them to VAST TRACTS of industry and civil servants.

iOS apps can read metadata revealing users' location histories

Lee D Silver badge

Feature-creep caused by overly-open permissions on basic apps.

No, the camera app doesn't need GPS or location permissions. If a user chooses to add it, they will add it to every photo, by default, forever. And there's no easy way to remove it from all those photos, or strip it when it gets uploaded to other apps / website that don't also have location permissions.

Sure, it's as much "the camera app put the location into the image file" as it is "apps given photo access can read the location", but the problem is still creeping into ever-more permissions for the most basic of apps.

There is no substitute for fine-grained access control permissions.

NatWest customer services: We're aware of security glitch

Lee D Silver badge

I abandoned NatWest in the 1990's when they were still insisting you needed to use IE with ActiveX controls to access online banking as other browsers "weren't secure".

To be honest, working in IT back then, I was hardly the front-runner of new technology in everyday life anyway, but I just moved to a bank that had a vague understanding of what SSL actually did.

Power meltdown 'fries' SourceForge, knocks site's servers titsup

Lee D Silver badge

"their redundancy failed us..."

Er... no... your COMPLETE LACK OF REDUNDANCY failed you.

EasyJet: We'll have electric airliners within the next decade

Lee D Silver badge

Re: Batteries?

You either need a highly-targeted and VERY dangerous beam with immense amounts of power, pointing towards an aircraft for the majority of its flight, covering pretty much the entire flightpath. fighting against the atmosphere which can block up anything if it's foggy, to a series of high-resilience devices capable of capturing and converting said energy with little to no loss, which need to weigh less than the battery to make it worthwhile, while also requiring all the same propulsion tech as these guys will need to develop anyway.

Or you could just stick a battery in a plane, refine the science, and hope that by the time you get anywhere close to success that just about ANY power transmission technology is viable. Hell, if you get that far, you'll plug it full of AA batteries if it works out cheaper and easier.

Dyson to build electric car that doesn't suck

Lee D Silver badge

Re: I can already see the styling.

And you have to press 14 hooks, buttons, levers and releases in the right order to open the bonnet.

Lee D Silver badge

Like all these kinds of announcements:

When I can buy it, actually buy it and get it delivered this week, then I'll worry about whether or not to choose yours or the others in the shop.

Until then, it's just hot air. If I'd laid money down on even 1% of the technologies that would "be available in X years", but then never materialised or were a complete waste of time, then I'd be bankrupt by now.

Until it's available to purchase, it really doesn't exist from a consumer point of view, and there's no point cooing over what it might/could/will do.

Helium's for balloons and squeaky voices, not this 10TB Toshiba beast

Lee D Silver badge

"Your correspondent has a 1TB iMac with a 1TB external disk drive and is now feeling severely undernourished capacity-wise"

Sell the Mac, buy a real machine, buy a handful of 1Tb SSDs with the price difference.

Smartphone SatNavs to get centimetre-perfect GNSS receivers in 2018

Lee D Silver badge

That's all well and good.

But does the mapping, and indeed the routing software, actually care about that level of accuracy.

Take driving off a motorway intersection. My sat-nav is always convinced I've continued onwards until, quite literally, I'm off the motorway by some tens of meters. The software cheats and just assumes you've followed course until you hit a big error margin at which point it's willing to accept defeat and recalculate.

How are you going to utilise cm-level accuracy without a) bugging the user because he drifted slightly left or b) having to "debounce" all the location logic so it doesn't make decisions based on tiny variations?

"Better signal" in difficult locations is great. But the accuracy thing is a bad sell.

Wanna get started with practical AI? Check out this chap's Rubik's Cube solving neural-net code

Lee D Silver badge

Chess has 9+ million positions after only three moves each (and the initial starting points are pretty restricted in movement, so it quickly becomes 34m+ for the same amount of moves mid-game).

It's still not very difficult to think three moves ahead, however. And it's much quicker for a COMPUTER to literally iterate 34 million moves than it is to "guess" at a 75% accuracy.

Lee D Silver badge

Everything wrong with AI / machine learning in a nutshell.

A simple task, that a child can do, constrained to the bare minimum of logical processes necessary (i.e. no actual movement required, just literally "rotate row A then column B", after immense training plateaus to the point of uselessness before you're six moves away.

Tell me... what does a Rubik's cube six moves from completion look like? I guarantee you that it looks "almost done".

And then it's not reliable (only 75% solution rate) and doesn't scale (or they'd run it for longer to improve that reliability / number of moves).

Pretty much this is where AI is. Let's throw data at something acting randomly, wait until we've culled anything not resulting in success, then claim it's "intelligent" even when it can't then do six moves to complete a cube.

Web devs griping about iPhone X notch: You're rendering it wrong

Lee D Silver badge

Waits for first website that pretends to be the wifi icon/menu, stealing your wifi passwords in the process.

This is just Apple all-over. "We did something unnecessary and stupid because it's 'designer', the world will just have to suck it up and change the way they work just for us."

Alexa and her kind let the disabled or illiterate make the web work

Lee D Silver badge

Does anyone else find it amazing that in 2017, there are still people who are illiterate?

The article doesn't mention it (Why? They couldn't read it!) but - unless you have a specific and recognised learning difficulty - why are there still people who avoid text?

I work with a guy who has LITERALLY (sic) never read a book in his life. That just shocks me.

However, though I'm sure Alexa/Siri/Cortana are useful, I'm always more concerned with - how does a person who relies on those kinds of technologies secure their account. Security and accessibility seem to be polar opposites.

Latest Linux kernel release candidate was a sticky mess

Lee D Silver badge

Re: Lights the touch paper and sits back!

(Pictures Apple guy in the next garden with a fabulously pretty fireworks display... shown as a webcam stream on a 200" screen in 4K).

Brit military wants a small-drone-killer system for £20m

Lee D Silver badge

There's only one man who would dare Raspberry me!

Lee D Silver badge

Why would you think they would be radio-controlled?

It wouldn't be infeasible, now, today, as an "art project", to spend £50k, get a warehouse full of them, strap something on the bottom, modify them to fly to preset locations and rip out their radios, drive 10,000 miles out of the way, wait three months to ensure you're home and dry and out of suspicion, and then dial the magic number or set the magic bit on an onion address, that causes them to be powered up, float off through the roof and all attack a different target, or all home in on the same target.

Taking them out would literally require an EMP that knocks out all kinds of things, and you'd never know if you got them all.

With a bit of onboard coding, a solar panel and an Arduino, you could program them to all run off, sit on a random roof for a few weeks and then form a co-ordinated attack at the same time anywhere in the world. Stopping, charging, and then carrying on if they get slowed up or take heavy losses early.

The danger in these things is actually predicted by the mischief that could be caused in the hands of a crop-circle-maker, protestor, artist, or even just kids playing games.

At no point, once powered up, do they need radio to do that job. Even with deliberate GPS takedown (in a matter of hours? Yeah, right), there's nothing stopping them triangulating from cheap 3G sticks which will give you position to a couple of hundred meters on their own, let alone in tandem.

To be honest, the threat of a hostile drone swarm, even from another country, is scary. They could be sitting for years, building up, lying in fields, flying off if anything comes near, and then making a coordinated and almost indefensible attack using any payload they can carry. Even the military were looking at drones that could sit on powerlines and charge up, etc. but a determined hacker with a thousand identical drones which can carry even the smallest of payloads could cause a nuisance and a news story at least, commit terrorism, or prompt a military response if they did it right.

Seriously, there are drones out there with ranges of 7km and flight times in the hours. They ain't cheap but a year ago they didn't exist. Next year, you'll hear of some enthusiast flying them near Heathrow, the year after that they will be in your toy shops.

And if ever there was a tool that it's difficult to determine the source of, especially if you don't use radio, surely that's gotta be one. How many people are arrested when their drones buzz Heathrow, football stadiums, even the Empire State Building? Almost none, because nobody knows who was flying them.

Sputnik-1 replica used to test the real thing goes under the hammer

Lee D Silver badge

"And while that history has its roots in conflict and space remains of enormous strategic significance, space programs from many nations now also conduct scientific endeavours that expand our knowledge of the universe while also showcasing human ingenuity."

Shame that if we'd just focused on the science instead of the in-fighting, and allocated the budgets accordingly, we could probably be 100 years or more ahead of where we are by now.

Red Hat pledges patent protection for 99 per cent of FOSS-ware

Lee D Silver badge

It says:

"We won't sue you".

It could not ever say:

"Nobody else will ever sue you."

What makes you think it could?

Literally, I could patent something tomorrow and sue you over it. It might be completely obvious and baseless but you'd have to go to court to prove that. Are you expecting Red Hat to somehow change the legal system so that that never happens to anyone, ever, anywhere in the world no matter how unscrupulous the company doing so (e.g. SCO)?

If you need to replace anything other than your iPhone 8's battery or display, good luck

Lee D Silver badge

Honestly don't get why people buy stuff that they don't stand a chance of even other people fixing.

I deliberately didn't buy certain models of cars because they are basically irreparable unless you're the manufacturer, and I don't want to pay those kinds of prices into perpetuity, thanks. I never liked Monopoly.

Why you'd buy a phone that (last time I looked) cost £70 for a screen that wasn't even a proper Apple replacement part and voided all warranties, I'm not even sure. Especially when those kinds of damages were frequent (never met anyone with an iPhone over 2 years old that's not smashed on the screen at least), and often took out touchscreen / buttons / cameras too.

Have literally dropped my phone down concrete steps, out of windows, etc. and never had a problem even without any kind of case. However, have sent one guy's iPhone off for repair for broken screens no less than 7 times, each time the repair is more dodgy because you just can't repair it properly. And that's from a company with an exclusive deal with us for repairing 100's of iPads too.

If you can't google a replacement part, slap it on yourself, then I don't see why you'd want it. You might as well drive a Peugeot or something where you have to dismantle the rear axle to change the front headlight bulb, or things equally as ridiculous.

I honestly don't get how this rates even a 4, let alone a 6, on any kind of repairability scale, and I don't get why people continue to buy those phones, whine about the repair costs, then expect me to somehow magically fix them for free when I told them not to buy them.

You've been baffled by its smart thermostat. Now strap in for Nest's IoT doorbell, alarm gear

Lee D Silver badge

£20 box off Amazon (GPS tracker/vehicle locator/auto-fuel-cut-off/etc. box - basically GPS + relays connected to GSM).

One giffgaff SIM card on minimum payment (£5/month) so they don't shut it off.

Wire into existing doorbell.

Done.

Sure, not a "commercial" product, but are you honestly telling me that it costs thousands of dollars to package that up in a neat box that just plugs in?

Lee D Silver badge

"I'm happy to deal with Google. They've done some great stuff. Just don't ask me to trust them."

Exactly. Just because I use a service, use it every day, doesn't mean I would rely on it.

Kebab and pizza shop owner jailed for hiding £179k from the taxman

Lee D Silver badge

Few companies ever break tax law.

The problem you're referring to is actually "There is a law that let's us do this" or more commonly: "There is no law that stops us doing this".

When VAT law on products from Guernsey changed, Amazon were pretty quick to pay their bills and get out of there.

The problem is a taxation / benefits system that allows such things, which is the fault of supposedly intelligent people working for government, not the people who find the loophole (who are merely morally corrupt).

Lee D Silver badge

I should think nowadays that it's just:

"Compare personal bank account income to business income and VAT paid" on a computer.

They do that for benefits already, they can literally look up all kinds of things about your income, outgoings, accounts, contracts, loans, etc. and spot discrepancies.

Obviously, they have to have a reason to look, so something obviously flagged on the system as suspicious or an anonymous report, etc., but they have it to look at and that's done long before they go see if the premises.

Hell, if you have a bill arrive in a new name at a premises where someone is claiming benefits, they can be informed and query whether you "live alone", etc. - my ex and I had that happen in the past.

As soon as they get a sniff, or a report, it's quite easy to prove things like this nowadays. It's hard to deal in or hide cash, even.

It might not be immediate and they rarely act straight away or tell you what's happened, but they can gather evidence enough in seconds.

Lee D Silver badge

Not being funny, but this is the low-hanging fruit, surely?

A kebab shop only making £9k a year, are you kidding me? How do you even begin to claim that, you'd be out of business in a year easily when you were basically a one-man band making only £9k for yourself after a year's worth of work (i.e. not even minimum wage for YOU, let alone anyone else).

And if you were on HungryHouse / JustEat (which it sounds like), then they have records you can't hide. You put it in your bank, who would also give up that information. You claimed benefits (and they check all the above too).

Sure, maybe you got away with it for a while, but how can you think that being so blatant would work for any length of time? Literally ORDERS OF MAGNITUDE more money passing through your accounts than you were declaring.

I bet they've had you on their list for years, but just waited for a quiet day. "Oh, well, lads, we didn't get the mastermind criminal. I still wanna send SOMEONE down though. Let's go do that kebab shop, it's long overdue..."

Shock: Brit capital strips Uber of its taxi licence

Lee D Silver badge

My favourite quote:

We spent our youths being told not to get in stranger's cars, or talk to strangers on the Internet.

Now we literally summon strangers from the Internet in order to get into their cars.

Lee D Silver badge

Re: 40,000 drivers out of work

1) YOU can even look up your insurance, tax and MOT online in seconds now. I'm damn sure the UK police can and do - in London it's done at automated stations for EVERY vehicle that joins a motorway or goes into London. Every ANPR police car does the same. And all police cars can look up dodgy motors - it's the first thing they do on a stop, and they often crawl backstreets and pick out anything that looks ripe for a lookup.

2) If you don't report it, they can't do anything. Did you report it? Or just think "They won't do anything" and then not report it? Report it anyway. If they do nothing, that's not your problem. Write them a letter that says you have concerns about X happening at address Y on a regular basis and then you're done. If nothing happens, they have more important things to worry about. I can't say that's their fault, nor that I blame them. If you're really that worried that you moan on forums, write to the council, get it into the newspapers, etc. Trading Standards will help shut them down way more than police ever will (it's a civil offence, not criminal, hence not a police job).

3) Emissions - yeah, maybe they can't test on the road. But for sure it's illegal to modify the car. The UK police have WINDOW TINT METERS that they regularly use on the boy-racers at Southend and places. Maybe if you reported it, they might organise a raid six months into the future with random checks on customer vehicles?

4) MOT criteria have zero correlation to road-worthiness. It says it on the certificate. You can come out of an MOT test center holding your pass certificate and be nicked for having an unroadworthy car. There's NOTHING in the law stopping it.

5) I don't wish to dig into citing case law or particular cases as the searches are expensive, but you're talking nonsense. Hell, there are programs on TV where lorries/vans are pulled for random things and they are convicted for the modifications to make it more polluting (and window-tinting, and under-car lighting, and all kinds of things). Even UK cop shows from 10+ years ago, whether random-stops, or services-pull-offs on a mass scale.

The award for worst ISP goes to... it starts with Talk and ends with Talk

Lee D Silver badge

Look, nobody is surprised.

But... who was the best ISP?

Surely that's something worth celebrating and useful to us, much more so than the we-all-know-who-it-is worst ISP.

Microsoft and Facebook's transatlantic cable completed

Lee D Silver badge

Not being nautically-minded myself, I hadn't thought of conjoined anchors.

But it just seems to me that such cables would be very vulnerable in such instances. I know the ships can splice and repair, but it just seems a problem that can only get worse, and even when it comes to "remove that 50-year-old obsolete cable", you will still have the same problem.

And what happens in, say, a war, and you can't survery 6000km of cable, and you can claim "Whoops, sorry, we were just repairing OUR cable but happened to take out your continent's fibre in the process". They must be more valuable than oil pipelines nowadays, no?

Lee D Silver badge

Question:

If you lay a transatlantic cable, and then over the intervening years ten other people come and do the same, it's virtually inevitable that they will cross over.

When they do, and there's a problem, requiring someone to get a big boat and go out and pick up your cable, how do they avoid tampering with all the others? Surely they must end up dragging those up too, and then how do you fix and relay your own tangled cable and (if you break it) theirs without repeating the situation?

I realise that most of the time there's enough slack to pick the cable up anyway (or you wouldn't be able to repair) but surely it must be an issue?

You forgot that you hired me and now you're saying it's my fault?

Lee D Silver badge

Only if IT / the audio people are aware of that.

If you speak to them, rather than some random person on the phone booking on the course, you can be sure they know.

And, to be honest, 75% of the speakers I deal with don't have any need for sound, even for 200+ staff training.

The sensible ones actually have buttons set up for sound / nosound / widescreen / 4:3 / Internet / offline etc, so that their one presentation handles all situations.

Lee D Silver badge

Personally, if you're turning up to train people I would expect the following:

- That you've emailled your contact a list of requirements. Including counts of software, PC's to run it on (Or are you supplying those? No? Then we need to know!), and whether you need seats, boards, pens, whatever. And to request numbers, what the training is to focus on, and what level the people you're training are at.

- That you ask for the IT contact if you're demoing an IT product. This isn't hard. If you were demoing a new boiler for a swimming pool, you'd expect the guy who does the boilers for the swimming pool to be there or at least aware of your training. If nothing else to check that your antique three-plug horizontal sync laptop will display on the 8K HDMI projector. Also for wifi, software installs, licences, audio, mics and whatever else. They could have pre-organised that for you and queried licencing (which I don't expect random-person-who-clicked-Buy-Training to know).

- Also that you show the guy any materials you'll be training people on, so he can spot that your URL from 1986 embedded in Word in Powerpoint in Publisher in Powerpoint again and then shown through Prezi won't work on their systems.

- That you get the name of people you'll be meeting, so you can ask for them by name if people "don't know you're coming". (You may have done this)

- That you get the room you'll be doing it in (which means someone has to book you) and request setup 15-20 minutes before you start (so you get a cup of tea, sort out the room hassle, and can say "Well, I did ask that we could set up an hour ago but nobody knew where I was supposed to go).

- Also, that if you don't get the above, you just badger people until you do.

I deal with trainers all day long. When they turn up with their sticky-tape covered laptop, with zero battery power, a charging plug that only works in the United Arab Emirates, a laptop that doesn't have a port invented this millennium, at 2 minutes notice, to show their QuarkXpress file pulled from some Chinese file-sharing site over GPRS from their phone, which they want to present using a clicker which connects over PS/2, and then crowds 50 people around their laptop because they can't get anything to work anyway and nobody can hear it because they never booked the audio system speakers, and then they have the cheek to blame IT for not just knowing all this automatically (whether or not some other member of staff at the company bothered to ask!), and then proceed to give me the "Well, other places don't have this problem" line which makes me tell them to take our staff to train there next time, I literally see no reason to be sympathetic.

Even more so when THE NEXT WEEK the same trainer with the same laptop does the same thing to the same company for the re-iteration of the course because nobody understood a bloody word of what was going on anyway because they were such a poor and unprepared public speaker, and their video failed half-way through leaving them to improvise on a bit of software that they've probably never actually used themselves in their lives.

Sysadmin tells user CSI-style password guessing never w– wait WTF?! It's 'PASSWORD1'!

Lee D Silver badge

Re: "They looked for the password on the CD . . ."

@IrishFella:

Wow... for four years, they've been F-.

Oh... hold on... that's their website front-page. The ACTUAL submission website is:

https://www.ssllabs.com/ssltest/analyze.html?d=tp-online.co.uk&latest

I thought they'd come up too far in the world! Though they have improved, it's still the WORST site I've ever seen officially.

Not like they handle MILLIONS OF POUNDS of people's ultra-secure pensions, or anything. Or things like List 99 barred teaching staff lists... Oh... hold on...

Lee D Silver badge

Re: "They looked for the password on the CD . . ."

Teacher's Pensions will happily send out certificates without passwords, by unencrypted email, to anyone who happens to work at a school.

If you make a fuss about not being able to install it on more than one computer, they include the private key in the certificate too, so you can export it and move it around multiple computers.

But then, those certs are client certs used to authenticate to their website which itselfs score an F- on the Qualsys SSL Labs tests and has done for years. Literally everything from SSL1 to vulnerability to everything under the sun. Nobody seems to notice or care.

P.S. They charge something ludicrous like £80 for each person you need a certificate for, and for re-issues etc.

Ah, good ol' Windows update cycles... Wait, before anything else, check your hardware

Lee D Silver badge

Because nobody has ever proved that Windows 10 transmits anything more than already transmitted by all the previous modern versions of Windows.

Literally, it was a Reddit article that got over-hyped, and turned out to be the same Windows "Customer Improvement Program" as has been in there since about Vista. And turn-off-able using group policy if you're paranoid.

Data protection compliance is therefore no different to how it's been for the last 10-15 years, or have you only just read the EULA?

UK data watchdog swots automated marketing call pest with £260k fine

Lee D Silver badge

1.5p per call.

I bet they paid BT more.

From the Dept of the Bleedin' Obvious... yes, drones hurt when they hit you in the head

Lee D Silver badge

Coming next - some idiot straps an ultra powerful laser to a drone and blinds pilots with it until they crash into it.

This started as a joke, but actually I can genuinely foresee some prat doing that.

Lee D Silver badge

Currently, they're tied up with research being conducted at the Vatican.

Behold iOS 11, an entirely new computer platform from Apple

Lee D Silver badge

Re: Optional

So long as you don't blame the IT guys, your criticism of school admin processes is pretty accurate.

Currently I have parents asking why I have four different systems for booking different things. It would be rude to respond "Do you know how many I have internally?". Someone goes on a course, sees a thing, another school says they have it, suddenly we HAVE to have it, we get it, realise it's the same as a module in the thing we have that we already pay a fortune for, half-ass an implementation to get it to talk to the same databases (just don't even go there), roll it out, give the parents YAFP (yet another flapping password), and then have to deal with all the differences, implementation, servers, licences, ways of working, data differences ("Oh, you want to opt-out from everything... let me just remove you manually from 20+ databases and hope the teachers didn't save your details").

We've heard of database sync. Shame most of the vendors we're forced to use haven't. I currently have... 1, 2, ,3, 4... at least 5 copies of our primary kids+adults database information in various services (everything from Google Education to an alumni software), not to mention all the little bits, assessment programs, website logins for outside services, etc. etc. etc. Of course, they all sync seamlessly and never have a difference of opinion on what's an acceptable password, email, address field (just address, or housename as a separate field, or house number, or is postcode included, does it need a town or not?), etc. and with the exception of Google, no decent import/conversion/sync routines to match them all up whatsoever. Oh, and sometimes data-import/conversion charges every time you want to actually suck in automatically more than the handful of data you could do manually.

Don't even get me started on the people who "opt-out" of communications and then complain they aren't getting the newsletters any more...

Bill Gates says he'd do CTRL-ALT-DEL with one key if given the chance to go back through time

Lee D Silver badge

The point of Ctrl-Alt-Del was that it generated a hardware interrupt so it couldn't be faked or ignored, and someone had to be at the computer to issue it.

Nowadays... well, that's just not true. You can "send" Ctrl-Alt-Delete to a machine in a variety of ways. In fact you need to or you can't log in remotely properly. Even things like on-screen keyboards can send it.

As such STILL USING Ctrl-Alt-Delete is the mistake, not using it back then. It literally serves no useful purpose and makes it more difficult for people to use the machine if they have any unusual requirements (e.g. specialist keyboards, OSK's, voice-control, etc.) or work remotely.

For a long time, Ctrl-Alt-Delete has been useless. Before that, it was a very silly combination (the first "pseudo-DOS/non-DOS" Windows versions used it for logon, but the DOS just before that would send a soft-reboot command when you pressed it - without confirmation! So it was like saying "don't worry, just type FORMAT C: to log on"). Back in the DOS days it actually served a useful purpose in that it was pretty much uncatchable so when something went wrong and you had to get out, and things like Ctrl-Break didn't respond, then Ctrl-Alt-Delete would let you take control of the machine again (not nice, but generally worked and much more hardware-friendly than power-off).

It was a poor choice not because it took three fingers. It was a poor choice because it was a complete change of context of a well-known command to perform an action only possible at the physical machine itself that overrode just about everything else that was then turned into a "Click here to send Ctrl-Alt-Delete" thus defeating its entire purpose. I don't think IBM is to blame here (nobody wants their machine to reboot just because you hit the interrupt key, which is what would have happened in DOS, so a multi-key combination that was difficult to do accidentally was safest).

What I blame them both for is NOT having a "PASSWORD MODE" on the keyboard. A physical, un-overrideable switch that puts the computer into a special mode outside OS control where you can then type in a password without possibility of software eavesdropping your keypresses, then you switch back to "normal" mode and carry on typing. Basically a UAC that was hardware-enforced and stopped people typing their passwords into website, random programs, getting their context switched on their mid-way, software keyloggers, and provided an obvious, secure and unfakeable place where it was safe to type passwords (Literally turn the keyboard red while the switch is flicked). We have junk like SysRq, two Windows keys, Scroll Lock / Pause / Break - which all served a purpose once -, etc. but not a secure way to type in something that we're ALWAYS needed to have a complete mode switch to type in securely.

AI slurps, learns millions of passwords to work out which ones you may use next

Lee D Silver badge

Re: Feed this

Why would you ever let someone watch you type a password?

That's got NOTHING to do with the complexity.

I guarantee you that if you type on a keyboard in my field of vision, I can get the majority of your password instantaneously, sometimes before you can press Enter at the end, just by the sight of the motion of your fingers.

I don't even care what the characters you hit were, or if the keyboard is foreign language, I can see the pattern you typed, including modifier keys. Everything from cybercafes in Europe to people on front-desks at hotels, to my own users who then say "Would you like me to write down my password?"... no thanks, I've just got it. To be honest, I have passwords myself that I don't even know what they are unless I type them out on a keyboard, so weird characters and foreign layouts wouldn't hinder me at all.

Don't type passwords in front of people, ask them to look away or move to a token system if you absolutely can't avoid it. That's got nothing to do and you're not protected AT ALL by the complexity of your password in that case (only by the sight skills of someone watching).

P.S. It's a pain. Because I can tell you that 99.9999% of all actors NEVER TYPE what they are claiming to type. Even when it's not obviously home-row scatterings to "look good".

Lee D Silver badge

Re: Feed this

Length of password.

Everything else is a nonsense.

All the special characters in the world just make your password harder to remember, harder to type (especially on a mobile device). And it's not as effective as just adding another character to the end of your existing, normal, boring password.

(number of characters available in alphabet) ^ (length of password)

The latter grows the complexity of a password FAR quicker than the former.

An 8-character, all-ASCII password would be 256^8

It's beaten by an alphanumeric (A-Z, a-z, 0-9) password of length 11: 62^11 (three times as large a number).

And nobody can use/type most of the ASCII character set anyway.

Lee D Silver badge

People already know it's pointless.

GCHQ and NIST advice is to NOT force people to change passwords regularly. It's counter-productive.

Anyone who keeps up with industry best practice knows this. When was the last time your bank forced you to change your password / PIN?

Don't force password changes. Just make sure you can detect and limit brute-force attacks, and discourage particularly weak passwords in the first place.

Compsci degrees aren't returning on investment for coders – research

Lee D Silver badge

Re: More!

I believe it's not a new idea to both study and earn money simultaneously.

"Gaining experience" is a problem only for really-blinkered HR departments who don't consider 3 years of intensive, controlled, assessed, study at a registered university as "experience". To be honest, in my experience, having a degree and less years of experience pays more and gets more jobs (and gets them easier) than all the people without a degree but "years of experience". In fact, it often costs those other people their jobs when I turn up and say "Why the hell are you still doing that?"

A degree proves that people can learn, learn fast, learn complicated things, learn boring things, learn things that they don't necessarily have any interest in at all, and then retain them. That's a skill that cannot be assessed in the workplace easily. It barely matters what subject they studied either.

I've known people who've been "in industry for decades" who actually don't have the first clue about what they're doing. It's generally those people who don't WANT to learn. I've been in IT for nearly 20 years and observed that people with that experience or more without the benefit of a degree are very prescriptive in their processes and systems and unwilling to change and unaware of what's possible, and inflexible and unable to do research and change their ways of working to reflect new practices.

It's a generalisation, yes, but it's certainly present.

In terms of career progression, I've never been hindered by my three years "out". In fact, at least two job interviews have explicitly flagged it as an advantage over other contractors / employees / candidates. Even over candidates with industry certifications coming out of their ears (I've actually run into MANY places that hate industry certifications after having relied on them with new staff only to discover they weren't suitable at all - note: I have no industry certifications, just my degree).

Am I a genius with a first from Cambridge? About as far from it as is possible, in fact.

Am I applying to high-end jobs at the top end of academia? No, I manage the IT for schools.

Do I earn above the average for people in my position? Yes. In fact, I refuse to unionise because it would mean all kinds of problems, and one London Borough had to create a salary category just for myself at the insistence of a headmaster.

I've met very few people whose degree was worthless to them. And you don't just get a degree "to get a better job". That's about the worst reasoning EVER. If you go into it expecting that, you'll almost certainly be disappointed but not because of the degree, it's the way of thinking "I have a degree, therefore pay me more" is wrong. It's "I can show you that I can do this better, because I can learn how to, here's proof that I can learn" at best.

I've met orders of magnitude more people that regret not having studied when they were going to have it part-financed, when their expenditure and financial obligations were minimal, when they didn't have families, when they could couch-surf to save money without it feeling wrong. Hands up who has taken 3 years out of their career to go back to uni? Now compare to those who went to uni when the natural opportunity presented itself after school instead?

P.S. My degree is in mathematics. I've literally never needed to use the subject. It comes in handy knowing the subject, for everything from binary to programming, path-finding to balancing a department budget. But I've never NEEDED to have use of the subject. That's NOT why you get a degree. And a career in any kind of finance, etc. would be my worst nightmare, I'm afraid. I studied maths because I had a massive interest in it and it came easy, but it's a purely academic pursuit. I work in IT because I have a massive interest in it and it came easy, and can be used to earn me money.

Behold, says robo-mall-cop maker: Our crime-busting dune buggy packed with spy gear

Lee D Silver badge

I'm waiting for the first time someone bundles one of these things into the back of a van (presumably GPS-shielded) and then strips it for parts. Even Robocop didn't escape that fate.

More seriously, I honestly wonder about the liability issues. If that thing falls over / drives over someone, then presumably the robot company pays the bill. "We're only paying for their services, we don't own the robot" is indeed the best thing at that point. Their problem, not ours.

It does make me wonder why you can't just hire a guy for less than $60,000 to do the same job, though.

Google parks old pay-to-play auction in front of European Commission – reports

Lee D Silver badge

And I still just scroll past all that gumpfh and go to a storefront I trust, or the search results themselves, rather than random ads at the top of the page put there by the highest bidder.

Seriously, if I wanted a camera, I'd try Amazon first. Then camera shops. Then a search for a model of camera. At no point would I click top/side ads on any of those pages/sites.

IBM packs 120TB into a carry-on bag, for snow-balling cloud uploads

Lee D Silver badge

Re: The return...

Never underestimate the bandwidth...