* Posts by Lee D

4259 publicly visible posts • joined 14 Feb 2013

Horsemen of the disk-drive apocalypse will ride upon 256TB SSDs

Lee D Silver badge

Wrong on just about every count.

SSDs have a concept of trashing individual sectors (It's called TRIM) which most hard drives never had. If you TRIM a given sector (which modern OS will do automatically when it's not needed any more because you deleted files), then it gets overwritten, which means it's gone forever (yes, forever... yes, even on hard disks. No, magnetic history doesn't exist. There's £1m waiting for you if you can prove it.

Nobody has claimed it).

However, everything from background sector reallocation on error, to automatic sector-refreshing, to copies still present in temporary locations on an abrupt power-off, to literally everything from Shadow Copies to even temporary files in your OS mean that you cannot "securely erase a single file" on any modern hard disk or SSD. Ever. Not without literally being the people who made the hard drive.

It's beyond the scope of a drive to know the filesystem format it's holding, and just as tricky on an HDD as an SSD, and it's not its job, so it has no idea where that file went or which bits were left somewhere.

That's up to the OS and the OS alone. And most OS are not built with this in mind at all.

Solution: Don't try to securely erase single files, it's not trivially possible at all, never has been. Encrypt the whole drive and don't give out the password. Trash the whole drive if you can't afford for someone to read a file on it.

P.S. Almost all drives have "Secure Erase" commands on their drive interfaces. They work per-drive but also cannot remove from damaged or reallocated sectors reliably.

P.P.S. If you want to trash a drive, any drive, just throw it in a big fire until it's just ash. Anything else is really just snakeoil and messing about, no matter what the technology. No, overwriting it a billion times doesn't guarantee anything if the firmware decided to keep a copy of an old broken sector around that it transparently replaces with one from its stock of spare sector.

Lee D Silver badge

Re: So for personal backup...

Tape drive - too expensive, especially if your tape drive burns in a fire and you're just left holding your backup tape.

Blu-Ray - too small. Stupendously small, in fact. Too slow. Restoring from a bunch of them will take forever.

Cloud - better have a REALLY good Internet connection and be happy for everything to be offline at random (and the most inconvenient) times.

Go with drives: a small home NAS and a USB.

Literally, one of the backup tiers in my workplace, is a bunch of cheap NAS boxes (they can do iSCSI, etc. but we just use them as a file dump for the secondary backups). Cycle one off-site every now and then, and you're done. Restore times at 2Gbit/sec (LACP), or use the files/VMs direct from the storage with the iSCSI functionality if you want.

I'd have a cheap NAS for day-to-day backup, dumping photos, running services, remote access on your smartphone. And then a bunch of cheap external drives as "backups" at regular intervals, stuck in the loft, at a friend's house, etc.

Lee D Silver badge

Re: SSD is fine - while it works

Sorry, hard drives give no more warning than SSDs. I have a bunch of Seagates supplied as part of a RAID array to attest to that. One day, they just stop working, no SMART warning, just dead.

And neither failing should affect any kind of even semi-professional storage. Maybe your laptop dies at home, but you have backups, right? Backups are not the domain of business alone, if you value anything on your computer. The reinstall of Windows alone would cost £50-100, so spend £50 on a complete backup of everything and press the button on it once a month.

SSDs also have good lives on them. I've put them in schools, in heavy-use clients, and no I didn't even bother to turn off swap or turn on all the RAM-cache nonsense for them. Straight swap, HDD for SSD, with the same image, as an alternative to trying to upgrade RAM in machines locked to 4GB max (not OS, 32-bit motherboard limits).

They are all ticking along nicely, nowhere near their write limits (every time I run the numbers again using the real-world usage, it comes out to 10+ years still, and we replace every 4 anyway), and not had a single failure. P.S. I buy the cheapest, unheard-of brands. ADATA anyone?

The only place that worries me is exactly what this article states - high-end servers and write-heavy tasks, where SSDs are not well suited and everything has to be send over a Gbit connection anyway (so why rush?). In clients, they are perfect, and provide ENORMOUS speed boosts for a good price. A price that, if they fail, who cares.

All I want are larger ones. For network clients they are fine, but storage grows all the time and it won't be long before the 128Gb cheapies are no longer viable for clients. They don't even need to exceed SATA speeds (hell, some of our machines are limited to the old SATA speeds and still an SSD makes them FLY). Just storage matters.

I want the £100 1Tb SSD that operates at 500Mb/s read/write. I would literally buy them by the dozen for my workplace, and for myself.

And at that price, they are no more likely to fail or cost me money than an £85 decent Western Digital boring basic HDD version of the same size.

To be honest, HDD is dead except in high-end write-loads. Everything else should be SSD already. I am frustrated how long it's taken to get to the point where computers are actually being supplied with SSD, and even more so by the lack of storage capacity while we focus on "but we're now 20 times faster than SATA if you use this interface that nobody has in their home machines and needs all kinds of adaptors to be backwards-compatible".

Gimme a cheap, large, SATA SSD drive. Hell, make it 3.5". I really don't care. When it dies, I'll buy another to replace it unless it's still in warranty, like I do hard drives. I'd expect at least 5 years out of them, I'd be happy if it's warrantied for 2 years, which I don't think it at all unreasonable.

Windows Subsystem for Linux is coming to Windows Server

Lee D Silver badge

*COUGH*

---

Get-Help cannot find the Help files for this cmdlet on this computer. It is displaying only partial help.

-- To download and install Help files for the module that includes this cmdlet, use Update-Help.

-- To view the Help topic for this cmdlet online, type: "Get-Help Enable-WindowsOptionalFeature -Online" or go to http://go.microsoft.com/fwlink/?LinkId=289353.

---

So now I have to update the help files (glad I'm not, you know, trying to solve a connectivity problem or anything, because obviously the helpfiles are NOT installed by default) AND... in this instance does "-Online" mean update the local computer this time or does it mean to go online to get them?

CONSISTENCY, PEOPLE.

P.S. Update-help takes 5-10 minutes to install.

P.P.S Where's the list of optional features you could enable? Not present apparently (only example given is Hearts....)

Lee D Silver badge

"Enable-WindowsOptionalFeature -Online -FeatureName Microsoft-Windows-Subsystem-Linux"

This line describes everything wrong with Powershell.

1) It doesn't work in cmd. I know that sounds petty but are you telling me that you couldn't have merged the two? I mean, do you really think that first bit couldn't just be a command name in cmd?

2) It's overly-verbose for no real reason.

3) It has random hyphens in different places for the first command.

4) Is it "Enable-WindowsOptionalFeature" or "Enable-OptionalWindowsFeature" or "OptionalWindowsFeature-Enable"? Stupid naming, no consistency between tasks.

5) Sigh:

Enable-WindowsOptionalFeature .... big red error message, four lines long waffling about parameters.

Enable-WindowsOptionalFeature /? .... big red error message, four lines long waffling about parameters.

Enable-WindowsOptionalFeature help .... big red error message, four lines long waffling about parameters.

Enable-WindowsOptionalFeature -help .... big red error message, four lines long waffling about parameters.

Enable-WindowsOptionalFeature --help .... big red error message, four lines long waffling about parameters.

Enable-WindowsOptionalFeature -WHAT_THE_HELL_DO_I_HAVE_TO_DO_HERE .... big red error message, four lines long waffling about parameters.

6) Why do I need to specify Online? (Apparently it's not what you think: "Use the Online parameter to specify the running operating system on your local computer", i.e. nothing to do with "being online" at all).

7) This only works if you know about the command anyway, unless Microsoft tell you what the command is, there's almost no way to find it out from the machine itself (At least "Add Program/Features" was quite obvious, and even "Add Roles" isn't too far off).

I can't imagine their implementation of bash would be any better, to be honest, and I spend my life installing UnixUtls on Windows machines to do a simple text-search / replace in files on an automated basic with sed/grep.

Brit folk STILL not getting advertised broadband speeds – survey

Lee D Silver badge

Re: "need to regularly test their broadband speed...

I signed up for a free SamKnows box.

Its sits on a VLAN on its own connected to my router. Downloads small test files about once an hour. Uploads results to SamKnows, and I get a little report once a month. Tests everything from DNS latency to RTP jitter to "popular website" loading times. It's used to do the government statistics on how fast your broadband is, etc.

Strangely, since having it on my network, have always got the advertised speed. Strange that.

Impact on my usage of the line: Zero.

Cost: Zero.

Plus, I get to keep the box and do what I like with it (it's a small wireless router with custom firmware, but can be wiped back to a normal firmware).

P.S. No. It can't access my local network, or my wireless networks.

We all deserve a break. Pack your bags. Four Earth-like worlds found around nearby Tau Ceti

Lee D Silver badge

Re: Colonization dilemma

I think I'd rather live on the same planet as amoebae and primitive plants, than share one with Trump.

Lee D Silver badge

Re: Game designer Pete Cooke knew about this 30 years ago!

Yup.

Shame about the sequel, though.

Microsoft's Surface Pro 2017, unhinged: Luxury fondleslab that's good...

Lee D Silver badge

Re: Skillz

Vivaldi - middle click on link to open in new tab. Always open comments and article, because often one is much better than the other.

Lee D Silver badge

Sees headline.

Scrolls to price.

Prices start near £1000.

Closes tab.

Sorry, guys, but I can get a Win10 Pro / Ubuntu handheld portable PC (in a Nintendo DS kind of form-factor) for a couple of hundred quid. Putting the same hardware behind a larger screen shouldn't cost three times as much before I even start matching the processing/RAM/storage capabilities.

Manchester firm shut down for pretending to be Google

Lee D Silver badge

I once had a guy ring, greet me, spend ten minutes talking about the football (there was some tournament or other one, I don't care, I never follow it).

I just let him keep going because he lost any sale in the first 5 seconds anyway, by pretending to know me to the switchboard, asking for me by name "I was talking to Lee, can you put me through" when he's never spoken to me in my life, then saying to me that the lady in the front office (he gave her name too) had given him my details (strange, because I was standing in that same office when they put the call through to me, and no such exchange happened), etc. etc. etc. But he literally talked about random junk for 10 minutes, as if I was his best friend.

The phone call ended with "I don't really care, mate, I'm not the one trying to sell. And you'd lied within the first 5 seconds of this call, so why would I do business with you? Oh, by the way, I hate football".

But as soon as they talk about something random, which is not what normal people do, I knew it was a sales call that I didn't want. People who want to sell to me, who actually do business with me, phone up and say "Hey, I was just calling because we have this new product" or whatever. Straight in, maybe "How are you?" but that's just politeness, but "this is why I'm phoning." If you are avoiding telling me why you're phoning, I don't want you to phone.

Even better is when they claim to have done business with me, I tell them I'm new, and they say something like "Oh, you bought some stuff from us last year". Strange that. I've been here years, and you didn't know me and I've never bought anything from you.

Samsung drops 128TB SSD and kinetic-type flash drive bombshells

Lee D Silver badge

Re: key and value

"Windows Internal Database is not available as a standalone product for use by end-user applications... Additionally, it is designed to only be accessible to Windows Services running on the same machine."

And that's now what I'm talking about. I'm literally talking - rather than a service that has a mini-SQL in it that other services can use - about it being an OS-managed feature. You can literally pull WID out of the install, and it's only used if it's running certain server services.

It should be a core part of the Windows API available to all programs, services etc. and it's not.

I can't see another non-Microsoft service / app listed that uses WID.

Lee D Silver badge

Re: key and value

Filesystems should all be databases. Microsoft really cowered out on that one, we never did see "WinFS".

Configuration should all be databases (registry, INI files, etc.).

Applications should be a bottled container consisting of a database and a program.

And databases should be an internal, core, OS function (why is something like SQL not built-into the machine as an OS-level thing?)

Everything is storing data, in an ordered fashion, and needs to be queried. Why they aren't all just databases stored "however" (in "files", in a flat table, direct in an key-store, it matters not if you only interact with the database interface instead of the underlying format), I've never understood.

Exchange / email is just a big database. SQL is the core of every business. Almost all websites have underlying DB structures. Even WSUS and Windows updates are databases internally, not to mention file search. Most web browsers even store history, cache, etc. in databases (e.g. sqlite).

And when can I start "tagging" files on my filesystem rather than stupid tree hierarchies? That file is simultaneously "2017", "Project X" and "Junk", so there's no way to organise it in a tree that shows me all three sensibly.

Perfectly suited to a database - files are all listed in one huge table, and have an index number. Tags are another table. Each file contains a list of tags that it uses (either directly, or via a mapping via another table with a row for each mapping - "FILE 146475 TAG 587453987, FILE 146475 TAG 264763, FILE 146475 TAG 1237", etc..).

Optimise the SQL and the core database enough, and it'll be insta-search, multi-tag, etc. and you can still just store the file at whatever index you want on the actual disk format. Hell, technically even the file table for fragmentation etc. is just another database.

Lee D Silver badge

My brother once paid more for a 4MB RAM upgrade than the entire base computer had cost in the first place. But then, he was running FORTRAN programs for astrophysics, from a floppy disk, under DOS, so it was probably quite high-end gear for the time.

Lee D Silver badge

Re: 128TB ?

Yep.

All I want is a cheap 1Tb 2.5" SSD. Then I'll literally just buy them by the hundreds and upgrade every computer under my control and save the faffing about.

Don't even need M.2 / NVMe, etc. Just the speed from "bog-standard hard drive" to "cheapest of SSDs" improves my client's response times ten-fold. If I have to replace them once every 5 years, who cares?

But I have to buy tiny 128Gb ones which have almost nothing left by the time you install standard image (40Gb or so) and let a handful of users with cached profiles use it.

As it is, I do a dozen or so every time I have some fresh budget, and it makes a world of difference. Get the 1Tb ones affordable and I'll never touch a hard drive again. 1Tb is enough to do everything you want, home or work. And I'd buy them in such bulk, it would make the 2, , 8, 16Tb versions drop in price too.

(P.S. Bytes throughout... bits are for speeds, and even that's a pointless change of unit for marketing purposes as far as I'm concerned - nobody addresses by the bit any more).

No, Apple. A 4G Watch is a really bad idea

Lee D Silver badge

It's all very simple:

- a software SIM, good idea (means I can transfer things around without fiddly little cards that are ALWAYS the wrong size for the device in question). Hell, to be honest, I'd sign into a phone with a SIP account if SIMs disappeared tomorrow, it's a much nicer way of working that silly smart cards for unnecessary reasons.

- a watch that's reliant on your smartphone? Pointless. You're carrying your phone around anyway, and looking at a watch for something like the time etc. is stupid when you could just look at the phone. Or even have it say the time out loud.

- a watch that is a smartphone? Stupid. They're already too small, and we bounced back with the new models to make them wider, larger with full-edge-to-edge screens (which might be going a bit too far the other way, to be honest).

- any TV series that relies on deus ex machina like "Oh, that series was just a dream"? Utter garbage.

P.S. Literally the perfect way to make me want to turn off and never watch again, matched only by "revisit episodes" (often Christmas specials that just show 1% new content, 99% old clips - Friends, Big Bang Theory), changing all the main characters for randoms over time (Hustle, ER), turning from a drama into a soap opera or losing the whole point of the series (e.g. Lucifer - great concept, so much you could do with it, but oh no the devil is having a little personal crisis so let's forget about the entire "crime-solving" aspect and focus on him being a bit teary, e.g. Big Bang - full of nerds who like being nerds, can't get women, whoops, let's just give them all women including the nerdiest of all and cut out all the nerdy stuff), ridiculous concepts (e.g. Red Dwarf, yeah, let's set it all on Coronation Street).

I could go on.

Can the last person watching desktop video please turn out the light?

Lee D Silver badge

If it doesn't have - at minimum - a skip button on it, I will go out of my way to avoid your service, not use the advertised services, and block/remove whatever I can if I ever do need to use them.

It's quite simple. While you're reasonable, so am I. I'll let you stuff an advert into your free video, so long as I can skip it. If I can't skip it, then I won't bother with your video. I'll even let you have a clearly-stated "advertising funded program" (e.g. UKTV Play, 4oD, etc. but they tend to give up once you've watched a couple of sets of adverts in a 24 hour period and just play what you want without ads). But equally I'm quite at liberty to go make a sandwich while they play and come back when my program comes back on.

But when you try to shove them into places they don't belong, they need to be skippable. Like Prime video - no, I don't care about those other series you have. I really DO NOT CARE. I clicked on this series because I want to watch this series, and I pay annually for that privilege. Stop advertising at me. Luckily they have the sense to have a skip button.

But when you try to play when I scroll away (FACEBOOK!), when you auto-play when I didn't ask (lots of places), when you jump to another video at the end without my permission (BBC News!), when you force me to sit through ads to get to crap that I haven't even seen a bit of yet, you can find yourself another viewer somewhere else. In fact, doing that stuff is the perfect way for me to flee from your content entirely before I've ever looked at it.

Seriously, if I'm on a website I've never been on before, whether it's a product review or a game, whether it's a science article or an IT how-to instructional, if your video plays without me pressing explicit buttons to make it do that, or if there's noise and Chrome says it's coming from your tab, or if you jump in my face and won't get out of my way, then I literally just close the tab and never go back.

I know you want to force me to watch it. But you don't make ANYTHING vaguely inticing, interesting or worth watching. Seriously, I'm an IT guy and the adverts I get are all "how to maximise your business synergy" junk anyway. Show me an ad for something relevant (even a computer game would do), make it interesting, make me go "Oh, wow, that looks good". But you can't. Because you're just selling junk and don't really care that nobody wants to see that junk. Even the media companies have basically given up, by the looks of it.

When TV was king, we were all singing their theme tunes, using their sayings ("You know when you've been...", "Philadelphia?", "Mildness is a cigar called...", "Easily turn-off-and-on-able"). Tell me ONE online advertising campaign that you actually remember, that your mates would know, that was catchy or enticing in its own right.

Big question of the day: Is it time to lock down .localhost?

Lee D Silver badge

Re: Is localhost even needed?

Machine with dynamic DNS / DHCP but you want to use the local machine for DNS resolution until it's ready.

It's not hard to imagine routers wanting to use themselves for DNS resolution but they have no guaranteed, fixed IP except 127.0.0.1.

And about a billion others (i.e. resolution before external networking is even up, things like DBus, etc.). Basically anywhere you mean "this machine" before this machine has an assigned address.

It exists for lots of very good reasons. "localhost" resolving to it is convention coupled with history. Reserving localhost isn't a bad thing because it stops stupid junk leaking out to the real Internet.

If someone could please shoot the guy who set up the network I'm on, though, who created the entire AD with "companyname.int" thinking that "int" meant internal. No, we don't own that domain, and cannot. And no we can't just rename it, it's too well tied in now and means an entire network re-do. I've just had to add our "companyname.com" as an alternative and change the users to be at that in AD instead, but it's legacy is all over the place.

The Next Big Thing in Wi-Fi? Multiple access points in every home

Lee D Silver badge

bombastic bob - you know that there are really only three "channels" on 2.4GHz (at least in most countries that can't use channels 13/14), don't you? All the rest overlap such they they interfere with each other. Blasting someone off one will just shove them into the other two, making them busier and they'll pop back on your channel pretty damn quick.

5GHz is better but mainly because you have to play nicely with other channels to be part of the spec and be a certified device (hence the debacle over firmware modification where manufacturers are basically required to take control from you over such things and provide only a limited interface). DFS is that 30-second delay listening out for a clear channel before transmitting (which is why 5GHz comes up after 2.4GHz when you first turn on your router), and they have to play nicely.

As such, all your "trick" does it make people bounce around the other channels more, while yours is similarly trying to bounce around the same channels, i.e. counter-productive. And though you can lock it to one channel, that's pretty pointless as you then have no way to select the better channels as and when they arrive.

Rather than play games you don't understand, try not using a shared medium and treating it like you own it.

Lee D Silver badge

It's nothing to do with the article, but I had to explain wireless meshing, nearby networks, etc. to my boss once.

The analogy I used was a party.

If you all talk at a normal volume, you can hear people near you. If you need to talk over the background music, though, or one person then can't be heard because they're outside the room and yelling, then people nearby will talk louder. Which makes the people around them need to talk louder still. And so on. Eventually, you have a deafening din with everyone at max volume trying to be heard.

Proper adaptive wireless equipment takes a different route. It says "Shush everyone" at regular intervals, and speaks only at the volume needed to talk over the background noise, even if that means some people are silenced or have a very limited range. It's like a dinner party rather than a rave.

So no, Mr Boss, just "ramping everything up to full power" doesn't solve your wifi problems, it just makes them worse. In fact, the bigger problem is making sure that everyone speaks the same language enough to understand the "Shush everyone" command, which usually means all using the same manufacturer/models of wireless point.

UK publishes Laws of Robotics for self-driving cars

Lee D Silver badge

Re: What should it do when it is suddenly blind?

So, er... how waterproof are these laser sensors? Are you going to hit a puddle and then suddenly be put into an emergency stop?

Mid-flight jumbo font smartphone text shock sparks kid abuse arrests

Lee D Silver badge

Technically, if she took a photo of a dodgy photo, she could be convicted of creation of child pornography. I kid you not. And, no, it's not guaranteed that she would be let off of doing so (you think HIS lawyers wouldn't be instructed to argue for that, out of spite?).

Which is why that's a stupid law, when it doesn't distinguish between creation, deliberate reproduction, and merely viewing. According to UK law, the act of clicking on an unknown link, being shown said category of images and pulling the plug on your computer out of horror is still technically "creation" of said images (they argue that you requested it to make a temporary copy in RAM and all sorts of nonsense).

It's designed to make you SO SCARED of going near such things that you never will, but it has resulted in literal convictions of innocent people.

Google drops poker face, allows gambling apps on Play Store

Lee D Silver badge

Re: How will that work?

Sigh.

Special characters add one letter to the available alphabet.

Adding an EXTRA character (even from a limited alphabet) is MUCH more secure (in brute-force terms).

A 9-character, letters-only password has 2.7trillion combinations.

An 8-character, password from your average keyboard symbols (Alphabet in both cases, numbers, plus a bunch of printable and easy-to-enter symbols, about 80-something possible characters) has just over half as many combinations (1.7tn).

Stop using special characters, and just add another random character from those available to your password. APASSWORD is stronger than P4SSWORD (obviously DON'T do that, it's just an example).

Four techies flummoxed for hours by flickering 'E' on monitor

Lee D Silver badge

Found a tape in our ZX Spectrum collection that we didn't know what it was.

Put it into the tape deck, played it into the Spectrum. Spectrum caught the loader, even gave us a program name, gave us the loading bars, tried to load. Would never succeed, though.

Was just going to throw it in the bin, but by accident pulled out the earphone cable from the tape player.

Turns out, it was my brother and I messing about with the tape recorder downstairs while - in the background - dad was trying to load Nonterraqueous into the Spectrum.

Just the background noise of the loading tones, behind us recording all kinds of nonsense and fake news reports, etc., was enough for the Speccy to be convinced it heard a leader and try to load the game.

I always wondered if - if you were able to clean up the signal enough - you'd actually be able to load the game from that historical recording.

Small biz breaks out pen, paper after Brit tax collectors' Digital Form Service goes down

Lee D Silver badge

Maybe the IR35 changes weren't such a good idea after all....

Linux kernel hardeners Grsecurity sue open source's Bruce Perens

Lee D Silver badge

Er...

Nobody questions that grsecurity does some good techy work.

However, stuff like KSPP plagiarising it is really spurious. Is there really a problem if you plagiarise a GPL work? Not really. That's kind of the point of the licence. It positively encourages you to. Legally speaking, they could pick up grsecurity and stick it in the core kernel and there's NOTHING they can do about.

Why don't they? Because although it WORKS, it interferes with every single subsystem with no care for whether it breaks working things. Linus has said basically those exact words. The guy has absolutely NO interest in submitting the patches properly and expects the world to just pick up his software in a lump, throw it into the kernel without checking on the basis of his sign-off, and then "fix it up" later. That's not how the kernel has ever, or could ever, work. To expect so is sheer, absolute arrogance. A trait that the grsecurity guy basically personifies.

And because he hasn't got his way, and because many people have tried and failed to work with him, he's basically cut off from the mainstream kernel and now trying to sell his own port (99% of the work he does relies on the kernel that he didn't write, which is GPLv2, and most of that he doesn't really care about - whereas Linux developers do. He's put some security checks into a MASSIVE base of code, and then acting like he runs the world), refuse service to people who show that GPLv2 derived code to others, and now sue people for saying "You can't do that".

Nobody doubts that he's talented. But that talent is NOT in working with other people. In fact, he's a bit of a prat. You can often find him on mailing lists and places like LWN.net. Basically, I've never once seen him ever say that someone else was right, in even the smallest way possible (e.g. "Well, yes, that is a concern, but..."). As such, after MANY years of such things, he's been sidelined.

Unfortunately, he now thinks he can sell access to code that's based on other's work (99% of a grsecurity kernel is NOT his, even if he only distributes a patch to it), ignoring the underlying licensing, and suing anyone who disagrees (and their web host). That's got superiority complex written all over it.

Lee D Silver badge

Ah, finally, the guy shows his true colours.

Suing someone's webhost for assisting in defamation, because said someone provided an interpretation of an open source licence.

This is perfect.

Now, NOBODY will touch grsecurity patches. I mean, who wants to do business with people who do stuff like that?

Good programmer with good ideas, completely destroyed by his attitude, lack of co-operation, "I'm always right" attitude, and now suing people who disagree.

Hopefully, this is the last nail in the coffin of the project and people dealing with this guy.

If you love your email standards, SMTP your feet: 35 years later

Lee D Silver badge

And if it takes 30 years, where do you think we'll be in 2047 when someone STILL hasn't proposed an alternative and started deploying it? In exactly the same position.

I'd rather have 10 years of it being "unheard of", 10 of it being "mixed" and 10 of it being "why aren't you using SMTP2 already?" than 30 years of "Oh, it's so hard to do and nobody will change".

Seriously, I'd quite like to be able to send an email to my bank, lawyer or family without my ISP being able to read it. I don't think that's much to ask.

Lee D Silver badge

A protocol that should have been obsoleted at least 15 years ago.

Seriously, people, SMTP is the last major protocol that seriously needs a redesign from the ground up. From being able to fake return addresses, to no guarantee of end-to-end encryption, to all kinds of third-party DNS-based addons to try to reduce spam and forgery, to ancient file encodings, to even the concept of "bouncebacks", it's all archaic, problematic, and ripe for replacement.

Someone really needs to propose SMTP2, which just fixes this junk, makes everything key-based (so you can't send from a domain unless you have the corresponding key, and not just "well, properly configured places may not accept your email" but actual protocol refusal), provides end-to-end encryption (put public keys in domain DNS for source and destination, sending server negotiates key-pair with end-recipient server and verify it's them that you're talking to using their DNS, then it doesn't matter WHAT mail servers it passes along the way, it can't be modified or snooped on en-route except by authorised systems), properly allows immediate response messages, you can put in explicit functionality for email-forwarding and rewriting if necessary (no reason that can't be done officially, with a full trace history, rather than just trying to tell the world that GMail may send emails on my domain's behalf), allow explicit refusal of email from unknown senders (i.e. they literally have to request permission first, if the user wants that, and are then given an explicit token that lets ONLY them send to you - "Do you want to accept email from hinet.net?" - answer No and there's no way for them to ever bother you again, even if they sell your email address), and turn it into what it should always have been: A transport system, that has no clue what it's transporting, just so long as it gets to the intended recipient, if they want it.

Then all the SPF, DKIM, greylisting, spam filters, postmaster@, bouncebacks, message envelope rewriting, plain-text emails, mass CC:'s, and all the other junk that you have to deal with are consigned to the bin. Don't even get me started on bouncebacks-of-bouncebacks, each with a different format, reason and nothing you can do about any of them. Hell, even a "this email was received by the destination server successfully" binary indicator would be infinitely more use than just guesswork like it is now (just because your ISP mailserver said it would deliver it means nothing, you might get a bounceback an hour or even a day down the line saying that it couldn't talk to the end domain)

Hell, if you made the initial SSL challenges hard enough, you can push spammers out of the market just by the amount of CPU they would have to expend on trying to talk to new users (while established users would already have a negotiated keypair that you could re-use for a period so as to not bog-down genuine servers sending to domains). And your Outlook could literally just store the keypairs of only the people you're interested in talking to, everything else just bounces off the server without you ever seeing it.

SMTP needs to die like Telnet and FTP before it, and like plain HTTP now.

And it's not that hard to put in a HUGE wishlist of things it shouldn't deal with at all, and things that it should, and instantly solve everything from spam emails, to email forgery, to botnet emails, to delivery-silence.

The Telegraph has killed Prince Philip

Lee D Silver badge

Re: The gift for a man who has everything?

Please note: If this is not written on my grave, I have been failed by my family.

Lee D Silver badge

Re: But, but, but

Then what was an article about a non-current news item doing being in the "request release" queue anyway?

Problems like this are solved by processes, not tech. Until someone says "Publish this" and then the guy above him says "Yes, this needs to be published", why should it appear on the front page at all.

If nothing else, one single rogue employee could splat any kind of junk on your front page if they wanted to leave while giving management a message...

Lee D Silver badge

Re: But, but, but

Irony: I bet there's a button that goes between "hold" and "release" on their CMS anyway.

Some doughnut probably just unticked the wrong article.

You'd think it would need some kind of editorial sign-off before it went out but obviously having a two-stage publishing process was obviously too much in the way of holding back the news, eh?

I know if I was an editor, I'd want someone (sub-editors, etc.) to have to sign off and approve everything pushed to the web before it appeared publicly. And that would be AFTER the article-writer had clicked the "Publish" button.

Another day, another British Airways systems screwup causes chaos

Lee D Silver badge

Re: I feel sorry

Indeed. Screw-ups are inevitable.

But the customer service side you should ensure always works.

My beef with most companies I have run-ins with is not that they messed up, it's that they can't do customer service. If you think of it as "customer retention" (because you don't need customer service while everything works well and is obvious and they don't need to ask questions), then it takes on a different meaning.

I don't care if the previous table is slow to leave the restaurant, there's nothing you or I can reasonably do about that. But you CAN make sure I'm kept informed, politely told what's happening, provide me with a seat for my elderly grandmother in the meantime, keep coming back and apologising and giving me updates, etc. Even saying "Sorry for the wait, sir, we'll knock a bit off the bill." You think that COSTS you money to do? No. It retains the customer long-term, for a tiny, tiny imperceptible change in the spreadsheet.

I honestly don't care that people screw up. We all do. It's what you DO ABOUT THAT that matters. Not just in terms of fixing it, or making sure it doesn't happen again, but what about me, here, now, the person affected by it?

Too many companies ignore that and then wonder why they get no loyalty, no support from their customers, and don't make as much as other places, or get laughed at when they refer to themselves as a quality brand.

I could go into the Royal Hilton tomorrow, or The Ritz, as a customer and find something wrong. I guarantee it. But they would know how to handle it so that I didn't care. They'd go out of their way to change it for me, most likely. It's not "the customer is always right" it's "that guy over there who's upset about something minor is several hundred / thousand pounds walking out of the door". Until what they are asking is going to cost you anywhere near that, it's really not worth the bad PR.

P.S. this is another reason that Amazon are killing the high street. If I need to return something because it's broken, they often post out another one before I've ever been given the details to send it back to. They don't care why or ask questions beyond "So you're not happy with it? No problem." They just do things, for the customer, without question.

Customer service is something you spend money on. And it's also something that, done badly, costs you even more money. I've literally had an argument with Bensons For Beds, where a pair of beds arrived without DOZENS of the parts necessary to assemble. One was fine and complete (so I knew what I was looking for), the other was missing half the parts, from its sealed box, that was delivered unopened. And it was random bits, from a sealed bag, so not a theft, or a con, literally just mis-packaged.

It took me HOURS and HOURS on the phone, dealing with every nonsense imaginable from "but I can only send the parts to the billing address" (WHAT GOOD IS THAT? I'M BLOODY STANDING AT THE DELIVERY ADDRESS, BELIEVE IT OR NOT!), phoning my (hospital worker) girlfriend at work repeatedly to get her to "verify" what bits were missing (I told them not to, apparently they "needed" the billholder to agree, despite the fact we weren't paying anything! And how does she knows what bits she's missing, she's in work! She yelled at them too, told them to go away and do whatever I ask), all kinds of "sorry, sir, data protection" nonsense (I work in IT, please don't try to explain the DPA to me, especially when you're using it as an excuse to not send me some replacement bits, which had nothing to do with data whatsoever). I must have spoken/yelled to 5 people, over the course of 4 hours, to get a pack of screws, dowels and little plastic bits sent to me after paying hundreds of pounds for beds. The little plastic bag came on the back of a TRUCK, I kid you not. I've never used them since.

Nobody can possibly justify that hassle, when they could have just used their brain and said "Oh, that's not good. No, I'll send someone right over with another bag of components. Oh, you want to collect, sure!" Hell, for good customer service, I've had people hold DIY stores open past closing time JUST FOR ME. That's service. It's no skin off their nose (the store was probably staffed and stocking until the early hours anyway). But it helped me out.

Customer service is the solution to "Oh, bugger, we messed up."

Denying customer service is just saying "Oh, we messed up, gah, who cares?"

My question really is: The system screws up. So you're telling me there's no way for someone to get a list of what flights/passengers SHOULD be going out (surely you have to register these on some kind of roster anyway?) to the guy at the front-line, who - if he has to work from paper photocopies that have been faxed over - should be able to make some progress, no? I know a lot of airport stuff is online nowadays, but you're telling me you can't get a redundant system such that each flight worth TENS OF THOUSANDS can operate, even if the poor frontliners have to think on their feet and work over a phone line rather than the computer?

Customer service is an expense. Why people think it's not worth AT LEAST as much as sales, I can't fathom. Sales people are approaching randoms who might never want to use your company. Customer service is about people who are ALREADY using your company and will likely continue to if you do it well. Just because there's not a box on a spreadsheet for "Money saved because we were nice to people and they continued to use us", doesn't mean it shouldn't be accounted for.

Sputtering bit-blasters! IBM's just claimed densest tape ever record

Lee D Silver badge

Re: Long live tape !

Tape is on the way out.

The more sensitive it gets, i.e. the more data it holds, the harder it is to maintain properly. Because it's a mechanical, moving-part, friction-based item, it can't hold up against constant use, and the more you cram on it, the worse it gets.

Off-line backups and archives are also not exclusively the domain of tape. You could easily disconnect and power off other backup devices too, and they will retain data without power for decades. Hell, nowadays, they are talking about persistent RAM that can do the same while still working at RAM speeds.

Tape, though, will always suffer from problems with regards replacement equipment. Though you might have the tape in ten years time, the cost of the drive to read it becomes prohibitive quickly. Given that it's supposed to be your insurance against disaster, having to source another compatible tape drive rapidly, installing the software, restoring from the tape, etc. can take DAYS. Other storage devices are inherently easier to read from, almost being entirely self-contained units, so the need for additional, specialist, mechanical equipment isn't there and you can restore from them in HOURS.

I don't see a future for tape at all. We are already at multi-terabyte SSD. There's no reason that some electronic memory (be it memristors, SSD, Flash or a variety of other technologies, even traditional hard drives) won't take over from tape entirely. Same amount of data, contained in the same space as a tape, no additional "reader" required, data retention into the decades without specialised handling, built-in error correction if you were making archive-quality stuff, if you go solid-state it's impervious to shock, temperature variation, etc. and you could even make it waterproof (handy in a fire scenario, for instance).

Calibrating little slivers of tape in a dusty atmosphere, across a specialised mechanical head and then spinning the tape at high speed, in a little plastic box that you expect people to carry with them without exposing it to the outside air, that's a fragile technology.

As it is, I've worked in several places over the last few decades where tape is at best a second-class citizen, playing only a minor role compared to networked storage, offline traditional hard drives, replication, etc. Though some of that is vulnerable to your theoretical network attack, there's no reason that it can't be disconnected, snapshotted, restricted access (i.e. push backups rather than pull), etc. to remove that threat.

I've been in IT for nearly 20 years. In that time - excluding test restores - I have never once been required to restore from tape, mainly because I specify lots of "cheap, fast, let's not put all our eggs in one basket, if this doesn't work we DO have other backups, but this is quick" backup storage. Sure, a USB drive stuck on a server on its own is not "a backup system" (BTW: I'm not claiming it's a good idea!). But you'll be glad of it when you only want the one file that was deleted last week and not have to go to your tape catalog to retrieve it. I've recovered data from short-term backups like NAS and connected drives, DFS mirrors, remote replicas etc. infinitely more than I ever have from tape.

I'm sure in large datacentres, etc. the regime is different but whereas every small business used to have a server with a tape drive in it (often costing almost as much as the server itself), nowadays everything from cloud-backup to network storage to VM replication to a redundant site to just plain "Lots of copies of everything everywhere on all kinds of devices" has taken over. I can easily carry a small NAS home with several copies of my entire workplace's VM's and data, for example. Encrypted, full-disk-speed, historical snapshots, network-accessible in an emergency, hell, I could even turn on the iSCSI option and run all the VM's direct from the device in a pinch.

Tape doesn't really have much of a future except in specialist scenarios. Those places are already into the hundreds of thousands with library robots and so on. But even they won't stay there forever.

I know that if I was suddenly made a billionaire, and could set up a company the way I wanted, tape wouldn't figure heavily. Lots of copies. Lots of snapshots. Lots of devices. Lots of locations. Lots of technologies. Redundancy in EVERYTHING. Tape would only figure as one of those as an equal partner to the others at best, for such technological redundancy, not because it offers any particular advantages. As far as advantages goes, it would actually be the bottom of the pile.

(P.S. I have never lost a byte. Not one. I specialising in recovering schools that have experienced previous disasters and sanitising their systems).

Ofcom lifts sword, eyes up BT's duct and pole rental costs

Lee D Silver badge

Re: Broadband Only Lines

A&A's usage limits are ridiculously low, however.

Lee D Silver badge

I'd rather not have my site-to-site connection drop because of a bit of fog or rain, if at all possible, it's a not-insignificant distance to cross, over the tops of residential houses and trees.

Ethernet lines give guaranteed SLA.

However, it motivated BTO to move and I now know that I have a backup plan I can use, if I'm prepared to sacrifice some of the SLA for the lower-cost solution.

I guess they thought that the otherwise-lost months of leased-line costs was worth it, even if they have to put the cable in early, compared to me finding out how much better "no monthly rental, and can sit in tandem with the Ethernet line so I can delay THEM another 6 months and hence they lose half-a-year of rentals anyway" is.

Lee D Silver badge

Oh how relevant.

Ethernet line install with Virgin ordered in Februrary.

They had to use BTOpenreach ducts because that's all that's in the village already and it would cost the earth to dig up and lay a new line.

But the duct has been "silted" / "blocked" etc. ever since then (until today, when I escalated my fuss-level to "I have a point-to-point microwave engineer standing on-site, who can beat your price and speed, don't force me to make a snap decision"). Six months. And as of last week they were still saying a 6 week waiting periods to hire the hardware to clear it (strangely that went out the window when I made my fuss and it's now "being cleared today", apparently).

I could have got on my hands and knees with a stick and a bottle of Fairy Liquid and cleared it quicker than they could, and with zero chance of damaging the other stuff in there (unlike the huge machinary they want to hire). I wouldn't mind but it is literally the final stretch of the cable run, and BTO's involvement have turned it into a farce of epic proportions AGAIN. That's why when I specified the order, I explicitly asked for BTO involvement to be non-existent or minimal at worst.

GPS III satellites and ground station projects get even later as costs gently spiral

Lee D Silver badge

Re: Do you have any idea how GPS works?

As a mathematician, I would have to correct and say that trilateration is done by the measurement of distances, triangulation by the measurement of angles (there's a clue in each word!).

Though you are correct that GPS is therefore trilateration, it has nothing to do with how many dimensions you use.

Lee D Silver badge

Re: Do you have any idea how GPS works?

Indeed, I also have to constantly correct a very prevalant myth that somehow GPS receivers "transmit your location" to the satellites involved.

Er... no. It's a passive system. Though there is some emergency transmission systems piggybacked on it, you won't use that unless you're piloting a large cruise ship. Your TomTom doesn't go telling the GPS sats "WHERE AM I?". The sats are saying "It's this time here at Sat 1, it's this time here at Sat 2, it's this time here at Sat 3" and your little box listens and then does some clever sums to work out - depending on the time differences of those satellites - where it must be on the planet (it's called triangulation, people...)

AI quickly cooks malware that AV software can't spot

Lee D Silver badge

Re: What's the answer?

It's called Software Restrictions.

It's been in Windows since 2003-ish?

It wouldn't work on home machines. People just accept warnings over unsigned drivers, etc. "because the instructions said so".

Lee D Silver badge

Exactly what I've been saying for years.

And the problem is that AV is nothing more than pattern recognition (at best! Most of the time it's nothing more than byte-matching!), and all you need to do is find a pattern that it doesn't recognise but that does what you want.

I always laugh when people talk about antiviruses as something that works like an innoculation - hunting down viruses and removing them, when in reality it's more like a bouncer on a nightclub door with strict instructions to only let named people in. And it just asks people their name, if they are on the list, they are allowed in. No verification. No ID. Not even clever enough to spot similar-but-different names to those on the list, etc.

The days of polymorphic viruses showed us this, with encryption etc. there's no reason to suggest that AV can ever keep up whatsoever. The only secure method is to run whitelist - literally only allow THESE PROGRAMS on the network, everything else can go fish - and nobody does.

Believe it or not, most of AV is reverse-engineering. Someone has to sit with a VM, work out how the virus operates, what parts of it change, etc. which is how they come up with those (useless) reports of what registry entries it touches, etc. - they run it and record what they see changing, not what it's capable of changing. Only in extreme circumstances do they bother to delve into it deeper and see how it actually works (e.g. the very-public ransomware).

Because it's the work of a moment to make a program that makes a copy of itself, encrypted with a different public key, and using an off-the-shelf library to decrypt itself on run, which makes the AV companies either do some serious reverse-engineering or mark that library code as the virus. This is why AV tries to unpack UPX executables, etc. because it "knows" about them and wants to see what's actually being run, but in truth their signatures can never take account of all possible variations, with all possible schemes of obfuscation.

Try it on virustotal.com. You can make a malicious program that passes every AV vendor's software in about 20 minutes, all you need is a C compiler, a bit of programming knowledge, and something like that website to test it against. Automating the process via genetic-algorithms (which is what this sounds like, not AI), random variation, or even just choosing one of a set number of ways of performing each base action the program wants to perform, and you can walk past any AV and still take over the machine. Hell, compiling it with a different version of the compiler, or compiler options, will usually change it so much that AV won't recognise it.

And "heuristics"? Yeah, you know what that word means, right? A set of rules to check against. Does it contain the "Format Drive C:" command, does it try to load the function at the fourth ordinal of this system DLL? That's an heuristic. And you can defeat such things very easily with a tiny bit of obfuscation.

Linus Torvalds pens vintage 'f*cking' rant at kernel dev's 'utter BS'

Lee D Silver badge

The tone of the article isn't at all judgemental, Reg.

The LKML is far from a workplace. It's a public forum.

Linus isn't employed, as such, so he's not working and not in a workplace.

And idiocy like this attracts comments like that even in my workplace. Sure, they won't appear on any HR complaint because you make sure they are issued to the right people - like he did here as the response was precisely "fair enough"!

How to cook the article to make Linus the villain again, because he swears a bit. I'm much more concerned about a president who thinks it's appropriate to tweet about nuclear proliferation, tick off China, threaten his staff with the sack etc. than someone saying "This is rubbish, change it".

This BUG() - the article doesn't say it - just kills your machine stone-dead with no way to continue. Sure, it's in debug code, but you DO NOT WANT your machine to just die if it hits a problem. You want at least a way to bail out, an error, and a way to get back to a debugger and test again rather then "Oh well, I have almost no information on what happened, I'll just reboot and hope it never happens again despite the fact I'm supposed to be doing these people a favour and testing their code for them".

And it's picked up by an automated bot, in a commit whose description is "add the option of fortified string.h functions". Things shouldn't bring an entire machine to a grinding half because someone added an option and didn't test it properly (and, reading between the lines, decided not to error-handle, but just to "warn" in the log, then BUG() which kills the machine).

This type of thing might be acceptable in an internal project while testing, it shouldn't be pushed to a kernel where others are trying to get work done (even if that work is debugging that exact problem!).

Profits plunge 40% as BT coughs up £225m to avoid court battle

Lee D Silver badge

Given that I'm currently having a MASSIVE row where BTOpenreach won't supply an Ethernet line to me, because I've bought it through Virgin, because BTO previously strung my workplace along for THREE YEARS without doing a damned thing about the line.

Originally, they delayed, until Virgin stepped up and put the line in in three months. Then suddenly I had BTO people turning up unannounced on-site. Before finally telling me that "there's no room at the exchange".

This time round, we had no choice but to use BTO ducting as nothing else goes where we need it, and BTO have again dragged their feet for six bloody months doing nothing, I suspect purely because it's a Virgin line.

I'm on the verge of complaint to Ofcom because of it, because BTO - in six months - couldn't check if the duct was clear. Let alone put anything in it. Let alone provide a service. Let alone maintain that service.

When they can't do that for lines costings 10's of thousands a year, what the hell do they do for the little guy?

(P.S. the ducting is all in place... apparently it's "silted". And it needs a special machine. And then another special machine. And each machine takes 6 weeks to order. Strange that they didn't order it six months ago when their guy said the duct was clear, isn't it?)

I specified for this order - and I will specify for all future orders - that BTO's involvement needs to be kept to a minimum, or none at all. Because they are a complete anti-competitive shower of shite that cares nothing about actually providing connections (and we're paying for the damn installation charge!).

Uneasy rest the buttocks on the iron throne. Profits plunge 14% at Sky UK and Ireland

Lee D Silver badge

Re: Sports

I think it's just a whole lot cheaper to either be a) a sports fan who plays sports rather than watches it or b) not a sports fan.

I'm the latter, but even if you could have tons of good content SPECIFICALLY for my areas of interest, let's say IT channels for an IT geek, or astronomy channels for a telescope nut, or movie channels for a film buff, or whatever - I think I'd be really hard pushed to justify £18 a month (at minimum, as pointed out, it gets ridiculous fast) for what might be something you only watch for part of the time, in part of the year, for only part of the events. And that's on top of the "I just want to watch something" subscription showing general content, etc.

I'm not at all sure how people justify it any more. I have a basic subscription, pay no extras, and anything I want I purchase on online services based on JUST the pieces I want.

Are people really paying these amounts of money? No wonder all the footballers are rich.

systemd'oh! DNS lib underscore bug bites everyone's favorite init tool, blanks Netflix

Lee D Silver badge

Re: PoetteringOS

Have an upvote.

Lee D Silver badge

Because it's not systemd, it's PoetteringOS.

Rather than have a clearly defined system that relies on others, it chooses to just replace everything from login authentication to DNS lookup with broken implementations that can't handle underscores, or usernames that start with a digit (Hey, just "don't do that"!), and then gives away root or stops the DNS resolution entirely when there's a problem because it lacks any kind of designed failure path despite being a system critical service.

You do things the systemd way or not at all, don't you understand? I mean what kind of loser is going to run a critical Red Hat server that can't afford to give away root access or have its DNS resolution stop for no easily-discernible reason? God, anyone would think it was a server OS backed by a major company specialising in selling server OS, certifications on best practices, and commercial services.

This is feature creep of the HIGHEST ORDER, from "I'll fix init dependencies" to "what do you mean you don't want every DNS lookup going through root-owned code via the init processes?"

SystemD evangelists, please just sit down and think for a moment. Put the prejudices and your personal experience aside and just think. Why do you need a "systemd" DNS resolver? You don't. You can have it start up the resolver of choice of the user and use that instead. If it can't manage that, and get the order right so that when it needs to map network drives, etc. the DNS resolver is ready, then what happened to systemd's original purpose?

He's reinventing the wheel, again, badly, to solve a problem that shouldn't exist if his software did what was promised in the first place. "When things are hard to do using existing and mature software, write your own things to replace them, badly, just enough to do what you needed to do and then sod everyone else, Jack". It's the epitome of childish coding, and yet we still tolerate it.

Cyber arm of UK spy agency left without PGP for four months

Lee D Silver badge

Surely, if we have people smart enough to analyse the source code and tell us whether its safe, we could just have written that software ourselves, no?

Repairable-by-design Fairphone runs out of spare parts

Lee D Silver badge

If you made things properly modular, you'd be able to get a module for the new equivalent component and some convertor that would make it work.

ARM chips are ridiculously backwards-compatible (even if you had to tie to it an onboard RAM module too), you could make GPS modules just talk NMEA over the wire, batteries haven't changed that much that you couldn't at least supply and equivalent or smaller battery module (even if it meant also changing the "charger" module).

The problem is that you've just made... a phone. That was obsolete in 4 years. And costs more than a normal phone. Quite what you've gained, I have no idea. Does the fancy "green" ethic hinder getting equivalent replacement parts by any chance, or ramp up prices? Yeah, that's why people don't do it.

I wouldn't pay THAT much more for a modular phone, because at those prices the whole phone becomes "modular". Throw it away and buy another of the same type, or just buy two to start with.

But I cannot see a reason that you couldn't bundle everything in a fixed-size package, talking a standard I2C, and then just literally clip 2/3/4 GPS modules into the phone and have it talk "your" protocol over a shared bus. The only thing that differs is the battery but - again - if you want it modular and replaceable, made the battery module be "charges from 5v, provides 3.3v" and put regulators in the module so it doesn't matter what battery you use.

It would be slightly chunkier than a new phone. Modules would replaceable AND upgradeable. You'd be able to lock down cheap knock-off modules if you wanted to. You'd be able to move to an entirely new battery tech, GLONASS/Galileo chips, etc. with just a module change and (maybe) a software update.

But if it's just going to be another throwaway phone in 4 years, I'm not sure why you'd bother at all to have any kind of niche phone.

Burglary in mind? Easy, just pwn the home alarm

Lee D Silver badge

Re: This is California. In July.

Have any of you people ever tested having a stranger (that the dog doesn't know) enter your house while you're out, and bringing a packet of dog biscuits?

For sure, I doubt most dogs understand the difference between a stranger and a burglar, especially if you've spent their lifetime pulling them back from sniffing visitors, telling them off for barking, locking them away from strangers, etc. And they only need to be distracted enough for someone to tie their lead to tie and some sofa leg out of their way. Hey, I bet if someone approached you on the street while you were taking them out for a walk, you'd let them mollycoddle the dog so long as they were inquiring about the breed, etc. Bang, the dog knows who that person is and "owner" approves.

Ask a random animal shelter quite how long it takes most dogs to realise that you're "friendly enough" because you have some food, unless the animal is outright dangerous to everyone (owners included). Have none of you ever hired a dog-sitter to feed them while you're on holiday, etc? The majority of animals adjust extremely quickly and are easily led into "social hacks".

Again, all the fancy "it would never happen to me" ideas foiled within seconds by someone with a bit of balls (they're burgling anyway, they have that) and a doggie treat in their top-pocket (which provides a distraction / escape route in case a dog suddenly appears that they didn't know about).

I'd posit that any professional burglar would be more likely to have a dog biscuit on them than a crowbar. Crowbars attract attention, are hard to hide, get you nicked even if you haven't broken in. A dog biscuit quells attention, might save your arse, and you can't get nicked for.

Unlike some, I have researched. Police have zero interest in CCTV footage unless it's absolute full-on HD faces, which is unusual with any burglar who's done it more than once. I used to spend portions of my career obtaining it for them. Number of convictions: One. Of a teacher that restrained a child kicking the shit out of his classmate, the parents did the teacher for assault and cost him his career. They hate CCTV. It takes them hours to retrieve, longer to analyse, often ends up with nothing (you don't burgle your own neighbourhood where the cops all know you by sight) and rarely can be used for prosecution.

Entry into any premises is also incredibly easy. It's being brave enough to do it. Door locks are not unbreakable (everything from lock-picks to bump keys, but to be honest, just a large screwdriver and knowing how to use it will break most places) and if they are, you just don't use the door. Most of the footage I retrieved was for people who took less than 10 seconds to enter a property (the exception is kids, who generally take a lot longer and are happy to stand there for 10 minutes if they see even the slightest progress).

Unless you live in a flat in a high-rise with no other feasible method of entry, the door is only one of a million options. Two different burglaries in my area in the past year, both times by jumping the garden fence (takes seconds, almost no risk if you look around / pretend you're delivering a parcel until you know nobody is looking), both times by going round the back, both times by wrenching open a rear window in seconds. One of them, there were people in both neighbouring houses all day and NOBODY heard a thing while it happened and didn't know until the homeowners returned and raised the alarm.

Your house insurance just states that it has to be forced entry for a reason. They know you CANNOT secure anywhere. They just want you to not have left the doors wide open. They also know that almost all burglaries involve forced entry. I bet all those people thought they had an unbreakable lock too, until it's lying on the floor still attached to the PVC patio door.

Same with cars, sure you can radio-jack some now but most thefts wouldn't bother. They just destroy the doors, because who cares? It's not their car. The industry standard is about 1 minute to enter a car without smashing a window, and then it's classed as "secure". Your back window, patio door or even brick wall similarly wouldn't take a minute to break through if someone wanted to even if they don't want the sound of breaking glass. Hell, I've seen entire double-walls taken down in less time, and thinking you've secured your house because the door is impenetrable just makes me look at the fragile glass window right next to it.

Trying to STOP the crime is stupid. Not to mention dangerous. And expensive. And pointless. What you need to do is detect the crime. You spot the bloke coming up the drive on a camera. You have the doorbell ring your smartphone in work. You have the dogs bark at something if you're in bed. You can't STOP him from there, if he has even a minute alone. But you might be quick enough to catch him in the act, by calling the police or in-person.

You know the police made it to my house in 1m30s when a neighbour reported an intruder? It was me, but they didn't know that. That's what they prioritise, because that's how you catch them and prosecute them. It takes hours to even do fingerprints, etc. and most of the time they don't have the time to do that either. Nobody's been caught for the two burglaries mentioned above, or most of the forced entries I witnessed when it was part of my job.

What matters is not "stopping" them, you can't. You can hinder them at best. And hope that you are aware early, so that the hindrances put them off and/or prove to be their downfall and they get caught in the act. People have been burgled before now without even waking up. It's not uncommon at all.

Like all things, the weakest link in the chain is where attacks occur. If you double-bolt, British standard, 5-bar lock with London bar, chain and bolt? Yeah, they just smash a window. Or lever the frame. Or jump round the back.

It's about time and early detection, not spending a thousand pounds making a door secure when it's one bit of glass away from theft anyway. Most police forces barely even respond to reports of an already-committed burglary. They send round CSO's or even just civilians who work for them to gather a statement, and that's it. They can take HOURS to arrive, and if you think they always do forensics, you're wrong. Unless you can report "in progress" (which is a valid 999 call, by the way, reporting a burglary that's already happened isn't considered so), they can't do much at all.

And all the big strong doors in the world don't tell you an attack is in progress if you're at work and have no idea until you get back at 6pm.

Virgin Media broadband latency headaches still not fixed six months on

Lee D Silver badge

Re: Wheres offcom?

Why the hell are you spending £150 a month on an Internet connection? That's some stupendous leisure fund, there. Downgrade, buy a decent router, stick the Virgin stuff in modem mode, and make the decent router QoS prioritise your gaming traffic over the kid's YouTube.

Everyone's always amazed on my game servers because I have lower ping than them, even when the server is in their country and not mine. It's got nothing to do with speed (I'm only on the "basic" 75Mb package that they forcibly upgraded me to from the "basic" 30Mb, that they forcibly upgraded me to from the "basic" 10Mb), but making better use of the connection.

If you're stressing a £150 a month fibre connection, you really should invest in a better router (one month's subscription at that price!) that can take all that load away from a crappy piece of ISP-supplied junk and just turn their hub into a glorified media converter instead.