* Posts by Lee D

4262 publicly visible posts • joined 14 Feb 2013

ISPs must ensure half of punters get advertised max speeds

Lee D Silver badge

Re: Money talks

It's open to scamming, though.

You go away for a week, you stick a huge interfering electromagnet on the line.

The sync speed drops, they charge you nothing for the week, despite having to pay for all the infrastructure and capacity *IF* you'd suddenly decided to sync at full speed.

You come back off holiday, take the magnet off. You've saved yourself a tenner, they can't detect it, but they had to provide all the backend for it.

Same for each night, of throughout the day based on your desired usage.

Suddenly, they are required to give you 100Mbps backend 24/7 but you're paying precisely only for the a fraction of that, only in peak period, and nothing else.

You could save a lot of money, that wouldn't be visible as you turning it off, not using it, etc. for which they'd normally still be billing you, and it wouldn't be their fault.

Either cost it by megabyte with a "best efforts" line speed (the faster your line speed, the more money they make quicker, so it's in their interest to give you the fastest possible and give priority to HEAVY users!!), or cost it flat-rate per month for a given minimum line-speed.

Anything else is open to abuse, and it's already hard enough to recoup the pricing of telephone and broadband lines to rural locations, etc.

Lee D Silver badge

It's a good idea.

There's no point having a specification if only a tiny portion of users ever achieve it.

Ofcom should have enforced this DECADES ago.

That said, pretty much I get the speed I'm promised:

Package - 75 Mbps

Min - 21.1 Mbps

Max - 73.2 Mbps

Avg - 55.7 Mbps

But that's probably because I have a SamKnows broadband monitor sitting on my router (isolated from the network, so all it can do it test outside speed, but it seems to make the ISP reaction times a bit quicker... :-) )

You only need 60 bytes to hose Linux's rpcbind

Lee D Silver badge

Not being funny:

What Linux distro does not start from the equivalent of:

ACCEPT RELATED, ESTABLISHED

ACCEPT ssh <-- possibly!

DENY all

as default rule on iptables?

Even ufw has defaults that basically correspond to the same.

Who is installing rpcbind, opening it to the world in the configuration and then again in the firewall? Because, pretty much, the package maintainer ought to be shot if they are adding firewall rules, and the firewall package people who ought to be shot if they're allowing rpcbind to the world by default.

Unpaid tech contractor: 'I have to support my family. I have no money for medicines'

Lee D Silver badge

Re: How it made money is therefore a mystery...

And when they have a bill they can't pay, they just need to sit on your money for another week to pay it.

Sounds suspiciously true.

Lee D Silver badge

Re: I lack sympathy, somewhat.

So it's either they can't handle a single week without income and thus risk debt and maybe even bankruptcy (or literally not being able to go into work the next day!), or they have to accept lower monthly wages spread over a year with longer guarantees of employment in a job they don't enjoy?

Isn't that simple economics? I cannot walk out the door without it immediately impacting my next employment, but equally my employer can't kick me out without justification and consequences. Self-employment is exactly the opposite of that. I didn't say that either situation is nice, but they VOLUNTARILY opted-out of the guarantees because they don't want to work the lower-paid jobs. Per-hour they earn more, but they have VOLUNTARILY gambled that they won't break their leg, lose their car, get a sudden bill, or be paid late. That's NOT a sensible position for someone who is being "forced" to do that in order to earn a living, and especially not if you have no backup plan.

If you have no money, can't get a job, and the options are "go self-employed" or "take lower money", then you have chosen to go self-employed at risk to yourself and your family. Sure, you can say "but we couldn't survive on the lower money" but - guess what - it means you CAN'T SURVIVE on the higher money either, should ANYTHING go wrong. That gamble was a conscious choice, the overall situation is still no better on average.

Not only that, getting loans, mortgages, credit or even jobseeker's allowance is a lot harder if you're in -

or have come from - self-employment. There's a reason for that. Those places know your income is much more likely to be unpredictable. I was once refused a mortgage when regularly self-employed by a set number of long-term clients while earning TWICE what I was earning when properly employed (when they did grant me a mortgage without batting an eyelid).

Yes, I'm British. And I have been in this exact position you describe. That situation is a no-win, it has nothing to do with self-employment.

And I have consciously chosen - after a career in self-employment straight out of uni - to go to normal employment for many good reasons. And one of those is precisely this: When faced with the gamble, you can't guarantee it will pay off, even if the alternative situation looks worse than you can afford to take.

Hey, you have no money? I'll pay you £500 a week. Or £1000 a week but only if you spin heads on a coin - spin tails and you have to work that week for free. The offers are mathematically equivalent. If you "need" £700 a week to cover costs, can you ever really win on either option? No. One run of bad luck and you're stuffed and won't recover.

And especially if you have no savings, you cannot afford to take the gamble. Even if it's "your only option" and "forced" onto you.

Lee D Silver badge

I lack sympathy, somewhat.

Either you have a contract with that company that they'll pay within a certain time, and you should be working to the maximum of that window. Or threatening them with collection if they don't pay on time as per the contract.

Or you have a contract that doesn't say a word about payment schedules, which means you have almost no fallback without going to a court and proving they were unreasonable (which will cost you more than it's worth).

Though they haven't declared bankruptcy, a "commercial dispute" could easily mean their suppliers have turned off all their IT because they haven't paid, or the bank has shut their account for similar reasons. Just because they haven't declared bankruptcy YET doesn't mean they aren't in serious trouble. Especially if they can't tell you what's happening.

But, this is the risk of self-employment, which is more an opt-out from all kinds of employee and income protections (which still don't save you if you the company goes bankrupt, by the way!). There's a reason you "get paid more" - because you need a reserve of cash, have to fight your own battles, etc. which employed people get paid for them.

Yes, I've been self-employed. For 10+ years. Made a good living out of it, and I gave it up not for any reason relating to not being able to live off it, or being screwed over (I never used an umbrella company, though, but also never had a non-paying client - because a non-paying client isn't a client, they are a debtor). But if a client doesn't pay, you stop working for them and move on. If your umbrella company doesn't pay, you do the same. Pretty much, the excuse does not matter.

In fact, being self-employed, are you not perfectly able to approach your clients direct and ask them to employ you through any other umbrella or even directly? I'm not guaranteeing they'd even consider it, but if you're any good, they'll be glad to hear it surely? And if not, that's the price you pay for freedom of employment like that.

When you choose to opt out of being tied to particular company, client, job, task or obligation that you don't like, this is your price to pay for that flexibility and freedom - though nobody deserves to have their money withheld.

However if you want that freedom and then go back and tie yourself into a company to get the amount of work you need, surely that's the worst of both worlds - absolute reliance on a company that has no obligation to push any work your way? And to not have sufficient reserves to tide you over that is unrelated to self-employment at all - it just means you've not saved for ANY eventuality.

Waiter? There's a mouse in my motherboard and this server is greasy!

Lee D Silver badge

Train the rodents to attack the infrastructure of your enemies.

Nobody would ever suspect...

"A rat brought down Google last night" is much less attributable to malice than cutting a submarine cable in the middle of a war.

Lee D Silver badge

Re: I'm not surprised in the slightest

My dad has always worked for breweries, delivering beer around London, since the days of Watney's.

You ask him before you go to a gastro-pub for a meal, because he gets to see their cellars, where they often store all their food. You'd be amazed at what you find down there.

I mean, beer, you're probably alright with (it's in metal kegs, and gets pressurised through waterproof pipes, so the chances of contamination are low from a fresh keg), but whether or not the burger is cooked fresh in front of you or not matters not if it's sitting in moudly, damp, rodent-infested conditions.

A flash-cooking of, say, a pre-cooked burger like that can't kill everything it picks up, it just makes it appear edible.

Oh lordy, WD just SCHOOLED Seagate in running a disk drive biz

Lee D Silver badge

Re: I'll never buy Seagate again

It's all anecdotal, and I've been having the same conversation for decades (remember Maxtor / IBM etc.?)

But when I took over my latest workplace they had Seagate in all their servers and all their NAS (some of which were brand-new).

Within a year, I'd had so many failures that I was sick of it and replaced them all with WD. I'd literally never done more rebuilding of RAID arrays in any other job until I took over those Seagate devices (and, yes, they were "enterprise" versions and not just cheap consumer junk). Even the Seagate replacements (I literally order identical model numbers when the server-drives fail, to get an exact match) died at just the same kind of rates.

Meanwhile the clients were all WD Blue and never had a single problem.

Since I replaced them all, I haven't had a single failure in 3 years, and I estimate there are probably 200-250 hard drives on site for various jobs (from CCTV to NAS to RAID to workstation etc.).

I always avoided the arguments of old (back in the IDE / 20Mb drive days) of which manufacturer was better as it was mostly subjective and we only ever had a couple of hard drives anyway. But I have to say that this place has completely destroyed my trust in Seagate drives.

I actually get better reliability out of the cheapest-of-cheapio SSDs that are used 24 hours a day than I did out of enterprise Seagate hard drives.

And, just for reference, I have Samsung / Crucial SSDs in dozens of machines, WD Blue in hundreds of machines, WD Reds in their dozens, plus dozens of IBM-supplied (HGST really?) drives for the "serious kit" on the server / storage end.

Having a monopoly on x86 chips and charging eyewatering prices really does pay off – Intel CEO

Lee D Silver badge

Intel's had plenty of competitors over the years.

Remember Cyrix? Via? Now AMD are still around but they don't own anything near a decent portion of the market. Not because they couldn't, but because they haven't. AMD, to me, has always seemed one generation down. Even my completely non-techy bosses specify "proper Intel" (meaning not mobile or low-end i3 chips, and not AMD) because of their years of dealing with things even if they are removed from the end hardware. I can't say that I'll be the IT manager to disagree and change their spec (even though I have the power to do so).

In fact, Intel's biggest threat now is ARM. Their only ally against ARM is really Microsoft. While Windows doesn't "work the same" on ARM, Intel can maintain their position. But if Windows falls out of favour, or if the PC truly does start to die or being just a web device, Intel could be in real trouble very quickly.

I bought an RPi 3 the other day. Have you seen the speed of that thing, for a tiny 5v, 2A = 10W device? Your phone is ARM, even if it's Apple. Your tablet is almost certainly ARM if you paid less than a grand for it.

It's not a huge leap to imagine that in a decade or so, we'll be using Office 365 (harder to kill off) on mobile devices and non-Windows machines (Chromebooks, etc.) and the x86 will be the reserve of, say, gamers.

Straight outta Shandong cluster noobs set new LINPACK world record

Lee D Silver badge

Re: ??

Gosh, I wonder how they can do better next year?

TVs are now tablet computers without a touchscreen

Lee D Silver badge

Re: Chromecast

Any number of cheap knock-off Chromecast-like things will also do it.

But privacy isn't really an issue if - like mine - the Chromecast is only powered when the HDMI is selected, and is properly - like any client should be - restricted in what it can do (i.e. it can't see any of my local network). And, pretty much, I use it for showing Google Play movies on the screen.

If you're that paranoid, just use DLNA.

Needs broadband is ridiculous in this day and age. We're talking about streaming video, if you don't have broadband, your choices are severely limited anyhow.

Needs additional hardware - yes. That you can replace for £20 a throw rather than £2000.

For reference, I have a Chromecast, a VM box, a Blu-Ray player which can play DLNA, a Android-based satellite box that can do DVB-S for Freesat / Italian satellite. The TV, however, is as dumb as they come with only SCART and HDMI and an RF interface for analogue/Freeview that's not even plugged in.

TVs are display devices. Buying a TV because it runs the app you want or accesses the content you want is stupid, because someday it will stop working like the article. Buy a TV that has a port on it you can put video and audio down, put all your "content" on cheap, replaceable, throwaway boxes that you can upgrade and replace as suits the situation, that don't all need to talk to each other, and that you can add new ones of whenever you like. Even that Android will be out-of-date and unsupported in a couple of years, and then it's just a health hazard sitting on your local network.

Last time I counted, including games consoles, etc. I had about 10 ways to view BBC iPlayer on my TV. Everything from an app on a smartphone pushed over a Samsung proprietary link, to Chromecast from a browser, to the Blu-Ray/Wii having access to it built-in. When one goes "wrong", who cares when you have so many other ways to access, or so many other services to do the same. And my entire setup - with all those boxes and necessary cabling - doesn't come to half what that guy paid for his TV. Probably not even a quarter. And I've had the same setup for nearly 10 years now, and just added to it piecemeal (it is in fact the second Chromecast as the new ones do 5GHz Wifi, which the old ones didn't).

And I bet an Android-based Smart TV is much more privacy-infringing than a ChromeCast, if that's what you're worried about. You have absolutely no clue what that's doing with its data. At least a ChromeCast that you only use for watching ChromeCasted things you have a chance of isolating and seeing what it's doing.

'Grueling' record-breaking VR movie marathon triggers hallucinations

Lee D Silver badge

Re: Thus neatly proving ...

Yeah, not something to put on your CV.

"I hold a world record."

"Really, what in?"

"Hallucinating periodically and nodding off, while sitting on a sofa eating finger-food for 48 hours".

Another ZX Spectrum modern reboot crowdfunder pops up

Lee D Silver badge

Re: Why?

Most new TV's I've seen don't even HAVE Scart any more.

Multiple HDMIs.

And maybe a digital-only RF-in.

Honestly, go look at the back of the display models in John Lewis or wherever. An awful lot of them don't have SCART, analogue or composite at all. And VGA is almost dead too unless you're buying ones made for digital signage.

Also, the composite on Spectrum is a hack anyway. The original Speccy does not output composite without soldering. I think the +2/+3 had R/G/B in some fashion on a DIN plug (which tells you its age!).

Lee D Silver badge

Re: Why?

As someone who owns three Spectrum's at the moment, including one that was re-jigged to include modern composite video via a ULA soldering-hack, new memory boards and new caps, let me just say:

Emulators are perfect. Just pick a good emulator.

Spectaculator on Windows, for instance, I can't find a single thing that it doesn't run - intended and unintended bugs and all. Does sound input from real tape, plays back to real tape while doing all the debugging and snapshotting and Multifacing and emulation/passthrough of everything from MIDI to the Currah MicroSpeech.

So, yes, you can do everything you ever want on emulation, including even TV raster simulation, curved screen, etc.

To be honest, though, RetroPie and a TZX file does just as good a job for any game you've ever heard of (I think it uses fbzx but there are lots of alternative cores for all the systems on it).

I wouldn't buy this, but then I wouldn't buy the Vega either.

And with RetroPie, for £30 on a Raspberry Pi and a handful of Xbox 360 controllers I already had, I can run every game I've ever owned, for every system I've ever owned, from one box which makes no noise heat or wiring mess, from a single menu, and it "just works" once you've done the initial configuration.

If anything, just wiring up the old Speccy's gives me the heebies-jeebies that I'll break them or discover they've stopped working, but they certainly don't add anything. And who has composite on their TV still nowadays? Certainly nobody has RF input anymore, certainly not one they want to faff trying to tune a Speccy into (because although it might output over RF, "modern" TVs that can still tune analogue TV have a hard time spotting the Speccy signal and it often requires a lot of fine-tuning).

Don't even get me started on trying to load from tape. Even on my original Speccy's I tend to just plug the audio cable into a smartphone which outputs the necessary tones from a TZX file in perfect, crisp sound rather than trying to get it back from an old tape deck into an ageing Speccy.

Seagate launches non-flying disk drive for drones

Lee D Silver badge

Would be much easier to just slap in a wireless chip into the drone so you can just clone it to your laptop or even phone, and then you can just carry a wireless-connected drive of your choice rather than partner up with a terrible drive manufacturer.

As it says, 250 flights of an hour each. You aren't going to do all that without being near a computer at some point.

Years ago I bought a Wifi SD card, which has 32Gb of storage and also shares it over a Wifi network of your choice when it's full (e.g. to a phone or to a real network). Amazing technology for something that just works like an SD card to the recording device. I bought it for astrophotography, so I didn't have to touch the camera mounted to the telescope in order to access the images, but I'm sure they could come up with something sensible, much cheaper than a £200 drive, that basically only does what an £80 drive and a USB adaptor does.

And I can get a Samsung 256 GB EVO Plus MicroSDXC for £133. You're not telling me I'd need more than that. That's "only" 50 flights of 4K video by their same estimations.

Stanford Uni's intro to CompSci course adopts JavaScript, bins Java

Lee D Silver badge

Re: Introductory

I'd be concerned if it wasn't for my own computing degree.

At the time, Java was still quite "new" but it was the course language.

As part of the three year degree I had to do a programming course that covered the whole three years.

It literally started at Hello World (fair enough), but at that point I realised that I could do it all without having to be in the lecture at all.

I skipped three years of programming courses by the simple precept of downloading the coursework from the FTP server, knocking something up on the train on the way in, making sure it compiled and run (pretty much, always did once you take account of the missing semicolon or whatever - and I was the only person I knew who logged the dual-boot machines into Linux and ran it in there, the number of people who wrote programs that only worked on one OS was amazing, given it was Java), and then emailing it in.

I don't think once that I struggled to do what was asked, with zero reference to the course material. There was nothing fantastically difficult there, that wasn't covered in literally the only reference material I had - a copy of the O'Reilly book for Java, complete with 1/3rd of the book being nothing but a class / function reference (which is why I bought it, really).

As such, what language you choose to do THAT kind of stuff in, it really doesn't matter.

I still remember sitting in the IT labs as a 1st year, and being consulted by the master students on why their Java minimax implementation for a game of draughts wasn't working. I literally debugged it with one glance, it was that obvious from the code.

I'm not anywhere near an expert programmer, but it was quite worrying that Masters and 3rd year pure-computing students were struggling with that stuff.

Ofcom chisels away at BT Openreach's cold, dead hands

Lee D Silver badge

Re: Stupid

Letting BT's monopoly steal Virgin's fibre-only customers sounds a great plan!

And then, obviously, what they'll do is sink millions into cabling up a couple of streets that weren't served by either company anyway, just to give people faster speeds at prices that they won't recoup the money from in decades (*).

I think you forget that, apart from new builds that pay for it, the only "cabled" areas in the country were put in by a company that went bankrupt and was bought out by Virgin for a pittance. Everything else is BT / Openreach over cables that have been there for 50 years and/or you have to pay quite a lot to install a new line.

And the rest of the "fibre", even on BT, is not really fibre at all. It's VDSL or DOCSIS 3 with a fibre backend. Unless you have a leased line and paid through the nose to install it, you're not getting fibre anyway (I know - I've bought three of them for workplaces, they aren't cheap but they are real fibre).

(* Do the maths - a leased line install to a cabinet costs on the region of £10k for the install alone.

Connecting that cab to the nearest cab/exchange costs the same because it's all wayleave and digging pipes, not the actual thing you lay inside them.

That cabinet will happily serve the street, if you dig the entire streeet up or run phone lines to every house, costing a lot more than £10k.

And you want to pay, what, even £50 a month? How much of that goes to the people who put in the infrastructure rather than the ISP? Less than a quarter? That's going to take them something like 2000-5000 monthly payments alone just to get their install money back, not counting ongoing costs and actually providing the service to you. How many houses in your street? 50? That means either every house for 10 years, guaranteed, or most of the houses for, say, 20 years. JUST TO RECOUP INSTALL COSTS.

There's a reason nobody wants to pay to connect up people, especially in rural areas where you run 10s of km of cable to service a handful of people. It just doesn't scale without massive subsidies)

Mastercard launches card that replaces PIN with fingerprint sensor

Lee D Silver badge

Re: Maybe I'm not as smart as these card tech guys...

"That's not how the card, or mobile phones work"

I'll think you'll find that he means he can get an image of your fingerprint quite easily.

And your phone fingerprint sensor can be fooled by an sufficiently good image of a fingerprint, printed onto certain surfaces. You don't even have to get very technical.

Every smartphone fingerprint sensor (and this card sensor) on the market can be fooled with nothing more than a picture of the fingerprint smudge you left on the card as you last took it out of your wallet. It just depends how many times you want to try it to refine your technique.

Last year, someone pulled the fingerprint of a German politician from a photograph of them raising a wine glass. All the "temperature/heat/light/pulse/etc." sensors in the world can't do much that isn't easily fooled, and the actual "fingerprint ID" process is still - to this day - finding the edges on a high-contrast B&W image of the fingerprint in question as it lays flat on a surface. Whether the sensor is swipe, scan, optical, or whatever.

I have a bunch of Gemalto etc. fingerprint readers in my junk box if you'd like to play. They almost all have open-source software that presents the image as a B&W TIFF from the sensors to something that edge-detects and then hashes / stores the result. How they store it is irrelevant if you can present the same image to the sensor and the sensor then hashes that to the same hash as a real fingerprint would hash. The hardware doesn't do anything fancy, but a bit of image processing and maybe a particular wavelength of light / check for colour variation for pulse (and that's an "advanced" model).

There's a reason they're all in my junk box despite being "state-of-the-art" for banking security at one point or another.

Lee D Silver badge

Re: Just a little question...

Almost all EU banks allow longer PINs.

And, in fact, our cash machines handle their cards just fine and ask for 6-or-more digit PINs.

It's just the UK that's stupid and doesn't ask it's users to set longer ones. The capability is already in all our ATMs and in daily use by thousands of foreigner with 6-8 digit PINs.

Lee D Silver badge

Re: Problem

"or any item you have touched when making a purchase"

Like, say... the shiny, glossy, credit card that they just nicked off you and now need a fingerprint to unlock.

Nick card from wallet.

Bit of sticky tape and a gummi bear.

Hey, presto, card with "full authority" to spend what you like with no cardholder co-operation (or even knowledge) required.

Fingerprints ARE NOT AUTHENTICATION. They are IDENTIFICATION. They say who you are / claim to be. They do not verify that you are actually that person.

Any card company that tries this on me will be informed that I don't have fingers.

Game authors demand missing ZX Spectrum reboot royalties

Lee D Silver badge

Re: Where's my Ferrari, that's what I want to know...

They come to whatever the authors demand.

Even at a penny each, that's one pound per console and they haven't paid that.

But if the authors still say it's 10p or a pound for their game, they either have to pay THAT or cannot distribute.

Theft is not a case of value of the item.

Lee D Silver badge

Re: From the Facebook page...

Corporate law doesn't distinguish between one MD and the next. It's up to the company as an entity to sort it out.

Lying by saying "we had rights" or not is just misdirection.

Either you say "We had problems, we are now working to fix them", or you deny that there ever was a problem.

Pointing and saying "his fault" is - in the eyes of the law - essentially the same as saying: It's OUR fault. That company over here. WE did that. It's all OUR fault.

As I like to distinguish, the REASON may be the previous MD. But that is not an excuse - it does not EXCUSE you from having done it. And, in law, "you" refers to the company, not any singular person.

Lee D Silver badge

Re: From the Facebook page...

"The current management has spent a huge amount of time dealing with nearly 300 rights owners to establish legal ownership of a number of games and we have removed a number of games accordingly. These include the titles claimed by..."

I translate that as "we did in fact sell these people's intellectual property to other people illegally, but we stopped doing that once we bothered to check".

Not a good sign. "We can" by default, because you never bothered to actually check, is not a good position to take in the law.

That said, if there is anything factually inaccurate in The Reg article, please do initiate your complaints and maybe even lawsuit for libel. I'm sure The Reg would add on an editor's update at the bottom if they bothered to ask. Even if it was a sarcastic one.

Lee D Silver badge

Why is Spindizzy so fecking hard?

I can barely keep the thing in a straight line.

Expecting a patch any day now.

Apple's zippy silicon leaves Android rivals choking on dust

Lee D Silver badge

Re: My exact thought

Modern android pre-compiles the app to a closer-to-native format. The Dalvik / Java thing is basically gone, and it's all JIT and ahead-of-time compilation, with on-the-fly profiling and optimisation.

I would put this down to being more about "we only have one phone with fixed hardware, so you can massively optimise all your apps towards that" versus "anything can run Android, your app has to check for everything, so your optimisations will never be perfect on all devices". There's also an Internet speed factor here, too, Super Mario Run and those other apps do a lot of network activity on startup (try it without data and wifi turned off - it just bugs out) that can slow such tests down. And I'm sure I can find a hundred tests that the iPhone "fails" on just the same.

I guess that by the time the S8 gets to the point that I would bother to touch it, I won't even notice anyway. The iPhone will basically just never come down in price.

To be honest, raw performance isn't what I buy smartphones for, though.

I hate pissing contests over raw numbers when, actually, things like "I'd like to plug headphones in", "can I change the battery", "can I change the SIM", "can I buy an approved charger for a non-ridiculous price", "can I expand the onboard storage", "do I *need* an account to make it work", etc. are much bigger questions for a smartphone to my mind.

Sadly, Samsung et al are following the stupid Apple answers for some of those questions even now. I stuck on the S5 Mini - fast enough (and hence, can't really see why I'd need it significantly faster and I do all kinds on my smartphone), stable enough, cheap enough, sensible enough, accessorisable enough (though USB host would have been nice), small enough and big enough, and lasts long enough.

Half-baked security: Hackers can hijack your smart Aga oven 'with a text message'

Lee D Silver badge

And the H in this instance is for Hydrant?

Far out: Dark matter bridges millions of light-years long spotted between galaxies

Lee D Silver badge

Re: Webs!!!

Giant alien spiders are no joke!

Have you never played FTL?

Lee D Silver badge

Re: The assumption that it's matter

No.

It's a hypothesis.

BT's spam blocker IDs accident claims as top nuisance call

Lee D Silver badge

Refuse anything with a CLI (option on most smartphones)

Install the apps that lookup the number as it's ringing so you know if it's got a high chance of being spam or not, they can even auto-refuse the call if you want.

Also, make the default ringtone "silent", and the ringtones of contacts (stick them all in a contact group, say) your normal ringtone.

Lee D Silver badge

People still use BT?

I gave up on landlines just as the broadband era came in. Aside from the fact that up until then, they'd barely been able to get through to my landline as it was running V90 / 56K for most of the day, when the line was free it was never anything I wanted to receive.

Then we all got mobiles and the necessity of the house having a number, rather than the individual, meant that it became useless. And each person also received - for free - CLI and call blocking to their preference rather than neither on a shared line.

Since then, there's a voicemail on my landline (which is unused) which I never check. People have my mobile and my mobile has all the people I want to hear from. If my mobile shows that the call is from anything else, it gets Googled to see if it's relevant, or just left to ring. If it rings twice, it gets blocked.

Anything important will identify itself, send a text, etc. If the text is spam, it gets blocked.

But the landline? PAYING for a service where they anti-spam it? Yeah, 20 years too late. And it's still possible to fake CLI in a trice anyway, and SIP means that everyone can have any regional number whatsoever.

Basically, BT couldn't be bothered to stop profiting from spam for the sake of their users. As such, they lost all my custom. The telecoms company that does get my custom (Virgin), the landline is a freebie that I never use. My mobile phone has quite a lot of blocking stuff on it by default. And in the end, I just don't answer if I'm not sure.

Well done, BT. After 20+ years of dragging your feet on the issue, you've successfully trained us all to just not answer the phone unless someone's in a whitelist anyway. Whether that's contacts, WhatsApp, or Skype, all you did was made yourself obsolete.

TP-Link 3G/Wi-Fi modem spills credentials to an evil text message

Lee D Silver badge

Draytek.

They have very featureful routers, lots of regular updates, ADSL / VDSL / Ethernet and 3G/4G failover on the same device (e.g. 2860 / 2870's). They let you do proper VLAN, QoS, RADIUS, web filter and all kinds of things if you really want to. They have very good wireless. They can mesh nicely with other APs and routers in the same range (centralised management, etc.). They can handle IPv6 (shame most ISP's can't). They rarely do stupid things. They have the backend processing to keep up with anything you throw at them.

They are more expensive, but you get a lot more back.

TP-Link are good and cheap for what they are. Just don't trust that kind of stuff as your front end to the Internet.

*Virgin Superhub 2 in modem mode -> Draytek Vigor 2860Vn+. for reference.

Lee D Silver badge

Re: SMS

Bigger question.

Why is the admin password not hashed, so that it doesn't even know what the password is and hence can't "send" it to anyone anyway? It shouldn't be storing the damn thing in plaintext.

And it certainly shouldn't be capable of emailing out the hash, even. Literally, that's why /etc/shadow is locked down in terms of access and only login utilities can read it. There's no need for it to be texting it out, in the same way there's no need to ever "inform people" of what their password used to be. You just shouldn't be able to do it.

Least privilege principle.

You can't "stop" all the possible exploits, out-of-bounds, poor-sanitisation, etc. tricks.

But you CAN stop those things being able to do anything even vaguely interesting even if they do work.

ICO fines 11 big charities over dirty data donor-squeezing deeds

Lee D Silver badge

Re: Pleas for extra

I would expect any administrative cost to be lost in the noise of the operations of the business. Otherwise someone is doing something very wrong.

Lee D Silver badge

Re: Pleas for extra

Charities spend FAR TOO MUCH on fundraising.

There was one evening around my area where no less than six charities all turned up at the door. Many with large teams of people, in branded vans, in branded clothes, knocking on every house, asking for "donations" (monthly only, we don't want your one-off rubbish) and I had:

- One guy who gave the spiel on the doorstep for 10 minutes, but then I said I would NOT be giving him a piece of paper with my bank details on for him to take away. I asked for the online signup instead, and would have done it at the door with him. He literally walked away, presumably because he wouldn't get his cut.

- One guy who got offended that I looked him up and down, read the logo on his clipboard, said "Not interested" and walked inside, to the point that he yelled at me about the charity through my front door. He was literally seconds away from me opening the door again and telling him to vacate my property in no uncertain terms with a long, loud rant as to why.

- Three reps of the SAME charity knock on the door within a space of 2 hours. I did tell them in no uncertain terms where to go.

- One woman who knocked, rang the doorbell, rapped on the inner door of the porch and the window WITHIN SECONDS OF EACH OTHER. I nearly flattened her as I thought the house was on fire or something.

If you have that amount of money that you can afford to pay people rude enough to do that, presumably on a regular basis in many areas of London simultaneously, then you can stop worrying about my donation and use the admin salary and sales commissions cuts those people are receiving to fund you in my absence.

My girlfriend signed up for one and also got abused by them - junk mail constantly, follow-up calls, emails, etc. Never again, basically.

I do NOT remember this kind of stuff happening when I was a kid. Charity collections were non-hassling, not en-masse, and I was always willing to drop the loose change in the pot. But now they hassle you in the street, follow you down the street yabbing, try to "talk science" with my girlfriend (a geneticist at a famous London hospital) about why should donate to cure genetic diseases at that same hospital and they DO NOT understand that she's not going to donate to her own salary just to give them a commission.

Salesman - and sales targets - ruining everything, again.

Dieting cannibals: At last, a scientist has calculated calories for human body parts

Lee D Silver badge

Curing still needs the flies to be removed.

You could smoke it, but if you have a campfire, you could cook it anyway.

Smoking/curing/cooking a 65kg human is going to take you longer than it takes to go off, if you're on your own with no resources.

Lee D Silver badge

I would posit that if it's just you and a friend on a desert island, that by the time you've killed them, you'd only get a day or two of meals out of them before the body was too rotten / infested to continue.

And in that day or two, you're not going to be able to get through a human-worth of meat. At most you'd get through a leg, I should imagine, judging by the size of a decent sirloin steak.

Cannibalism is not only inefficient, it's dangerous (humans fight back more), counter-productive to the continuation of the species in general (from killing your own to growing distrust among social groups), wasteful even if performed en-masse, and worsens as famine etc. worsen anyway - there's only a small gain from eating your diseased/starved friend, for instance, compared to having two people hunt food.

There are many reasons that it's rare. But biggest of them is that it's a bit pointless.

Customer satisfaction is our highest priority… OK, maybe second-highest… or third...

Lee D Silver badge

Re: "coffee please"

"I'll have a tea."

Lee D Silver badge

Re: Public wifi?

Certainly no auto-connect, saved password (therefore presumably no password and/or publicly advertised password), hence no useful encryption, public wifi in a public place.

Sure, things should be TLS nowadays for anything important and throw warnings if the intermediate certs are wrong, but even so. Even DNS hijacking is possible over the air on encrypted things and who deploys DNSSEC? And the easiest way to provide a fake cert for a site? Use a fake DNS record to pretend to be "authoritative" for that domain.

Wifi off, no auto-connect (except to your own, secured, trusted networks, I'd say).

To be honest, what kind of prat is trying to pay for a coffee with a phone app? And paying in cash is just as bad in this day and age. NFC payments or a card, people. Stop faffing around with proprietary tech that reinvents a wheel that's been around for over a decade now.

I literally cannot remember the last time I paid for anything in cash. I have precisely £0 and 0p on my person now. Even the pound-coin in the car for the shopping trolley is a fake one.

I have never used a proprietary app in a shop (I have PayPal and Android Pay on my phone for office-biscuit-fund-even-out matters, neither can authorise any payment whatsoever as NFC is off and they both need my password to work).

I haven't even used tap-payments yet.

I just use a card, like I have for the last 20 years.

Ex-IBMer sues Google for $10bn – after his web ad for 'divine honey cancer cure' was pulled

Lee D Silver badge

Re: They walk amongst us

Should we be funding any claimed "professional" suggesting treatments that are known to be no better than placebo, but cost more than any standardised placebo treatment?

My answer is no.

Placebo has a powerful effect. And can be given to you by a sugar pill. We shouldn't be PAYING PEOPLE to be nothing more than unregulated placebo-peddlers for patients without clear notifications of such.

(P.S. Note carefully the wording, as professionals WILL knowingly give placebos in controlled trials, for instance - and they tell you it's a possibility [which, interestingly enough, doesn't affect the placebo effect!], and they are doing it to compare against the real research going on in the same project).

No matter what study you cite, title you get, qualifications you have, or claim to have, all "alternative medicine" treatment is independently verified to be no better than placebo, time and time again - measured by scientists and independent medical researchers on your behalf. Just because a handful of GP's believe it, or Prince Charles, or even someone with ten medical doctorates, does NOT make it truth. Hell, they can even PRESCRIBE it, it doesn't mean it works, or that there isn't something much simpler that would work much better. I can point you to any number of people qualified in such areas who belief all kinds of nonsense.

Pay for your own sugar pills, and think me wrong as much as you like. Because when something "works", it gets refined, experimented on, analysed, enhanced, commercialised, tested and becomes... medicine. Aspirin came about from people chewing tree bark for 2000 years. The Mongols put mouldy bread on their saddle-sores. But until you can prove it works, it means nothing. And then when we prove it works, you get a proper medicine not some home remedy (aspirin, penicillin and it's thousands of derivatives, etc.).

If you have something that "works" and medical researchers aren't trying to buy the rights from you, it's a lie. Because they would happily take it, isolate the part that works, synthesise it, and sell you a pill of it in a second. The fact that they don't? It means it doesn't work.

Lee D Silver badge

Re: Quack, quack, quack!

It's not the alternative medicine that kills you.

It's **choosing** to use the alternative medicine.

Quite literally, Darwin Award candidates.

If you stop one scam artist snake oil salesman, another will pop up to take their place.

But if you just stop listening to utter b****cks, it doesn't matter how many scam artist snake oil salesmen exist, for your particular instance of whatever condition.

Anyone with a brain knows this is rubbish.

The people without brains cannot be regulated and are capable of much worse than buying products like this if left unsupervised.

Lenovo's 2017 X1 Carbon is a mixed bag

Lee D Silver badge

Re: Dosh?

"Which is why Apple's kit compares favourably with the competition."

Does it? The latets Apple Macbooks start at $1,299.00, for a 1.1GHz ("up to 2.2GHz") mobile dual-core.

The Lenovo comes with 2.6GHz proper i5. The 3DMark scores alone beat the Macbook. For the sake of $30, getting beat in all the CPU and graphics benchmarks, and with a smaller screen than the Lenovo, isn't a good showing.

This is by far not the cheapest PC laptop on the market, either, whereas a Macbook is the ONLY Apple laptop on the market (legally).

Lee D Silver badge

Re: Dosh?

According to a "real" review:

http://www.pcmag.com/review/352469/lenovo-thinkpad-x1-carbon-2017

The Ethernet requires a mini-dongle.

One HDMI.

Two USB-C that support DisplayPort (with adaptor) and Thunderbolt

Two USB 3.0

MicroSD

Optional SIM

Headphone

Fingerprint reader

$1329

When a rival site's link gives you almost as much information again as the Reg article, in the space of a few seconds, it's time to sack your writers.

Lee D Silver badge

Re: Dosh?

The article misses quite a lot out, to be honest.

Most new laptops will get the same kind of answers in that kind of review.

Did you try Linux on it? How much was it? What are the options available for it? When is it available? How does it compare to rivals? What software does it comes with, can I just put Windows 10 on it? Number of ports? All sorts spring to mind.

Poor "review", more a blog post of a guy with a new laptop.

Highly available? Of course you are. But did you download DRBD?

Lee D Silver badge

I joined two of my dedicated servers together, to replicate a filesystem between the two.

Worked quite well, even with me playing loopback device tricks and all sorts.

Never had a problem with it, after setup. You just set it and forget it and it mirrors the FS between however many machines you like and makes sure you can access it from anywhere.

I put all my machine config (/etc and /var for websites, email, etc.) into it via symlink and loopback tricks so that both machines pick up the same config and data files for websites etc. and it just works. One falls over, it logs but carries on regardless.

Just make sure you have the latest version, and I think it needs to have a kernel module IIRC, so make sure you're able to run the same kernels/versions on all machines.

US border cops must get warrants to search citizens' gadgets – draft bipartisan law emerges

Lee D Silver badge

You want my passwords?

I cannot come to your country.

There's stuff on there subject to the EU Data Protection Act which I cannot divulge, or give access to, to anyone else.

Game over. I literally CANNOT enter your country if that ruling goes through. Not even in passing, for holiday, etc.

Not that I want to, particularly, but this just makes it impossible. I can't break laws in my country to allow entry into another.

You want that information, it has to be an EU law enforcement agency that requires me to hand that over, not US.

However, even beyond that, BANKING details? No. You ask the bank if you want those. I'm not giving those out and maybe cannot even do so (e.g. SecureKey devices etc. that I don't have with me). Account passwords? No. You can ask the relevant sites for those (and they'll refuse, being in the EU for the most part). Devices, I wouldn't even bother to take anyway because of this junk.

And then the inane questions? What kind of pointless operation is that?

Seriously, America, get rid of your fool and your stupid rules because you're voluntarily walling yourselves into a corner. The only logical conclusion of which is something akin to 1984 or Escape from New York.

I'm guessing most of those plans will never come to pass, but I can't ever take the risk that they do pass while I'm in the air on the way to the US, like the previous set did.

If you're really THIS paranoid, refuse people at the source airport, not the destination. By the time you're screening them they've already been on a plane over US soil with the potential to hijack it.

Startup remotely 'bricks' grumpy bloke's IoT car garage door – then hits reverse gear

Lee D Silver badge

You're kidding right?

GSM, Wifi and Bluetooth controlled relays are everywhere. You can pick them up in Maplin's if you want.

And, no, we're not just talking solder-together kits but proper pre-built and support modules where you just power the thing, and then put the "button" wires through the relay. Job done.

Hell, for £10 on Amazon, I bought a GSM-controlled device that monitors GPS (even when the car is off), texts me if the car moves, tracks the car in real-time, alerts on overspeed, etc. as well as allows me to listen in to a microphone in the car, text the car and cut off the fuel pump, etc. by relay (included in the box!). It was literally cheap Amazon junk that can do exactly what you're asking.

I also have an house alarm that does the same (text it to activate a relay as a side-effect of it's 8-zone PIR / reed switch, battery backed house alarm functionality).

There are also bluetooth sensors that can activate when a particular bluetooth device comes in range / leaves range - sounds ideal for that purpose, no messing about with apps, just driving up to the garage with your phone switched on and it opens up.

Hell, my garden gate is maglock with an RFID reader and my girlfriend and I both have RFID tags. She uses it from her bike (push bike, mind) so that she can cycle up, fob the reader without having to get off, then ride into the alleyway directly. It cost me £10 on Amazon too, and came with a bag of fobs. If she loses the fob (like if your phone app doesn't work!), she just types in a code instead.

There's no need for poking holes in firewalls or other junk if you buy the right stuff. Which is often the cheapest junk because it has no subscription or dependence on a massive server infrastructure to do a simple job.

Lee D Silver badge

Third party services are controlled by third parties.

Stop using them if this is unacceptable.

Nothing left? Yeah, that's because you guys didn't do this but instead bought into that kind of junk.

To be honest, nowadays, can't you just buy a garage door opener kit and stick any kind of remote Wifi/GSM-activated thing on it? Why do you need the intermediate server, which is just another thing to go wrong?

Boeing details 'Deep Space Gateway' for Mars mission staging

Lee D Silver badge

It's been 45 years since we bothered to put humans outside the planet's immediate influence. At any point in the intervening time we could have done this. At any point WHILE we were putting people there we could have done this. We didn't. In fact, we didn't do an awful lot, really.

I see no reason to think than in a few years we can turn that around without a serious ramping up of competition/co-operation worldwide, determined to do something practical and useful and with some kind of return. Even SpaceX isn't in the same kinds of order of magnitude (and from what I just Googled it's barely profitable at all, and that was before the latest setbacks and with billions in investment?).

We're not doing it for science. We're not doing it to save humanity. We're not doing it because people want to pay the prices to live up there. We're not doing it to get people to Mars. We're not doing it to get one over the Russians or say we were the first. All of these are reasons (not necessarily good ones) to do such things, but that's not what it appears we are doing it for. As such, it's hard to see WHY we're doing it, and therefore why it would happen.

We've been able to do this since the 1960's. That we haven't says a lot. And the distances and scales involved are literally hilarious. The Moon is 0.1% of the distance away that Mars is, for example. And we're talking about getting ONE thing to just past the Moon as some major project for the next generation...

Google's video recognition AI is trivially trollable

Lee D Silver badge

Re: Is it a bug?

If you have to insert an explicit rule, it's not AI. It's a human-written heuristic.

If the machine can't learn on its own, it's not AI either. It's a human-controlled heuristic.

If you have to spend your life telling it "Oh, and look out for this explicit thing that you get wrong", then you may as well just write a list of rules.

And the exact problem with these "deep learning" machine algorithm things is that you can't just say "Oh, take this into account", because they aren't written that way, they've learn from the data.

No, you have to go back, create test cases for every imaginable scenario, spend years training it on all of them and hope it picks up on what it was doing wrong. And then someone comes up with, say, picture-in-picture which confuses it again. Back to square one retraining on that too.

So you can't use it for, say... crowd-based facial recognition (as is often advertised as a use case for such things), or self-driving vehicle cameras, because it could flag ANYTHING at any point just by being sufficiently distracted - even with NO knowledge of its underlying training or algorithms. And you can't train it on every possible scenario well enough that someone trying to catch it out can't just make it flip.

Imagine telling even a 2-year-old that they're going to need to win the toy by getting the video right. And you show them a video with a thousand frames of tigers, and one frame of an Audi. Would you really ever expect them to press "Car" instead of "Animal"? This system is no better trained than a 2-year-old human, in that case, who can do a lot more besides.