* Posts by Midnight

221 posts • joined 24 Feb 2008

Page:

Backblaze big data restore. Get this: it involves disk drives

Midnight
Bronze badge

Re: Hmmm

Although Backblaze encrypts all files at the source, and transmits them to the datacentre in encrypted form, their web restore process seems to involve decrypting them and sending plaintext files back over SSL.

https://www.backblaze.com/backup-encryption.html

https://help.backblaze.com/entries/20926247-Security-Question-Round-up-

"The answer shows a weak point in the Backblaze system.

As you prepare a restore, you must type in your private passphrase into the restore server. This is not written to disk, but held in RAM and for the period of time of decrypting all your files, and they are then stored in "clear text" on our very highly secured servers until they are ZIPPED up and offered to you to be downloaded."

If their disk restore process works the same way, then yeah, that's an issue.

1
0

Pay up, Lincolnshire, or your data gets it. Systems still down after ransomware hits

Midnight
Bronze badge

Not any more.

9
0

Brit censors endure 10-hour Paint Drying movie epic

Midnight
Bronze badge

"I don't like what you are doing. In fact, I am so angry about it, I'm going to give you six thousand pounds! You'd better hope I don't get more angry, or I will have to give you more money."

3
0

20KB trojan turns on bank customers in Singapore, Indonesia

Midnight
Bronze badge

Badges? We ain't got no badges. We don't need no badges. I don't have to show you any stinkin' badges!

1
0

Twitter goes titsup

Midnight
Bronze badge

Re: I miss the Fail Whale

The Fail Whale was fired three years ago and hasn't found a new job since.

0
0

Spoilsport scientists unstick Spider-Man

Midnight
Bronze badge

If you're wondering how Spiderman climbs walls

And other science facts

Then repeat to yourself "It's just a show,

I should really just relax."

(La la la)

7
1

What do Angolan rebels, ISIS widows, Metallica and a photographer have in common?

Midnight
Bronze badge

If anything goes wrong, just blame the lawyer for being overzealous.

Exit, light /

Enter, night /

Take my hand /

We're off to sue a cover band. o/~

18
0

Evil OpenSSH servers can steal your private login keys to other systems – patch now

Midnight
Bronze badge

Personally I was hoping to call it the Secure SHell Information Transfer bug, with the appropriate acronym, but nobody seems to be going for it.

4
0

BlackBerry baffled by Dutch cops' phone encryption cracked brag

Midnight
Bronze badge

Breaking News: Netherlands Forensic Institute announces purchase of 4.60 Euro wrench.

0
0

Ansible dumps Van Halen product names for Led Zeppelin references

Midnight
Bronze badge

Re: New features include “Task Blocks”

"What's Ansible?"

It's like a lesbian, only a little mixed up.

4
0

Wanted man sends selfie to replace 'terrible' police mug shot

Midnight
Bronze badge

Re: Rack up another charge

I think there's something in their Constitution which guarantees the right to use a mobile phone while driving a car.

1
0

Jenkins issues code of conduct to keep rowdy automation fans in line

Midnight
Bronze badge

Is saying "Time's up, let's do this!" and then charging blindly into the Rookery still okay?

I'm, uh, asking for a friend.

1
0

If you want a USB thumb drive wiped, try asking an arts student for help

Midnight
Bronze badge

Re: Sod thumbdrives

> >And there was me hoping for the noise of a good old fashioned head crash.

> Please explain in 100 words or less why exactly you expected this to happen.

Well, obviously, because the magic smoke had been let out.

Don't you know how computers work?

5
0

Fans demand 'Lemmium' periodic table tribute

Midnight
Bronze badge

Re: On one hand, Bravo !

Traditionally, the element is named after the person or team that discovered it.

The element _is_ a heavy metal, and this _is_ Lemmy we're taking about, so I don't see the problem.

2
0

Comcast's Xfinity home alarms can be disabled by wireless jammers

Midnight
Bronze badge

Re: Sarcasm is the lowest form of wit

We can hope that the alarm system will report a break-in and sound an alarm every time someone in the neighbourhood turns on their microwave oven, yes.

Whether or not the end users will find it quite as amusing as we do is anybody's guess.

2
2

Irked train hackers talk derailment flaws, drop SCADA password list

Midnight
Bronze badge

Re: Will we never learn?

Experience has shown that it won't be "pool.ntp.org" that they all sync to, but rather the University of Wisconsin–Madison's time server, or the only stratum 1 NTP server in all of Denmark.

The same experience also suggests that "Hey, let's have our hardware automatically download firmware updates so the users won't forget to" and "We should hard code a nice, safe time for all our systems to apply updates and reboot when nobody is using them" will also be seen as good ideas, and every single node in the Internet of Fridges will download the same untested update at the same time, apply it, and then power-cycle itself at midnight. UTC, of course, which puts it somewhere around peak evening power usage time in the USA

Only to come up again with the Metric to American conversion settings all backwards and happily chilling everybody's frozen meats to a nice, cool thirty-two degrees Celsius once the power comes back on.

5
0

Here's your Linux-booting PS4, says fail0verflow

Midnight
Bronze badge

Re: loss leader...

Hence the idea of paying for the linux "game"

...Which could be used to start other "games", including copies of other very expensive games which Sony and their licensees would prefer that you had paid a lot of money for. Even if that didn't lead to a drop in sales, it would make it more difficult to convince third parties to pay their way into the PS4 catalogue.

"And for an entirely reasonable license fee, you will be able to distribute games which run on our console."

"Uh huh. And what will stop people from just making copies of our discs and distributing them for free over the Internet, meaning that we get exactly nothing in return for our substantial investment?"

"We put a little note in the login prompt for PSLinux which asks them nicely not to do that."

"Thank you. We'll be in touch."

The only way to avoid this would be to fence off parts of the hardware so that they could not be accessed unless a properly blessed disc has been inserted, and that's about as likely to work as giving national governments secure back doors into cryptography.

0
1

Periodic table enjoys elemental engorgement

Midnight
Bronze badge

Mooltipassium?

10
0

Hillary Clinton says for crypto 'maybe the back door is the wrong door'

Midnight
Bronze badge

I think you have what it takes for government work.

1
0

Electrician cuts wrong wire and downs 25,000 square foot data centre

Midnight
Bronze badge

Re: Perfect opportunity to test the Disaster Recovery plan

Of course there was a disaster recovery plan. It was even detailed in the article.

“Hurry!” JF exhorted, before calling everyone else in the business who could possibly help, such as folks on the application, sysadmin, network admin, and DBA teams. The business hadn't bothered to have any of them on-call, because with just a one percent chance of failure why did it need to bother?

Perhaps, in afterthought, it was not a particularly _good_ disaster recovery plan, but that word didn't appear anywhere in the requirements document.

2
0

Motorola’s X Force awakens a seemingly ‘shatterproof’ future

Midnight
Bronze badge

Re: 6.0 "soon"... riiight.

You have a Moto G.

G2 has a Moto E.

Those are two different phones. One of them is still receiving updates, and one is not.

2
0

Donald Trump wants Bill Gates to 'close the Internet', Jeff Bezos to pay tax

Midnight
Bronze badge

"Shut up! I'm trying to watch 'Oww my balls!'."

Why are you watching that? "Ass" is on channel seven!

0
0
Midnight
Bronze badge

"But who'll be around to write the songs?"

I think Tim Robbins has that covered.

1
0

Sysadmin's £100,000 revenge after sudden sacking

Midnight
Bronze badge

I have that T Shirt too.

Many years ago I worked for the distribution side of a Major National Retailer. My main responsibility was running the warehouse management system that made sure that hundreds of people were able to pack and store the thousands of shipments that went through the great big building every day, each one of them on such tight timetables that so much as an hour of downtime on the management servers could cost the company millions in missed shipments, even if it happened on the weekend or in the middle of the night. My team took it pretty seriously and worked on designing a fairly bullet-proof system with multiple redundant hardware for everything, and it worked pretty well.

One morning I found an issue with the system which was causing some irregularities to show up in the daily reports. I have officially forgotten everything about it by now, but somewhere at the core of it were a number of scheduled jobs which exported data from the main database, pushed it from machine to machine, and made sure that every part of the system knew what every other part knew. If it didn't run then there would be slight inconsistencies on the first day, slightly more on the next, and if it hadn't run by the weekend then the application would completely fall over and someone who knew how it all worked would have to be called in to fix it. And it would have to be fixed _right now_ because of the costs associated with any down time.

I identified the problem and jumped right in to get it fixed. The first thing I did was set a "do not run" flag to make sure that nothing happened to make things worse before I was finished, and then made some notes which I would later enter into the incident ticket. Shortly after that my new manager dropped by and asked if he could see me right away.

"Um, okay. I'm kind of in the middle of something, can I drop by your office in about five minutes once I have this cleaned up?"

"No. I need to see you right now."

"Well... All right. I really have to get back to this once we're done."

As expected, the conversation was short and final. I asked what I could do to ensure a clean handover to whoever was getting stuck with my job after me, but told that I was being terminated immediately, would not be replaced and there would be no need for anything more and could I please just get out now and stop wasting time. Shortly after that I was escorted back to me desk accompanied by a security detail who were to make sure that I collected my things without touching my workstation in any way. The rest of my team had been conveniently pulled into a meeting so that they wouldn't be able to see what was happening and I ushered out the door without even being able to say goodbye.

To this day I have no idea just how much damage $FORMER_EMPLOYER did to themselves by handling everything this way, but that's really their problem, not mine.

27
0

How to solve a Rubik's Cube in five seconds

Midnight
Bronze badge

Solving the cube is easy. You just start from a simple case and then work your way up to more complicated cubes by induction.

0
0

WordPress.com ditches PHP for Calypso's JavaScript admin UI

Midnight
Bronze badge

"So you give it away, thousands of PHP developers will need to (re)learn modern Javascript. So what are you getting back from that?"

Some of them might actually learn something about programming.

Then again, maybe the horse might sing.

3
7

Randall Munroe spoke to The Reg again. We're habit-forming that way

Midnight
Bronze badge

Re: Subtitle: "habit forming"

Be careful. That comic can be hobbit faux-ming.

0
0

Uber wants UK gov intervention over TfL’s '5-minute wait' rule

Midnight
Bronze badge

Re: Eh?

That's part of the plans which would amount to a clampdown, which is all in the second paragraph cunningly hidden behind the link labelled plans that would amount to a clampdown.

"The proposals include stricter controls on insurance and tighter controls on private hire bookings, such as forcing operators to provide booking confirmation details to the passenger at least five minutes prior to the journey."

6
1

Eric S Raymond releases hardened, slimmer NTP beta

Midnight
Bronze badge

This could be the biggest thing since Fetchmail.

1
1

Apple's Faulty Powers moment: iPad Pro slabs 'temporarily bricked' during recharge

Midnight
Bronze badge
Angel

Re: "temporarily bricked"?

It's not "bricked". That would be a bad thing. It has simply gone into Apple High Security Mode, which is a wonderful, magical thing which no other vendor, including Microsoft, has been brave enough to implement yet.

I predict that we will see the usual brigade of followers trying to copy this amazing innovation over the next year.

2
0

Former parking ticket bloke turns out to be cybersecurity genius

Midnight
Bronze badge

It still pays better than teaching at a University.

2
0

GCHQ goes all Cool Dad and tags the streets of Shoreditch with job ads

Midnight
Bronze badge

Re: Too much good TV on El Reg lately

Of course, but who has time to share it?

1
0

TalkTalk: Data was 'secure', erm, we beat rivals on price. Um, scratch that...

Midnight
Bronze badge

Re: Errors, we've had a few, but then again, too few to mention...

"I would have thought that being able to use a spreadsheet and simple formulae was a basic office skill..."

I used to think that too, but then I spent some time working in a basic office.

4
0

Fancy flying to Mars? NASA's hiring

Midnight
Bronze badge

Re: If only

"So sleep deprived, chronic masturbaters who's math skills drop off after the 10x table aren't on the wanted list?"

Don't worry, you can always apply for a management position.

8
0

'T-shaped' developers are the new normal

Midnight
Bronze badge

Re: I'm pleased I don't live in a mind...

Something "rounded and T-shaped at the same time" would be a nail.

How is that distressing?

0
0

Laid-off IT workers: You want free on-demand service for what now?

Midnight
Bronze badge

"Say there's a city that's gotten so big that all efforts of everyone have to be directed towards importing food and sanitation. There are no resources left for anything else, and all man hours are required to keep the city alive. Crazy Eddie chooses this moment to lead a strike of garbage workers, demanding better working conditions.

"Now say that there's a company which has lost so much money that it can no longer pay its IT staff..."

3
0

German football hero battles Nazi doppelgänger

Midnight
Bronze badge

Re: Who needs this model anyway?

If it was then it should come with wet celery and a flying helmet.

2
0

Connected kettles boil over, spill Wi-Fi passwords over London

Midnight
Bronze badge

Re: 100℃ ??

"For this idea to work properly, you'd need a barometer built in to the kettle, feeding it's output to the off switch."

Or, perhaps, it could use the built-in assisted GPS to determine its current location, look up the local weather report on the Internet, and then use that information to determine when the boiling point of water.

I can't imagine how anyone ever knew that water was boiling before The Internet Of Thingees arrived.

0
0

Walmart to open-source its cloud-hopping code

Midnight
Bronze badge

Playmobil cops broadside for 'racist' pirate slave

Midnight
Bronze badge

Re: why on earth would she buy a pirate toy for her 5-yo kid?

And then shooting a policeman, stealing his helmet, going to the toilet in it, sending it to the policeman's grieving widow, and then stealing it again.

5
0

TRANSISTOR-GATE-GATE: Apple admits some iPhone 6Ses crappier than others

Midnight
Bronze badge

"Certain manufactured lab tests which run the processors with a continuous heavy workload until the battery depletes are not representative of real-world usage, since they spend an unrealistic amount of time at the highest CPU performance state," sniffed Apple.

"Not representative of real-world usage?" How is it possible that nobody at Apple has ever heard of "Fallout Shelter"?

1
0

Hey, Facebook – these are the new Like buttons you should have used

Midnight
Bronze badge

Missing one.

There should be a "petri dish" icon as well.

As in "This post is like a petri dish filled with friendship germs."

0
0

US Treasury: How did ISIS get your trucks? Toyota: ¯\_(ツ)_/¯

Midnight
Bronze badge

The side of freedom, liberty and democracy, of course. Now please step into this room and we will have a quick chat about it, citizen.

16
3

GCHQ's SMURF ARMY can hack smartphones, says Snowden. Again.

Midnight
Bronze badge

Re: KISS

Good luck buying tin foil. Did you ever wonder why The Government made sure it was all replaced with Aluminum?

2
0

Your storage environment will be toast in... 8... days

Midnight
Bronze badge

I don’t think there is any question about it. It can only be attributable to human error. This sort of thing has cropped up before, and it has always been due to human error.

1
0

SAUCY INCEST and brutal VIOLENCE boosts UK space sector

Midnight
Bronze badge

Re: GOT can feck off

Just so.

0
1

BOFH: Press 1. Press 2. Press whatever you damn well LIKE

Midnight
Bronze badge

Your lamp is now on. You are in a debris room filled with stuff washed in from the surface. A low wide passage with cobbles becomes plugged with mud and debris here, but an awkward canyon leads upward and west. A note on the wall says:

Magic Word "KXYZZYERT"

A three foot electrically powered black rod with a rusty star on an end lies nearby.

4
0

American Airlines: TITSUP computers ground US flights

Midnight
Bronze badge

Some times it just over-fails.

4
0

Let's NUKE MARS to make it more like home says Elon Musk

Midnight
Bronze badge

Re: The chances of anything coming from earth are a million to one he said.

"Hey, have you ever seen the effect a big red button clearly labelled "DO NOT PUSH" has on people...? Just wondering..."

It's about the same effect as saying "Now whatever you do, you can't eat _this_ apple. Now I'm just going to go look the other way for a while..."

0
0

As McAfee runs for US President – we ask a crucial question: Will Reg readers back him?

Midnight
Bronze badge

Re: American Politics

They having trouble with Hildabeast and her email saga - might need to add treasonous to the list.

"Whoever, owing allegiance to the United States, levies war against them or adheres to their enemies, giving them aid and comfort within the United States or elsewhere, is guilty of treason [...]" -- 18 U.S. Code §2381

Hmm. If it was an Exchange server then it would technically be the enemy of all living things, and that would include the United States, but from my experience there is neither "aid" nor "comfort" involved in running it.

You may be stretching just a little bit there.

7
0

Page:

Forums