* Posts by Nick Ryan

3756 publicly visible posts • joined 10 Apr 2007

Revealed: Remember the Sony rootkit rumpus? It was almost oh so much worse

Nick Ryan Silver badge

Re: You have to wonder

The mayhem would really depend on what the USB devices actually were... USB storage devices containing unpleasant or unwanted content or USB killer devices that would discharge a huge burst of electricity into the USB port?

Nick Ryan Silver badge

It was called Outlook Express and it may as well have been specifically designed to be a virus propagation platform.

It didn't auto-run executables, however it was a trivial process to cause it to execute pretty much anything. Usually without letting the user know. Combine this with Microsoft's brain dead insistence that nobody really needed to know what the real file extension of a file is (hiding file extensions is one Microsoft's most stupid general UI things to date) and you could have a safe looking file which was an .exe which presented the icon of an image (extracted from the file itself) which was really "xmas.jpg.exe" but shown to the user as "xmas.jpg" with an image icon.

It was replaced by Windows Mail which really wasn't much better in many ways (an absolute horror to use and failed to work with many SMTP implementations until they were hacked up to "support" Windows Mail's broken interpretation of standards and special Microsoft extras. It also feels like some of the really crap rendering and editing code from Outlook Express was moved into Outlook...

UK and USA seek new world order for cross-border data sharing and privacy

Nick Ryan Silver badge

I find it unlikely that it will include any notions regarding data protection or trust.

Nick Ryan Silver badge

Re: Nice drafting

The also accidentally left in a couple of spurious words that should not have been there and the intern who typed them has been fired:

The two nations want a regime that "promotes and advances interoperability between different data protection frameworks, facilitating cross-border data flows while maintaining high standards of data protection and trust."

Pension cold-calling financial services biz cops largest ever fine from UK data watchdog

Nick Ryan Silver badge

Re: in other

Which is why fines such as these should be directly applied to the person, or persons, that is the owner of the company. Otherwise they'll just have creamed off the illegally gotten money and can just apply the fine to a disposable organisation.

A tiny typo in an automated email to thousands of customers turns out to be a big problem for legal

Nick Ryan Silver badge

Re: What was I thinking?

I remember the marketing manager/co-owner of a place that I worked at utterly red faced when she walked up to me and showed a flyer that we had sent out the week before to promote one of our products with a special offer:

Buy 5 for the price of 6.

We had to laugh at that one, not least because none of us had noticed it but also because absolutely none of the recipients, even those who called to take advantage of the offer, mentioned it either!

Replaced several times but still live and kicking: Windows Forms updated for .NET 6.0

Nick Ryan Silver badge

What's particularly notable is that despite some odd standing-on-head-and-clapping implementations within the VCL, the layout engine that it exposed by default was considerably superior to almost anything I've come across since. Yes, it caused some nasty redraw issues but in general it was stable as hell. Working with variable display DPI resolutions in an appropriately designed form using the VCL was almost easy as long as the interface was constructed in a sensible manner and dynamic code didn't make assumptions.

Nick Ryan Silver badge

Re: Missed opportunity

Except ASP.NET web forms was also Microsoft developers pretending that an HTML page was a modal system window, murdering it with unnecessary and accessibility failure JavaScript and then trying to foist this broken model onto many developers.

It's not that it couldn't be used in a sane way, however that took a lot of effort and experience from a competent web developer of which there is/was a dire shortage and a windows client application developer tends not to be a competent web developer. It was always obvious that something would be repeatedly and fundamentally broken on a page as soon as the on-hover status bar of a web browser showed "PostBack" all over the place...

Calendars have gone backwards since the Bronze Age. It's time to evolve

Nick Ryan Silver badge

Re: Wishful thinking...

Very much...

PowerBI has/had a lot of potential as an interactive reporting system but is riddled with really dumb implementation issues and strange absences of functionality that would be consistent with other part of it and the editing interface is incredibly poor in many places but quite good in others, just to add to the frustration. After all pulling data from a Microsoft SQL server database using a Microsoft Connector into Microsoft PowerBI one would hope that the data would make it through un-mangled. Unfortunately such a hope is dashed upon the shores of Microsoft's endemic incompetence.

Report Builder is quite good by way of a non-interactive reporting system but has an interface so bad in places that often the only way to fix anything is to quit it, load up the XML file in a suitable editor and both fix the stupid and manually enter the values and configuration required.

As for Crystal Reports... maybe sometime closer to the dawn of time it didn't feel like it was developed by a room full of vindictive monkeys mashing their keyboards trying to produce something that was so large, bloated, unwieldy which also delighted in as many weird inconsistencies as possible that it was usable... but I just can't remember a usable version any more.

Nick Ryan Silver badge

Re: Its a surprisingly hard problem

Nicely presented example of why it's hard.

The extra thing to add to really cause pain is different time zones (one would have thought that US developers would have this down OK as the US has many internal time zones, but evidence shows otherwise) as well as many clocks going backwards and forwards every year, and the varying point in the year that this happens.

Managing clocks going backwards and forwards is annoying enough in a scheduling system locked to a single time zone (been there, done that, felt the pain many times) but add in multiple time zones and events that can span them across a clock change and it's pretty horrible.

Nick Ryan Silver badge

Re: Start Date

Not just the Outlook development team, but it should definitely include the Microsoft Exchange / Microsoft Exchange 365 Online team as well. It almost brings a smile to me knowing that with Microsoft 365 using Exchange that Microsoft can suffer in the way that everyone else suffered for years with the horror show that is Microsoft Exchange management.

Nick Ryan Silver badge

Re: Start Date

/sigh

A single, fixed* point in time is all that is needed. The most important thing is that the standard is agreed and adhered to across the world. The start point in a year really does not matter as it is an arbitrary point in time and there needs to be one, similar to how the worldwide 0 line (prime meridian) for longitude is the Greenwich Meridian. It could be any line around the world and one is as good as the other (as a plus side it being based in Greenwich really annoyed the French for many years who wanted it based on a line in Paris).

* In reality, only mostly fixed, but it's fixed good enough for most purposes.

Nick Ryan Silver badge

Re: By hand!

Then restore from backup.

You did make a backup didn't you?

Or were you waiting for the calendar reminder to do so? :)

It started at Pixar. Now it's the Apple-backed 3D file format viewed as HTML of metaverse

Nick Ryan Silver badge

Re: Please, no

The TOC has to be somewhere and the beginning of a stream, as in the container, is a good place for it. The end certainly isn't and it's not particularly efficient to repeatedly include it within the content either.

If video or audio is streaming then a TOC just cannot exist because one does not know the exact length nor the exact data offset within the stream(s) that would be referred to in the TOC. Just like how you couldn't write a Table of Contents in a document and not have to go back and fill in the page numbers after you've written the content.

Nick Ryan Silver badge

Re: All this "Metaverse" talk...

The same things are true of many niche technologies, however things do progress and improve.

There are non-game usages of VR headsets, but that's an aside as just because something has a current primary usage that is there for entertainment, is that a bad thing? Markets and industries do not work in isolation, there is a lot of cross over between them and while there may not be a huge amount of cross over from VR headsets outside of gaming and entertainment, it's definitely there. It's relatively early but the teaching, architecture/engineering and medical fields immediately come to mind.

We're not going to see executives in a board room all plugged into VR to examine their annual report and accounts, but that's just the kind of nonsense from Hollywood that we all have to suffer with and ignore and shouldn't be used to detract from real usage.

Nick Ryan Silver badge
FAIL

Re: Don't let the idiots that made the web retarded design it's replacemet

Are you an out of work Macromedia Flash "website" developer?

Nick Ryan Silver badge

Re: USD is ****ing awful

Particularly as the US is one of the three remaining backwards countries that still use Imperial units. They certainly should not get to mess up the spelling at the same time as not actually using the units.

US scientists, and similar, in general use metric units so their work remains valid and usable throughout the world. Things have a nasty habit of going wrong when they don't.

Data transfers between the EU and the US: Still unclear on what you're supposed to do? Here's an explainer

Nick Ryan Silver badge

Re: Pointless

It was never the UK's problem.
/Sigh. Get your head out of the Daily Express.

The border between Northern Ireland and the Republic is an international border. Just like the border between mainland UK and France, just without the sea in between. As the UK is no longer a part of the EU, it is a foreign and therefore there is a hard border now.

That implementing, or even considering, a hard border between NI and the Republic was one of the most retarded things that even the belligerent fuckwits slobbering around the UK parliament could come up, while carefully promising two mutually incompatible situations: a) there would be no customs border between NI and the republic and b) there would be no border between NI and the remainder of the UK. That an international agreement was had that softened this stupidity was pretty much a miracle, however the arch cretin Frost who came up with this, touted it as an amazing thing, is now blaming everyone else for this international agreement, that he wrote and signed, and blaming the EU for sticking to their obligations within this international agreement, that he wrote and signed.

This is not down to the EU. This is down to the gross incompetence and wilful belligerence of the UK government.

Nick Ryan Silver badge

Re: Pointless

Regimes like the US have always failed in data protection; There never has been any and the BS of Safe Harbor and the like change absolutely nothing.

Is a US based organisation going to be taken to court and fined, potentially a large amount of money, by a US data regulator (there isn't one) for misuse of non-American personal data (i.e. the data of an individual who pretty much has less legal standing than a dog in the US)? No

Is a non-US based organisation able to take a US based organisation to task about their abuse and misuse of personal data, which due to Safe Harbor and so on is nothing more than a contractual dispute? Good luck with that one too and if somehow the non-US based organisation won, the damages would be limited to the value of the contract which would be dwarfed by the cost of the case.

Remember when you thought fax machines were dead-matter teleporters? Ah, just me, then

Nick Ryan Silver badge

Re: Car :easing and patches

The data compression for fax was Run Length Encoding (RLE) therefore any patches of solid black or solid white were very efficiently encoded. The absolute pits was dithered black/white sections to make grey.

I'm reasonably sure that later fax transmission encoding did include better compression schemes that coped better with dithering, however I suspect as these were not supported by lots of existing fax machines they didn't take off much and it wasn't long before email became much more prevalent.

It feels like the only reason that utter technology luddites like solicitors only stopped using faxes recently because of covid lockdowns. Their reasons for continuing to use fax were all total and utter nonsense, of course. For example, "security"...

Nick Ryan Silver badge

Re: Car :easing and patches

Inevitably the "senders" number was faked - caller ID was and still is entirely trust based.

Upcoming Intel GPU to be compatible with Arm

Nick Ryan Silver badge

Re: Compatibility?

I was wondering this too. There are quite a few examples of high end GPUs being connected to RPis, the issue appears to be only of Intel's making and nothing more.

It's one thing to have the world in your hands – what are you going to do with it?

Nick Ryan Silver badge

Re: Isaac Watt

Even odder way to spell Thomas Newcomen.

HPE's Aruba adopts DPUs, but in a switch, not a server

Nick Ryan Silver badge

Scratches head...

Reads the article again...

Googles for more information...

Scratches head again...

So... what they are proposing is pretty much moving some general purpose computing onto a bespoke, manufacturer specific device that's out of reach of the normal software management and anti-malware practices. It may be good for performance, but it's likely to be rather less good for management and accountability.

Microsoft admits to yet more printing problems in Windows as back-at-the-office folks asked for admin credentials

Nick Ryan Silver badge

Re: printer drivers that require ADMIN access

it's a problem with Microsoft at the root cause of it all.

Not that this excuses the printer manufacturers from developing some of the worst abominations of software developer this side of Samsung, but Microsoft really did not help whatsoever.

Even when Microsoft eventually bothered to put in place standard TCP/IP print driver port, the printer manufacturers (who would typically make a room of monkeys mashing keyboards look like a highly talented room of developers) still needed to support the older OSes. As a result they are not going to create what would essentially be entirely new drivers to link to the new MS provided print driver port and maintain these separately to the support for older OSes. Some did, of course, but not many and they also were highly unlikely to go through their back catalogue of printers and create new drivers for all of them.

Nick Ryan Silver badge

Re: printer drivers that require ADMIN access

For well over a year the Microsoft Photos app in Windows 10 just crashed immediately every time print was pressed - the only way to print an image was to use the old Windows 7 Picture Viewer - or use Microsoft Word or some horror like that. It was a way around the problem, so can't really fault users for doing that at this time.

Nick Ryan Silver badge
Flame

Printing has always been the unfashionable end of Microsoft's hap hazard development strategies.

The Printing API alone demonstrates Microsoft's utter inability for any form of consistency, giving a flying crap about anyone other than North American users (because everyone on the planet uses inches and US only paper sizes, right?) and as for the tortuous API level machinations required just to get or guess basic printer capabilities let alone perform some printing... argh.

They had a real opportunity to do it well, the OS could have easily provided print preview which all applications could have benefitted from, but Microsoft probably wanted to keep that to their Microsoft Office suite rather than have the OS do anything useful. The OS printer system could have been expanded to cater for modern printers, but instead they left it in a limbo for printer driver manufacturers to expand in their own bespoke and non-standard and non-interoperable ways. It's brainless decisions like this that led to print drivers being as extensive they are now, simpler drivers and more standard systems tend to have less exploits.

So now, because of Microsoft's wilful abandonment of the printing system for years, on top of unstable and badly written drivers and hacks on top of the operating system, we have a series of exploits. Exploits targetting drivers that passed Microsoft's tests (when this used to be a thing).

Now drivers require administrator level access to install when they should be simple. Drivers deployed from a damn trusted server require administrator level access to install, which is disruptive as hell, but we're back to the same dumb stupidity when much of Microsoft still thinks that all users should be give local administrator access to the system they use - the fucking installation process pretty much dictates it.

As for Windows 11 having the same problems being a surprise? No surprise at all, Windows 11 is just a reskin of Windows 10 with a PITA installer that insists on fictitious hardware "requirements" to install.

/rant :)

Boeing 737 Max chief technical pilot charged with deceiving US aviation regulators over MCAS

Nick Ryan Silver badge

You missed "non-executive"

Judge in UK rules Amazon Ring doorbell audio recordings breach data protection laws

Nick Ryan Silver badge

Did I read that correctly? He put a camera up on someone else's property? Isn't that essentially vandalism and/or damage? If someone put a camera on my wall without asking I'd remove it.

McDonald's email blunder broadcasts database creds to comedy competition winners

Nick Ryan Silver badge

I had similar with Netflix, they insisted that I had an account with them and that I signed up with them despite me never having done so and having never gone through any email verification process but was still receiving account emails. Then they stated that because I didn't have an account with them that they couldn't talk to me or provide support... /genius

Config cockup leaves Reg reader reaching for the phone

Nick Ryan Silver badge

Re: Cisco commands are live too

The scenarios that can bite a long time after are those that can really be hard to track down as a result.

For example, the difference between live and stored configuration. Make changes to the live configuration and test to make sure that it works. Then forget to save the running configuration. Nothing bad happens until an unspecified period of time later and the system is restarted for whatever reason and it reverts back to the previous, stored configuration and things stop working.

Opt-out is the right approach for sharing your medical records with researchers

Nick Ryan Silver badge

Re: NHS Data Slurp As A Threat

From memory thirty was the published average for the number of dwellings covered by a single post code.

Nick Ryan Silver badge

Re: Shirley there must be an acceptable third option

It's the selling of the raw data and transferring it to regimes with absolutely no worthwhile data protection laws (i.e. the US), that is the key issue.

Once copies of data is out in the wild, they will never be anything other than "out there".

Allowing access to anonymised data in the manner that the Office for National Statistics (ONS) provide - where accredited researchers may work on the already anonymised data and then provide the output to ONS staff who vet it and then transfer it from their network for collection. This provides a high level of data protection while not allowing access to raw data to predatory organisations only interested in using and abusing it for financial gain - and while I can see the medical benefits of large dataset analysis, the money comes from the abuse and use of the data for financial gain which is where these companies like Palantir come in.

Nick Ryan Silver badge

Re: NHS Data Slurp As A Threat

This is where it is absolutely critical that US based "no data protection here" type organisations NEVER have direct access to the master data. Access to very carefully curated and anonymised datasets, that's palatable, but never, ever access to anything beyond this.

IDC: Global PC market growing pains in Q3 due to 'softening' of sales in America

Nick Ryan Silver badge

Sigh... yet another idiot "economist" expecting perpetual growth. Perpetual growth is not possible. Saturation happens.

Even when a disposable non-reusable market is created, it will never have perpetual growth.

Sir Tim Berners-Lee and the BBC stage a very British coup to rescue our data from Facebook and friends

Nick Ryan Silver badge

Re: Can't get my head around this concept

It's because the UK is not like the US where there is absolutely no worthwhile data protection laws in place at all. As a result, the UK must change to ensure that they are similar.

Similar to the NHS. It's utterly wrong that people in the UK can be treated and recover from injuries and as a result society as whole benefits where the "American Way" where if you can't afford it you can damn well die in pain or live in discomfort or debt for the rest of your life is so much better. For those who can afford it and are charging for it.

Nick Ryan Silver badge

Re: BBC

Oh, you mean Horrific behaviour like adhering to the legal agreement created by the UK, signed by both the UK and EU which the UK is attempting to unilaterally change or ignore? That the lying shysters in the UK government are now claiming that they want nothing to do with the agreement that they wrote and signed shows solely what a bunch of worthless arseholes they are - they are blaming things on the agreement that they wrote, pushed and signed and touted as a success and a "win" for them.

Or maybe the border procedures where the UK is a third country and therefore has to abide by all the same rules and regulations that all other third countries have to abide by? This was entirely as expected and even referred to in the signed international treaty.

Democratic will is one thing. The people being told unmitigated lies and rabble rousing and hatred and division is one thing. That's manipulation of the lowest level, or do you seriously believe that the leave party propaganda targeted at old people online about how "the NHS will be better without all those dirty foreigners" demonstrably failed to point out that the burden on the NHS of non-nationals was the most minute fraction compared to what non-nationals brought to the NHS by way of working for it from the lowliest paid work upwards?

Nick Ryan Silver badge

Re: BBC

If the BBC was so anti-brexit, why did it give so much air time to vile shites such as Farage and his ilk?

The BBC tried to present facts as much as possible. That the average brexit promoter could produce no facts and just vague lies about £350m on the side of a bus was their problem along with most brexiteering being about rabble rousing and inciting hatred and division and unfounded fear.

For example, when a brexiteer stated that "with brexit we can have blue passports again". Other than an utterly meaningless and unimportant reason to destroy an entire economy and the prospects of the young, the UK could have chosen to deploy blue passports with or without brexit. Was the BBC stating this fact showing your supposed anti-brexit bias or just stating a plain, hard fact that you don't like?

Where the BBC does let itself down is its insistence on "showing the other side of a story or viewpoint" regardless of how retarded this is. For example, it will provide equal weight and visibility for a flat earth moron with either no qualifications or purchased scam titles opposite a geology professor who is well known and renowned and has many published papers. That's where the BBC lets itself down.

Firewalls? Pfft – it's no match for my mighty spares-bin PC

Nick Ryan Silver badge

Tell me about it...

In a previous life I had to fight insanely to get a back up system approved. Nothing too fancy, just a basic, working back up system for all of the office server content.

It was rejected multiple times because of the cost, which was no more than few thousand (it's amazing what one can do on a budget) and because they didn't see the value in something that they wouldn't immediately use.

The next proposal I included the approximate salary of all employees, applied a few metrics to the amount of "work" that they do that involved the shared server data and extrapolated this out into the value of the "work" stored on the office servers over a short of period of time and compared this to the cost of the backup system.

Rejected, again, of course but this time with the added threat of an investigation into my estimation of the staff salaries and how this was a privacy violation! A privacy violation based on guessing average salaries based on recruitment adverts...

About a year later two drives on the central file server crapped themselves within a day of each other taking down the entire array and preventing any work from happening in the company. We weren't allowed to keep spares of these and therefore while we immediately ordered a replacement for the first failure, before it could even be delivered the second drive failed.

The backup was approved the same day... a day too late of course.

'Nobody in their right mind would build a naval base here today': Navigating in and out of Devonport

Nick Ryan Silver badge

Re: Proper Job

Betty Stogs was always a good choice beer too.

Nick Ryan Silver badge

Oh hell, now I have the scene from Galaxy Quest in my mind where they were departing the space dock and everyone on the bridge was leaning one way in the hope that they wouldn't be scraping the wall with a screech on the way out... :)

Nick Ryan Silver badge
Pint

Is that where the beer got it's name from?

Been drinking it in Cornwall before it got popular and was shipped up country and into supermarkets... never once stopped to think about where the name came from! (this lack of stopping and thinking may or may not be related to the drinking of the beer...)

Metro Bank techies placed at risk of redundancy, severance terms criticised

Nick Ryan Silver badge

Re: Moving to Agile working

Agile should really be considered to be smaller, incremental and easily testable changes rather than large horrible very occasional updates to systems that are shite for years before a sudden large update that require many more weeks/months of tests to go finally test. Keeping updates to smaller, focussed areas and combine this with sensible compartmentalised code (hahahaha) and smaller updates should be less painful and easier to plan into normal operational workload.

Or, alternatively, use it as a buzzword bingo bullshit term about offshoring to cheaper, and unfortunately not always as good quality, technical labour.

The article almost reads that due to marketing fuck ups, other departments have to cut their head count. No mention of similar head counts in the marketing departments that cost the organisation so much in fines.

UK Ministry of Defence tries again to procure £1.7bn tri-service recruitment system

Nick Ryan Silver badge

This website sucks, full of americans, is american, and doesnt like it when criticism comes their way.

Utter sociopaths

This is a very broad and vague comment. Which website? The MOD online application website or The Register (which technically is English, not American although everyone is pretty much welcome as long as they can read or write English, even reading or writing American is passable enough).

Microsoft Exchange Autodiscover protocol found leaking hundreds of thousands of credentials

Nick Ryan Silver badge

Yes, there's how to do it and then there's how it's done. Often different. Even more of a mess in a hybrid environment, particularly a hybrid older environment.

It could have been done in a simple, transparent and wholly documented manner... unfortunately this was Microsoft and it was created at a time when they were still intentionally screwing with and obfuscating their own file formats to ensure that competing software couldn't use them.

Nick Ryan Silver badge

There's a difference between "currently working" and "working properly". I suspect that most tenancies are configured to be "currently working" but with lots of dangerous configuration left lying around which will catch them out at some point.

Nick Ryan Silver badge

It's even more nefarious than that... if you have your primary domain hosted on something other than on Microsoft's servers then where do the auto discover requests go to?

For example, theregister.com - not hosted on Azure/Microsoft 365

Microsoft Outlook running for an @theregister.com email address will request (require) configuration from autodiscover.theregister.com, theregister.com/autodiscover/<blah> and so on.

While it's possible to configure DNS such that autodiscover.theregister.com refers to a Microsoft Exchange server, it's not convenient and is beyond most organisations.

The whole crappy process was invented when Microsoft was still stupidly instructing* admins to set up the dumb ".local" domain names, and that says it all really.

* Microsoft have since edited history to make it appear that they said something quite different.

US Federal Aviation Administration issues draft assessment of SpaceX Super Heavy impact

Nick Ryan Silver badge

Re: Which is why Texas

From what I understood, the supreme court had no option but to accept the State legislation because there was no legal basis for them not to. As in the State legislation was written very carefully - it's almost as if the backers of it had a lot of resources to pursue their medieval agenda.

This does not mean that the medieval-esque ruling cannot be challenged, but the supreme court was not the place to do so at the time.

Yes, of course there's now malware for Windows Subsystem for Linux

Nick Ryan Silver badge

Re: Anyone surprised?

While chunks of the underlying implementation did come from BSD, Apple utterly broke so much of it that it's really not a valid comparison to consider that MacOS is BSD - it really is not.

The Register speaks to one of the designers behind the latest Lego Ideas marvel: A clockwork solar system

Nick Ryan Silver badge

The video or mock up doesn't show the moon and I suspect that without this predicting solar eclipses (moon in between Earth and the Sun) just won't happen.

Sadly I suspect the lack of the moon will be a major downside in this design - not that I could see how it could easily be done in Lego at that scale.