* Posts by Mark 65

3439 publicly visible posts • joined 11 Jun 2009

Everything you need to know about the Petya, er, NotPetya nasty trashing PCs worldwide

Mark 65

Re: The real blame goes to..

It still amazes me how people are using bog-standard OS variants for critical tasks. Maersk for their global shipping operations and whomever is in charge of monitoring radiation at Chernobyl. Sure, there's likely some forced aspect of software X only runs on Windows but for massive companies with real market power and scientists I cannot see why you wouldn't enforce the usage of a hardened OS suitable for the task. Some suitable Linux variant springs to mind.

How many times must an OS fail in critical applications before the right people have a fucking light bulb moment?

Mozilla dev and Curl inventor Daniel Stenberg denied travel to USA

Mark 65

Re: So ESTA can't manage reliable data transfer but its the passengers who get it in the neck.

More to the point

“ESTA” is the Electronic System for Travel Authorization and is a pre-screening program for citizens of nations that don't need a visa to visit the United States. Securing an ESTA authorization takes a few minutes on a dedicated web site and costs US$4 to apply and then a further $10 if approved, whereupon the US Department of Homeland Security lets your airline know it's okay for you to board.

That looks and smells like an electronic visa to me.

Photobucket says photo-f**k-it, starts off-site image shakedown

Mark 65

Re: Pulling The Rug From Under People's Feet

It works almost everywhere. It's called market inertia

More like "bait and switch"

Mark 65

Re: "That includes free/cheap being a temporary illusion,"

A national health service is just about the only viable and effective way to provide one. If it is private you effectively get held to ransom over your health. How much are you willing to pay to carry on living a worthwhile existence with full mobility and a functioning body? Politicians (and people like the OP of the "socialist" rant) don't seem to get how the main things a society (and economy) needs are healthy, educated workers and a minimal legal framework within which everyone can operate. Minimal because things will find a natural equilibrium provided abuse (or lobbying) is not tolerated.

Australian govt promises to push Five Eyes nations to break encryption

Mark 65

Re: Imminent danger.

Man, I have and will always believe that George Brandis is a fucking despot. One seriously nasty piece of work. He is an absolute stooge for the 3 letter agencies. No doubt they have photos on him.

Queensland Police want access to locked devices

Mark 65

Re: I used to really think Australia would be a cool place to live

Sorry, but that is a bullshit counter argument. The truck driver will not be waiting for an hour unless he's a fucking idiot and so's his employer. Dawn varies in time throughout the year by more than 1 hour so if cows are milked "when the sun rises" then his arrival time varies from around 4am to around 6am throughout the year. He's based on sunrise + X, so daylight savings makes no difference.

As for the North of 40C at 8pm argument - so what? If that 8pm stayed as 7pm then North of 40C at 7pm is not likely to drop by too much by 8pm. If you live in that kind of heat zone then you have air con or sit and sweat. 1hr does not make a difference to that.

The "no daylight savings" arguments in QLD are archaic and simply shit-kicking in my opinion. I believe they stem more from a desire to be different from the rest of the eastern seaboard than anything based in reality. More a case of "NSW want us to but they can get fucked cos we don't take orders from the likes of them blues" than fact-based.

Mark 65

Re: Folks are dumb where they come from

Hmmm, you could think that way but I prefer to think that if it gets over the line in QLD it'll soon be present in NSW and VIC especially given the fun-police legislation south of the border. There's nothing they like more in NSW than a bit of "rule your life/can-do can't-do" on the books.

Ever tried drinking spirits in Sydney because you may prefer a good Whiskey or G & T more than an over-fizzed beer? Best of luck with that - you may get your first but try for two or three and see what happens.

Mark 65

Re: Restricting Complaint is nasty

The bill's explanatory note (PDF) complains that currently, Police can't demand “relevant information” from people who aren't suspects in a terrorist incident, but are thought to know something that might help an investigation.

The bill also seeks to silence citizens who've had their phone searched. Currently, “there is no requirement for a person to keep confidential the fact that information is being sought”.

So there's "thought to know something" and silencing, anything left in 1984 that hasn't been covered?

Given the history rife with police and political corruption in the state of Queensland (Fitzgerald era etc.) I wouldn't trust these pricks with the steam off of my piss let alone a far reaching piece of legislation such as this.

Google hit with record antitrust fine of €2.4bn by Europe

Mark 65

Re: but fines cannot be a solution

Microsoft NEVER prevented users from installing and using Netscape

I believe that, on more than one occasion, updates that were installed on users machines via the usual patching process decided to set IE back to the default browser. That right there is a breach. The user made their "FREEDOM of choice" selection and MS decided "no thanks".

MS were a massive abuser of monopoly power especially when it came to PC manufacturers installing the OS by default - have a little read through history of the shit they pulled for that to occur.

Mark 65

Microsoft has been dealt with, on the others you're generally wrong. Juniper, Sql Server/PostgreSQL/MySql etc, Cray, and who fucking cares about social networking.

You need to understand just what level of market share Google has and hence how much power it has in order to appreciate you then get to play by a special set of regulatory rules due to that power. MS found out in the past.

Why Google now and MSFT in the 90s? Errr, not sure but I'm guessing that's when they offended.

Idea to encrypt stuff on the web at rest hits the IETF's Standard Track

Mark 65

AES 128

Rather, Thomson's RFC suggests using AES 128 in Galois/Counter Mode.

By choosing AES 128, and given the amount of time this may take to come to fruition, are we not MD5/SHA1-ing ourselves here? It's just possible by the time this gets implemented AES 128 is not as safe as it used to be. Given the amount of processor power available in just about any chip these days, especially when you can have embedded AES circuitry, should we not be shooting for AES 256 just to be on the safe side?

F-Secure's Mikko Hypponen on IoT: If it uses electricity, it will go online

Mark 65

Re: Save me from the evil "Things"!

Whispernets. Direct, unblockable connection. Try to cage them and they'll brick.

Breach of Christ knows how many sales and consumer goods acts anywhere outside the US. Fit for purpose etc. Ain't gonna happen.

Mark 65

If all manufacturers are doing it then a new one will appear that doesn't do it, provided that is what the customer base wants (rather than a few individuals). That is just basic economics. Don't even think that a major player wouldn't break ranks if it meant it could steal market share.

Mark 65

Re: "We can't avoid the IoT revolution by refusing to play part."

I don't understand his statement of

<quote>

Hypponen says IoT is unavoidable. "If it uses electricity, it will become a computer. If it uses electricity, it will be online. In future, you will only buy IoT appliances, whether you like it or not, whether you know it or not.

</quote>

It either needs a connection, i.e. through my router which I will not allow, or it comes with its own communication method such as 3G/4G etc in which case his software is pointless. Either way no sale.

FOIA documents show the Kafkaesque state of US mass surveillance

Mark 65

Re: "Foreign Intelligence Surveillance Court,"

Hard to believe that this exists in a country that proclaims so loudly it's support for a right to a fair trial and due process.

I normally apply the doctrine of "thou doth protesteth too much". Any country that harks on about how free and fair it is, invariably isn't. There may have been a point in its history when it was but that time has long since passed.

Samsung releases 49-inch desktop monitor with 32:9 aspect ratio

Mark 65

Re: 125% of the sRGB colour spectrum

For true photo editing you'll be using an NEC or an Eizo ColorEdge.

Software dev bombshell: Programmers who use spaces earn MORE than those who use tabs

Mark 65

Re: A question

Don't most IDEs these days have a setting to convert tabs to spaces?

Brit hacker admits he siphoned info from US military satellite network

Mark 65

I believe the big number is there to justify a request for a long sentence. You could hardly ask for years for $13.

Mark 65

Re: I Wonder

My guess is that he's a fuckwit. Now looks can be deceiving, but in the photo he's either been up all night or he looks a bit "challenged". I would hypothesise that he didn't really know what he was doing and was either directed by someone else or, more likely, found some toolkit on a forum somewhere a "gave it a crack". To not even use Tor for the hacking or, better, use Tor to research how to hack shit without leaving a dirty great Hansel and Gretel trail to your bedroom smacks of ineptitude. Unencrypted bounty on the HDD just adds to it.

WikiLeaks emits CIA's Wi-Fi pwnage tool docs

Mark 65

Yet another reason to buy an open-wrt/dd-wrt/gargoyle/tomato compatible router and flash the firmware.

Australian oppn. leader wants to do something about Bitcoin, because terrorism and crypto

Mark 65

Re: Oh Dear.....

Breaking bitcoin is not about anonymity or terrorism it is about controlling money and being able to tax shit. Bitcoin gives rise to a potential "World Currency" that is harder to print like it's going out of fashion or tax into oblivion to pay for your asshatted spending plans. At present banks control money (and Governments) and they'd like it to stay that way. Disintermediation is not in their interest.

FreeNAS releases version 11, so let us put the unpleasantness of failed V.10 behind us

Mark 65

Re: "WTF is a NAS doing hosting virtual machines?" Quite, just because you can...

Several reasons for running VMs on a NAS:

  • The VM is sat on the machine where the data storage it requires resides thereby removing the lag of accessing data over 1Gb/s link in a home environment vs straight off of the RAID array.
  • You wish to run software such as Crashplan which doesn't run on your NAS natively but can be run in a Linux Server VM on top accessing a read-only share aggregating the folders that need to be backed up.
  • You want to run SabNZBd, Couchpotato, and Sickbeard/Sickrage/Sonnar on your system and it won't run natively, or will run natively but keeps getting fucked up by firmware updates therefore segregating it into a nice Linux Server VM and giving it limited storage access makes a lot of sense.
  • You may wish to run a build server, dev environment, Jupyter instance etc etc on a machine that otherwise sits there doing not a lot

There are many reasons, just because none appeal to you does not mean others are wrong to do so.

Europe-wide BitTorrent indexer blockade looms after Pirate Bay blow

Mark 65

Re: So freetards will change their DNS and life will carry on

@AC: That just ends up as whackamole

Look who's joined the anti-encryption posse: Germany, come on down

Mark 65

It is clear from the German interior minister's comments that it is focusing on the third, most pragmatic solution: gaining access to someone's phone or other device.

It is also clear that such behaviour will rapidly lead to wide availability of a Qubes style OS for smartphones in order to prevent said pricks from installing shit on everyone's phone because, as we all know, they just simply cannot help themselves when it comes to mass rather than targeted surveillance.

Record number of non-EU techies coming to Blighty

Mark 65

Re: Skills Gap

Failing to get decent candidates or failing to get decent candidates at the rate you want to pay? Either way there is a talent vs pay mismatch, only who is at fault is up for grabs.

The fact you mention "normal pay" leads me to think the problem may be on your side.

Mark 65

Re: Skills Gap

I'm pretty certain there isn't a skills gap in the IT market. Wanting to pay sub-market rates for skills and, hence, getting few responses does not constitute a skills shortage. I've witnessed now in several cities around the world the age old "recruiter advertises for highly skilled role at highly unlikely pay level, nobody applies, prospective employer appeals to Government for skilled visas" scam. It's bullshit and always has been.

Ta-ta, security: Bungling Tata devs leaked banks' code on public GitHub repo, says IT bloke

Mark 65

Advantageous?

The data is a boon for rival organizations developing similar features

Not sure if data from Tata would ever be useful

Australia to float 'not backdoors' that behave just like backdoors to Five-Eyes meeting

Mark 65

Re: To be fair...

I'd love to see a protester smash Brandis in the nuts, preferably like in the game show on Idiocracy.

HPE ignored SAN failure warnings at Australian Taxation Office, had no recovery plan

Mark 65

Re: RMA the controllers?

Because the WHOLE array job inclusive of management was OUTSOURCED to HPE and ATO decided that it is a good cost saving measure NOT to have any staff directly involved in managing its critical infrastructure.

To be fair, the OEM should have staff more capable of looking after their kit than the client will. In this case it appears HPE does not fall into this bucket. It also appears they made some pretty clueless choices.

Apple gives world ... umm ... not much new actually

Mark 65

Seems a pretty limited use case. Most media professionals, especially in photography, will be using Eizo ColorEdge level monitors, Wacom style tablets of varying sizes and not putting grubby fingers on the screen like in the MS site photos. I don't blame Apple for not bothering with a touch screen.

Break crypto to monitor jihadis in real time? Don't be ridiculous, say experts

Mark 65

Re: The Elephant in the room

Checking that you really live in the catchment area of the school you've applied for etc etc.

And that it was you who didn't pick up your dog's shit / left your bins out one day too early etc etc.

Mark 65

Re: "The former policy wonk -

Any non-tech person listing would have been listening along and saying, "Why can't we do this, it all sounds reasonable."

Unfortunately that is a real-time reflection of how many fucking idiots are present in society.

Hotel guest goes broke after booking software gremlin makes her pay for strangers' rooms

Mark 65

Re: ma1010 "Sounds like a lawsuit"

Good to see her bank had systems in place to detect fraudulent transactions like most banks have had for the last decade or so. This would have stood out a mile.

First-day-on-the-job dev: I accidentally nuked production database, was instantly fired

Mark 65

Re: So....restore from backup

Where's the segregated VLAN? Anywhere with such important data and of such a size should be capable of setting up an environment where dev network logon credentials only work on the dev VLAN and so do not permit the crossing over into the production VLAN whether you know the prod db connection string or not. One account for troubleshooting prod environments (which they wouldn't have had in this case), and one for performing dev tasks. Not that difficult.

If you live in a network lab, you'll get gigabit NBN over HFC soon

Mark 65

Great. So in a few years time we may be able to see speeds near to what South Korea and Finland have had for quite some time. Before anyone mentions Australia being a much larger country over half the population exists in three cities so there's no good reason why it'd be uneconomical for them to have faster internet.

Australian Taxation Office won't penalise Plutus contractors

Mark 65

Re: Notice what wasn't said

That's the way I read it too. Can't imagine the ATO saying "ahhh, that's alright then" and letting you off with them being on the short end of a dollar or two. The taxman is not in the business of risk which is why they sit up the front of the queue when a company goes bankrupt.

Drones over London caused aviation chaos, pilots' reports reveal

Mark 65

Re: cameras at the ready

If you were a pilot of a commercial airliner and you saw a drone dangerously close then you'd think to pull your phone out of your (presumably trouser) pocket and take a quick snap? Me? I'd be thinking "best avoid that fucker" and take evasive action.

Distro watch for Ubuntu lovers: What's ahead in Linux land

Mark 65

Re: Now if just 1 major PC maker installed Linux by default...

I believe that for a lot of manufacturers it comes down to the components they have chosen and the availability of drivers. I would guess that it is where most would have cheaped out on a component and the OEM only makes drivers for windows. It's a lot better these days. I installed Mint on a 2008 MacBook straight from a live cd/USB, no special work required.

Telecoms fail in UK takes down passport scanners in Australia

Mark 65

Re: Timezones?

which ignored us for hours ...

That's just because they're French.

QNAP users: It's your turn to patch in a hurry

Mark 65

FYI 4.2.6 now available for those not able to install 4.3.x

Mark 65

So what's to stop them loading a "patched" version of any other version of the firmware? I'm assuming 4.2.5 was the latest available when they figured it out. How did the original infection occur as a previous poster stated?

There's clearly something we're not being told about the vulnerability of these systems and their firmware.

QNAP are not the most upfront organisation. They repeatedly insisted I was using an incompatible UPS when the system sent a powerout signal to the UPS on power loss. I was forced to by another model in the same series of UPS (where the only difference was the battery size, no other difference) that was on the supported list. This also failed. They told me I'd bought a defective UPS. The UPS manufacturer got involved and low-and-behold a patch was issued to the firmware. No mention of UPS fixes in it but the problem went away. Blame-shifting deceitful bastards as far as I'm concerned.

Mark 65

Users should check whether their firmware has been changed to 4.2.5, and if so, run the company's malware remover (version 2.1.2), and install QTS 4.3.3 if the device supports it; if not, users should install the latest official 4.2.5 release.

Run that past me once more QNAP. If it's on a vulnerable version then update it if possible else download the latest copy of the vulnerable version? i.e. your box is now fucked. I think they need to patch boxes that cannot run 4.3.n

Netgear 'fixes' router by adding phone-home features that record your IP and MAC address

Mark 65

Re: Ok, they spy on their clients

Most of Netgear's kit uses their firmware take on OpenWRT so, in most cases, you can just flash the router with your own firmware which rids you of such pestilent shite.

Oracle crushed in defeat as Java world votes 'No' to modular overhaul

Mark 65

Re: "As per normal with Oracle, they only play by the rules when it suits them."

Their corporate motto appears to be "heads I win, tails you lose".

Someone's gotta pay for Larry's new yacht

Plutus Payroll finally pays up ... but pays people TOO MUCH!

Mark 65

Yeah but no but

Plutus puts the blame for the overpayments on the Commonwealth Bank. But in The Register's experience, banks tend to do exactly what they're told. We therefore suspect that when Plutus hit Go on its delayed pay runs, the instructions were somehow awry.

Hmmm, it was CBA though so all bets are off.

Fancy a relaxed boozy holiday? Keep well away from Great Britain

Mark 65

Re: Really?

I'm not sure you can measure the nanny state nature of a country by the amount it taxes cigarettes and alcohol when you'd then need to take into account whether or not said country has free healthcare that gets smashed by the use/abuse of said items. I believe the UK is high on the nanny state index but I don't think taxation on "bad for your health shit that affects others and loads up the NHS" (alcohol through violence and smokes through passive factors) is a good metric.

It's been two and a half years of decline – tablets aren't coming back

Mark 65

Like you I recently replaced an iPad (version 2) with a newer model, but only because the former broke. Given it was a 2011/12 purchase and was only replaced due to breakage the device had good longevity. Hence, it is only logical that sales would decline over time once a saturation point was reached.

Although I agree that a laptop can be better to use, the iPad wins for keeping the kids occupied and not taken up so much space/weight.

Uncle Sam backs down on slurping passwords from US visa hopefuls

Mark 65

Re: Social Media? Sorry, don't use any.

Also...

  • Travel history during the past fifteen years, including source of funding for travel.
  • Address history during the past fifteen years.
  • Employment history during the past fifteen years.

Could not possibly remember any of that information and I don't tend to keep old passports for souvenirs.

We are 'heroes,' says police chief whose force frisked a photographer

Mark 65

Re: Fixed that for you

Well, you know you've reached the level of a police state when you have to answer questions from the local station's admin staff waving a fucking door pass at you.

Australian Federal Police accessed metadata without warrant, broke law

Mark 65

Re: Smoke and mirrors

Yep, report a minor indiscretion in order that the big stuff can carry on happening. Self-reporting, ffs, that is like any form of self-regulation - abused by all and respected by none.