* Posts by 0laf

1977 publicly visible posts • joined 25 Nov 2009

Jeff Bezos supports US tax rise after not paying it for two years – and paying tiny amount in 2019

0laf
Trollface

Yeah she'll be down from $57 Billion to $55 Billion. I'm sure we'll see her registering for her local foodbank while Jeff laughs at her misfortune.

Money can buy you insurance against network break-ins but investing in infosec hygiene wouldn't go amiss, says new NCSC chief

0laf

I don't think the C-Suite are ignoring it but many companies and organisations have been around for a long time and their networks have grown like slime moulds over decades. If these were brand new networks then securing them would be far easier. It's like trying to find a way to make a horse and cart carry a shipping container.

The board probably do see the problem but it seems nearly impossible to fix in a financially viable way, plus they've spent many of the last 5yr decimating their IT departments so they have no resources or skills to do the work even if they wanted to. This is something I've always found hard to understand, C-Suite falling over themselves to proclaim a new digital future yet forgetting who actually has to do the work on anything that is digital.

What happens when back-flipping futuristic robot technology meets capitalism? Yeah, it’s warehouse work

0laf
Terminator

Re: There's a few things....

The video made me think of physicists who work on problems using perfect models.

These robots will work great and be hyper efficient if they are working on perfect cardboard boxes, loaded with perfect goods, transported perfectly ending up stacked in the perfect way.

When they can cope with a Yodel van carrying cheap carboard overloaded, ripped boxes, packed by a disgruntled and probably hungover human loader, driven through a potholed UK road network at excessive speed then parked haphazardly in the vacinity of the loading dock THEN I think this might work.

0laf
Holmes

Re: There's a few things....

Yep my thoughts too. These beasties are picking up boxes using the sidewalls. Never mind the cardboard being slack crumpled or weak, all it would take is a heavy box that needs lifting by handles and these guys are fecked.

Sadly, the catastrophic impact with Apophis asteroid isn't going to happen in 2068

0laf
Mushroom

Is everyone remembering this is 2021

With this year's current record Apophis will probably ( despite the improbably huge nature of space) hit some piece of old space junk which will send it into an inescapable death dive towards Earth which it will hit on December 25th, striking the site a large nuclear waste/weapons dump with uncanny accuracy and just outside the blast radius causing an armoured van filled with an unlawfully developed weaponised new Covid/Flu/Ebola/ variant to crash and burst open next to a crowded area filled with people waiting to go to the airport on holiday all around the world.

I'm just saying, don't buy a lottery ticket yet.

NASA sets the date for first helicopter flight on another planet – and the craft will carry a piece of history

0laf

Re: What are the chances...

Doesn't matter the colour of their hair, you just know they'll have a fine green tan.

William Shatner and Chris Pine will be banging on Elon's door demanding the first flight out there.

I genuinely wish them luck with this. Looking forward to the pictures

Thousands of taxpayers' personal details potentially exposed online through councils' debt-chasing texts

0laf
FAIL

Re: They'll have to increase the council tax to pay the fines.

Banks use email because it's cheap.

Banks use SMS as a MFA toke not because it's secure (it's not any more due to sim swap fraud bringing the entire mobile phone industry into your attack surface), but because it's easy and cheap.

And banks know what they should be doing, they hire people that know security good practice, they CHOOSE not to do it.

Fines and compensation are just operating costs for them. Until the hit on their bottom line is significant they'll continue to make bad choices.

Big problem: Nominet members won't know how many votes they're casting in decision to oust CEO, chair

0laf

What is the legal recourse for a determined board of dubious morality and questionable legality that chose to (allegedly) abuse power in order to bunker down and extract liquid assets from such an organisation?

0laf

And the Scottish branch - Bodgit and Leggit

PSA: If you're still giving users admin rights, maybe try not doing that. Would've helped dampen 100+ Microsoft vulns last year – report

0laf
Facepalm

Re: Why do I need admin rights? Well, because of IT

That's a governance issue not an IT issue.

Senior mangment need to set the rules which IT will operate within. If they don't and leave IT hanging out there to 'deal with' IT stuff because those execs are scared of IT (or scared of looking stupid) then it's their failure not IT's.

But IT will get the blame, because that's what always happens.

0laf
FAIL

It's not just users but sloppy development, or lack of development resource by the vendor, means a lot of legacy applications demand excessive rights as well as out of date dependencies before they will work.

It's not as big a problem as it used to be but it's still there. Particularly bad with behemoth suppliers of near monopoly niche systems.

Space station dumps 2.9-ton battery pack to burn up in Earth's atmosphere after hardware upgrade

0laf

Ballistics Officer

That's a job title I want.

I thought they were just called "Gunners" in the old days

UK Space Agency will pay a new CEO £125,000 to run non-existent space programme

0laf

Give it to...oh

I feel very late to the party with my "Give it to Dido" comment.

I doff my hat to my fellow commentards.

Privacy purists prickle at T-Mobile US plan to proffer people's personal web, app pursuits to ad promoters

0laf
Flame

100% of people don't want ads.

But they didn't ask that question.

I've used adblockers, script blockers, tracking blockers etc etc for so long now that when I see the web without them it's a shock.

I feel like Roddy Piper in "They Live" putting on the special glasses.

European Banking Authority restores email service in wake of Microsoft Exchange hack

0laf
FAIL

5...4....3...2...1...

And

GO Excuses!

GO Platitudes!

GO Buck passing

1) It was a sophisticated attack

2) The security of our customers' data is our top priority

3) It was the fault of the graduate IT apprentice on 50% of minimum wage / his overworked engineer manager

Delayed, overbudget and broken. Of course Microsoft's finest would be found in NASA's Orion

0laf
Terminator

I can see it now, heroic astronauts on the dark side of the moon trying to reach the environmental control console to turn on the O2 (moved for the 563th by MS, now nested 14 layers down in the "Breathing console" of the new "Comfort" section) only to get....."unable to contact licensing server".

The torture garden of Microsoft Exchange: Grant us the serenity to accept what they cannot EOL

0laf
Flame

Re: Situation normal for Microsoft

@anthonyhegedus

Oh aye your post with bells on. There was an El REg story not that long ago where there was a webiste dedicted to listing all the 365 admin consoles and there were about 185 of them.

If the number wasn't bad enough MS has mutiple lifecycles of consoles administering 75% of the same stuff whilst all shifting in and out of fashion or existence.

How did things get his bad where 'good' development feels like an entire ecosystem of critical systems not just built on shifting sand but built on shifitng sand in a toddler's sandpit.

Then away from the admins think about the millions of man hours lost everytime MS decides to do a featuer update along within moving all the user controls around.

Then think about those of in governance trying to stop peopple breaking the law moving data around whilst MS pumps out messages to my user saying "why not sign up to this piece of random filesharing shit".

Arseholes!

While Reg readers know the difference between a true hacker and cyber-crook, for everyone else, hacking means illegal activity

0laf
Paris Hilton

I know the real meanings of 'Hacker' and 'Hack' and know the history back to Ol' Captain Crunch days.

But you've lost that word, it's gone and you're not getting it back.

Maybe you need to think of a new one or bring back and even older one - tinkerer, modder etc

Dutch government: Did we say 10 'high data protection risks' in Google Workspace block adoption? Make that 8

0laf

MS too

365 is practically impossible to control properly too.

The data snaffle isn't maybe quite as a bad as Google but everything else is.

I'm more concerend about Google Classroom which my kid's school is forcing him to use. As well as likely snaffling any data he puts in, it's rubbish to use.

Would you let users vouch for unknown software's safety with an upvote? Google does

0laf
Facepalm

Problem = people

I've yet to find the bottom of how far people will go to prove just how stupid they are.

Just the last few days have made me question Darwin's theory of evolution since people as stupid as I've met recently should have choked to death on a hammer or other large inedible object long before they reached breeding age.

Asking these people to decide on what consitutes malware seems somewhat of an irrational decision. These being the same people that will curse science as dark magic when asked to get vaccinated on their high technology mobile phone device. Which they seem to think was grown on an organic phone farm.

President Biden weighs in on Amazon unionization efforts, warns giant to steer clear of threats, coercion

0laf
Terminator

Re: Ah, Amazon

Amazon is only tolerating humans until it can replace them.

The Great Borkish Breakfast: I'll have a cup of tea, a sausage roll and a side of bork, please

0laf

Re: Pie?

Plenty of foody placed get by with a big board on the wall. Onto this they actually write items and prices. This piece of exotic technology is able to survive blackouts, earthquakes and possibly the apocalypse. It consumes no energy when in use and can be recycled into a shutter for preventing zombie ingress.

Updates are required periodically and are performed manually but support is available indefnitely although no guarentee can be made that all colours of chalk or paint pens will be avilable at all times.

As I explained to my son, sometimes a pencil and paper are the right tools for the job. The best answer isn't always high tech

A word to the Wyse: Smoking cigars in the office is very bad for you... and your monitor

0laf

Re: Don't think there's anything worse than the motherboard of a smoker's laptop...yuk

Yep anything fizzy or fruity was death to electronics. If someone said they'd spilt coke, irn bru (possibly better than coke at dissolving electronics) or fruit juice normally we'd just say it was dead and not to bother. If it ever started working again it was always temporary, the sugar and acid would kill it soon enough.

0laf
Childcatcher

I still have nightmares

I did a repair job once on a machines that was constantly overheating and shutting down,

When I opened the case which was a mini tower under a desk, the case was half filled with cigarette ash covering the cpu and fan.

The smell was overpowering and disgusting and I've never really forgotten it.

The owner was in the habit of tapping his ciggie at the front fan grill, the ash was convieniently drawn into the case making the whole thing a 5Kg ashtray that hadn't been emptied for 4yr.

So, bye-bye mighty nerd haven Fry’s, took Silicon to the Valley... and now you must die

0laf

Maplins owners didn't even try to make money. Even in the closing down firesale everything was 50% more expensive than most online vendors

Scottish rocketeers Orbex commission Europe's largest industrial 3D printer to crank out 35 engines a year

0laf

Re: Suddenly..

https://www.sffchronicles.com/threads/565433/

"The Unorthodox Engineers were the subject of a series of science fiction short stories by Colin Kapp. They were a misfit bunch of engineers who solved problems of alien technology/weird planets in the future. The stories had a very large grain-of-salt-type humor.

They were commanded by maverick engineer Fritz van Noon and included, amongst others, a convicted bank robber as quartermaster (on the entirely-sound grounds that he was likely to be the most capable person for the job).

The Unorthodox Engineers originally appeared in various British SF magazines:

"The Railways Up on Cannis" (New Worlds October, 1959)

"The Subways of Tazoo" (New Writings in SF 3)

"The Pen and the Dark" (New Writings in SF 8)

"Getaway from Getawehi" (New Writings in SF 16)

"The Black Hole of Negrav" (New Writings in SF 25)."

NASA sends nuclear tank 293 million miles to Mars, misses landing spot by just five metres. Now watch its video

0laf
Alien

I wonder if they'll wander by any of these bits to see if they kicked up anything interesting when they lithobraked?

Probably nothing there after the Jawas have stripped them.

0laf

Re: Mars probe success rate

They said a figure in 1897.

0laf
Thumb Up

Top stuff

I've long thought it would be great to see video of one of these fantastic machines working on Mars, although I've accepted it probably didn't add much to the science.

I'm not disappointed by the landing footage.

I'm hoping we'll get regular little vides of work on the surface

Hero to Jezero: Perseverance, NASA's most advanced geologist rover, lands on Mars, beams back first pics

0laf
Boffin

Re: 30 sols

The little drone copter is just a test. If it works, fantastic, if it doesn't then well lesson learned and the nuclear tank will carry on and do 99.9% of the mission as designed.

0laf
Pint

Cheers and beers

Wonderful to see another sucessful landing from those steely eyed missile people.

I watched the landing live feed with my autistic son. Space is one of the few subject that really lights up his interest in anything. He want's to be one of the people in that NASA Dark Room, which is no bad ambition to have.

Beers for the flight team and I look forward to news from the surface science team.

There is a picture here of the hundreds involved in the mission. I'm sure that's just a fraction really - https://mars.nasa.gov/resources/25063/the-team-for-jezero-crater/

Microsoft announces a new Office for offline fans, slashes support, hikes the price

0laf

Re: All companies suddenly switch to offline mode

I use OneDrive personally and I find it pretty usefull.

I also use OneDrive professionally and in conjunction with SharePoint and the many other 365 overlapping apps it's an utter PITA.

OneDrive/Sharepoint and data retention legislation do not mix. Also I can't find anything ever, but that's pretty much the norm for Sharepoint I suppose.

Nurserycam horror show: 'Secure' daycare video monitoring product beamed DVR admin creds to all users

0laf

Re: WebCam And Video Everywhere

Security Theatre.

Well known and established practice.

0laf

This is GDPR infose stage 2 - denial

Stage one was - ignore it

Most major vendors I've run into in the last 12-24 months have successfully completed GDPR stage 1 which was to completely ignore the legislation and pretend nothing was happening. This allowed them to avoid any additional costs for development work that would have been needed to actually be compliant with GDPR.

Since most existing customers were already in contracts the ICO allowed these to continue under the old DPA, so as far as the vendors were concerned all was well.

We're now well into stage 2 - Now that those old DPA 1998 contract are expiring savvy customers are now asking difficult questions about product compliance with GDPR (DPA 2018). Since those vendors did fuck all in the years they should have been getting ready for GDPR and preparing for the post DPA 2018 world their products now look woefully inadequate in terms of security. However not to worry, especially if you are a near monopoly provider. Just deny the insecurity in your products, state it's secure 'enough' safe in the knowledge your customer has nowhere to go and the ICO is pretty likely to do bugger all unless you get hacked. If you do get hacked don't forget your handy "Dido Harding" phrase book - sophisticated hack, personal data is our top priority yadda yadda yadda.

Personally I'm keenly awaiting stage 3 -blind panic.

This will come after a couple of major hacks when ministers feel they have to get of their arses and pass the blame onto someone. The ICO will pick a few juicy targets to take tro court and fall out should make enough waves in the market that someone might actually open the coffers enough to get things brought up to minimum standards.

BTW if you are a vendor and relying on username and password to protect a web exposed system processing personal or special category data it really isn't fucking good enough, and a PIN sent via email is not "taking consideration of the state of the art" under Article 32 of the Regulation.

If you don't really know what MFA is stop trying to bullshit the people who do know, you just look stupid

And for this bucch of muppets "Melissa Kao, a director of Footfallcam Ltd, the firm behind Nurserycam, insisted to The Register that what infosec researchers had found was "legacy non-functional codes" [sic] that were "there to distract hackers" '. I really wish I was there to hear to say that crap to the ICO

Fancy a £130k director of technology role with the UK's Ministry of Justice? All you need to do is 'fix the basics'

0laf
Terminator

This is a poisoned chalis for anyone that actually wants to do the job. Good if you want to get it on your CV and have the skills to jump ship before everything tanks

Now there's another thing on Earth that be can seen from space: UK lappy sales in pandemic-struck 2020

0laf

Whomever in marketing for laptop manufacturers could do with a kick in the nuts.

It's far too hard to get a device for reasonable money that has all the necessary items.

It seems all you can get are overpowered CPUs, alcking RAM and with undersized SSDs unless you pay a fortune. Even then generally you get an even more overpowered CPU with enough RAM but a miserly amount of disk space.

Screens are feckin tiny too, who actually want to spend a day at some working on a 12 or 13" screen. Not everyone has space for external monitors and keyboards.

It might be nice to have an actual selection of hardware in the market but they all seem make to the same specs by the looks of things.

Ever wanted to own a piece of the internet? Now you can: $1 for a whole gTLD... or $2.8m if you want a decent one

0laf
Flame

Bottom feeders

Wasn't the entire business case for these something along the lines of - "You've bought .com, .org, and .net; now you should really buy up the 50 other shitty versions of your domain coz if you don't someone else will and they'll put nasty things on it!".

Ring, Ring, why don't you give me a call? Amazon-owned doorbells aren’t answering after large-scale outage

0laf
Unhappy

Re: Smart home?

Isn't it unacceptable that you need to surrender your privacy in order to access the technologies that can make your life easier at a reasonable cost?

Surely that is discrimination.

Same old complexity beneath Windows 10 Cloud Config means it's unlikely to compete with the likes of Chrome OS

0laf
Flame

Complexity?

From a compliance and security pov M365 takes complexity and obsfucation to a new level.

It makes coming up with the Grand Unified Theory of physics seem "a bit tricky" in comparison.

Robinhood plays Sheriff of Nottingham as it pauses GameStop, AMC, BlackBerry etc stock sales, gets sued

0laf
Black Helicopters

Question from a layman

If this sort of David Vs Goliath stock battle becomes legitimised, and hedging becomes a largely unsustainable business model what would be the effect on the markets and commerce in general.

Would we be in a better world?

(I understand in the real world the little guys will get crushed by the politicians that live in their pockets but humour me with a thought experiment)

Samsung Galaxy S21: Lots of little downgrades, but this phone is more than the sum of its parts

0laf

And software

Is it still full of Samsung cruft, spyware and tracking?

Does it try to inject advertising into my browsing or use of apps like Samsung tellies do.

UK Cabinet Office spokesman tells House of Lords: We're not being complacent about impact of SolarWinds hack

0laf

Well it's much more efficient to shoot the messeger and then deny the issues.

We don't do cover ups any more, they are expensive and need skill. Dumb denial works just as well.

Smartphones are becoming like white goods, says analyst, with users only upgrading when their handsets break

0laf
Meh

Survey says...

They could have saved some time and money and just visited El Reg a few years ago when every commentard had already called the switch of phones from shiny to utility.

Laptops given to British schools came preloaded with remote-access worm

0laf

Re: Question

Some schools are on networks shared with local authorities.

Local authorities have network links into central government departments.

Hitting schools is a low cost, low risk supply line attack so well worth doing even if the chance of a big payoff are low as well.

If nothing else hitting schools causes a general disruption especially if kids going home affects industry, government and decreses general trust in the goverment as a whole.

Back to the office with you: 'Perhaps 5 days is too much family time' – Workday CEO

0laf
Unhappy

Now Vs soon

I think we need to conder the needs of now and the needs of the near future (post lockdown world).

VC has worked to keep things going. If you commute a long way it's probably been a godsend.

But a VC meeting loses the social context of a meeting, the bit before and the bit after. The walk to the door is sometimes where a key piece of information can come together or slip out.

My real life meetings were usually punctuated by multiple "while you're here" ad hoc meetings and discussions. Those were very important and right now they are gone.

My partner was pregnant when the whole COVID mess kicked off so I've been 100% out of the office for nearly 11 months.

Home schooling is more of a disruption than anything else, well that and a baby that lacks stimulation because every mother and toddler group or event is closed.

We'll never go back to 100% office work. That's gone. We need to make massive savings to cope and building closures are going to be one way of doing it.

Boss behind 'reset' of delayed, overbudget Emergency Services Network shifts to new 'digital' Cabinet Office role

0laf
FAIL

Another graduate from the Dido Harding School of Business.

They teach nothing about business but they are very good on how to integrate yourself with the ruling classes and bagging yourself a minister to keep you warm between contracts

100GB doesn't always cut it in these remote-working times so Microsoft has upped OneDrive file size upload limit to 250GB

0laf
Headmaster

Clarification please?

I think you are referring to the 'free' OneDrive limit although this doesn't seem to be clear in the article. If you're a paying customer you get 1Tb per user.

How good are you at scoring security vulnerabilities, really? Boffins seek infosec pros to take rating skill survey

0laf
Childcatcher

Re: Bucket effect

@Halfmad - This

CVSS is useful as a baseline but it isn't a measure of risk. IT also takes no account of the aggregation of risks.

If any infosec bod is just relying on CVSS then they're not doing 90% of the job.

I know there is the calculator which does allow you to input some environmental factors to modify the score but it's still a long way off real life and the management of real risks.

Stony-faced Google drags Android Things behind the cowshed. Two shots ring out

0laf
FAIL

I dislike smart things

toally agree with idea that the focus of IOT should be on industrial sensors and systems.

For domestic use, unless you have additional support needs, I just don't think 'smart' is worth either the price or the loss of privacy you must pay to use them.

Far too many of these mainstream products just get dumped in order to either save cash for the supplier or to milk the customer. i.e. Sonos.

And for me 'smart' mre often than not means frustrating to me. Devices that take an age to do a simple task, or fail because some process sit stuck in a looop or are more occupied with mining my data than doing the function I paid money to have done.

We got it! Japanese space agency confirms its probe has Ryugu asteroid samples

0laf
Pint

I for one....

I for one welcome our crumbled Bourbon biscuit (cookie) overlords.

And long cool pint of Sapporo for the scientists and engineers involved.

I look forward to the results of your endeavours.