* Posts by phuzz

6734 publicly visible posts • joined 23 Feb 2010

America: We'll send citizens cash checks amid coronavirus financial hardship. UK: We'll offer £330bn in biz loans

phuzz Silver badge

Re: I'm confused.

I believe they call it 'lobbying' in the States, and it's perfectly legal for some reason.

Broadcom sues Netflix for its success: You’re stopping us making a fortune from set-top boxes, moans chip designer

phuzz Silver badge

Re: If this were a thing...

The internet and BBS's were developed roughly in parallel.

Hello, sub £-100 Moto: Lenovo punts 6.1-inch display e6S at low-cost crowd

phuzz Silver badge

Re: Aged?

The trouble is, I still own a bunch of other devices which still use micro-USB (eBook, a torch, battery pack etc. etc.) so when I got a phone with USB-C I had to buy several new cables and chargers with multiple outputs (so I can charge other devices at the same time as my phone), and I get no advantage that I can see (the storage in my phone is not fast enough to benefit from USB3).

Data centres are warm and designed to move air very efficiently. Are they safe to visit during the pandemic?

phuzz Silver badge
Thumb Up

To do my part I will be hanging a sign in our server room:

"To prevent the spread of disease, please refrain from licking the servers"

That should sort it, right?

Mercury, the closest planet to the Sun, surely has no frozen water, right? Guess again: Solar winds form ice

phuzz Silver badge
Thumb Up

Re: Temperatures can soar over 400C

It's always in double-figures outside if you measure in Kelvin.

Data surge as more Brits work from home? Not as hard on the network as their nightly Netflix binges, claims BT

phuzz Silver badge
Facepalm

Re: Herd immunity

This whole 'herd immunity' plan sort of works, as in, once you've had Covid-19 once, you're almost certainly not going to get it again.

The rather obvious downside is that you're requiring a large proportion of the population to get ill in the first place.

Sure, the majority of younger people will be fine after a week in bed, but it's not guaranteed that people will be fine, and there doesn't seem to be any concrete plans for preventing at-risk people from being infected other than "try and self isolate".

I suppose that if you're the Prime Minister you can pretty much guarantee you'll get good hospital treatment, so fuck everyone else right?

Not exactly the kind of housekeeping you want when it means the hotel's server uptime is scrubbed clean

phuzz Silver badge

Re: Urban Legend? It's not always the cleaner

Joseph Cyril Bamford (ie the bloke who started the company that now bears his initials) was the first person to combine a rear excavator (or 'backhoe' as the yanks call it) with a front digger, to create what British people just call a 'JCB', regardless of manufacturer.

Shockingly, the Mk. 1 Excavator was actually red and blue, not the iconic yellow.

phuzz Silver badge

"The whereabouts of the cleaner is unknown..."

Were there any building works nearby, that were pouring foundations at that time perhaps?

Supply, demand and a scary mountain of debt: The challenges facing IT as COVID-19 grips the global economy

phuzz Silver badge

Re: Already Started Alas

My brother has too, although it's formal redundancy so at least he'll get some final pay.

phuzz Silver badge

At least a lot of IT jobs are just as easy to do from home as sat in the office, so there's no talk of shutting my employers down. In fact, what with helping all our clients rush to get VPNs and soft phones running, I wouldn't be surprised if we have quite a good month or two.

I'm just not sure how it's going to work for companies that (eg) set up trade shows, and if they can't make money, they probably can't pay their IT supplier...

Google reveals the wheels almost literally fell off one of its cloudy server racks

phuzz Silver badge

Re: A couple of degrees...

Indeed, the watercooling on my home computer will work fine up to at least 70° off vertical (more in some axes).

This is handy because I have to tilt it back and forth to bleed all the bubbles out every time I fill it.

phuzz Silver badge
Devil

Re: What were they thinking?

"Management of them in the facility might get slightly annoying at times"

You mean that everyone will have pallet-truck races, when the boss isn't watching?

phuzz Silver badge

Re: As Terry Pratchett reminds us

Or if someone tells you that "you're one in a million!", that means that there's at least seven and half thousand people like you in the world.

Or to put it another way, there's at least sixty people like you in the UK.

Microsoft's Bill Gates defrag is finally virtually complete: Billionaire quits board to double down on philanthropy

phuzz Silver badge

Re: Would you like to be fried with that?

Isn't Peterson the one who thinks that people are like lobsters?

How's this for a JEDI mind trick? AWS waves hand, has Uncle Sam 'reconsider' $10bn contract award to Microsoft

phuzz Silver badge

Re: Simple

I think it looked more like "Do you want free shipping (with a trial of Amazon Prime)". Or at least that's as close as I can get with elReg's comment code.

phuzz Silver badge
Alien

Re: WOT!

You clot! That's clearly a picture of Carter from Farscape!

Fresh virus misery for Illinois: Public health agency taken down by... web ransomware. Great timing, scumbags

phuzz Silver badge

When I say 'static html', I was thinking something more like this, with emergency contact numbers etc. Possibly an image or two, but no need for anything more than that. I'm thinking the sort of page you'd write by hand in a text editor.

So, a single 2kb file, times 200,000 users works out to about 400Mb total, so I think we'd probably end up being network-bound, before getting close to the limits of an average desktop. A GB connection would thereby limit you to about 2000 users per second.

I guess the question now becomes, do you really need a whole desktop, or would a Raspberry Pi handle it?

Website are only as complicated as you make them.

Scripts? CSS? A whole CMS? You don't work in marketing do you?

phuzz Silver badge

Question:

If they decided to get the site back up as quickly as possible, and just used static HTML. Assuming that bandwidth was not a problem, how much hardware would you actually need to serve 200,000 users?

Basically, could you run this off a repurposed desktop, plugged into a fat pipe?

Deliveroo UK adds 'Don't interact with the help' option for when ordering a burger

phuzz Silver badge

"making small chat about the weather for a minute followed by wishing the person you'll probably never see again a nice day/life. would just fuck off and leave you alone"

FTFY

Open-source bug bonanza: Vulnerabilities up almost 50 per cent thanks to people actually looking for them

phuzz Silver badge

Re: Forking NVD

"I need to patch the server because of this new vulnerability, when's a good time?"

"Will this result in downtime?"

"Well yes, about five seconds while I restart apache, but overnight we only get one or t-"

"NO! Unacceptable! No downtime at all! You can have scheduled downtime in six months"

And it never gets patched.

Broken lab equipment led boffins to solve a 58-year-old physics problem by mistake

phuzz Silver badge

Re: Resonant electric universe

"5) Which means that electric force as you know it, generated by electrons, is actually an *oscillating* field at some resonant pattern."

I'm not sure what this 'electric force' you're talking about is, but I assume it's the force imparted to a charge by the electric field that it's in. This may or may not be oscillating.

The charge in this case doesn't have to be an electron (or multiple electrons), it could be protons, or positrons (or more exotic things like muons). A stationary electron (or other charged particle etc.) produces a static electric field, and the force generated by that field is equally static.

You seem to be concluding that because the electric field that was applied in this experiment was oscillating, that all electric fields are "actually an *oscillating* field at some resonant pattern". This is incorrect, electric fields can be stable.

Your "some sort of electric oscillation" from 1) is caused by the experimenters pumping microwaves into their experiment in a (failed, as they later found out) attempt to create an oscillating magnetic field. It is not some underlying property of the atomic nucleus that they were experimenting on.

phuzz Silver badge

Re: No good enough!

Proper chips, obviously.

Thought you were done after Tuesday's 115-fix day? Not yet: Microsoft emits SMBv3 worm-cure crisis patch

phuzz Silver badge

Re: SMB

SMB1 is not enabled by default, and until this bug, SMB3 was looking pretty secure.

Firewalling off port 445 will break any AD integration, which makes it basically useless in a business environment.

Firefox 74 slams Facebook in solitary confinement: Browser add-on stops social network stalking users across the web

phuzz Silver badge

Re: No FB for me, ever

I use Edge to load a handful of tabs that I can't be bothered to keep as pinned tabs in another browser, but I occasionally need to check.

I load Edge, check what I need to check, then close Edge again, without it interfering with my normal browsing.

Good luck pitching a tent on exoplanet WASP-76b, the bloody raindrops here are made out of molten iron

phuzz Silver badge

Re: Hell of a

Ok, that might pose a slight problem.

Maybe paint it white, and give it one of those little handheld fans?

phuzz Silver badge
Thumb Up

Re: Hell of a

My first thought was that if the rain is iron, then you should be able to float a Lead Zeppelin in the atmosphere.

US prez Donald Trump declares America closed to those flying in from Schengen zone over coronavirus woes

phuzz Silver badge
Unhappy

Re: They'll see the worst of it

I keep seeing these graphs showing how if we work together (well, apart) then we can shift the peak of the outbreak and keep it under the dotted line of the capability of our health care system to cope.

Every time I can't help thinking that the dotted line of 'healthcare system capacity' is much higher than it really is in the real world, and no amount of mitigation is going to let us limbo out way underneath it.

Not that we shouldn't try of course, but the NHS runs out of capacity when there's a bad cold going about, and this is going to be worse.

phuzz Silver badge

Re: Another brick in the wall

'Donny boy' it is then.

phuzz Silver badge
Facepalm

Re: Trump should just....?

He's been very clear about it, it's a foreign virus, so clearly foreigners are the problem, not Americans.

Resellers facing 'months' of delays for orders to be fulfilled. IT gathers dust on docks as coronavirus-stricken China goes back to work

phuzz Silver badge
Pint

Re: Just an FYI

"I'm sure I'll be having a beer in the local later"

Enjoy it while you can, there's a good chance that soon the pub will be shut, whether due to government mandate, or just all their staff being off sick.

Microsoft nukes 9 million-strong Necurs botnet after unpicking domain name-generating algorithm

phuzz Silver badge

You know when you're trying to change an IP address remotely, so you change the config, disable the adaptor, and then go to re-enable it, only to realise that your connection just dropped...?

That.

phuzz Silver badge

Re: MS at least try to be the good guys every now and then

I suspect the second part is the important one in this case.

Botnets are worth more, the more members they have, so it makes sense to go after clients, rather than servers.

I'd guess that they're also look at going after phones, but a combination of lower power and bandwidth, spottier connectivity, and higher baseline security*, make them less popular right now.

* Botnets like this rely on attacks that can be massively automated. A complex attack like (eg) Rowhammer, that requires someone to hand tune each attack is just too much effort.

Capita hops on UK's years-late, billions-over-budget Emergency Services Network to keep legacy system alive

phuzz Silver badge

In this NAO report, they state:

"The Home Office estimates that the total cost of providing Airwave is £1.7 million per day whereas a completed ESN would cost £0.7 million per day (paragraphs 1.14, 1.19, Figure 5 and Figure 8)."

But I'm not entirely sure what document they're referring to.

phuzz Silver badge
Facepalm

Re: Optional

"why integrate a system into another system when the first system is no longer going to be used"

There's not going to be one day where they switch off AirWave, and everyone starts using ESN. It's going to be a gradual process, probably with small groups switching over piecemeal (and probably some switching back, and the usual hold-outs refusing to touch the new system until their managers physically take it off them etc. etc.). The upshot of this is that both systems are going to have to run alongside each other for a period of time, and looking at the process so far, that period of time is probably going to be measured in years, if not decades.

"Common sense says you just[....]"

This is a government project, what is this 'common sense' of which you speak?

phuzz Silver badge

Re: The actual question is

"I feel for anyone in the UK who needs emergency services."

It's ok, most of them carry personal mobile phones to cover when the official tech doesn't work.

Budget 2020 in tech: UK.gov splashes cash on broadband and R&D while trying to limit impact of COVID-19 outbreak

phuzz Silver badge

"Number 10 advisor Dominic Cummings"

Can we refer to him as "Mandelson Mk2"?

Mainly because I think it would annoy both of them.

US telcos tossed yet another extension to keep going with Huawei kit despite America's 'security threat' concerns

phuzz Silver badge

Re: Ugh

That's why I used the word 'enough', rather than 'most'.

Is "enough people in the right locations" more precise for you?

phuzz Silver badge

"[Trump] previously said that Huawei's status could be negotiated."

I bet if they renamed themselves from "Huawei Technologies Co., Ltd." to "Trump is Great Co., Ltd." he'd give them an import license in a heartbeat.

Secret-sharing app Whisper shared secrets like last known location and actual password tokens in exposed database

phuzz Silver badge

"Another insecure S3 bucket?"

No, an unsecured Elasticsearch database (which might have been storing it's data in a secure S3 bucket).

So basically the same, but with a nicer front end for world+dog to access the information.

Stuck at home? Need something to keep busy with? Microsoft has 115 ideas – including an awful SMBv3 security hole to worry about

phuzz Silver badge
Devil

Re: Imagine a user...

Programs are data.

The Reg produces exhibit A1: A UK court IT system running Windows XP

phuzz Silver badge

Re: Is this as ususal software related?

Or better yet, don't connect it to a network at all, or if you have to, use a dedicated network card and a crossover cable to a fully patched machine.

No-no-no-notarised: Apple gives Microsoft's Visual Studio Code the all-clear for Mac devs

phuzz Silver badge

Re: Amazing!

The devs where I work use MacBooks, and they do seem like nice bits of hardware that can perform the important task of opening up an SSH connection to the linux server where they're doing their actual programming.

AMD, boffins clash over chip data-leak claims: New side-channel holes in decades of cores, CPU maker disagrees

phuzz Silver badge

Re: Impact?

I used Javascript as a single example of untrustworthy code, that's what the "eg" means.

phuzz Silver badge

Re: Digging the dirt

Or to put it another way, the university gets funding from Intel, and yet still helps out Intel's competition by finding and reporting vulnerabilities for them.

phuzz Silver badge

Re: Impact?

When multitasking became common (eg on the Amiga), there was zero separation, because security was much less of a problem. Partly this was because most computers were standalone, and were never connected to a network, so all exploits required physical access.

The big change wasn't multitasking, it was end users being much more likely to run untrusted code on their machines, eg, in the form of javascript from a website.

phuzz Silver badge

Re: What an absolute suprise!

In case you were wondering about all the downvotes, this article is about AMD making their own mistakes, entirely separate from Intel.

The fact that this is somewhat similar to Melthdown says more about where researchers are currently looking for potential vulnerabilities, than it does about AMD or Intel's design decisions.

Amazon launches itself into retail IT with 'all the necessary technologies'. Not saying which, but you know...

phuzz Silver badge

Re: Pickpockets paradise

" the cameras are not monitoring them pinching stuff from other peoples trolleys"

Do we know that for sure? Given that there aren't any trolleys (you just take things off the shelf and put them in your bag/pocket), I wouldn't be surprised if the cameras just watched for any movement of items.

Plus, when you enter you have to tie your identity to your amazon account via a phone app, so chances are, if you pick-pocketed things out of someone's bag, you'd get charged for it on your way out of the store. Unless you did it in a way which fooled the many cameras, and possible RFID readers (and more?).

Of course, if you can get into the store without giving your payment details, then you can just steal whatever you want from the shelves, (abit whilst leaving CCTV footage from every angle), no need to mug someone.

I'm getting most of my info from this article, and it sounds like currently it can barely cope with people shopping in the 'correct way', so actual theft is about as plausible as getting charged for 5000 bananas by mistake.

NSO Group fires back at Facebook: You lied to the court, claims spyware slinger, and we've got the proof

phuzz Silver badge

Re: Annoying

I suppose you could just hope that this goes on for years and costs them $$$$, but then the lawyers win which isn't much of an improvement.

Months-long trial of alleged CIA Vault 7 exploit leaker ends with hung jury: Ex-sysadmin guilty of contempt, lying to FBI

phuzz Silver badge

"multiple people used the same admin username and password to access the critical servers [...] the passwords used were weak [...] and on top of that, they were published on the department’s intranet."

Wow. So I'm guessing the CIA hires sysadmins who can't cope in the real world then eh?

You wouldn't even get past a basic PCI audit with that level of insecure behaviour.

UK.gov is not sharing Brits' medical data among different agencies... but it's having a jolly good think about it

phuzz Silver badge

I just read the title as "UK.gov is not sharing Boris' medical data among different agencies", which sums up one of the problems with data sharing that might actually get some notice from politicians.

How will they feel when any old civil servant can check their records and find out about that embarrassing little STI treatment?

(Disclaimer, I'm not saying that all politicians have had sexually transmitted infections. I'm just implying it.)