* Posts by Ian Michael Gumby

3480 posts • joined 11 Apr 2006

Hackers uncork experimental Linux-targeting malware

Ian Michael Gumby
Silver badge

@AC Re: Keys good passwords bad

The one thing you failed to mention...

1) Disallow root to ssh.

2) Only allow a limited set of users to ssh and make sure none of them are system accounts.

3) Increase the fail2ban jail time by a factor of 10 or 100

Even with fail2ban running, I see a lot of attack attempts. The next step is to start banning net blocks from countries where you know you're not going to have traffic to or from.

0
0

Microsoft plans summer CRM war opener against Salesforce

Ian Michael Gumby
Silver badge
Boffin

@Zippy ... Re: Let me guess

No; no reason to 'opt out'.

The issue may become what to put in your linkedIn account, in fact I know of a couple of friends of friends who were asked to document the company that they currently worked for in a specific way...

Its part of their online branding.

I never had a FB account until I had to pull a contract at FB. Of course, I couldn't delete it when I left.

(I shut it down, but FB doesn't delete the accounts.... just in case you want back in... )

0
0
Ian Michael Gumby
Silver badge

@AC Re: Meh.

It isn't a question of self promotion.

First, if I'm interviewing someone its a good source beyond the CV and it may open the doors to friends of friends who can give me the real skinny.

Second it helps to see if the CV matches what they say on LinkedIn.

Third, its a way to keep in touch with others in the field because people tend to move around.

If you have a good network, you'd understand the value.

1
2
Ian Michael Gumby
Silver badge
Boffin

Meh.

T.A.N.S.T.A.A.F.L shouldn't be new to anyone here, especially if you've read Niven's work.

So you walk in to using a product knowing that there is value to being on LinkedIn.

If I meet someone in my profession who doesn't have a LinkedIn profile... big red flag.

The only information in LinkedIn is professional information that I want published.

So there is value to being on LinkedIn. Its a way to remain in contact with those in my industry or who have similar backgrounds.

I don't do Facebook. Where's the value? There, its all personal information and you are the product.

Until there's a competitor and Microsoft shows that their abuse of LinkedIn exceeds the value it provides, there's no reason to leave.

Other professional networks have come and gone. They couldn't obtain the critical mass that LinkedIn has.

6
6

Huawei P10 Plus: The bigger brother is the real contender

Ian Michael Gumby
Silver badge
Coat

Re: Small point

I agree, and if you want the best camera phone, its still the Lumina 1020.

Yeah the OS was crap, but it still made calls, it had the apps you needed for travel, and you did have a camera in your pocket.

If only Nokia still made hardware... maybe for apple? Now that would be brilliant.

Mine's the coat with the 1020 in it. (And yes, I still have it as my backup phone in case I have to travel overseas for a long period of time. )

0
0

Uber sued by ex-Lyft driver tormented by app maker's 'Hell' spyware

Ian Michael Gumby
Silver badge
Boffin

Re: "Unlike Lyft, Uber changes the tokens it uses..identify drivers, to prevent such tracking."

Re: "Unlike Lyft, Uber changes the tokens it uses..identify drivers, to prevent such tracking."

Which explains the UK's 3rd world bus service.

Have you ever taken a bus in the 3rd world? or in the US? UK buses may not be perfect, but they really aren't that bad..

-=-

In Chicago, what makes the bus service bad is the cars that park in the bus lane causing disruption. Or you can take the EL which isn't as bad as NY but getting there.

I still have my oyster card from riding the tube in London. Not bad. Cleaner than the EL, and you probably won't get mugged...

3
0
Ian Michael Gumby
Silver badge
Boffin

@AC Re: Welcome to the sharing economy

Sorry, its not a question of a 'sharing economy'.

The disruption is that you're allowing individuals to skirt the rules many areas have concerning livery service. It allowed non-regulated drivers to operate a 'gypsy cab service' where Uber provided the app and infrastructure for a large percentage (20%) of the cost of the service to manage the credit card processing, payments and logistics of the ride.

At scale, that's a huge margin once the infrastructure is paid off. Of course Uber is still not profitable (at least that's the word on the street because of the costs of developers, branding and of course the lawyers and PR people. )

What Uber has done is essentially allows anyone with a car to become a part time hack using their own vehicle.

The reason you see drivers leaving is that it takes them a year to realize that they are losing money while working for Uber and could make more if they take a minimum wage job in a large metro area. The only reason you do Uber is that there aren't enough 'flexible' hour jobs to go around.

As someone who's in the 5% but not the 1%, I can tell you that I rarely use uber. My main gripe with cabs in Chicago is that many are the economy Prius types where you can't sit upright in the back seat, or the cab is on its last legs falling apart. So I end up taking Uber Black which is on par with limo services because the limo drivers are driving for Uber when off shift. If I'm out and about, I'll hail a cab.

5
0

Uber cloaked its spying and all it got from Apple was a slap on the wrist

Ian Michael Gumby
Silver badge

Re: Are fingerprints not public in the US

No, they are still private.

Fingerprints are PII, therefore those who handle them must follow PII guidelines.

I'd love to hear of any case law that says different.

1
0
Ian Michael Gumby
Silver badge
Boffin

@Buzzwords Re: Symbiotic relationship

By that token its a two way street.

1) You can still hail a cab via the App (Curb)

2) You can still use Lyft

3) You can figure something else out like hailing a cab the old fashion way.

So what would happen if Uber suddenly lost 30-40% of its customers?

Very public and issues like these won't be relegated to tech web sites but front page on half a dozen printed news papers and on the Tube.

The other issue is which apps do you rely on?

On my iPhone, I don't turn on location services because the ToS has it set to either be off or always on.

Which means Uber can track you even if you're not using the app.

I am close to removing the app altogether and just use a limo service when I need rides where I can't easily hail a cab or drive. And yes, limo services are cheaper than Uber when you factor in Uber's surge pricing.

3
0

Stanford Uni's intro to CompSci course adopts JavaScript, bins Java

Ian Michael Gumby
Silver badge
Boffin

Re: As everyone in Silicon Valley knows

If you want the best, you head to the Midwest.

0
0

China 'hacked' South Korea to wreck Star Wars missile shield

Ian Michael Gumby
Silver badge

@Voyna Re: THAADD

Nice Catch-22 reference.

0
0

Nuh-uh, Google, you WILL hand over emails stored on foreign servers, says US judge

Ian Michael Gumby
Silver badge
Boffin

@Richard 12 ... Re: Yeah, but...

The answer is rather simple.

You comply with the laws of your country regardless of the ownership.

In other words you politely decline to do the work stating that it would be a criminal act in the UK.

In both countries, it would be illegal for Company B to order you to break the law in the UK, even if it were not an illegal act in the US.

Sorry but your example is silly.

4
2
Ian Michael Gumby
Silver badge
Boffin

@Doctor Syntax ..

The judge did the right thing.

The devil is in the details.

There is no sovereignty issue here. I know that sounds wrong, but you have to understand that its a US court demanding data on a US citizen which can be accessed in the US yet Google is storing it outside the US for whatever reason.

Were the US court asking for data on a NON US Citizen who never spent time in the US and the data was stored in the country of origin... you may have a case about data sovereignty.

2
1

Drunk user blow-dried laptop after dog lifted its leg over the keyboard

Ian Michael Gumby
Silver badge
Mushroom

Bollocks!

Look,

Human urine smells worse than dog urine, however both are manageable and there are worse things that smell.

All he had to do was to get an old thick towel, buy some rubbing alcohol , cotton swabs and cotton balls and some latex or nitrile sterile gloves and take out the usable parts. Clean them with the alcohol and let them air dry. You could them reuse them in a "new" pc or put them into another pc of the same model. (Wear a surgical mask if you need to.)

Really you just need the hard drive, but sometimes other parts come in handy like memory if your manager had more memory than the rest.

I have to wonder why this guy was such a snowflake. I mean there are literally worse things to deal with. Try working with livestock on a cattle ranch. When you put a herd thru a cattle chute to give them their meds and dehorn them or castrate the bulls to steers, you end up getting covered in blood, manure and whatever. You just have to go back, strip naked and then head in to the house to shower off.

And you're worried about a little piss?

6
3
Ian Michael Gumby
Silver badge
Devil

Re: Good on Jim Re dog

That'd be my question too. A normally housetrained dog isn't suddenly going to take a piss on the boss's laptop

That depends on the dog and the owner.

Dogs have personalities and some are known to get in to mischief if their owner doesn't give them enough attention.

6
0

PACK YOUR BAGS! Boffins spot Earth-size planet most likeliest yet to harbor alien life

Ian Michael Gumby
Silver badge
Boffin

@Vector ... Re: Even if we could get there, somehow

"we'd just have to wave to them from orbit."

...while they laughed at how fragile we are...

Uhm... you do realize that if life existed at that amount of gravity, they would be much denser and squat.

If anything they would probably be more akin to an alligator than a human and more aquatic since the buoyancy would help.

Of course because of the heavy gravity... one could imagine the land based creatures would have a much shorter lifespan.

0
0

'Nobody's got to use the internet,' argues idiot congressman in row over ISP privacy rules

Ian Michael Gumby
Silver badge
Big Brother

Re: term linits

Now you know why Trump wants to drain the swamp.

Seriously. No internet, no commerce, food, transportation, etc..

Your car needs gas. You go to the local gas station. But they are out. Why?

They can't get an order to their suppliers.

You need food. But the shelves in the grocery store are bare.

Air travel? forget about it. There's no private networks anymore.

But how do you explain that to a guy who's more worried about keeping his flow of 'donations' to his political coffers flowing?

17
2
Ian Michael Gumby
Silver badge
Mushroom

Re: Senior Moment

Sorry no.

It has nothing to do with age. It has to do with a lack of understanding of what and how the internet is used today.

I wonder if he would understand a hypothetical aerial nuke burst that knocks out all communication that isn't hardened. Do this over San Francisco and you've taken down a chunk of the US infrastructure.

Then nothing gets done. No air travel, no train, no commerce, not just e-commerce but commerce.

Then lets see how he reacts.

Its true, that you only need clean air, clean water, food and shelter to survive.

But then this country is more than substance survival...

8
0

Sysadmin 'trashed old bosses' Oracle database with ticking logic bomb'

Ian Michael Gumby
Silver badge
Boffin

Re: Theres a lesson here..

Its never OTT.

You have to always be professional regardless of how mucked up the employer is.

What this guy did was criminal and while they are taking a civil course of action he should still be charged.

What people don't understand is the meaning of conversion. Its a bit complicated. Imagine if you illegally gain access to a computer system and then use it to commit a crime. While you don't take actual possession of the computer (locked away in a secure room) you use it to commit a criminal act thus its theft by conversion.

0
0

Leaked NSA point-and-pwn hack tools menace Win2k to Windows 8

Ian Michael Gumby
Silver badge
Paris Hilton

Re: Pays to be running Windows 10

The whole advertising industry is based on the idea that there's always more privacy left to violate.

That's what she said!

Wow, it even works here too.

7
0

Far out: Dark matter bridges millions of light-years long spotted between galaxies

Ian Michael Gumby
Silver badge

Re: Dark Matter? What about a worm hole?

I'm not so sure about that.

I mean you're 'bending' space.

You may not see it, but you would be able to detect some of the effects of it, right?

0
0
Ian Michael Gumby
Silver badge

Dark Matter? What about a worm hole?

Wouldn't a worm hole have the same indicators?

0
0

NoSQL slinger Basho looks like it's suffering from a case of NoBIZ

Ian Michael Gumby
Silver badge

No critical mass

They were doomed long ago because they never gained critical mass in terms of a customer base.

I guess many here are too young to remember all of the failed companies with decent products back in the 90's. Silicon Valley is littered with them.

0
0

Verizon's bogus bills tanked my credit score, claims sueball slinger

Ian Michael Gumby
Silver badge

Nothing new here.

Verizon and Sprint have done this in the past.

It happened to me many moons ago. I had switched back to AT&T due to a job change and when I found their ding to my credit, I disputed it with the credit agency. (Also Trans Union) I told them that I hadn't had an active account with them for over 7 years, and the phone company disputed that fact. claiming I had a balance of something like 68 dollars on it.

Eventually it rolled off the record. About the only thing you can do other than pay the amount they claimed you owed. As to hurting my credit, it really didn't. The credit company had my dispute on record so that account was flagged.

But I wish this guy well and hopes he can win. It may end up being a Pyrrhic victory I'm afraid.

14
0

Fabric maths: Pure + Cisco = end-to-end NVMe

Ian Michael Gumby
Silver badge
Childcatcher

Can you say $$$$$

Sorry, while I love the tech... think of the cost and what you're getting versus alternatives.

A cluster of servers w NVMe drives with a distributed file system versus disk array?

What am I missing that would make this thing attractive?

Think of the children! Think of how better you could spend the money!

1
1

Nvidia says Google's TPU benchmark compared wrong kit

Ian Michael Gumby
Silver badge

Google still kicks NVIDA in terms of power...

Not a fan of Google but 75W vs 250W... that's a lot less heat and power consumption.

And its still twice as fast as Nvidia.

I hope Nvidia decides to step up to the challenge and improve performance while reducing power consumption.

4
1

Dr Craig Wright lodges 51 blockchain patents with Blighty IP office

Ian Michael Gumby
Silver badge

@Voland ... Re: I laugh yellowly!

Not exactly.

If the application cites prior art and then extends it with something that is novel , new and not obvious... it could be patented.

What sucks is that what you or any IT profession whose expertise may find it obvious, the patent examiner may not.

So we end up with a lot of patents that should never be granted and it costs $$$$ to invalidate the patent.

0
0

Ex-IBMer sues Google for $10bn – after his web ad for 'divine honey cancer cure' was pulled

Ian Michael Gumby
Silver badge
Boffin

@Charles 9 Re: Expensive Laughter I wonder

Vexatious litigation requires that the idiot sued Googles multiple times over things that are not true or suing as a way to harass someone thru the courts. One lawsuit doesn't make one a vexatious litigant.

As much of an idiot this guy is... he hasn't reached the point of being vexatious.

Being labeled as a vexatious litigant means that this guy loses the ability to file any lawsuit and courts do not make that decision lightly.

0
0

Facebook's 'delightful' AI Clippy the Paperclip creeps into Messenger

Ian Michael Gumby
Silver badge

Re: Citation Needed

I think you would find a better example from Larry Niven. One of the tales from the Drago Bar.

(And it also was in another anthology of his works. Its been several years since I re-read his stuff)

0
0
Ian Michael Gumby
Silver badge

Re: Yet another reason...

Or to avoid FB all together.

11
0
Ian Michael Gumby
Silver badge
Flame

@Mage Re: No,

I think you missed a very good point... when you said snooping.

What it really shows is that anything you do on FB is monitored with the intent to monetize you. Everything you look at, talk about, or post is captured so that FB can then sell your information based on demographics as well as to tailor your news feed to tailor your viewpoint.

The AI is an extension of it and a constant reminder that you're their product.

Note: The flame isn't for you... but that I am agreeing with you and the flame is meant for Facebook.

5
0

Outsourcers blamed for cocking up programmes at one in three big firms

Ian Michael Gumby
Silver badge

@Diogenes Re: Its the death spiral stupid!

Doesn't work.

10 contracts, 10 teams with competing agendas.

Now instead of one throat to choke, you have 10 throats.

0
0
Ian Michael Gumby
Silver badge
Boffin

Its the death spiral stupid!

Look here's what happens.

Say its IBM. They write up an outsourcing deal that converts the company's tech to IBM employees.

Over the first phase, IBM slowly converts the employees to 'lower cost resources' and RIF the former employee. Due to the cost reduction, IBM makes a profit. As initial contract ends and its time for renegotiation, customer sees this and negotiates a lower price. IBM further reduces quality of staff and brings in less experienced and cheaper resources. Again next cycle same thing. And if they can't get cheaper resources, they reduce the number of resources. Overworked under educated staff tend to make mistakes and write crap code because they don't know what they are doing.

And you can bet IBM's lawyers wrote in enough legalese that it ends up being the client's fault and not IBMs.

Alternatives to this is the company going with IBM , then bringing in TATA or someone who claims that they could do the same but for less money. Bean Counters don't get it. They are like home cooks who can boil water thinking that they could work as a sous chef in a 3 star or better restaurant.

5
0

Revealed: Blueprints to Google's AI FPU aka the Tensor Processing Unit

Ian Michael Gumby
Silver badge
Boffin

@Ken Re: Can it do anything else?

That's part of what makes this interesting.

Google is investing in custom hardware that is designed for a narrow niche of applications.

Its an indicator that it makes sense to buy custom hardware and not to rely on COTS because the value exceeds the costs.

0
0
Ian Michael Gumby
Silver badge
Terminator

@AC ... Re: Not so fast?

You gonna write the Linux Device Driver for that?

Didn't think so.

0
1
Ian Michael Gumby
Silver badge
Boffin

@Steve WTF? Re: Tech-Porn is not news

Again Seriously WTF?

Look, NVidia makes GPUs that are doing double duty thanks to CUDA. So for a commercial product, they are taking advantage of their advancements in one area and applying them to another.

In terms of Google, they *are* involved in self driving cars. Do you not pay attention to the news where they outed UBER's recent hires for stealing their tech?

AIs in phones? Really, for what? predict the next digit you're about to dial, or to automatically phone your wife to tell her that you're taking an uber home because you're too tanked to drive your self driving car?

Seriously... Do you not also understand that if you thought exploding phones were bad from batteries watch how you get 3rd degree burns from that GPU or FPU generates enough heat to burn a hole in your pants.

1
0
Ian Michael Gumby
Silver badge
WTF?

@Steve Channell Re: Tech-Porn is not news

Sorry, I have to give you a WTF? icon.

Google designed the chips to give them a competitive advantage. There is no incentive of them to license the chips.

At the same time, these are custom built, purpose built chips. Even if they were to market it and license it, is there enough of a potential customer base to justify the costs?

The real significance to this story is that there is a shift towards custom built components and configurations when it can give you a competitive advantage. While COTS will keep costs down, the business value, reduction in operating costs... custom makes sense.

This isn't tech-porn. Its showing a disruptive shift in thinking.

11
0

Scottrade admits server snafu blabbed 20,000 customer files to world

Ian Michael Gumby
Silver badge

No security.

SQLServer DB , plaintext and it looks like no or little security.

They should be hit with massive fines because of lax security. Note: They moved PII data in to the cloud which exposes them to more risk. Had the unsecured server been behind their firewalls, less risk of damage.

If I were a Scottrade customer, I'd start a class action lawsuit.

Yes its 2017... no excuse.

0
0

Indian Business Machines? One-third of Big Blue staff based there and Bangladesh

Ian Michael Gumby
Silver badge
Boffin

@John, err. yes...

IBM has been moving jobs off to lower cost, however... they have to also do near shoring options. This way the workers are in the same time zones where the work is being done. (E.g Brazil for US ops)

This is for sales and ops support. So while she wants to push ops to lower costs

In terms of Global Services or whatever they are calling themselves... they have been moving people offshore for years. Now the fun thing... H1B or L1B are going to be limited and they will have to start hiring in the US. I would imagine this to be the same for the UK, however, it seems that since India is part of the Commonwealth it may be easier to onshore workers.

Ginny is facing a couple of issues.

1) She needs to kill old tech. Even if profitable, she's going to move away from it.

I wouldn't be surprised if she doesn't open source her database portfolio.

2) She needs to clear out deadwood. Her push is towards Cloud. So how many of the Cloud staff are being made redundant?

I'm sure you'll find that the bulk of the older folks getting made redundant are in those techs.

0
2

IBM: Those 2 redundancy schemes? We need to 'improve margins' and right quick

Ian Michael Gumby
Silver badge

@Justice ... Re: Cut staff levels to zero for maximum profit with no costs!!

Here's the logic behind outsourcing.

You're in business to do something. IT is a function that isn't core to your business and you're not getting what you need from your IT staff. So you outsource it to a company that focuses on IT and Services Delivery, thus freeing you up to focus on your core business.

That's outsourcing.

Does your company hire your janitors as employees? No, they contract with a cleaning firm.

Do they own or lease their buildings?

Do you build data centers or do you go to the cloud?

Everyone of those is an example of outsourcing portions of your business.

You can look at Netflix as an example.

Or you can look at Amazon where many of its stores are outsourcing their entire infrastructure over to Amazon.

Then there's offshoring and now near shoring. All to get cheaper labor. But thats a different topic.

0
0
Ian Michael Gumby
Silver badge
Boffin

@AC ...

You do realize that your manager who you think is getting a bonus, isn't.

When you've been made redundant, what makes you think that they need said manager anymore?

And what makes you think he's getting a bonus? (Hint: He's not.)

2
14

How to leak data from an air-gapped PC – using, er, a humble scanner

Ian Michael Gumby
Silver badge
Facepalm

Meh.

So is this a fail because its being released two days too early, or that the 'possible attack' isn't plausible but gives El Reg the chance to go out and play with a drone for the photo shoot. (Free clue... the names of the security products? )

If you're going to create a fake story, at least make it seem more plausible. Here's a more plausible scenario...

They managed to infect the machine. Since they are afraid to use the normal network, the Malware disables the LED attached to the camera so that the camera light that tells you its on is inactivated. Then they shine the low powered laser on the camera to pass along the information.

Oh and because the drone is moving and its possible that some bits get lost along the way, they have to send 3 copies of the command along with an id number so that they could be sent and received out of order....

(Wasn't it SNOBAL or some other language that allowed for the punch cards to be sent out of order? )

Anyway... that's much more feasible that trying to program a scanner which BTW would be a network based piece of equipment as part of the scan/print/copy/fax machine.

3
0
Ian Michael Gumby
Silver badge
Boffin

Re: Oh right,

Considering that its being published on Thursday March 30, not so much.

But one should point out that 'ultra high' secure buildings have little electric 'tumblers' that are placed in the corner of the windows and vibrate the windows so that no optical eavesdropping can occur. Also the windows are shielded to block radio signals so you can't get cell phone signals in the building...

Also the equipment may be on line conditioning power supplies that could impact that vector too.

(Although I think that would only work if the machine was set up to use the power line as a way to communicate. ... )

1
0

Apple quietly launches next-gen encrypted file system

Ian Michael Gumby
Silver badge

Re: Snapshots

Snapshots can be used for backups as well as for replication.

0
0
Ian Michael Gumby
Silver badge
Boffin

Meh.

Take a look at MapRFS.

Essentially its making the drive a blob space and then put any interface over it to access the data underneath. You could support POSIX, Hadoop, etc ... all over the same blob space. This allows for some interesting options.

Its nothing really new. Informix had a patent on this where you created a file system within the database. (I think its expired or is expiring soon)

I don't mean to trivialize this, but just that its not that difficult.

0
0

CompSci boffins propose scheme to protect privacy in database searches

Ian Michael Gumby
Silver badge

Re: Tricky?

Its not the DBA, but that the query hides data from you such that you don't know its missing.

Essentially you only get to see the data where all parts agree. If one out of the N parts doesn't you don't get to see the data.

There are other simpler solutions to do this... essentially cell based encryption also works, however there's more overhead.

1
0

How Ford has slammed the door on Silicon Valley's autonomous vehicles drive

Ian Michael Gumby
Silver badge

@Jon 37 Re: Security ???

Security costs money.

Having your car hacked and then someone or multiple people killed because of poor security? That's a lawyer's wet dream.

This is why the auto companies are not in favor of the integration. If past issues are any indication, bean counters are going to have to re-assess their risk weights and then err on the side of caution.

That said, there will be more security than you believe.

0
0

Astroboffins clock thriving stellar nursery nestled in violent supermassive black hole

Ian Michael Gumby
Silver badge

Re: Star cannon

Try aiming it.

4
0

USA can afford golf for Trump. Can't afford .com for FBI infosec service

Ian Michael Gumby
Silver badge
Boffin

Re: Tomatoe or Tomato that is the question Ketchup or Red Sauce? ;-)

You don't seem to remember the reversal of a lot of Obama's EOs?

And he still doesn't have all of his cabinet in place, nor has Gorsuch gotten the nod to be a Supreme.

As to the 'conspiracy theory'. Seems a whistle blower came forward and presented evidence to Nunes. And that caused the Dems a tizzy because he stopped hearing new testimony in order to get testimony from Comey and the head of the NSA behind closed doors.

Great theater if you are unbiased and non-partisan.

The wild thing... MSM skipped the whole MD rape case with the exception of Fox. CNN finally covered it for less than a couple of mins on an early morning show and that was it.

Trump's been in office 65 days or so. If you want to give him a scorecard based on his accomplishments... you've got almost 2 years of time left... BTW, Obama handed him a major carp fest. At least he's got Nikki in the UN and they're getting that cleaned up.

Lets see what happens with the Norks. Like I said. Major Carp-fest.

1
5

Forums

Biting the hand that feeds IT © 1998–2017