* Posts by adnim

1962 posts • joined 11 Apr 2007

Oi, you. Equifax. Cough up half a million quid for fumbling 15 million Brits' personal info to hackers

adnim

Paltry fine

How is that meant to discourage?

Besides, Equifax could have simply sold the data and claimed a breach.

£1 per record 15m.... 500k max fine... good business practice.

Yes I am being silly, but not entirely irrational.

0
0

Microsoft: Like the Borg, we want to absorb all the world's biz computers

adnim

Re: Eroding end user choice and control

"Again I see people bemoaning user choice being eroded" <-- There might be a reason for that :-)

Initially ones choice is only limited by what is available. Microsoft being available and pretty much ubiquitous in the business space means most decision makers follow the herd and MS is chosen.

Once this MS choice is made that is when the erosion of choice and control begins.

I didn't down vote you by the way, your comment to me did not warrant one.

3
0
adnim

Eroding end user choice and control

under the guise of convenience.

Unfortunately I work for an almost exclusively MS shop. Fortunately I look after the Linux kit.

8
3

British Airways hack: Infosec experts finger third-party scripts on payment pages

adnim

Re: third party scripts, including from external domains that the company itself owns

Third party script... code run in context or otherwise from from a third party website not the originating domain.

Third party code... code written by an unknown entity, which may or may not have been vetted and run in the head of the developer and then well tested before deployment. This can become a third party script.

Right or wrong this is how I have always interpreted these terms.

3
0

Activists rattle tin to take UK's pr0n block to court

adnim

Re: COPPA load of this

"Now if they can't get this right and they've had 20 years, how exactly does HMG expect this to work..."

I don't think they do expect it to work. In fact they probably know it won't be particularly effective.

Some smart people do advise the government, even though the decisions the government makes suggests otherwise.

However, from a citizen control/monitoring/profiling point of view it is a useful exercise. And for swinging a few votes under the guise of protecting children it also serves a purpose.

All this really amounts to is a government appearing to take action to protect children. Which the general public will see as a positive action rather than the ineffective sound bite made to placate that it is.

3
0

Feel the shame: Email-scammed staffers aren't telling bosses about it

adnim

Thunderbird .. view emails in plain text.... And you have an option of viewing the source code/headers.

Or you could write your own code to retrieve your emails or use telnet.

I don't want to be insulting but writing computer programs in machine code and assembly is tough, at least for my lazy ass it is.

Anything else takes a little effort and a modicum of thought.

2
1
adnim

@adnim - Re: Tech Savvy Millenials

"Now I am old and on the verge of becoming wise."

That or deluded.

8
2
adnim

Plain text

does not suit some, especially marketing people.

I often hear "but I like to see the pictures" when I advise that using Thunderbird and plain text view saves bandwidth and reveals true (unless they are shortened)* urls.

*One should NOT click on a shortened url in an email as a default action.

I think that humans come a close second to cats as far as curiosity is concerned.

It is one of our greatest strengths and a big weakness.

8
0
adnim

Re: Tech Savvy Millenials

More interface savvy.

A browser interface or desktop window full of configuration options. Regardless of device, they know where to click to make things work.

Ask them how it works, what it does and at what layer the options they set operate. I suspect that most would not know.

I used to be young and sharp and thought I knew everything.. Now I am old and on the verge of becoming wise.

13
0

It's been 5 years already, let's gawp at Microsoft and Nokia's bloodbath

adnim
Joke

Seems from the comments

a lot of people care, well at least enough to comment.

Welcome to my hypocrisy... I don't.

0
2

Ever wanted to strangle Microsoft? Now Outlook, Skype 'throttle' users amid storm cloud drama

adnim

Ever wanted to strangle Microsoft?

Many, many.. ad infinitum times (I exaggerate, a little).

From my first experience with DOS 3.0 all the way to Windows 10.

Fortunately, I get paid for my misery.

14
0

Brit teen pleads guilty to Minecraft-linked bomb and airline hoaxes

adnim

Hubris,

has never before, been so well defined.

5
0

UK.gov: NHS should be compensated by firms using its data goldmine

adnim
Mushroom

How about...

Asking the patient if they want their data shared *FIRST*. And then give them a slice of the pie?

40
0

A decade on, Apple and Google's 30% app store cut looks pretty cheesy

adnim

Late post...

It stinks of greed and silent collaboration.

I support these companies via my contractual obligations, I am not yet financially secure enough to choose my employer.

However, I personally avoid Apple (easy) Google (harder) Microsoft (easy).

The choice is yours.... Who you encourage, who you support.

0
0

Beam me up, PM: Digital secretary expected to give Tory conference speech as hologram

adnim

The shape of things to come?

Is this preparation for when the running of the UK is handed over to AI?

6
0

Samsung Galaxy Watch: A tough and classy activity tracker

adnim
Joke

Just what I need

a watch that reminds me to breathe.

31
0

Google keeps tracking you even when you specifically tell it not to: Maps, Search won't take no for an answer

adnim

Re: Perfect ending: Makes perfect sense. ®

"Darling is the child warm in the bed tonight?"

Best check with Google location services.

3
0

Hi-de-Hack! Redcoats red-faced as Butlin's holiday camp admits data breach hit 34,000

adnim

Re: "responded to a phishing email"...

"Does it really matter?"

For numpties, no.

For those that care about security, yes.

12
2
adnim

Re: "responded to a phishing email"...

Clarity? Yes please.. One would presume a phishing email from the local council would present a link to mock up of a local council service account login page.

2
0

Google Spectre whizz kicked out of Caesars, blocked from DEF CON over hack 'attack' tweet

adnim

@Alan not Parsons Brown Re: Hum

"The maker of rules, dealing with fools"

3
0

Japanese dark-web drug dealers are so polite, they'll offer 'a refund' if you're not satisfied

adnim

It is often presumed

that those who break the law are dishonest and without honour. This is not necessarily so.

Those who are dishonest and without honour may indeed turn to illegal activity to finance a lifestyle. Although many dishonest and dishonourable people prefer the legal activities of politics and/or corporate leadership.

The Japanese take honour and respect seriously. Too seriously? Perhaps. But our arrogant western asses could learn a thing or two

30
2

Microsoft's cheapo Surface: Like a netbook you can't upgrade

adnim

It's a consumer device.

Why examine it as if it were a professional bit of kit?

Microsoft want to sell another one in two years not a replacement battery.

4
0

Game over for Google: Fortnite snubs Play Store, keeps its 30%, sparks security fears

adnim

Just wanna say,

An Android App does not need Google infrastructure to be secure to use. Just as the using of an App downloaded from Google does not guarantee security.

I see no reason why third party certificates from recognised and trusted? software development houses cannot be installed on Android. We trust certs from many organisations every day.

Yes, Google wish to maintain a monopoly on Android Apps. I know

6
0

Irish Supremes make shock decision to hear Facebook's appeal in Schrems II

adnim

Religious repression

causes joy and pleasure to be sought in the most perverse situations. Perhaps someone is looking to have a laugh?

0
0

UK 'fake news' inquiry calls for end to tech middleman excuses, election law overhaul

adnim

'Fake news'

Prior to the rise of the Internet, we used to call this lies. Or when published a spoof newspaper, a joke.

If published/broadcast on April 1st an April fools joke.

If it's fake, believable and intended to deceive or misguide I call it deception.

If it's fake, believable and intended to slur or defame a person then it's probably libel.

Why not treat it a such?

42
2

Font of pwnage: Crims poison well with crypto-jacking code, trickles into PDF editor app

adnim
Holmes

"The whole exercise is a fine example of a supply chain attack"

One of the many attack vectors.

Does this exploit work on all operating systems?

Maybe the OS handling of fonts is an issue as well as a compromised supply chain.

Just a thought

6
1

Microsoft celebrates a bumper financial year ... by making stuff pricier

adnim
Meh

Ease of exit

I don't use any cloud services personally, I look after an Ubuntu instance on AWS and some S3 buckets for CD for a client. It was set up by someone else.

All my eggs are in one basket on a server in my garage (next to some old rags and cans of petrol). Backups are cool, I have heard of them. I think I have some somewhere.

My point is that once one starts to rely on a third party, more and more of ones business systems tend to become dependant on that third party. Eventually the cost of transition may become prohibitive.

MS know this as do Google and Amazon.

Now if MS, Google and Facebook can work together to find a nice file format to download all ones social media outpourings in order to import into another social media service. Why can't the big cloud/SaaS providers do the same?

I might then consider their usefulness for storing, deploying and serving information that I don't mind finding its way into the public domain.

As a kid I got stuck in a clothes spin drier, I was on the verge of panic before I escaped.

I don't like being trapped.... Cloud SaaS all stink of entrapment.

22
1

How much do you think Cisco's paying erstwhile Brit PM David Cameron?

adnim

The minimum wage

plus 2nd class rail travel expenses and a fiver for lunch.

14
0

Microsoft still longs to be a 'lifestyle' brand, but the cupboard looks bare

adnim

@ deive Re: Know what you are

That's because they outsource the manufacturing of their hardware.

Unfortunately the coding is in house.

33
2

US drug cops snared crooks with pre-cracked BlackBerry mobes – and that's just the start

adnim

Re: Symptoms of misguided policies

"MCDA modelling showed that heroin, crack cocaine, and metamfetamine were the most harmful drugs to individuals (part scores 34, 37, and 32, respectively), whereas alcohol, heroin, and crack cocaine were the most harmful to others (46, 21, and 17, respectively). Overall, alcohol was the most harmful drug (overall harm score 72), with heroin (55) and crack cocaine (54) in second and third places."

https://www.thelancet.com/journals/lancet/article/PIIS0140-6736(10)61462-6/abstract

6
0

US military manuals hawked on dark web after files left rattling in insecure FTP server

adnim
Joke

Re: Unencrypted?

I have my password on the login banner. They even less likely to be read.

10
0

Things that make you go hmmm: Do crypto key servers violate GDPR?

adnim

Re: I'm not sure it's quite that easy...

Exactly.

And whilst I am no crypto expert it should not be difficult to enforce expiry and deletion for publicly available keys across all key servers. Yes keys can be revoked, are they deleted from all key servers? (seriously I dunno) I could revoke one to find out or google, I will after I post.

Once an expiry date is reached one chooses to renew or revoke/delete public key.

Just a thought.. Always up for an education though :-)

1
0

We might be skimming the Surface, but it looks like Microsoft's readying a wallet-friendly device

adnim
Joke

I don't think it will fit in my wallet.

And wallet friendly to me means increasing the number of plastic legal tender tokens it contains.

On a serious note, I have a phone it does all I need almost, it is rooted it is mine. But...If it just ran Linux and had a real keyboard that slid from behind.

I need to ssh to a secure environment in an emergency. I use my laptop because I trust the install. Even though my phone is rooted and runs Cyanogen, my Android-fu is such that I don't trust it.

3
2

Have I been paid, Sage? Cloudy wage service locks out users

adnim

Micross

on Netware worked quite well. Support was pretty good too. They updated the software remotely via a dedicated modem/tel number. They would warn us of impending updates, should we wish to back up.

Backups were daily anyway, but they didn't just change the system without warning. Nothing ever broke after updates, so I guess they tested things. It wasn't perfect though. not every entry was validated properly, users could break things.

Only had to call a few times in 5 years and support was good, Once the help desk got to know me they never bothered with the script I was just told "a dev will mail you soon".

btw Micross was modular. As well as payroll it handled stock control, BOM's and lots of other shit.

But I digress I was just overwhelmed with nostalgia at the headline. What is the topic? Sage? What does that do again? Ah OK... Carry on ;-)

1
0

Google Chrome update to label HTTP-only sites insecure within WEEKS

adnim

FFS Google

Get off ya fuckin' high horse.

Let webmasters decide if the content is worthy/requiring of SSL.

HTTP is only insecure when sensitive information is being exchanged.

Perhaps everything including the obvious should be encrypted?

I hope no MITM replaces my kitty pics for pussy pics when my website is browsed.

Joking aside and in all sincerity: Adapt to the Internet Google, don't try to control it....

Pretty please?

14
8

Oracle, for one, says we'll welcome our new robot overlords: '90%' of you will obey an AI bot

adnim

I hate stress.

And making any kind of decision that determines my future (providing I am given permission by the state to act out that decision) causes stress.

Ergo, I welcome being expunged of all responsibility for my own actions.

</sarcasm>

8
0

UK.gov's long-awaited, lightweight biometrics strategy fails to impress

adnim

"... fails to impress"

Add it to the list.

Wait for proven technology before giving contracts to your buddies, sycophants and contributors to the party's kitty.

Apparently, Angry of Tunbridge Wells once wrote somewhere, it could have been across the pages of Public Eye, the span of a motorway bridge or perhaps some cards were simply left in a telephone box.

Whatever the case, he wrote... "FFS... Ya should be working for us not yourselves. We pay your wages you contriving, conniving shits". Citation needed.

0
0

Wasn't too hard, was it? UK has made 'significant progress' in spy control

adnim
Joke

"Wasn't too hard, was it? UK has made 'significant progress' in spy control"

They shut down GCHQ?

8
0

The cybercriminal's cash cow and the marketer's machine: Inside the mad sad bad web ad world

adnim

Re: Targetted ads are rubbish

My approach... contextual and unobtrusive ads (out of the way, right column? Not in the main flow of the copy) text only ads with a link. Served from the root domain with url that identifies the partner/affiliate to the advertiser.

I dunno why I feel I need to say this... contextual... pertaining to page content. Why track someone around the Internet to advertise them what they may have already bought? Why not place contextual ads? If someone visits a page on the web regardless of what it is about, they are interested in the content of that page. So place ads relevant to content.

Yes, there is the potential for click fraud. But that happens now. My concern is with privacy, data collection and tracking of the user, not with an advertisers budget. And I am not particularly sorry if those that track "anonymous" ids around to present ads are offended by this. Just down vote me and we can perhaps get a count of El Reg readers who have a career in marketing and advertising and believe the current "track it" strategy works ;-)

15
0

Git365. Git for Teams. Quatermass and the Git Pit. GitHub simply won't do now Microsoft has it

adnim

Got

See title :-)

2
0

Microsoft has another crack at fixing Chrome problems in Windows 10

adnim

Re: I was surprised

Update:

I am in garden watching sunset.... I wrote the above on this machine in Firefox on Mint 18.

After booting into Win 10: the static IP connection to a hidden AP didn't work. I had to connect to the visible AP and get DHCP from my 'unsafe' subnet. And why does El Reg take 5+ times longer to open in Firefox on Win 10 than it does under Mint? If I was consumer people would it matter, would I notice?

Time to reboot ;-)

7
1
adnim

I was surprised

The April June update worked fine for me, it took about an hour to update after download.

Everything seems to work as I would expect so far, even Chrome which I use with LAN access for the development tools. No SMB1 use and wtf is media center content? Am I a poor web dev for trying to be as cross platform as possible and never using smb1 or not knowing how to integrate media center content with chrome?

The update did reset some of my privacy settings and deleted my firewall program (Private Firewall 7) due to "not compatible" or some such twaddle. I kind of expected this, yet I was surprised to find that my start menu was not altered.

I had to uninstall private firewall properly (the update didn't... it left most of the files and just deleted and disabled the loading of the NDIS driver) before I could install the very same version again despite the incompatibility".

I can only presume Microsoft does not like user installed tools that interfere with their data collection activities.

I have so little respect for Microsoft that I would have had a good time bitching about how bad the update was and how it fsckd up my machine. But alas, other than just deleting code it did not like and giving applications access to things I had previously blocked (camera, microphone, contacts etc. etc the update was flawless.

I am not sure if I am being sarcastic. Usually there are so many work continuity breaking issues that a few less major issues are acceptable. I have obviously been conditioned by Microsoft into accepting a few niggles with a sigh of relief.

YMMV

I reboot into Win 10 now and see if anything has changed

4
1

Uncle Sam is shocked, SHOCKED to find dark-web bazaars trading drugs, weapons, etc

adnim

So wrong

"Criminals who think that they are safe on the Darknet are wrong,”

Although this is a nice blanket statement to discourage potential law breakers. Has Deputy Attorney General Rod Rosenstein had any experience (other than the obvious opportunities of office) of being a criminal and using the Internet to commit crime?

Fools, the greedy, the impatient, the ignorant and the less cautious criminals tend to think they are safe on the darknet and drop breadcrumbs.

Those with the real smarts (I prolly die before I put myself in that group) aren't even noticed.

12
1

Have YOU had your breakfast pint? Boffins confirm cheeky daily tipple is good for you

adnim

Implied causality

Implied causality kind of justifies the research and lends an appearance of usefulness to the results.

Otherwise the research just confirms what most people would consider obvious.

5
0

Intel CEO Brian Krzanich quits biz after fling with coworker rumbled

adnim

For a Chief exec:

"..the board has accepted Mr. Krzanich’s resignation."

For a shop floor worker:

"..the human resources department has dismissed Joe Blogs.

How come management get to resign yet non-management staff are fired?

53
3

WD's Purple reign continues: 12TB helium disks for vid spy tech

adnim

Shame that

they only made them for vid spy tech.

"Eight platters serving up 1.5TB each for data-belching surveillance cameras"

Can they not be used for kitten pictures?

6
0

Private sector needs a little sumthin' sumthin' to get it sharing threat intel – US security chap

adnim

who do ya share with?

Those that in the short term fulfil requirements.

Or those whom you have looked in the eye and felt the sincerity when they pulled ya from the shit?

Leaders change, psychopaths sharing with psychopaths does nothing to convince me that the world is becoming a better place.

3
0

'90s hacker collective man turned infosec VIP: Internet security hasn't improved in 20 years

adnim

Well

Just as a software application has it's exploitable bugs removed and is made secure, more features are added, which are buggy and exploitable. And by the time these newly introduced flaws are fixed, new features are added...

Humans can be manipulated into breaking secure software or passing on login credentials to strangers just has they always have been.

Ergo, I am not surprised Internet security has not improved.

5
0

Unbreakable smart lock devastated to discover screwdrivers exist

adnim

You right Andy...

It takes a grifter to grift a grifter. I takes an advertisement to grift the public.

5
0

Forums

Biting the hand that feeds IT © 1998–2018