* Posts by Anne-Lise Pasch

164 posts • joined 31 Jul 2008

Page:

Linus Torvalds on security: 'Do no harm, don't break users'

Anne-Lise Pasch

I'm a user, but I also want a secure box. Any end point that allows a remote hacker into my box, I want a security workaround until a full fix is ready, and I accept that this may break utility until its the case. But this is because I'm a server admin first, which probably puts me in a subclass of user. But even so; any user who cares about the sanctity of their data probably agrees. This doesn't mean that the security patch is the final product, it means its the uncomfortable workaround. However, where I agree with Linus, is the same mindset shouldn't be applied to local userspace programs. Sure its annoying if one local user can gain extra priveleges and do damage, but that I can deal with.

8
1

Amazon launches Secret Region – so secret it's endorsed by the CIA

Anne-Lise Pasch

And they will still store their keys unencrypted on Github.

3
0

Microsoft can't give away beta cert exams, so starts charging

Anne-Lise Pasch

Unless they're mandatory...

Several vendors only offer partnerships based on the number of MCPs within the partner company; Sitecore do this, for instance. We just have to treat it like technical debt. :(

8
1

Audio spy Alexa now has a little pal called Dox

Anne-Lise Pasch

Re: Sigh

> So do I, but I'm certainly not interest in talking to a shopping centre. I'm single, not crazy

My father noticed that if you gave the people who talk to themselves a Bluetooth earpiece, they become 'normal' again. Soon, the new normal will be everyone talking to themselves.

2
0

New BFFs Salesforce and Google link arms, er, CRMs with G Suite

Anne-Lise Pasch

Strange, since Sitecore just announced the same partnership deal with Salesforce, which is Microsoft's CMS/Azure PaaS platform of choice. Almost makes it sound like you haven't researched anything for this article. Just saying. (At least in terms of your editorial spin of anti-MS) The only news here is Salesforce is making deals with cloud providers. (Dreamforce 2017 announcement)

1
1

Equifax execs sold shares before mega-hack reveal. All above board – Equifax probe

Anne-Lise Pasch

> He asked for clearance to sell 4,000 shares worth about $585,000 on July 28, a day before the hack was uncovered

What timezone was the email server recording the clearance?

Just curious.

42
0

Donald, YOU'RE FIRED: Rogue Twitter worker quits, deletes President Trump's account

Anne-Lise Pasch

> What if they had posted a tweet "I have just launched a Nuclear Weapon against North Korea, THE TIME FOR TALK IS OVER"?

The fact that'd the world would believe its true shows its *already* the end of the world.

34
0

Mauritian code-cutters to help deliver TLS 1.3

Anne-Lise Pasch

Broken by design then.

Most large clients use MiddleBoxes as standard, because of disparate internal/external service hosting.

e.g. Imperva DoS protection -> App gateway -> Load balancer -> Reverse proxy -> Media/CMS.

And that's not even factoring CDN solutions.

0
0

IETF mulls adding geoblock info to 'Bradbury's code'

Anne-Lise Pasch

Re: Geoblock is evil and dishonest

When HDCP is also really easily removed (e.g. iSolem 2 Way HDMI) for next-to-nothing, the inconvenience isn't worth the implementation.

0
0

Credit insurance tightens for geek shack Maplin Electronics

Anne-Lise Pasch

Maplin is where I go...

... when I urgently need a hifi cable, and I come out with a beer fridge and delayed regret.

15
0

This is no yolk. Newegg scrambles against rotten shell company claims

Anne-Lise Pasch

Where can I get a Home Theatre PC for $8?

12
0

Release the KRACKen patches: The good, the bad, and the ugly on this WPA2 Wi-Fi drama

Anne-Lise Pasch

As a sysadmin, the impact is far more severe than the 'shady hoodie' issue. We're an office in central London. In a managed building of many floors and other companies. This is *not unusual*. GDPR et al say we have to protect customer data. If there's a known, unpatched, easy exploit to our perimeter, then we have to do something. in this case, terminate wifi until further notice. (Even if further notice only ends up being a few days) Because our security just weakened from authentication/privilege escalation to bypass, to just privilege escalation. And that's a lot of unhappy pointy-hairs.

11
1

Concerns raised about privacy, GDPR as Lords peer over Data Protection Bill

Anne-Lise Pasch

That makes no sense. You want deidentified data that can be reidentified *by the appropriate means* e.g. law enforcement identifying you from your IP address, but not the analytics processor.

0
0

Moon trumps Mars in new US space policy

Anne-Lise Pasch

"Ah, but a man's reach should exceed his grasp, Or what's a heaven for?"

9
0

The URL of sandwich: Microsoft Office blogs redirect snafu foils users

Anne-Lise Pasch

Re: Broken Down Under

Actually, looking at a cached office blogs page on Google, and doing View Source... yes, its Wordpress. :)

1
0
Anne-Lise Pasch

Is it a 301 or a 302?

Never mind. Resolves from officeblogs.wpengine.com to jim.ns.cloudflare.com to 148.62.2.50. looks like a duff setting at Cloudflare

2
0

Japanese boffins try 'token passing' to scale quantum calculations

Anne-Lise Pasch

Re: Ugh.

hehe, unplug the BNCs to take my PC home and the office network goes dark.

I miss the days of IPX/SPX games of Doom.

8
0

Why Uber isn't the poster child for capitalism you wanted

Anne-Lise Pasch

The article suggests economy of scale is the only reason Uber should take a chunk of the market. I thought it was because the app made it more convenient, and the GPS tracking made it (contentiously) more secure. If the travel cost was identical to the competition, I'd still rather take the option that gets me A to B with vehicle tracking and a low lead time. the competitive advantage is service offering, not pricing.

1
1

Samsung's Galaxy Note 8 is hot, but not much more than the S8+

Anne-Lise Pasch

Will wait until the G5S+ hits, and see if I can try one in my hands in a shop before I buy, but sounds like what I'm after. Thank you all!

0
0
Anne-Lise Pasch

Can someone recommend an Android phone that has less crapware, a long battery life, and decent specs? I was waiting for the Note 8 but I want a phone that goes longer between charges.

0
0

Facebook claims a third more users in the US than people who exist

Anne-Lise Pasch

The Facebook Advertising Demographics

...Are partially based on *location*

People move around. A person at college in another state is in two places, and counts twice, as far as location-based demographics is concerned. That's why Facebook's statement "number of factors, including Facebook user behaviors, user demographics, and *location data from devices*" is both truthful and easy to misinterpret.

0
0

Virgin Media customers complain of outages across UK

Anne-Lise Pasch

Re: Outage or DNS ?

Full on outage. I use Verisign and Google open DNS and my Virgin service is like a jack in the box. Luckily I have a backup.

0
0

APT-style attack against over 4,000 infrastructure firms blamed on lone Nigerian 20-something

Anne-Lise Pasch

Re: Eh?

Because if you access the emails of a financial person, you can send fake emails that say things like:

"Please be aware that we are changing our invoicing details from XYZ to ABC as of 1st September."

And because your email looks similar to previously received, and because you knew the previous invoicing details (thanks to the emails you steal) then financial person will remit to your new invoice address.

That's just one way.

16
0

GoDaddy gives white supremacist site its marching orders after Charlottesville slur

Anne-Lise Pasch

Why do most commenters instantly assume that pro-Brexit = Racist? Don't get me wrong, I'm sure there's an overlap. Maybe even a weighted overlap. But I know quite a lot of Brexiters who wanted to pull out for other reasons. One friend of mine just wanted fluctuations in forex to trade on, and another wants some sort of trade union with Canada... :)

2
4

Uber drivers game Uber's system like Uber games the entire planet

Anne-Lise Pasch

I'm on the pro-Uber (from consumer perspective) side of the argument. The benefits over standard taxis are immense. Knowing who, when, where my taxi is (and sharing that information with family for safety sometimes) is what I want/need. I could wish the company itself was better, but I don't want the service broken. I want it fixed.

2
5

Southern awarded yet another 'most moaned about rail firm' gong

Anne-Lise Pasch

Re: Yes, please don't come to Hull

My experience of Hull, living on the Anlaby Road and working at BP Saltend Plant was:

1. My car window was smashed and my tax disc stolen

2. Armed robbery, purse taken

3. Tooth chipped on kerb when tackled to the floor by 3 men who stole my laptop case

4. Cars blaring horns when I stopped at red lights

5. Open drug dealing

6. Good trains

7. Halfway decent broadband

4
0

Briton admits to router hack that DDoSed Deutsche Telekom

Anne-Lise Pasch

Re: Danny Kaye?

The pellet with the poison's in the vessel with the pestle; the chalice with the palace has the brew that is true

9
0

systemd'oh! DNS lib underscore bug bites everyone's favorite init tool, blanks Netflix

Anne-Lise Pasch

So systemd parses DNS correctly (Netflix had underscores in hostnames, not labels, which is forbidden) and people are blaming someone for following the RFCs because Netflix are special sparkle ponies?

5
7

Twitter will no longer snaffle data allowances on Virgin Mobile

Anne-Lise Pasch

When I threatened to leave, they let me keep AYCE One Plan for 18/month. They only restrict me to 8GB/month for tethered usage.

0
0

Crypto guru Matt Green asks courts for DMCA force field so he can safely write a textbook

Anne-Lise Pasch

Re: Or he could move

> Also as an American I haven't seen a country that much better than the US

... Too easy.

9
1

Delete Google Maps? Go ahead, says Google, we'll still track you

Anne-Lise Pasch

Re: eh?

GPS off ... check

Wifi off... check

Bluetooth off... check

NFC off... check

data plan, non-existent... check

cell tower triangulation... bugger.

2
0

Phones exploding in kids' hands, shares tanking – but it's not all good news at Samsung

Anne-Lise Pasch

Re: Indeed

Or a Vauxhall Zafira

1
0

Samsung spills beans on mystery username, password emails to devs

Anne-Lise Pasch

If you know my password, its not secure. If you know a salted hash of my password, I smile upon you.

0
0

HMRC's IR35 tweaks have 90% of UK's IT contractors up in arms

Anne-Lise Pasch

Is that you, mom?

1
0

Someone (cough, cough VeriSign) just gave ICANN $135m for the rights to .web

Anne-Lise Pasch

I thought Nu was STRAAT (https://icannwiki.com/.inc) who buy up hotel domains?

0
0

Facebook: 'We don't listen'

Anne-Lise Pasch

Re: Loads of other apps too

> maybe there should be a OS level icon

And then something will bypass that, and so the game continues

1
0

Small broadband firms aren't fussed about getting access to BT's ducts and poles

Anne-Lise Pasch

Is this progress?

Ask the residents of Hull if they preferred Kingston Telecom to BT.

4
0

Intel literally decimates workforce: 12,000 will be axed, CFO shifts to sales

Anne-Lise Pasch

Re: "literally" "decimates"

Maybe they're using the medieval Latin version, and stealing their tents. That would be kinda awesome.

0
0

Cinema boss gives up making kids turn off phones: 'That's not how they live their life'

Anne-Lise Pasch

Embracing change

I would actually welcome cell phones in the cinema, IF (and only if) they have cell-free showings which are actively 'policed'. that way the self-important millennial with the phone can legitimately be told to turn it off, and not get aggravation in response.

2
0

How to not get pwned on Windows: Don't run any virtual machines, open any web pages, Office docs, hyperlinks ...

Anne-Lise Pasch

Re: It's almost as if there were a specific software vendor involved in all of this

Yep. Adobe.

9
1

FBI backs down against Apple: Feds may be able to crack killer's iPhone without iGiant's help

Anne-Lise Pasch

Krod Mondoon

Really needs a second series.

1
0

ADpocalypse NOW: Three raises the stakes

Anne-Lise Pasch

Re: A new internet needed, sooner rather than later.

Don't need a new internet. Just put adverts on a new tld (.advertising) and enforce metadata for sizing. Then, if you opt out of advertising, your pages are still the same size. Then browsers can flag if your advertising is on/off for the purposes of paywall checks for those websites that use a freemium model.

1
0

Is this Romanian man really 'GhostShell'? If so, he risks arrest

Anne-Lise Pasch

Re: My desk doesn't look like that!

Its a function of getting older. You wake up one day, look at the clutter on the desk, and grab a bin bag. Then you realise you're 40, and haven't done a 3-day coding stint in 20 years. As you wipe the sad glass panel with a cloth (accidentally smearing it worse with your tears) you vow to get a white-oak desk (possibly with Tuscan legs) to match your furniture.

1
0

Zero. Zilch. Nada. That's how much Netflix uses its own data centres now

Anne-Lise Pasch

Re: A familiar smell

I work in such an environment, and it can work very well. DevOps thrives where your staff is experienced, multi-disciplined and professional. You don't need to be a DBA to maintain a SQL system, or promote a deployment through environments, but you do have to know when you need your DBA, or when to allocate resource from your most experienced server admin. And that distinction is where DevOps can fall down if you sacrifice any of the trinity (experience, knowledge, professionalism). There's a massive difference between having a professional senior developer supporting a live deployment, and a junior cowboy developing in production.

2
0

Surface Pro 4: Will you go the F**K to SLEEP?

Anne-Lise Pasch

So... if you map the power button to 'hibernate', all your troubles go away?

3
2

CIOs: Tell us about your biggest disaster and how you survived it

Anne-Lise Pasch

Re: CIO response in a nutshell.

Took the credit for the working bits, delegated blame to the BAs. Made a PM cry once. Swapped the BAs and PMs around by calling them both Scrum Masters and pretended to understand ITIL while calling everything AGILE. Sacked half the ops team and made the developers do their job too, which worked for a while as they were then able to code in production, like it was the Wild West. I just called it DevOps. Once QA complaints reached high decibels, I sacked the QA resources and offshored their function to three countries in the same timezone, while pretending we had follow-the-sun by making one team work night shifts, then took a job at a competitor before it all blew up underneath me, with glowing references. Repeat.

11
0

WIN a 6TB Western Digital Black hard drive with El Reg

Anne-Lise Pasch

So this is Boris' plan to solve the London housing crisis?

0
0

Robber loses heist case after 'evil twin' defence, gets 60 years

Anne-Lise Pasch

Re: Any compassion?

I wonder how bad it would be if his actual evil twin performs another robbery in the next couple of years... Proving he wasn't lying, just strange. LifeTime would have an awesome TV movie on their hands.

6
0

Microsoft drops rush Internet Explorer fix for remote code exec hole

Anne-Lise Pasch

Re: Pro Tip

My pro tip, for what its worth, is to browse within a vm that has its hard drive set to refresh on reboot. I have IE11 (I do a lot of web testing with various browsers) within VM workstation set up that way, and with Unity switched on can access IE as if its part of my desktop. If I get hit by a virus, a reboot will kill it. It has no permissions to my real desktop at all, (runs in a seperate virtual network, seperate user account.) Brought this method of working across from my VM Fusion days on my mac, and am happy with the extra layer of security it provides.

0
0

Game CARTRIDGES make a comeback ... for smartmobes

Anne-Lise Pasch

Re: Cassette

We had cartridge games on the C64. We just hardly used them because we all had an Action Replay cartridge for cheating on tape games that we used Action Replay to clone onto a floppy...

3
0

Page:

Forums

Biting the hand that feeds IT © 1998–2017