* Posts by big_D

6775 publicly visible posts • joined 27 Nov 2009

We're in a timeline where Dettol maker has to beg folks not to inject cleaning fluid into their veins. Thanks, Trump

big_D Silver badge

Re: Trump's Base

Isn't that what Darwin would have called a win-win-situation?

Forget tabs – the new war is commas versus spaces: Web heads urged by browser devs to embrace modern CSS

big_D Silver badge

Re: Stupid millennials

I had a case of "but its elegant and readable". Yes, it was elegant and human readable. Unfortunately it was a complete pigs-ear, when it came to actually being executable.

Under moderate server load (250 guests over 4 load-balanced front end servers), the script to get the menu structure for the site would keel over and timeout at 2 minutes!

Re-structuring the query to be (still) human readable, but actually optimized for what the computer had to do, the query time was reduced to < 500ms when all 4 load balancers were handling 250 sessions each.

It isn't just a "millenial" problem, it has affected poor programmers ever since I have worked in IT, going back to the early 80s. There are programmers who understand how the underlying hardware, operating system and application stack work and those that can just churn out "pretty" code. Oh, and those that just shouldn't be let near a computer in the first place!

Singapore's corona-crushing superhero squad grounded by football fans

big_D Silver badge

Re: Are you sure it's not the US?

I live in Europe, but I've been watching his channel for a couple of years.

I miss his Friday Nut Fest, with the cock of the week winning the Big King Dick... He is very funny, very irreverent but also very informative and quite a clever chap.

big_D Silver badge

Re: Are you sure it's not the US?

I'm a supporter of MALS, John Cadogan's "presidential" campaign to "Make Austraaaaaaliaaa Less Shit"

big_D Silver badge

You'll never walk alone...

Rodgers and Hammerstein’s tune “You’ll never walk alone”, has long been Liverpool football club’s anthem

Also for BVB (Borussia Dortmund), one of the reasons that Klopp transfered to Liverpool.

IBM == Insecure Business Machines: No-auth remote root exec exploit in Data Risk Manager drops after Big Blue snubs bug report

big_D Silver badge
Facepalm

Re: And thus is why hackers profit...

Sort of Ribeiro didn't want money, it is alleged, or rather his main motivation wasn't money. But his bugs were rejected out of hand, because it was a product only for paying customers...

privately disclosed by security researcher Pedro Ribeiro at no charge.

I'm guessing a process snafu, where he is not a paying customer, therefore he doesn't get support on those products, so he can't report a bug on those products. A pretty silly chain of failure, but I would guess typical in many companies.

Researcher: "I have found a bug in xyz."

Helldesk: "What is your customer ID?"

Researcher: "I'm an independent researcher, I don't have a customer ID."

Helldesk: "Without a customer ID, I can't process your request."

Researcher: "It isn't a request, I'm trying to inform you that you have a serious problem with your product!"

Helldesk: "But without a customer ID, I can't log a call for you. Are you using a pirated version of our program? Shall I put you through to legal?"

>click<

big_D Silver badge

IBM == ?

Back in the 80s, I always equated IBM == Incredible Bloody Mindedness.

Looks like things haven't really changed all that much.

Baby, I swear it's déjà vu: TalkTalk customers unable to opt out of ISP's ad-jacking DNS – just like six years ago

big_D Silver badge

Re: Waiting For Tal-Talk

Start up Age of Empires... By the time you get a reply, you'll have already taken over the world with water powered nuclear generators.

They'll probably reply just as you are about to go for a leak, so make sure the PFY's briefcase is within easy reach...

Yes, I'm going through the BOFH chronicles. That was 2003 episode 23.

A paper clip, a spool of phone wire and a recalcitrant RS-232 line: Going MacGyver in the wonderful world of hotel IT

big_D Silver badge

Re: Proper lash up

The town where one of my nieces lives in Germany has "Old Newtown" and "Newtown" as suburbs... (Alte Neustadt and Neustatd).

big_D Silver badge
Facepalm

Re: Proper lash up

That is the problem. You get a temporary, Heath Robinson solution in place to tide the user over until they can get the problem fixed.

At least, that is you interpretation.

On the other hand, the user just sees that the problem has been resolved, end of story.

This hurts a ton-80: British darts champ knocked out of home tourney by lousy internet connection

big_D Silver badge

Re: And?

And not just UK and US. Most countries suffer.

Here in Germany there are many communities that still have no broadband at all or are limited to 1mbps.

At work, we have a reasonable internet connection, but mobile coverage sucks. And average speedtest here get around 0.05mbps down and 0.02 up - most of the time, the Vodafone speedtest app states that there is no internet connection at all (it times out), although Signal and Telegram still deliver messages (if with several minutes or hours delay as the data trickles in).

Google calls a halt on Chrome 82, but the version 83 beta has arrived early – so it's coding and bug finding time ahead

big_D Silver badge

Who's zoomin' who?*

Yes, it isn't like you need just a computer and access to the source repository...

Google has been trying to sell us products for years to make home working easier, because you don't need to be on premises to use it, because it is all in the cloud. And collaboration software, like all those products they keep cancelling.

Seriously though, there are possibly some parts of the process that had to happen "on-site" for security reasons until now and they possibly need to organize a way of keeping that security, whilst giving the leads the ability to release (as opposed to just work) from home.

As nice as Pai: FCC chairman comes out in favour of Ligado Networks' 5G proposal, despite criticism from airlines and military

big_D Silver badge
Facepalm

Says it like...

make more efficient use of underused spectrum and promote the deployment of ... and Internet of Things services."

He says that, like it is a good thing...

Vodafone chief speaks out after 5G conspiracy nuts torch phone mast serving Nightingale Hospital in Brum

big_D Silver badge

Re: The social media companies don't help enough

Not every country has free speech.

And in the case of the USA, it only says that the Government can't curtail free speech. It says nothing about platforms banning complete nutters from posting dangerous nonsense; they are allowed to do that, they aren't the government and it is their private platform, they don't have to put up with it. they could ban it, but then they'd lose ad revenue on the posts.

SE's baaaack: Apple flings out iPhone SE 2020, priced at £419

big_D Silver badge

Re: Only took Apple 2 years...

It is good news for us. We are supposed to use iPhones for company phones, but with T-Mobile no longer selling the 8 (officially), we were stuck with no iPhone that fell within the allowance limit. This will change things around.

The 'IoT' in Microsoft IoT Hub means Internet of Trying-to-kill-off-whiffy-crypto-protocol: TLS 1.0/1.1 spared axe again

big_D Silver badge

Google, Mozilla and Apple

have also canned plans to drop TLS 1.0 and 1.1 in Chrome/Firefox/Safari due to the Corona Virus.

Ransomware scumbags leak Boeing, Lockheed Martin, SpaceX documents after contractor refuses to pay

big_D Silver badge

Re: Anti-mortar system?

That brings back memories, sneaking my father's copy of Modesty Blaze out of his bookshelf...

big_D Silver badge

Re: Anti-mortar system?

You've obviously never played Brokian Ultra Cricket...

Upstart Americans brandish alligators at the almighty Reg Standards Soviet

big_D Silver badge
Coat

Alligator...

I don't have an alligator with me, but I definitely want to stand at the tail end, not the head end, when I'm queueing up!

I don't think the Kangaroo would be much better, have you seen the damage they can cause with their feet if they are forced to stand in line?

Mine's the one with an Osman piece of string in the pocket.

As Zoom bans spread over privacy concerns, vid-conf biz taps up Stamos as firefighter in totally-not-a-PR-stunt move

big_D Silver badge

Re: Alternatives

I'd rather they spend the money on security than the coloured crayons department looking for a catchy name, but that is just me.

big_D Silver badge

Re: How do you know?

Zero-days on all platforms, "not noticing" that they were sending everything to Facebook and so many programming-101 gaffs sort of speak for themselves.

big_D Silver badge

Re: Users...

And data scraping on iOS, zero-days on Windows and macOS, last year they were running a webserver on macOS machines, even if you removed the Zoom app. Their security awareness and attention to details makes a goldfish look like a rocket scientist with a long attention span!

Asleep at the wheel: Why did it take 5 HOURS for Microsoft to acknowledge an Azure DevOps TITSUP*?

big_D Silver badge

Waking up...

At least there is someone to talk to, even if they are asleep for most of your working day.

With Google, on the other hand, calling them results in 10 minutes of being pushed around an automated phone system, before a message saying check out the relevant part of the Google website and being spat out.

Writing an email results in an auto-reply, saying that they receive so many messages, that they are auto-deleted and never read, please see the relevant part of the Google website.

In my case, there was no part of the website I could find that dealt with being DOSed by a Google server in California...

Tribunal halts all Information Commissioner's Office cases because UK data watchdog can't print or organise PDFs

big_D Silver badge
Facepalm

Re: Now if I were a plaintiff

Email?

big_D Silver badge

Re: Bet they don't know how to use email

Yes, that was my thought. Not so much that they can't generate the PDFs, more that they will probably need to have an agreed upon electronic indexing and cross-referencing system (which will need to be implemented and tested) and you need some form of secure transmission (which will need to be implemented and tested), before you can actually start sending out live electronic bundles.

Samsung's Galaxy S7 line has had a good run with four years of security updates – but you'll want to trade yours in now

big_D Silver badge

Re: I'd love to see a law...

A lot of people in my family tend to keep their smartphones for around 6 - 8 years, before they replace them, and they are generally things like Samsung Galaxy S4 Lite/S5 Lite, which got replaced last summer, when WhatsApp stopped working properly.

Something something DANE cook: Microsoft pledges to wrap its email systems in secure anti-snooping protocol

big_D Silver badge

My local DNS server uses DNSSEC and when a domain I visit doesn't have DNSSEC, I report that their site doesn't work.

Of the sites I regularly visit, only one had a problem and they corrected their DNSSEC entry within a couple of hours.

Who's essential right now? Medicos, of course. Food producers, natch. And in Singapore social media workers have made the list

big_D Silver badge

There's an app for that...

And in Germany, the Robert Koch Institut has released an app that will collect the data from your sports tracker and send it back to RKI, so they can analyse the data. They are hoping to notice changes in pulse etc. that can be used as early indicators of COVID-19.

Roaring trade in zero-days means more vulns are falling into the hands of state spies, warn security researchers

big_D Silver badge

Yes, Zero Day effectively means that the flaw exists and is being actively exploited (or is in the public domain, having been irresponsibly disclosed) and no patch has yet been forthcoming (often because the maintainers of the software found out about it at the same time as everybody else.

COBOL-coding volunteers sought as slammed mainframes slow New Jersey's coronavirus response

big_D Silver badge

Re: How systems were all too often documented in the 60s and 70s

Yes, oh and the typo, should be "unless the code was properly documented." :-D

Where I worked, we had development teams and support teams. The development teams were usually large and went from customer project to customer project, whereas the support teams for the customers were smaller and looked after dozens of supported systems. Therefore good documentation was critical to being able to support the system.

E.g. a project team with a project manager, consultants, analysts, designers, infrastructure specialists, programmers, testers etc. could easily run to 100 persons and the support staff were a manager and half a dozen programmers, who looked after everything the customer had in production.

big_D Silver badge

Re: How systems were all too often documented in the 60s and 70s

one even went through and actively deleted all comments, the stupid comment made by the so called architect was that comments got out of date, you should just read the code.

And I was taught, you always change the comments first, to reflect the changes you are about to make to the code, otherwise nobody can maintain it. Once the project was complete, the development team handed it over to support and support would refuse to accept the project as finished and supportable if the code was properly documented.

There were severe demerits for the development team, if they tried to hand over "unfinished" code, and unfinished also meant undocumented.

Likewise, all documentation was stored in a document management system and the final project documentation also printed and signed off, before being archived.

big_D Silver badge

Re: How systems were all too often documented in the 60s and 70s

I knocked up a product tracking system for a photo studio (I worked at an advertising and ecommerce agency that had their own studio), which photographed thousands of products a week.

I wrote the system in PHP with Zen, with HTML & CSS front end and a total of around 20 lines of JavaScript, in 2010, it used scanners to scan the barcodes of the products, in the 3 months of my notice period. Last year, I received a thank you on LinkedIn from the project manager that took over the project for the documentation I left behind - the PHPDoc ran to around 800 pages. But I kept everything simple, each class covered one business object, each method did one job and where it had to work on complicated data structures, they were broken out into individual private functions that did simple tasks of the whole.

The same when I left the next job, the administrator that took over from me contacted me to thank me for the documentation I left behind.

big_D Silver badge

Re: How systems were all too often documented in the 60s and 70s

Back in the 80s, we were still company men and women, we still believed we'd be working for the same company when we retired. I managed around 15 years with the company I started work with, until they did a big downsizing in 2002 (5 figures) and I took the opportunity to start over in a new country.

big_D Silver badge

Re: Despair

Agreed. And the software back then was a hell of an investment, probably costing hundreds of thousands, if not millions to implement.

The problem is, re-implementing that in something "more modern" would need a similar investment, at rates inflated for today's economy. These systems are usually unique and have been regularly extended over the decades. Doing a complete analysis of what it actually does, an analysis of what it actually needs to do and implementing a new system based on the findings would be prohibitively expensive.

That is one of the problems that these public sector organisations have, as well as private companies. How do you tell your electorate that 10-15% of their taxes for the next five plus years will go towards replacing a system that already works?

That is why many of these systems are still around, they are still "good enough" to carry on and nobody has the budget to even think about replacing them.

big_D Silver badge

Yes, I worked on several Y2K projects, including some COBOL projects (E.g. CFS, PROTOS) during the late 80s and early 90s. I'm still at least a decade and a half away from retirement... Although at the current rate, I'll probably still be a decade and a half away from retirement in a decade and a half!

If you use Twitter with Firefox in a shared computer account, you may have slightly spilled some private data on that PC

big_D Silver badge
Facepalm

Shared accounts...

that is all ---->

Cisco rations VPNs for staff as strain of 100,000+ home workers hits its network

big_D Silver badge

Re: Licenses...

I know, I thought of WireGuard, but OpenVPN gives the "free" in the name, WireGuard would probably still have raised too many "huh?"s

big_D Silver badge
Coat

Licenses...

Cisco can't afford all of those Cisco VPN CALs for all its employees.

Mine's the one with the OpenVPN USB-stick in the pocket.

Who's going to pay for Britain's Aunty Beeb to carry on? Broadband users, broadcaster suggests to government

big_D Silver badge

Re: April Fool

German TV can be very good.

A lot of what is shown on the commercial channels is absolute tripe (licensed versions of US reality TV tripe), but there are a lot of good programs as well, especially on the BBC equivalents (ARD, ZDF etc.).

I probably watch more original German programming than I do imported US or UK shows.

big_D Silver badge

Re: April Fool

Germany has been doing it this way for around 15 years, so hardly a surprise that the UK would look at it.

Well, 2019 finished with Intel as king of the chip world, Broadcom doing OK, everyone else shrinking. Good thing 2020's looking up, eh?

big_D Silver badge

Re: This is why we have analysts

Except that it was the semi-conductor, not the CPU business. AMD sold off Global Foundries years ago.

Welcome to the telco, we've got fun and games: BT inks 5-year deal to outsource mainframe management to IBM

big_D Silver badge

Re: Help me out here

Yes, they have B-Arked the mainframe staff. Just be thankful that the telephone sanitisers didn't go with them. ;-)

big_D Silver badge

Re: One thing is certain

Yes, or to put the subtitles on the story, "we are moving to the cloud and have B-Arked the mainframe team."

At the Supreme Court, Morrisons pops data breach liability win into its trolley – but it's not a get-out-of-compo free card for businesses

big_D Silver badge

Re: Error or malicious act

Exactly, I feel sorry for the employees, but I have to agree with the Court in this case. They did everything they reasonably could - the data was put on an encrypted USB stick for the transfer to KPMG, it wasn't spaffed over an unencrypted FTP link or per email, they took "all reasonable precaution", with the possible exception of not realising Skelton held a grudge.

That he held a grudge for his own stupidity and decided to take revenge by publishing the information entrusted to him in no way falls under what his expected duties were. If he had lost the stick when taking it to KPMG and it wasn't encrypted, that would be part of his expected duties, but extra-curricular activities outside of his job role (he was not expected, as part of his role to publish the information anywhere online) cannot reasonably be covered by Morrison's liability.

Microsoft expands AI features in Office, but are they any good? Mixed, according to our vulture

big_D Silver badge
Headmaster

Yes, sending corporate information to Microsoft servers? No, not never.

As an aside, I just gave it the Complete Bastard - a document I've been creating over the years with all BOFH episodes in it (1,651 pages or 647,195 words)... It is taking its own sweet time. I'm expecting smoke to start coming out of my laptop in a minute.

Zoom's end-to-end encryption isn't actually end-to-end at all. Good thing the PM isn't using it for Cabinet calls. Oh, for f...

big_D Silver badge

Bavaria

The Bavarian government was caught with their WebEx down as well.

Heise's c't magazine found the links to the Bavarian meeting rooms were all open, predictable (a path + a room number, which was sequential) and none of the meeting rooms were password protected.

Last week, they managed to sit in on a crisis meeting between the Minister-president of Bavaria, the police and the health ministry. After confirming that it was a private meeting, not meant for the public, they quietly left the meeting and informed the Ministry for IT Security (BIS) straight away. In the meantime, the meeting rooms have been password protected.

If you've ever wished Visual Studio Code could be more open source, the Eclipse Foundation would like a word

big_D Silver badge

They haven't. They gone all colour-pencils department and are using JavaScript/TypeScript and Electron...

Pandemic impact: Two-thirds of polled Reg readers say it's business as usual in the IT dept, one in ten panicking

big_D Silver badge

Re: Got away with it!

It is needlessly complicated and needlessly expensive, for what it is. The basic functionality doesn't do enough and everything is additional modules with additional costs, like VPN, threat protection, host stand-by etc. and if you take hot stand-by, you used to need to buy all the licenses twice!

pfSense includes everything it has in the basic install, no hidden costs. Setting up hot-stand-by was a doddle. 50 VPN users? 100? 200? Costs the same as 1 VPN user and the client software is free for all platforms.

The actual ASA configuration is a pain, for a real threat protection system, Palo Alto is much better and is much more friendly and modern to configure, although the low-end units are slow to apply the configuration - their UI and configuration processor is a little under powered, but the high-end provider kit screams (but costs well into 5 figures).

I currently use a mixture of Zyxel Zywall USGs and Unifi USGs. The Zyxel suffers from similar problems to the ASA series, overly complicated and every feature seems to require additional licenses.

big_D Silver badge

Re: Surely this is the time....

Work is also a place for many people.

I work in manufacturing now, doing IT, but a majority of our workers have no choice where they work. That goes for a lot of jobs. Administration and office workers are another matter.

That said, I'm the IT bod left working on site, while the rest do home-office. Somebody needs to be here, in case the VPN, firewall, switch, server etc. goes down.

Cloudflare is over the moon because its pro-privacy 1.1.1.1 DNS service got a clean bill of health from everyone's favorite auditor – KPMG

big_D Silver badge
Facepalm

Why?

Instead, it took nearly two years because the accounting firms approached didn't have a playbook for this sort of technically-focused review of policy and practice.

Then why not use an organisation that is specifically set up for IT security auditing? There are some good ones around and some have a long tradition in science and industrial auditing as well as IT, so they have a good reputation. TÜV springs to mind.