* Posts by Roland6

10737 publicly visible posts • joined 23 Apr 2010

SAP proves, yet again, that Excel is utterly unkillable

Roland6 Silver badge

Re: The Wheel of History

>And Lotus Improv was out of this world at that time too....

Still is, Excel 2019/365 still can't do 3D spreadsheets as simply as Improv did.

Roland6 Silver badge

Re: In my experience

>Yes, but the users aren't always doing this out of blind stupidity.

Particularly, as once you've learnt how to do pivot tables, charts etc. in Excel, you can use that knowledge for any other package, whereas knowledge of SAP Analytics pivot tables is only applicable to SAP...

Fancy watching 'Bake Off' together with mates and alone at the same time? The BBC's built a tool to do that

Roland6 Silver badge

Re: "together even when they are physically apart"

>If I want to be with someone, then I am with someone. ...

In the current lockdown, you can only do this (and some of the other things you list) with someone who is a member of your immediate household...

I did a variation of what the BBC is offering (same time different place) with a movie for my teenage daughter's birthday recently, she and her friends watched the same film, whilst in a 'meeting' (*), so whilst not as good as being in the same place at the same time, did permit some real-time interaction and viewing control (pause, rewind).

(*) Need to be careful about sound feedback. I would hope that someone will implement some form of noise-canceling (on the movie) which would enhance the meeting experience ie. would permit audio/spoken word conversation.

>Still, the Beeb idea is bizarre.

Given the omission in your comment, I suspect you also don't see the point of multi-player gaming and in game chat - something my teenage son does a lot with his friends.

Podcast Addict banned from Google Play Store because heaven forbid app somehow references COVID-19

Roland6 Silver badge

Re: Publish Elsewhere?

>Perhaps it's time for developers to ensure ...there's a way for users to obtain the latest versions

Its more than just the latest versions.

Do a factory reset and you may find that many apps can't be installed because the latest version doesn't run on your particular version of Android.

However, with a little digging around you can often find a site - of unknown repute - that has a few old versions, which you can try and find one you can install and then update.

If you're appy and you know it: The Huawei P40 Pro conclusively proves that top-notch specs aren't everything

Roland6 Silver badge

Re: Consequences

>It seems you may have finally come to realise the outsized role Google has in your everyday life, yes?

I suspect it hit them like a brick...

It has taken the Huawei P40 to make the reviewer realise that what they thought was "Android" isn't Android at all, but Google services.

A few years back people talked about walled gardens - mostly with respect to Apple and Microsoft, it seems Google has quietly over the years turned "Android" into a walled garden without people noticing too much.

NHS contact tracing app isn't really anonymous, is riddled with bugs, and is open to abuse. Good thing we're not in the middle of a pandemic, eh?

Roland6 Silver badge

Re: "Design it to be secure from the start."

>That's an old-world view that's at the source of many of our current challenges.

err no...

Design of an system application such as the NHS app, starts before anyone has even thought of designing software. When I pass a system design to the Software Engineers (to contribute their component of the solution), I've already solved the real-world problem and identified many of the key security hurdles the design of the software elements need to get over...

So you are correct in that Software Engineers on being given a brief can start to think of security from the start of their involvement.

Roland6 Silver badge

Re: symptoms of covid-19 compared to common cold, flu and asthma

>Will the app ask if the user has a cold or is asthmatic?

There is already an app for that.

My partner signed the family up, we report on a daily basis on a range of questions - she had a migraine earlier in the week and ticked four symptoms from the long list, that evening she received an email offering her a test slot.

Roland6 Silver badge

Re: Just say no

>I therefore suspect that their offering will be pretty much gold-standard.

you are forgetting they also control the platform OS, so you need to assess things in the context of what can be extracted via the OS reporting (remember Apple have already said they are making some of the app functionality OS functionality...) rather than the app itself does dodgy stuff...

Roland6 Silver badge

Re: Just say no

> Its major advantages are no central database of identifiable information and clean iOS/android interaction.

Big assumptions there:

1) It's okay for Apple and Google to limit what others can do with their platform - and actively take measures to prevent rooting...

2) Whilst the approach places different requirements on the central/distributed DB, you are assuming that their approaches don't upload any of: phone number, Google unique device id., icloud/google account details, usage of other app's etc...

3) In using an iPhone/Android you've already given Apple and Google permission to upload usage information to them, so no legal recourse...

Roland6 Silver badge

>it took less than 30 minutes looking at the code the day it was released for me to spot multiple issues ranging from the basic to the severe, including many day one rookie mistakes.

Expect the Apple and Google apps to be similar, only expect the data to be replicated to an offshore DB to allow non-GDPR compliant processing...

As the first commenter said, for the app to work, information that identifies a phone/person needs to be retained and exchanged with other identifiable phones/persons. All solutions require the information to be shared via a 'trusted' broker...

Roland6 Silver badge

>"...and how long did we have to wait for the first data breach? A week after launch of the Beta!"

Puts the entire Huawei b*llocks into perspective; if the UK government can't secure a relatively trivial DB then it has already lost the security battle with other nation-states. Ie. we should assume the Chinese, Russians and the US via the Israeli's all have full and unhindered access to UK government systems...

Roland6 Silver badge

Re: "Design it to be secure from the start."

>"Design it to be secure from the start."

The laugh is that you can't design something to be secure from the start!

You first have to solve the real problem then you can evaluate how that solution can be made secure, this may take several iterations before you arrive at a solution that hopefully satisfies most of the requirements.

Roland6 Silver badge

Re: One would have throught...

You do realize both the Apple and Google app also has a "central" DB - remember a 'central' database is just a distributed DB with a single instance; alternatively, a distributed DB is just one implementation approach to a central DB...

Once you start looking at the Google and Apple app's and appreciate what they already know about your phone, you start to appreciate they are not that much different to the NHS app from a personal privacy point-of-view. At least with the NHS app we stand a reasonable chance of not getting spammed with adware for: fake cures, will writing, funeral plans, etc.

Roland6 Silver badge

Re: One would have throught...

>Because of the complexity, I think it's where a centralized approach has more value.

Also, the centralized approach permits the government to utilize its privileged access to mobile network location data. Cross-matching this to the data from the app and there is the opportunity for some real scientific insights to be gained.

The more I assess the app, the more I see it's real value is in providing metrics to input to NHS admissions forecasts. Yes it should help to reduce the rate of infection, by alerting people to the need for them to self-isolate before they actually develop symptoms themselves.

Roland6 Silver badge

Re: One would have throught...

>"Make no mistake, they have every intention of retaining and using that data"

Where "they" in the above includes: both the backers of the NHS app and the backers of the Google and Apple apps.

ALGOL 60 at 60: The greatest computer language you've never used and grandaddy of the programming family tree

Roland6 Silver badge

Re: Algol 68 is not ALGOL 60

>I never got to use Algol 68 because it was difficult to write a compiler for

Yes, the really powerful and useful languages are a bugger to write a compiler for.

Aho and Ullman's "Principles of Compiler Design" was the must have text book on the subject (still got my first edition) and explains why , although it was very helpful in writing a Pascal compiler, in writing compilers for languages requiring bottom-up LR parsing, such as C and Ada, there was much left to the reader...

Vint Cerf suggests GDPR could hurt coronavirus vaccine development

Roland6 Silver badge

Re: His opinion, or his employer's?

>Not sure GDPR specifies lengths of time, but you aren't allowed to keep the data for years after it is useful.

Well given the extent to which modern medical research uses historic (personally identifiable) medical records, it would be relatively easy to justify the "useful" retention life of CoVid19 data to be at least 100 years.

>Not sure if GDPR allows personal data to be transferred elsewhere without express consent

You get express consent to permit you to "share data with selected third parties".

Multi-part Android spyware lurked on Google Play Store for 4 years, posing as a bunch of legit-looking apps

Roland6 Silver badge

Re: re: factory reset

I think there are also article(s) on el reg that describes how malware can survive a factory image flashing (PC and phone) - due to much hardware having its functions defined by software which has its own memory that isn't touched by an OS reimage...

In undating a bunch of PC's recently, I found one device family required a Bios downgrade (to a specific version) followed by an upgrade to the new patched version to ensure UEFI disk and memory areas were overwritten and thus erased.

If you're going to spend $3tn, what's another billion? Congress urged to inject taxpayer dollars into open anti-Huawei 5G radio tech

Roland6 Silver badge

So what Open RAN seems to be is a US 5G patent pool, which in order for it to work either needs to steal patents from Nokia, Ericsson and Huawei (and other non-US contributors) or bully them to agree to license their Patents to Open RAN on terms favourable to the US.

Naturally, the companies that will have goods stopped by US trade officials will be consumer devices from companies such as Samsung - all above board and in accordance with the US's take on WTO's rules.

Roland6 Silver badge

Re: Open?

RAN is likely to be patent pooled for US companies, the (US-based) patent trolls will still be around, just making life difficult for anyone else trying to import RAN equipment into the US.

Roland6 Silver badge

Re: Only themselves to blame

>Because the US did not participate in GSM standard development, it shut itself out of future development.

And got very upset when the rest of the world went ahead with the 3G Standards setting...

Nine in ten biz applications harbor out-of-date, unsupported, insecure open-source code, study shows

Roland6 Silver badge

Re: Uh? Is this a common problem?

>I was concerned that dabbling in JavaScript inevitably led to darker things like heroin ...

Personally, I suspect the unscrambling of someone else's sed script can lead to things like heroin ...

Sadly, 111 in this story isn't binary. It's decimal. It's the number of security fixes emitted by Microsoft this week

Roland6 Silver badge

And unsupported versions of Windows

"One standout programming blunder was CVE-2020-1067, a remote-code execution (RCE) vulnerability in all supported versions of Windows."

This would suggest the vulnerability is in both 32-bit and 64-bit code and thus has been around sometime; I wonder which is the first version of Windows it occurs in - NT 3.51? - has anyone investigated?

DBA locked in police-guarded COVID-19-quarantine hotel for the last week shares his story with The Register

Roland6 Silver badge

Re: Perfect example...

>but they make it clear that this is the FIRST wave of the disease and there is worse to come

However, this seeming clarity is being eroded by the testing of biopsy samples taken last year, in which evidence of SARS-CoV-2 is being found, suggesting there was an initial wave in UK/Europe last autumn...

What people are ignoring is just what government policy (around the world) actually means, basically, they are accepting CoViD19 is here to stay, it won't be eradicated and achieving herd immunity is a pipedream, the best seems to be to keep it's R-value below 1, in the hope that a vaccine can be developed within the next year then mass produced and then a programme of injections started - which to me indicates CoViD19 and thus lockdowns and social distancing are going to be part of 'normal' for at least the next 3 years.

There is one thing we can be certain of: CoViD19 is action research on a grand scale and is providing many opportunities for people to see scientific problem solving - warts and all - in real-time.

Roland6 Silver badge

Re: Perfect example...

>If you stop the spread early, you can open up early so the total effect on the economy is less. If the UK had taken the required action when it was required you wouldn't have community transmission now and you could open back up.

Agree, however, given the nature of the English - and the typical Brexiteer, Cederic is absolutely right,

people would not of have accepted a government (even a Conservative one) enforced lockdown. Even waiting there were and still are people who think CoViD19 shouldn't be treated any differently to seasonal flu, however, they just grumbled rather than get out on the streets, like they have been doing in the US and Germany...

Penny smart and dollar stupid: IT jobs slashed in US, UK, Europe to cut costs – just when we need staff the most

Roland6 Silver badge

>Our DR plans most certainly considered several scenarios where nobody would be allowed into the offices and everyone would have to work remotely for extended periods.

Bet they didn't take into account social distancing, unavailability of parts, spares etc.

Not saying the plans didn't help, just that having had to restore Internet connectivity for a client (trunk fibre lines out of the town were servered - took BT/OR 3 weeks to fix), I did find the plans only went so far before it was "get your thinking hats on" - what do we have that we can use to restore some form of connectivity so people can resume working tomorrow morning and continue to work until such time that BT are able to restore normal service...

Roland6 Silver badge

Is the glass half full or half empty?

For all those forloughed IT staff, being paid to not work but to 'volunteer'...

There are many Open source projects needing extra hands and minds...

Roland6 Silver badge

Re: It's not all bad.

>the secretary had to be furloughed immediately as she is high vulnerability.

Missed a few steps in your reasoning.

You only fuloughed staff you don't need to run the reduced business.

Now you look at the staff you retained and assess whether their vulnerable/high vulnerability status prevents them from doing some or all of their normal job and what would need to be put in place to enable them to do their job...

Last month I renewed my car insurance, I spoke a very pleasant lady who, whilst we waited for the systems to process my renewal, I discovered was in a high vulnerability group, her employer had set her up to work from home...

Roland6 Silver badge

>Of course they've put themselves in this position by not having working DR plans

Did any of the DR plans you drew up or contributed to contain any consideration of the circumstances we are currently in; I suspect not, as I know despite all my years of experience, none of my Business Continuity plans covered the current situation.

>and not having enough IT staff to do things properly

Actually, it more of not having the right IT staff. One client the IT staff wanted to buy a load of laptops etc.; I visited their offices and got them to empty out their cupboards - 5 days later all those laptops (some dating from 2012) were running Windows 10 etc. and in the hands of employees pleased to be able to work from home.

> Look no further than COURTS using Zoom...

It works and provides good enough security for public proceedings.

Obviously, we can expect some big product enhancements in September, embedding some of the key learnings from the current mass usage of video calling/meeting/conferencing systems. So I would not be surprised if some user groups move away from Zoom, Teams etc. to more appropriate platforms.

Total Eclipse to depart: Open-source software foundation is hopping the pond to Europe

Roland6 Silver badge

Re: Tip of the iceberg

>It's the way you create the market that makes the difference.

That is a lesson a UK, on route to exiting the Single (European) Market, is going to have to learn fast...

Roland6 Silver badge

Re: Tip of the iceberg

>"see how long it took to be able to have mobile phone handsets work across all telcos, that was the result of a deliberate policy choice to allow competing standards instead of competing companies"

I thought the US only achieved this by adopting 3G - the output of 3GPP; an organisation born out of European co-operation on GSM...

Mind you Qualcomm did try their best to scupper 3G by its questionable patent claims...

Microsoft doc formats are the bane of office suites on Linux, SoftMaker's Office 2021 beta may have a solution

Roland6 Silver badge

Re: Trust Office

But not all PDF readers are equal.

Over the years I've found differences between Adobe, Nuance, FoxIT, ExpertPDF, Chrome...

I think the best was finding that displaying an A4 document at full width on a 15" laptop screen in one caused some horrid (bad on the eyes) font display, reduce zoom by 5% and it displayed perfectly legible fonts.

Fancy some post-weekend reading? How's this for a potboiler: The source code for UK, Australia's coronavirus contact-tracing apps

Roland6 Silver badge

Re: Why?

Yes, the decentralized approach is tempting, however, a big issue is what can we learn from it, to better prepare us for the next time, and there will almost certainly be a next time. Given the number of SARS/Corinavirus outbreaks in the last 20 years, I suspect we'll see another SARS/Coronavirus pandemic within the next 10 years.

Not saying the UK NHS app is better or actually does the job, just that it might be wise to think of the bigger picture. From what I can see the UK NHS app provides more data to researchers.

Roland6 Silver badge

>Every death is one too many, but we're still looking at something comparable to a severe flu season.

That is only because of the measures taken to limit contact and reduce the rate of transmission. Without these measures, we could expect to see a death rate somewhere between x10~x44 higher. From memory, CoViD-19 could kill between 2~5M people in the UK between March and Christmas if we carried on as 'normal'...

Remember, no one gets admitted to the high dependency wards with flu, only the few who develop pneumonia.

Hey cloud lawyer: Can I take my client list with me?

Roland6 Silver badge

>Can I ask if and how I prosecute/stop him from using the customer data?

Phone your solicitor.

Prepare to have your shonky password hygiene shamed by Firefox 76

Roland6 Silver badge

Re: Firefox has sought to arrest its slide in the rankings

>How about they stop trying to chase Chrome

It is worse than that.

With the integration of password management, they are also chasing: the dedicated password manager vendors and all the security suite vendors that now include a password manager.

Personally, I use LastPass for a reason - its cross-platform, not locked to a specific browser or security suite. I suspect others use other reputable password managers for similar reasons. So this just becomes yet another feature that will be turned off, just as I uninstalled the free version of Kaspersky's password manager that gets included with their security suite.

Given browsers are becoming an entire containered OS, I suggest it is about time they started having published API's and better support for third-party enhancements. Perhaps this is something the Open Group could resolve and deliver a POSIX standard.

Does a .com suffix make a trademark? The US Supreme Court will decide as Booking marks its legal spot

Roland6 Silver badge

Re: If this passes..

>I guess I would expect booking.com.au to be the Australian outpost of booking.com serving antipodean tourists, so they might have a claim.

But you would be totally wrong.

In general ownership of one label and TLD combination, does not give you any rights over anyother combinations of your chosen label with other TLDs and subdomains. Although given the US seems to think it owns the Internet and that US law applies globally...

If in doubt I suggest you search back and reread the 'Brexit' articles about the use of .EU domain names currently held by UK companies/individuals that will become available (to EU residents) in the near future when the UK finally completes its withdrawal.

From the discussion in the article, I suspect a case could be made for trademarking: iCloud.com (and similar) because iCloud is a made-up word.

What is interesting is that Booking.com BV don't seem to wanting to trademark their business name (or is it already trademarked in the Netherlands and EU?), just their domain name.

Florida man might just stick it to HP for injecting sneaky DRM update into his printers that rejected non-HP ink

Roland6 Silver badge

Re: HP printers

Mopria is also included as standard in Android 8.0 Oreo, where it is called: Default Print Service.

In my experience so far (HP, Canon, Brother), if the printer supports Airprint and/or the manufacturers own WiFi print application then Mopria will be able to access it.

Roland6 Silver badge

Re: HP printers

Morpria is included in Windows 10 from build 1809 (October 2018 Update) - 8 years after Apple launched Airprint....

Suspect many people don't know it is there because they updated a pre-existing Windows system which had OEM print drivers installed.

Just goes to show just how much energy MS has been devoting to non-essential stuff such as one version of Windows for all platforms, TIFKAM etc., rather than on stuff that would actually help people better use of their laptops, tablets and MS Surfaces...

Roland6 Silver badge

Re: HP printers

The auto-download of firmware updates over the internet is only part of the problem, the issue as we have seen with Microsoft Windows updates is knowing what is in those updates.

A big question has to be whether HP made it explicit that this specific firmware update contained significantly changed functionality with respect to third-party ink cartridges and gave the user the option to rollback to an earlier release etc.

Remember this update from HP is equivalent to Microsoft updating Windows 10 to only permit the usage of Microsoft Office, Defender, Edge etc.

$31bn spent on cloudy infrastructure in Q1 on back of employees' mass migration to home working

Roland6 Silver badge

Re: Dude, where's my (car)dware?

>n other news almost everyone else is going cloud to escape managing hardware, OS, applications, infrastructure...

Yes and as the original commenter said - all works well until it all goes titsup and you need to either restore your IT ahead of the scheduled priority your cloud provider has assigned to restoring the systems hosting your load or you wish move away from that provider.

Everyone tends to assume that once you move something into the cloud, DR/business continuity, data backup and archive etc. are solved problems.

India makes contact-tracing app compulsory in viral hot zones despite most local phones not being smart

Roland6 Silver badge

Re: so what *is* the solution?

Well given the ease with which people will be able to "play around" with stuff on their phones, it does seem the solution is to rely mostly on network data and use the app to provide unreliable but more granular data.

Now try and sell that to the people; given peoples well-founded wariness of letting state agencies accumulate large amounts of data on them...

What's worse than an annoying internet filter? How about one with a pre-auth remote-command execution hole and there's no patch?

Roland6 Silver badge

Re: Only rogue users

>Yep. Here, our web filtering list is relatively short.

It works well until you explore a little.

A client had barred "gambling sites", it worked well until they decided to bid for funding from the National Lottery.

On investigation, yes the filter did block the big name sites, but none of the smaller sites - neither did it have an exclusion list. Not naming names but the web filter was from a popular business provider (£) of web filtering services.

Dell to unleash hybrid server/storage boxen that can run virtual machines

Roland6 Silver badge

Re: Boxes

Looks like its only taken them 12+ years to deliver what Tintri delivered - using open source. suspect it will be not as functional and admin friendly.

Microsoft! Please, put down the rebrandogun. No one else needs to get hurt... But it's too late for Visual Studio Online

Roland6 Silver badge

"an active codespace in Microsoftland requires a Linux instance"

It does look like MS were serious when they said Windows 10 would be the last version of Windows...

Brit magistrates' courts turn to video conferencing to keep wheels of justice turning

Roland6 Silver badge

It could be something to do with people having to remain at home = shortage of empty homes to peruse...

ICANN finally halts $1.1bn sale of .org registry, says it's 'the right thing to do' after months of controversy

Roland6 Silver badge

Re: as for ICANN - just get rid of ...

> they make us go back to using the OSI network stack?

It worked, the MAP/TOP/GOSIP profile isn't too dissimilar to TCP/IP and CLNS out-of-the-box supports whatever address space you wish to define.

Resistance is futile: Some Cisco security appliances are ticking time bombs of fail thanks to faulty resistors

Roland6 Silver badge

Re: Counterfeit parts

>BTW, these diodes were used in the -48v dc power circuits and would/could fail spectacularly! Hence icon.

Just like high clock speed PC CPU's separated from their heat sink before thermal cutout circuitry became standard?

Roland6 Silver badge

Re: The manufacturing process issue

The Advisory doesn't mention anything that can be taken to mean "substandard component fitted".

In fact from the wording of the advisory:

“Due to a manufacturing process issue, some ASA5508 and ASA5516 security appliances might have a damaged resistor component,”

I suspect some machine was set up incorrectly so that the component on installation was subject to stresses (mechanical/thermal) that weakened it.

Who's still using Webex? Not even Cisco: Judge orders IT giant to use rival Zoom for virtual patent trial

Roland6 Silver badge

Re: used webex at the weekend

>for a family catch up. I was trying to wean the folks off of zoom for <waves hands vaguely> security reasons.

Next week are you trying Jitsi ?