* Posts by Sir Runcible Spoon

5262 posts • joined 29 May 2007

Just a reminder: We're still bad at securing industrial controllers

Sir Runcible Spoon Silver badge

Re: no telnet or snmp 2v please

Whilst I agree that you are more likely to encounter issues from hardware failure/human error than hacking, a hack has the potential to be so much more disruptive.

It's the old equation - Probability * Impact = Risk

Even if the probability is really low, if the impact is massive then the risk is high.

Nah, National Cyber Security Centre doesn't need its own minister, UK.gov tells Parliament

Sir Runcible Spoon Silver badge
Meh

Re: A British government?

Yes, that is the UK government.

We sent a Reg vulture to RSA to learn about the future of AI and security. And it's no use. It's bots all the way down

Sir Runcible Spoon Silver badge

Re: A nice little fantasy, but...

I can (sadly) foresee this being deployed as private security for very rich people.

Sir Runcible Spoon Silver badge
Terminator

Re: Pandora Says Hello and Welcome

Applied Insanity more like.

I mean, if even 1% of all this AI BS was true, what on earth would convince anyone it was advisable?

Afetr all, what could possibly go wrong? -->

IR35 contractor tax reforms crawl closer to UK private sector with second consultation

Sir Runcible Spoon Silver badge

Re: THis yank hasa question ?

That's a really good question.

I expect we could still hop over to the EU to work, it would probably just require more paperwork,

Sir Runcible Spoon Silver badge

Re: Downvoters, get ready ....

"none of the doom that was predicted back then has come to pass"

From my (admittedly) limited understanding of the subject, I think HMRC have lost numerous IR35 cases that have actually been taken to court. So the doom and gloom was halted by people challenging HMRC's interpretation of their own tax laws, and winning.

Then, HMRC decide to have another crack at it.

This was all supposed to combat those PSC body shops that were actually hiring people as disguised employees, yet it's somehow morphed into trying to catch out genuine contractors.

For example, I exclusively do project work for clients (i.e. there is a definite end to the project and revenue stream) - renewals are based on how the project is proceeding. As soon as it's done, I'm out.

However, since I work in security it's pretty hard to argue a valid use of the right to substitution, since I'm not in a position to provide the necessary security checks often required for the work I do.

In addition, I am often forced to utilize provided equipment by the client, as they don't want uncontrolled devices running around on their secure networks for some reason.

I do, however, at all times act as an independent contractor. I tell them when I'm taking a break, although out of professional courtesy I inquire as to whether they anticipate any issues arising from me taking some time off and I consider their response.

I also take care to ensure they tell me what they want to be done, but it is up to me how I achieve it (within the bounds of the field I work in).

Some of these things mark me as a proper contractor, others (according to HMRC) mark me out as an employee - mostly because they don't seem to understand that their blanket approach doesn't cover many bespoke situations (such as mine) - and so they try force ir35 based on some arbitrary rule, contractor challenges it, goes to court and the judge (who looks at the whole picture) decides I'm a contractor and HMRC loses the case.

What exactly don't they like about contractors like me? It feels like persecution to be honest. You don't see electricians or plumbers being treated like this (afaik) - for example if a building contractor takes on some sparkies for a big job that lasts 3-4 years - are they suddenly employees? Of course not.

Ready for another fright? Spectre flaws in today's computer chips can be exploited to hide, run stealthy malware

Sir Runcible Spoon Silver badge

Re: "I guess the order is to not do anything about it"

As always it will also be a trade-off.

Most people won't be bothered enough to trade in for a slower, but more secure, CPU.

Insane homeowners association tries to fine resident for dick-shaped outline car left in snow

Sir Runcible Spoon Silver badge

Re: Fake news!

I was also looking for the footprints of the car owner..none.

It's almost as if the car had heated that patch of earth and then driven away, subsequently followed by a light sprinkling of snow, which melted on the slightly warmer patch.

Blue Monday: Efforts to inspire teamwork with swears back-fires for n00b team manager

Sir Runcible Spoon Silver badge
Thumb Up

Re: On the fence here

You can always use medical terms, they aren't sweary.

Mr Anal Discharge is obviously going to be fun at parties :)

Sir Runcible Spoon Silver badge
Facepalm

Re: On the fence here

Reminds me of the time we were all allowed to name our own PC's on the helpdesk. Being a big fan of the wombles I chose Orinoco, which went well with my little stuffed toy version sitting on the monitor.

For some reason I'd pissed off the manager and she suddenly decided that we all had to choose names of rivers. Fortunately for me she was a clueless ding-bat and I was fairly smug when challenged on why I hadn't changed the name of my PC :)

Techie in need of a doorstop picks up 'chunk of metal' – only to find out it's rather pricey

Sir Runcible Spoon Silver badge
Angel

Re: A Long Time Ago In A Electronics Factory

People used to make up all sorts of stories about me in the village where I grew up.

It never bothered me because

a) the stories weren't true and

b) they neatly overlooked all the stuff that *was* true (which were much worse) that didn't get around

Sir Runcible Spoon Silver badge

I went to a BT office once and noted that they were using a Cisco 4000 as a door-stop (which isn't a small doorstop) - the person I was speaking to simply replied that they were the most handy thing around as there are loads of them just sat about under people's desks. So I looked, and yes, there were Cisco 4000's everywhere.

Since this was around 20 years ago they weren't cheap either.

RIP, RDP... nearly: Security house Check Point punches holes in remote desktop tools

Sir Runcible Spoon Silver badge
WTF?

Oh dear..

"If you click 'paste' when an RDP connection is open, you are vulnerable to this kind of attack"

You mean such as when using a password program like KeePass?

El Reg talks to PornHub sister biz AgeID – and an indie pornographer – about age verification

Sir Runcible Spoon Silver badge

Re: This Identity thing is the key

My point exactly

Sir Runcible Spoon Silver badge

Re: This Identity thing is the key

Even easier is to go to a data-monger and buy an adult ID account that's already verified, rinse and repeat.

Sounds like a nice little earner for some n'e'er do-well.

'Numpty new boy' lets the boss take fall for mailbox obliteration

Sir Runcible Spoon Silver badge
Thumb Up

Re: 100% honesty 90% of the time

They can be mischievous little buggers at times.

France wants in on the No Huawei Club while Canuck infosec bloke pretty insistent on ban

Sir Runcible Spoon Silver badge

Re: Again....

Yeah, the actual 'evidence' part of the puzzle seems to have been overlooked. I'd be more worried about Intel & Cisco than Huawei. Hmm, I think I've worked out why they're out to get Huawei...

Stalk my pals on social media and you'll know that the next words out of my mouth will be banana hammock

Sir Runcible Spoon Silver badge
Coat

What have the Romans ever done for dead parrots? That's what I want to know.

Sir Runcible Spoon Silver badge
Coat

Re: Gadzooks!

You forgot to add the +/- 5% error factor in your prediction.

Wow, fancy that. Web ad giant Google to block ad-blockers in Chrome. For safety, apparently

Sir Runcible Spoon Silver badge
Pint

Re: "I'm inclined to view it as the Internet going to hell in a handbasket."

M..M...M.M..Max Headroom FTW!

Sir Runcible Spoon Silver badge
Coffee/keyboard

Re: So predictable !

"You really don't know how things work and clearly don't understand anonymised data "

See icon -->

You should really tag sarcastic jokes if you post anonymously, you almost had me going there for a second :)

Oh wait, you were serious? Wow. Perhaps you wouldn't mind citing a few examples of 'anonymised data' so we can all take a good look at this rarely sighted phenomenon.

En garde! 'Cyber-war has begun' – and France will hack first, its defence sec declares

Sir Runcible Spoon Silver badge
Thumb Up

Re: 'Cyber-war has begun'

"Better late than never to the party"

I was about to post that they were a bit late to the party, for some reason ministers (of whatever country) appear to be blissfully unaware it's been going on for nigh on 20 years (that I'm aware of).

Man drives 6,000 miles to prove Uncle Sam's cellphone coverage maps are wrong – and, boy, did he manage it

Sir Runcible Spoon Silver badge
Gimp

You wire their knackers/tits up to the mains with a trigger based on oversight stats.

Dear humans, We thought it was time we looked through YOUR source code. We found a mystery ancestor. Signed, the computers

Sir Runcible Spoon Silver badge
Coat

Re: ElReg:

That beer looks flat! oops..wrong forum.

Sir Runcible Spoon Silver badge
Coat

Re: Mystery Ancestor

Is that a direct translation?

Three quarters of US Facebook users unaware their online behavior gets tracked

Sir Runcible Spoon Silver badge
Mushroom

Re: @ Sir Runcible Spoon -- Not sure, but...

Swine :P

Sir Runcible Spoon Silver badge

Re: Self-classification

Considering most people are delusional these days I'd say a lot :)

Sir Runcible Spoon Silver badge
Alien

Re: No kidding

"Then I remember I honestly don't care about the the human race anymore."

I'm confident that no-one will ever accuse me of being racist, because *all* humans look the same to me.

Sir Runcible Spoon Silver badge

Re: FB is a boil on the bum of mankind!

I've always heard that "if it's free - you're the product" and have yet to encounter a scenario where this has proven to be false.

Sir Runcible Spoon Silver badge
Headmaster

Not sure, but...

"I'm sure there's some punctuation problems in my post"

Shouldn't this be: "I'm sure there're some punctuation problems in my post" ?

"There is" (in my mind at least) points to the singular "a problem", rather than "some problems".

Could be wrong of course :)

Googlers to flood social media with tales of harassment in bid to end forced arbitration

Sir Runcible Spoon Silver badge

Re: My thoughts...

At first glance it rather looks like they are complaining that Google aren't taking it upon themselves to enforce/educate non-Googlers, presumably leaving it to the people who they are actually contracted with.

Wanted – have you seen this MAC address: f8:e0:79:af:57:eb? German cops appeal for logs in bomb probe

Sir Runcible Spoon Silver badge

If the Police were clever about this, they would set up multiple open wi-fi access points or bluetooth readers around the area along with camera's.

If the perp has his phone set to look for open wi-fi/left bluetooth on, then they might get him in passing, or if not then he might just use one of their hotspots and catch him in the act.

Amazon exec tells UK peers: No, we don't want to be dominant. Also, we don't fancy being taxed on revenues

Sir Runcible Spoon Silver badge
Joke

Re: Death of the High St

Can you send me the link to the leopard's fanny batter on Amazon please? My wife's birthday is coming up and I want to give her a pressie she'll never guess.

Sir Runcible Spoon Silver badge

Re: Death of the High St

Have you been to any supermarket mid-week?

I sometimes wonder if I'm the only person who still works - either that or there are a *lot* more people around than we think there are :)

Sir Runcible Spoon Silver badge
Flame

Death of the High St

Whilst Amazon and other online retailers have certainly had their impact, in the UK at least I would definitely blame 50% of this on local councils ripping people off to park in town, and hiking the business rates up so high that shops are no longer profitable.

I've never quite understood how an empty premises brings in more rent money than an occupied one - but what do I know? If only I had the brains of some of the people in these council offices I might be able to ignore all this shit and pretend it doesn't matter!

Chinese rover pootles about... on the far side of the friggin' MOON

Sir Runcible Spoon Silver badge

Re: private enterprise

Wouldn't it be mildly radioactive by now, sitting in direct sunlight with no atmosphere to protect it?

Linus Torvalds opts for the scream test: Linux kernel syscall tweaked to shut data-leak hole – anyone upset, yell now

Sir Runcible Spoon Silver badge
Mushroom

The Scream Test

Is a proper engineering solution to get you to your goal as quickly as possible.

Often the threat of a scream test is enough to get people thinking about the issue at hand which they would otherwise ignore.

Glad to hear someone still employs them when required (I don't think of them as the first tool in the box to use, but you should certainly have it in there somewhere to pull out when all else fails - mainly because it works when other methods are hamstrung by politics).

Oh, and he didn't swear? Are you sure this was Linus?

More nodding dogs green-light terrible UK.gov pr0n age verification plans

Sir Runcible Spoon Silver badge
Paris Hilton

Re: All you need is......

For some reason I read that at first as 'until the *headmistress* summoned him for punishment'

Dunno why.

Sir Runcible Spoon Silver badge

Apparently they had one of their sign-posts removed from the .net equivalent of a hamlet in Dorset.

Idiots who went to said hamlet to try and find PirateBay realised that because they couldn't see it, it must have been banned.

This whole age-verification system thing has all the hallmarks of a similar genius behind the scenes doing the thinking.

Sir Runcible Spoon Silver badge

Re: Just like buying a magazine.

The reason I downvoted your post was because regardless of the sentiment behind this idea, it simply isn't a realistic solution to the problem.

In fact, it will simply switch more people (and not just kids) on to full vpn encryption etc., see :Law of Unintended Consequences

Sir Runcible Spoon Silver badge

Re: More fuel if any is required...

That's only if *all* your traffic is encrypted. After all, people do work from home and use company vpn's to log on to the company network.

So, do your normal stuff in clear, and any porn via vpn...simples.

Could you speak up a bit? I didn't catch your password

Sir Runcible Spoon Silver badge

Re: If this is how things are going to be

Then my encoder ring must be broken, still looks good to me :)

Sir Runcible Spoon Silver badge
Joke

Re: I'm pretty sure I can prove that...

E=mc^2

Energy in a pie is equal to the mass of the pie when thrown at your face, twice.

Sir Runcible Spoon Silver badge
Coat

Re: If this is how things are going to be

EGREN SOMELN STATE MILEY

Error pop-up? Don't worry, let's just get this migration done... BTW it's my day off tomorrow

Sir Runcible Spoon Silver badge
Headmaster

Re: Not sure who is more dull...

aarrrrgggghhhhh....you fiend!

Sir Runcible Spoon Silver badge

Re: It definitely happens

and other top tips, such as don't saw the branch you are standing on :)

Sir Runcible Spoon Silver badge
Coat

Re: Not sure who is more dull...

Next time, please use an endquote; my OCD just triggered and I was all calm before.

Sir Runcible Spoon Silver badge

Re: Data Center Migrations and application errors

I'm no sysadmin, but even I know that when troubleshooting something new and you find something likely-looking in the logs that you need to go back a bit to see if the error/issue was pre-existing.

Sir Runcible Spoon Silver badge
Happy

Re: Trial version of Windows

"so he ducked that cluster-stuff"

It's ok, you can say cluster-fuck, we won't get upset.

Biting the hand that feeds IT © 1998–2019