* Posts by Peter Gathercole

4213 publicly visible posts • joined 15 Jun 2007

Ministry of Defence tells contractors not to answer certain UK census questions over security fears

Peter Gathercole Silver badge

Re: Without being too picky...

There is a real discussion about whether this will be the last census in the UK. The alternative that has been mooted is to buy the data from the likes of Google and Facebook, and combine that with information that the government already holds, on the belief that all people will have to have at least some internet (or whatever follows the Internet) presence in 2031.

I guess that this will depend on whether the cost of buying the data becomes less than the cost of running the census, and whether the intrusive snooping of these internet companies will generate accurate enough information. Don't know whether they will have to deviate from GDPR in order to do it, though.

Peter Gathercole Silver badge

Re: Census data

My wife has a hobby of genealogy, and she's actually quite good at it. One of the things she has to cope with is different spellings of unusual (and some not so unusual) names, when one census taker had a different guess at how the name was spelt from the last or following census.

Trying to track people who move from one place to another when their names may not have been recorded correctly can be a real problem.

You also have people who switch their first names around at different times, give known names rather than their christened names, or deliberately want to disappear and try to give different information in different places. It's all a bit of a game, really, and one that a lot of amateur genealogists (and some so-called professionals) get wrong, and then post incorrect information onto Ancestory and FindMyPast, poisoning the record!

My wife does not count a link until she can find at least two separate pieces of evidence linking people together.

The Audacity of it all: Version 3.0 of open-source audio fave boasts new file format, 160+ bug fixes

Peter Gathercole Silver badge

Ripping vinyl

I used Magix Audio Cleaner to rip vinyl many years ago when I did it frequently (using Windows, one of the few reasons I used Windows). That was able to identify track breaks most of the time. The first version I used was a freebee on a cover mount disk on PCW, but I ended up buying the next version anyway. I think it included an MP3 encoder.

I did use Audacity 2.something to do the same a short while back. I'm sure that there was a plugin to place labels at periods of silence, although I found the label handling with Audacity a little awkward, and I don't believe that it had the ability to generate track listings for CD from the label names. But it can split the tracks into separate files so that they could be burned to CD in the correct sequence using K3B or Brassero.

When I decommission systems, I tend to keep the hard disk around for a while (well, I guess forever so far). I recently found the disk from the Windows system I used to do rips with about 30 albums ripped, but I could not read the labels and listings, although the audio was in WAV format, so I can actually listen to the rips.

Of course, I've updated my turntable now (a couple of times actually), so I really should rip them again. But it's surprising how good the rips sound. Most are from before the era of 'remastering', so they are more authentic than current CD purchases that have been messed around with.

UBports community delivers 'second-largest release of Ubuntu Touch ever'

Peter Gathercole Silver badge

Re: Why not fork Android + make it a shell

I haven't checked this version, but UBports used to use an android kernel with Ubuntu tooling over the top.

I was skeptical about MIR and the Ubuntu desktop on computers. I could not cope with how much it wanted everything to run full screen, was difficult to have more than one window of each type (for example a terminal session), and how inflexible it was, making customization difficult. I still used Ubuntu, but used another GUI.

But as a phone GUI, it works well.

The lack of apps makes me use a more mainstream phone as my main phone, but I do keep a Nexus 4 with UBports on it (even with an active SIM) just to see what is happening. I would like to put it on a more modern device, but the list of supported phones is still quite small.

Peter Gathercole Silver badge

Re: Ohhh...real shops!

I've got a particular problem. Years ago, I bought a mobile phone on a contract for one of my kids.

They're kind of wedded to the number on that contract (even though it's actually well out of contract), but it's in my name, even though they've taken over paying for it.

So we want to move the number to another contract in his name. It's proved difficult over the phone, because it seems it needs a three way call with the phone provider's call center, and we both have to prove who we are, which seems too difficult for the call center operatives to get their heads around.

One time, before the lockdown and while he was visiting, we decided that it might be better to visit the company's shop, so we both loaded ourselves up with ID, and travel to the nearest shop (~25 miles).

We walk in, and explain to the young person there what we wanted to do, and after his face paled for a few seconds, he said "No, I can't do that here, you'd be better off calling the call center."

Made me wonder what the purpose of the shop actually was.

Don't be a fool, cover your tool: How IBM's mighty XT keyboard was felled by toxic atmosphere of the '80s

Peter Gathercole Silver badge

Re: I miss IBM keyboards

Argh. What am I saying. The rubber sheet in the Model M keyboards is between the membrane and the rockers, not the membrane and the steel sheet,

Peter Gathercole Silver badge

Re: I miss IBM keyboards

Yes, it's quite true with the IBM Model M. There's a big steel plate forming the bottom of the plastic-membraneX3-rubber_shim-steel sandwich inside the plastic case. It's not just for weight, it's actually the bottom layer, with the rubber sheet and the the lower membrane immediately above it, and is also curved so that the rake is not just the height of the keycaps, but a formed by the plate.

There's videos on YouTube about bolt-modding the keyboards which show you exactly how they are put together.

With the Unicomp keyboards, the plate is of a lower gauge than the original IBM ones, and I get the impression that the plastic of the external case is either thinner, or of a less dense plastic as well (it's certainly more flexible when it's apart). This makes the whole keyboard, though still heavy by today's standards, lighter than a real Model M.

Peter Gathercole Silver badge

Re: Dishwashers

The previous model F keyboards (on the 5150 and other IBM systems) operated by capacitance change. Model M's used a reduced cost mechanism compared to the model F, and are definitely contact based.

The rocker mechanism is plastic in the model M (I've had several of them apart, and they are definitely plastic), and operates when the spring buckles, and presses the two layers of the membrane together, in the same way that the rubber dome of cheaper keyboards do. I've even operated the membrane without the rocker.

Believe it or not, the model F was even more clicky (well, actually more clunky) than the model M. I thought the feel of the model F was absolutely amazing (better than the later model M), but unfortunately, the layout was quite eccentric, although there was not really a standard keyboard layout back then. The model M shipped with the 5170 PC/AT really defined that (although the physical key positions - although not the character layout - of the DEC LK201 keyboard was very similar).

Peter Gathercole Silver badge

Re: Smoking

With both of the rebuilds, when I dismantled the keyboards, the sticky mess that was left after the drink had also eaten into the tracks on the membrane.

The first rebuild, a real Model M, I did not soak the keyboard (I had not heard of the process), just went straight in to the stripdown, and found the membranes stuck together. Unsticking them ruined the tracks, and even though I tried to use conductive paint, I could not get all of the keys working, even after several attempts.

The second one, a Unicomp, I knew about the soak method. I tried it with the whole keyboard, and then tried with the plastic interior out of the case and with the complete key set of keys and spring/rocker assemblies, but it still didn't return the keyboard to an operating state.

Fearing the worst, I cut the plastic rivets, and found that the Unicomp membrane was actually mostly sealed with a mastic bead, which prevented the water getting in in sufficient quantity to clean up the gunk (the previous IBM one was open on all sides, so probably would have worked). The drink had seeped into one of the holes of the rivets.

But even opening the membrane, and cleaning it well by hand was still not enough. After bolt-modding it and putting it back together, I found that two keys would not work. So I stripped it down again, and with a meter found that one track had been apparantly eaten into by the drink. Resorting to the conductive paint again, this time I managed to restore the tracks, and got all the keys working.

I think that the IBM board failed because of the higher resistance of the painted tracks, and the difference in electronics (PS/2 vs. USB).

The bolt-mod actually made the feel of the keyboard better (some of the plastic rivets had already broken - the keyboard was my son's, who has a machine-gun like typing style).

Peter Gathercole Silver badge

Re: Dishwashers

I believe that one of the models of Cray supercomputer used to immerse some of the boards in a non-conductive, inert liquid to aid heat dissipation. I can't remember what it was called, but I understand it was green.

Peter Gathercole Silver badge

Re: Dishwashers

I would suggest not using any dishwasher detergent or tablets. They tend to have mild abrasives and slightly corrosive components in them that may leave a residue inside the keyboard or damage PCBs.

I would probably not use anything, just let the water do it's stuff, but it might depend on how hard the water is in your area.

Peter Gathercole Silver badge

Re: I miss IBM keyboards

I have bought two Unicomp keyboards. They're definitely good, and quite robust (one of the Model M's I referred to above as having been repaired after exposure to carbonated drinks was a Unicomp one), but they are quite a bit lighter than my real 1992 Model M. Also, some of them appear not to have the 2 part key caps that a real model M had.

Also, the moulds are wearing after all this time, so they're beginning to look a bit lower quality.

I would still recommend them for people who want a positive typing experience, but I would say that some of the individual key-switch keyboards are now quite good as well (Model M's are actually membrane keyboards, the feel comes from the buckling spring mechanism). The one I'm using at the moment is a SUMVISION Acies ten-key-less keyboard (my Model M is too big to cohabit with another keyboard on my working-at-home desk), and significantly cheaper than a Unicomp Model M.

The only real problem is that the key legends require you to have the keyboard lit to be able to see them, and they're a bit garish with the lights on. I might just replace the LEDs with white ones to see whether that makes any difference.

Peter Gathercole Silver badge

Re: Smoking

Yes. Sticky carbonated drinks will kill even a Model M (2 attempted rebuilds, one worked, one failed).

Peter Gathercole Silver badge

Re: Not Cheap

Wow. When I was buying IBM Model M's for X-Stations and IBM 43Ps, we were only paying about £105, and I thought that was expensive!

Mind you, buying a Unicomp Model M is about the same price now, although in real terms, they are much cheaper because of inflation.

Peter Gathercole Silver badge

Re: keyboard condoms

My pet hate was when people would come up to my screen, and poke it with greasy fingers, or even worse, a pen.

Back in the day of matte ground screens on CRTs to prevent reflections, greasy marks were very noticeable, and ballpoint pen ink was very difficult to get off.

Tends to happen rather less with LCD screens now. I guess that either they're further away at the back of the desk, or people realize that they are more fragile.

Talking about fragile, during an office move a while back, a significant number of LCD monitors were ruined because people stuck labels to the screen part of their screen with sticky tape, and then ripped the surface when trying to peel the tape off!

Why yes, I'll take that commendation for fixing the thing I broke

Peter Gathercole Silver badge

Re: Auditing?

A lot of the banking codes that a bank has to abide by mandate a level of auditing that should have picked up the unauthorized change to the compression setting (or as an absolute minimum, who had logged on with time and date info and who had privilege to make such a change). Banks have to have full audit tracking of changes to the infrastructure, and in fact, the one that I worked for kept full records of all of the activity of all of the administrators.

If this one did not, then there is a definite deficiency in their processes.

I suppose that a lot depends on how old the story is. If it happened this century, I think that 'Henry' was exceptionally lucky not to have been dismissed once the logs had been reviewed.

Peter Gathercole Silver badge

Re: Experience is the best teacher

I agree with the above AC.

I've always tried to make my changes as complete as possible, and include the possible impact and the backout plan, and in general I've rarely had a problem with getting my changes through the change board.

Most of the time, the purpose of the change board is to make sure that adequate thought and planning has gone into the change, and if you achieve a good track record for accurately describing and implementing the change, and being able to cope when problems occur within the description of the backout process, then you generally have a relatively easy ride through the board. If problems happen that weren't anticipated, then there will need to be a wash-up afterwards, because it probably means that something wasn't considered.

If a change needs further scrutiny during the board, it probably means that you've either overlooked something, or that it is affecting something of critical importance, and people want to be absolutely sure that everything has been covered. These are valid outcomes of the board, although you may see it as obstructive if it prevents you doing the change. In that case, work harder to make sure it doesn't happen again.

This can come down to be a matter of trust, and you have to earn that trust,

UK draft legislation enshrines the right to repair in law – but don't expect your mobile to suddenly be any easier to fix

Peter Gathercole Silver badge

Re: Well it's a start...

The interesting thing now is that for many types of machines, once you get the complicated mechanical bits sorted and produced at a price, the rest of the function is driven by software.

For the manugacturers point of view, it makes every sense to basically create a single model that is differentiated by how the microcontrollers drive the thing. I'm sure that this is the case with washing machines and dishwashers (although for the larger/higher end washers, it may be the case that a different motor is needed). but my biggest question is about computerized sewing machines.

Once you've got the mechanics that allow the needle to move side-to-side, and to drive the feed dogs backwards and forwards, the only difference between the entry level machines and the top end ones is the number of stitch types and stitch patterns (plus some tricks that the designers have thought of).

So an entry level one is about £250, and they go up to £700-800, and the basic mechanics are identical.

With the cost of flash memory being really low now, I expect that the computer is the same, with the same amount of flash memory. For all I know, the firmware may be the same, and the computer is 'told' what model it is so as to only expose the features available in that model.

The 40-Year-Old Version: ZX81's sleek plastic case shows no sign of middle-aged spread

Peter Gathercole Silver badge

Re: Retro-Wreckers

Loading the 32 bit instructions would take 4 bus cycles (4x8 bits), so it would be much slower.

IIRC (and I could be wrong, and don't want to have to look it up), there were a mixture of 16 bit and 32 bit instructions in the 68000's instruction set, but I believe that it was a word-addressed processor, so all instructions had to be aligned to a 32 bit word. If there were 2 16 bit instructions together, they could be loaded in one 32 bit word, and fetched together, but this was moot on the 16 bit data bus systems, and doubly so on the 68008.

From my memory of the time, we used to refer to processors with a register size of 32 bits as 32 bits internally, and then call the data bus width the external size. So a 68008 would be called 32 bit internally, 8 bits externally, or written as 32/8 bit system.

Nat. Semi. coded this into the names of the processor, so the NS32016 (although it was originally launched as the 16032) was 32 bit internally, 16 bit externally, with the middle number used to represent the generation of the processor. There were 32008 and 32032 processors in the family, which followed the pattern.

Peter Gathercole Silver badge

It also had a number of instructions that made writing compound arithmetic operations easier, in particular the barrel shifter.

Peter Gathercole Silver badge

Re: Retro-Wreckers

IIRC, when the 68000 was launched, there was going to be a problem with support chips for it, as Motorola concentrated on getting the processor out of the door.

To compensate for this, they built in the ability to use support chips from the successful 6800 and 6809 families of their product set, which only supported an 8 bit data bus.

I'm sure that it was this ability that allowed Motorola to offer the 68008 at all. They just disabled the 16 bus hardware out (I'm pretty certain that the original 68000 only had a 16 bit data bus, the wider address bus parts came later) and stuck it in a smaller package.

It is quite possible that the silicon came off the same production line, but were in some way test failures, but this is just speculation on my part.

Peter Gathercole Silver badge

Re: "Some dealt with the RAM pack with..."

That would have been Personal Computer World. Chimps were used on the covers of all of the issues covering Sinclair Computers from the Z80 to the QL. IIRC, the chimps on the QL cover were wearing bowler hats.

Peter Gathercole Silver badge

Re: "Some dealt with the RAM pack with..."

My solution was to separate the keyboard from the rest of the system (well, add an external keyboard, I guess).

I took a Tandy membrane keyboard I bought in one of their 10% off per day sales, opened it, scratched and repainted the conductive paint traces to match the ZX81 keyboard, and extended them to include the space bar. I connected this to the ZX81 wlth a ribbon cable that ran through a slot I cut in the front of the case. I took a photo of the ZX81 and cut it up to put key legends on the keys.

Fitted into a case built from thick styrene sheet, with a switch for power, and it worked a treat. Once you isolated the keyboard from the rest of the system, everything became much more stable, especially if you had any additional expansion cards (I had the Quicksilver AY-3-8910 sound board, together with a second modulator to put sound through the TV). It was not as elegant as the system in the article, but it worked very well.

I never got round to putting Quicksilver's Hi. Res. graphics card in, but I did find a neat trick to implement programmable graphic characters with an extra 1K of static RAM on the ROM side of the R7-R14 data bus isolation resistors and by manipulating the I register.

Remember that day in 2020 when you were asked to get the business working from home – by tomorrow?

Peter Gathercole Silver badge

@AC

AieeeUmmm...

Ethernet AUI trancievers? Who uses those nowadays!

Only the most serious of IT horders with large garages or lofts are still likely to have systems that use Ethernet AUIs.

Peter Gathercole Silver badge

Re: Hats off

If the pandemic had hit in the '90s, chances are the phone network would have melted down, not the proto-internet. Business would have been conducted over the phone, by fax, and for a few people, buliitin boards and email, with an even smaller number of people using dial-in serial sessions.

For people doing traditional office jobs, the best they probably could have hoped for would have been a PC at home, and file transfer to and from the office, if they could have worked out the way of getting to their Netware and SMB file shares. And fewer people would have had PCs at home already, so the PC supply chain would also have melted, at least if businesses could fund the high cost of business class PCs at the time.

Whether people would be able to do what they did in the office would be a moot point. I suspect that only a small number of people would have been able to continue working normally.

Ironically, I probably could have done most of my normal work from home in the early '90s, but at that time I would probably have been one of the people called into the office to keep the IT systems running.

One of the things I had worked out in the early '90s was how to drive an X11 session through the modem and firewall infrastructure that we had at the time (it was mainly done for computer shows and remote support, but I used it myself when I was at home), but I suspect that it would have melted down with more than a couple of sessions, even if we could have provided systems that could run capable X11 servers at home. At the time, I had an IBM 6150 (AIX) at home, which was a little more than a PC (and much larger), but ran X11 and Slip reasonably well

I was not a particularly early adopter of home internet, not getting a PC capable of connecting to an ISP until 1996, and even then it was at 14.4Kb/s, which was also about the time I also started using Linux.

17 years since release, iMac G5 finally gets an upgrade after tinkerer shoves M1 Mac Mini inside

Peter Gathercole Silver badge

Re: Capacitor Plague @Red

Whilst that is true, there were a number of years when seemingly new manufacturers, often from China, were producing absolutely junk capacitors which often failed well before their MTBF (and yes, I do know that that is a measurement of the average failure time, the operative word is well).

I repaired any number of TVs, monitors and Satellite STBs, (and a fair number of computers as well) from the early 2000s that had problems because of failed capacitors, whereas the HiFi amps from the '80s and '90s still work with their original capacitors, although I think one big difference was the increase in the use of switch-mode power supplies that are very intolerant of failed capacitors.

Customer comment and contributions no more as Microsoft pulls the plug on Office 365 UserVoice forum

Peter Gathercole Silver badge

Re: Reality check

It's not just Teams. It seems that Linux users are very poorly treated for these types of applications.

At least Teams has a native Linux version. Webex (my company's chosen collaboration tool) still has to be run through a browser, and crashes the tab on my work Thinkpad T430 running RHEL Workstation with more than one or two people having their cameras on.

This seems quite ironic for two reasons. Firstly, it seems that within Cicso, there are a significant number of Linux users. Secondly, it should be possible to create a client that shares a significant amount of development between MacOS and Linux.

I suspect that the main reason why Linux is poorly treated is because it is thought by many companies that with Linux being Open Software, it becomes possible to hijack secure channels at the kernel level. This was certainly the argument back in the DRM-encumbered media days a decade or more ago.

Cisco issues blizzard of end-of-life notices for Nexus 3K and 7K switches

Peter Gathercole Silver badge

Re: Times are hard.

I know. It's a dated concept. But I remember when network switches were just that, and were regarded as a buy once run forever until they broke, then replace with a new one.

I know these switches are modular, more functionally capable, and can handle much higher network bandwidth. And they're not switches any more. They're firewalls, routers, protocol translators and in some cases proxies and load balancers.

Bu it's nice thinking back to the simple times.

Rookie's code couldn't have been so terrible that it made a supermarket spontaneously combust... right?

Peter Gathercole Silver badge

Re: His job didn't involve changes to the print queue did it?

Ah, lp0. A bit of a diversion, but it brought this to mind.

I've related this tale before, but back in the depths of time, I was working in single user mode (as root) on a PDP-11/34 (actually a SYSTIME 5000E) trying to get something like the 22-bit memory, or it may have been the Calgary buffer mods for UNIX Edition 6 or 7 working.

Being in single user mode, the printer daemon was not working, so I got into the habit of cat'ing files directly to /dev/lp0 to print them. This worked fine, but on one time, through force of habit, I typed rp0 instead of lp0...

You can already tell, can/t you. We had RP03 disks (well actually emulations to drive SMD disks), and rp0 happened to be the device file for the root filesystem at the beginning. Wiped out the boot sector, the superblock and the first few dozen inodes for the root filesystem.

It would not really have mattered too much if it had not been my development disk pack (removable disks back in those days), and contained several weeks of work trying to get the extended features of the SYSTIME system working, without a backup (we had too few disk packs, and no tape drive at that time).

I reasoned that the first couple of hundred files on the disk would not have changed since I cloned the disk from the live system disk a few weeks before (back in the days of UNIX Edition 6 and 7, filesystems, especially the root filesystem, did not change that much), so I took the gamble of just overwriting the corrupted portion of the disk with a copy from the backup of the live disk.

It was a relief when it fixed and then passed icheck, dcheck, ncheck and I think fsck (fsck only appeared on the Edition 7 addendum tape). The biggest surprise was that it was able to fix the beginning of the free list, although identifying the beginning of the free list was always something that had to be fixed during a normal system crash (the pointer to the beginning of the linked-list of free blocks on the filesystem was held in the filesystem superblock, which was frequently re-written when blocks were peeled off the list to be used, making losing the beginning of the free list the most common filesystem corruption).

You learn by your mistakes...

Retro Microlympics concludes with possible reopening dates for UK computer museums

Peter Gathercole Silver badge

Re: Elite

Actually, the cassette version was limited compared to the disk version.

The disk version had something like 6 or 8 galaxies to play, whereas the cassette version was just limited to one. In order to get to the other galaxies, it was necessary to buy a galactic hyperdrive, and IIRC there were rumors of other elements of game play you could be thrown in to when using it, but I did not get that far. I think I stopped when I got dangerous, because I did not have the time to take it any further.

The best way of playing Elite on the BBC was with a 6502 second processor and a Bitstick, because the game was written IOCTLly correct and ran in the second processor, and the BBC just became a display and I/O processor, running the game in full four colour mode 1, rather than the mode3/5 hybrid mode (yes, it was mode 3 with the interline gaps removed). I believe that you could also do this if you had shadow RAM in your system (like a B+ or B+128), but you would not have had the extra smoothness of the 3MHz processor playing the game and the BEEBs original processor concentrating on the graphics.

The Bitstick was just the best controller, having an excellent feel, and enough buttons to control the weapons, and putting the throttle on the stick twist.

Peter Gathercole Silver badge

Re: Elite

The disk space was actually more restricted than 100K.

The original disks (if you bought one) was marketed as a "Dual 40/80 track disk" that would work on a single stepped 40 track drive, and both single and double stepped 80 track drives.

IIRC, it did this by fiddling with the number of tracks that were recorded, and having 6 of the 80 tracks (or three of the 40 tracks) near the beginning of the disk that were non-standard formatted, which allowed it to work out what the type of disk drive was for. I think that the track number was actually written into the sectors, allowing the program to seek to a track, and read the track number, which then allowed the program to work out what type of drive it was.

This meant that the program actually fitted into 37 of the 40 tracks.

As a side effect (or maybe it was the original intent), this made normal disk copiers fail to copy the disk.

Again, if my memory serves me, these 6 tracks were formatted with 128 byte sectors rather than the normal 256 byte sectors.

I remember that Acorn User published an advanced track-by-track disk copier that directly accessed the 8271 controller registers to implement a 'universal disk copier', although it assumed that the disk format was uniform across the whole disk (it checked the sector size and number of sectors on track zero, one and two, and then applied the format to the entire disk).

I took the basic 8271 programming procedure from that article, and used it to analyze an original Elite disk, and then wrote my own track-by-track copier that read the format and data of each track, formatted the same track on the new disk with exactly the same sector sizes, and then wrote the data. It was horrendously slow, because it only worked a few tracks at a time because of the limited memory in the system, but it created 100% playable Elite copies (and I believe that it would have coped with any valid or even some invalid disks, as long as they kept within the capabilities of the 8271).

The 8271 was an obsolete chip before Acorn chose to use it in the BBC micro. and it had severe limitations. The WD 1770/2/3 controllers were significantly more capable, but weren't compatible. They did appear in later BBC Micros (I think in the Electron and either the B+ or the B+128, and all later systems). Some vendors who provided 1770 controllers for the original BBCs also built a 8271 emulation into their adapter and DFS that allowed programs that directly accessed the 8271 (like the original Elite disks) to work, but not all did that, meaning that old versions of Elite would not work on BBC micros with some vendors 1770 disk controllers. I don't believe that the Acorn 1770 DFS did, making it a poorer (even if it was an original Acorn design) version than some of the third party ones.

Of course, later versions of the Elite disk would work with WD1770 or Intel 8271 controllers, and I think that Acornsoft actually offered a disk-swap for people who upgraded their machines.

Clop ransomware gang leaks online what looks like stolen Bombardier blueprints of GlobalEye radar snoop jet

Peter Gathercole Silver badge

Re: Easy peasy @Colin

Really? FTP?

Raw FTP has been on the no-no list for at least 20 years.

That really is making your data vulnerable because of no cross-network encryption and plain text passwords.

Or are you using FTP-S or SFTP, or maybe running it through an encrypted tunnel?

Peter Gathercole Silver badge

Re: One thing is for sure @Pascal

Are you really thinking it's going to take at least 9 more years at least to achieve this? Or did you mean the 2020s?

Peter Gathercole Silver badge

Flexible use of SFTP

There are full filesystem interfaces that use SFTP as a transport layer. It's quite impressive, although I would guess that it's not the most efficient means of transferring files.

All things like this are possible over more simple protocols. Anyone remember Archie?

IBM teases new AIX release – the first since 2015

Peter Gathercole Silver badge

Re: Last major AIX update

Let's give it it's correct name, AIX 7.2 TL05, as there was an AIX 7.1 TL05 some time back.

For those not in the know, TL stands for Technology Level (as opposed to SP which stands for Service Pack). TLs deliver new function and support new systems. SPs provide updates and fixes within a TL, so specifically, as of today on FixCentral, the latest level is AIX 7.2 TL05 SP01 and you will find that the build week will be appended on that, making it AIX 7200-05-01-2038 using the alternative naming scheme.

It all make the actual AIX version number a bit meaningless. At one point they tried to align the AIX major number with the version of the Power processor, so AIX 6 was delivered with Power 6, and AIX 7 with Power 7, and for some reason I never understood, the point release always starts with .1 (so the first release for the RS/6000 back in 1990 was AIX 3.1). But they stopped doing that at AIX/Power 7.

AIX 7.2 was supposed to be more than a TL, because it includes dynamic kernel patching, amongst other things, but from a support point of view, it was very little different from AIX 7.1. I'm sure there are some out there who do, but I have never found anybody who has used that feature in anger. But then, I've been working in very niche environments for the last few years.

I must have mis-read somewhere. I thought that Power Hybrid Cloud implementations are being built around the OpenPower systems, which were never intended to run AIX or IBM i at all.

Whistleblowers: Inflexible prison software says inmates due for release should be kept locked up behind bars

Peter Gathercole Silver badge

Re: They're having a laugh @mittfh

Because this sounds like a new requirement brought in by recent legislation, it's probably more like implementing a new metric that does not currently exist in the system along with all the associated changes to screens, queries and updates, and then incorporating that metric into the release date calculation.

How much does adding an extra field to a database cost? It depends on the database system, but I thought from my relational database training forty years ago that this was one of the features of a RDB that I'm sure cannot have gotten lost in the time since then.

But testing would need to be done, and the queries and update methods would have to be written, along with the required auditing, so it could well be quite expensive.

IBM quietly announces Power-powered private cloud in a rack to 'evolve' your apps

Peter Gathercole Silver badge

Re: roomer has it

When the Linux offerings take advantage of all of the RAS (Reliability and Serviceability) features that the AIX/Power combination can offer, then it will be fit for full-blown enterprise deployment.

Until then, the 'multiple instances so we can afford to lose some' will have to suffice. And this does not mean VMs/containers on a single large system, because at some point, you have to do maintenance on that large system. Thankfully this rig has at least three 2U servers, although the 2U form factor on these systems makes hotswap and concurrent maintenance difficult or impossible.

AIX/Power systems are expensive for a reason, and it's not (all) about IBM's bottom line.

Rover, wanderer, nomad, vagabond: Oracle launches rugged edge-of-network box for hostile environments

Peter Gathercole Silver badge

Re: Salt fog resistant

Been there, seen that. Some of the skirts were just wide belts.

What I don't understand is how they managed to walk in high heels on ice.

The curse of knowing a bit about IT: 'Could you just...?' and 'No I haven't changed anything'

Peter Gathercole Silver badge

Re: Better state of mind for everybody: I do not touch other's computers

This is what I've been doing. My Wife only uses Linux now (although I have put an XP skin on Cinnamon), and I was considering the same for my Dad, but sadly he passed away before I felt it important for him to ditch Windows 7.

Peter Gathercole Silver badge

Re: Better state of mind for everybody: I do not touch other's computers @The Basis

I thought you were stealing my lines.

I do look after systems with 100s of processors (at least in this role, the last one was around 40,000 Power 7 CPUs) that do not run Windows and run large environments. My employer provided laptop runs Linux, as do all of my own systems, and those of my Wife.

Unfortunately, I do have to run Windows on a remote-access system, just enough to get Putty running through Citrix gateways (the RAS system is built around Windows), and my kids have Windows gaming rigs, but I don't actually look after any of those systems.

None of this is a lie. It can be done. And it is possible to gloat a little when people say "You know about computers, can you help me with my PC" and I turn around saying that I know very little about Windows.

ThinkPad T14s AMD Gen 1: Workhorse that does the business – and dares you to push that red button

Peter Gathercole Silver badge

Re: Price point

I've been buying second user T series thinkpads for 20 years.

Before that, I had two 365 and a 380 (from before the T- A- R- or X- banding), and I have to say that the 365's were seriously fragile (the keyboard was hinged to reveal the interchangeable CD or floppy drives and memory). The 380 was more robust but was insanely heavy.

I had a 600 as an out-of-hours terminal, and this was the one that appeared to set the following T- series estetic.

All of these devices had a trackpoint, and I think that there was one on the Thinkpad 700 series that were made in the mid '90s

I've actually only stopped using the T20 that was my first personal T- series Thinkpad a few years ago (don't think I've thrown it away yet) but I still use a T23 as an always on stepping stone into my network from outside (it was acting as a full-blown firewall, but the Ethernet ports and processor were too slow when I had fibre broadband installed), and the fact that it has a serial port allowed me to talk to the service processor in my RS/6000 43P allowing me to turn it on remotely.

Peter Gathercole Silver badge

Re: I despise that thing

The rubber nipple can be removed, leaving a plastic stub that is below the level of the surrounding keys.

It's not particularly aesthetically pleasant, but it gets it out from under your fingers.

Me? I struggle with laptops which don't have a trackpoint, and I disable any touchpad on a laptop if I can.

Tiny Kobalos malware seen backdooring SSH tools, menacing supercomputers, an ISP, and more – ESET

Peter Gathercole Silver badge

The Fail @Potemkine!

I am also a Linux user who has posted here about no OS being completely secure, but I'm afraid that you just pointing to the CVE database with a search term of Linux does not answer the ACs request for how this particular piece of malware got onto the system.

If you look through all of the CVE database of known vulnerabilities for Linux, the overwhelming majority of them detail problems after someone has already gained access to a system. Yes, not all of them, but you can bet your last dollar on all of the remote access problems having patches produced very quickly. Whether they're applied...

SSH is a common vector of attack, as it is almost certainly turned on for almost all Linux systems, so this is one that needs to be understood. But reading the papers referenced, they make no mention of how the systems were initially compromised, other than the fact that some of the sites appeared to be running old levels of software, which probably contain unpatched vulnerabilities.

But the one method that is mentioned is that one of the libraries loaded by sshd is compromised to inject code that is then run by sshd, and the /usr/bin/sshd binary is then replaced. If the site was using tripwire or another similar facility, this should be detected quite quickly.

Both of these operations require the attacker to gain a privileged process on the target, so this indicates either a remote root vulnerability, a method of obtaining a unprivileged process plus a privilege escalation vulnerability, or some seriously lax system administration.

in fact, the papers comment on what Kobalos can do when it is on the system, but little about how it gets on to the system.

I suspect (and this is pure guess work based on experience) that this has been a multistage attack. I would guess that one user's account was accessed through some means such as social engineering, then this account was used to steal that users SSH private keys. Because the HPC community is fairly well connected, it is possible that the same private keys were used to access several HPC sites (because of poor credential management by the initial user), and once in, an unpatched privilege escalation was then used to inject a credential stealer into sshd that then gathered information from all of the users of that system, and then on to other systems using the same model of attack.

This type of attack is difficult to stop, because once private SSH keys have been leaked, especially if they are used on multiple systems, they are difficult to prevent being used except by a wholesale change of key pairs. This is why it is vitally important to use different keys for different systems, and to store the private keys in as few places as is absolutely needed. Also, keep your systems, especially those exposed directly to external users, patched and up-to-date!

This problem is not unique to SSH keys, but many users (especially in the scientific community) are very bad at following any best practice that makes it more difficult for them to do their work (I worked supporting a top 100 HPC site, I know from personal experience!)

I also suspect that this particular problem is pretty much contained within the scientific and HPC environments,

Decade-old bug in Linux world's sudo can be abused by any logged-in user to gain root privileges

Peter Gathercole Silver badge

Re: How is this possible?

I don't think C is responsible for all buffer overruns. It's been perfectly possible to do it in may other languages, especially older ones that were intended as system programming languages. Most assemblers have no concept of bounds checking at all, although people programming directly in assembler in this day and age are probably working either on embedded processors, or trying to get every ounce of speed out of a system. Please note I count macro assemblers differently from simple assemblers.

The lower the level of the language, the less likely it was to have array or buffer bounds checking. C has just survived longer than most.

Peter Gathercole Silver badge

Re: How is this possible? @me

I feel so stupid. Algol 68. It was Coral 66.

Must get more sleep to get the ol' memory working better!

Peter Gathercole Silver badge

Re: How is this possible? @Vincent

There is nothing wrong with having different operators for test and assignment. It's only the lax style that was encouraged by languages such as Basic that made programmers think that it's a good idea to use the same operator.

Having two different operators just makes it very clear what is happening when you can use tests and assignments in arithmetic operations. I admit that you have to know how TRUE and FALSE are represented in the language to benefit from this, and you can get some very hard to read statements, but having explicit delimiters can benefit bot the compiler and the programmer.

There are a huge raft of programming languages where test and assignment are represented by different operators. You just have a particular bias.

The semicolon (or other delimiter - Python is picky about end-of-lines themselves) at the end of a statement allows complex mult-line statements to be adequately delimited. It allows you to do complex things without having to assign values into variables, allowing the compiler to automatically optimise the storage and discarding of intermediate results that otherwise would need variable assignment. And this allows the compiler to pick up when nesting of blocks is incorrect by counting the levels of block delimiters and comparing that to the statement delimiters.

Sure, the compiler can work out where it thinks the end of a statement should be, but having used teaching languages that attempt to correct missing end of statement delimiters, I've seen the bizarre and sometime complex problems that this can cause. No, I'm firmly on the side of the making a language as concise as possible.

Just imagine the problems if you tried to write a free-format natural programming language. How often does English allow ambiguous instructions? There's a whole profession (lawyers) who make their living trying to make sense of English!

'It's dead, Jim': Torvalds marks Intel Itanium processors as orphaned in Linux kernel

Peter Gathercole Silver badge

Re: Not the 2nd 64 Windows

Although the PPC architecture included 64 bit models, these were an optional part of the feature set, implemented later in the doomed 620 processor, and then the Amazon and Apache Power processors from IBM Rochester for the AS/400 line of systems, and later merged back into the RS64 and Power ranges.

I saw NT4 running on a prototype IBM PowerPC desktop system in the 'Think' range. It strongly resembled an AIX RS/600 system called a 40P (model 7020, the predecessor to the long lived 43P desktop and deskside workstation). It used a PowerPC 601 processor, which was a 32 bit part. My (40P) system was also a prototype, and eventually I got an 'upgrade' kit that turned it into a production spec system (although the system was only available for marketing for a very short period, at least in the UK). This upgrade replaced the entire main board and several other components, and unlike most IBM systems, was a real bitch to get apart!

NT running on PowerPC just looked like NT.

Peter Gathercole Silver badge

Re: Gone but not forgotten

It was Eadon.

Funny, I've just tried to find his comment history, and it looks like it's been expunged from The Reg. comments history. All of the comment trails lead back to a "This post has been deleted by a moderator".

I remember I had some run-ins with him, but none as memorable as the ones I had with "Kebabert"

Thinking back, there's a lot of previously frequent commenters who have disappeared. Is the readership of The Register aging that fast, or are people just losing interest?

It would be interesting to have a chart of the top 100 commenters every year since The Register started keeping stats, and follow up on the people who no longer comment. Maybe we should sent the neighbors round to check that they're OK!

Takes from the taxpayer, gives to the old – by squishing a bug in Thatcherite benefits system

Peter Gathercole Silver badge

Re: Language!

So you're not the Martin Gregory that I learned PL/I with at Durham University in 1978/9.

No. Obviously not. Different spelling.

Perl-clutching hijackers appear to have seized control of 33-year-old programming language's .com domain

Peter Gathercole Silver badge

Re: IP4ME

Global DNS has been available since around the mid '80s, and before then there were so few systems on the Internet that they could be held in a publicly available hosts.txt file, distributed from Stanford University.

Even now, you can use dotted IP addresses on the internet, or even just single integers (try using https://2398766906, I promise that you can ignore the self signed certificate error, and the only reason you may not want to end up there is if you dislike Google. I wanted to use 1746011158, but apparently Cloudflare do not allow connections using raw IP addresses - how the Internet has been controlled).

Only masochists or people hunting for the dark web (or maybe the Pirate Bay) would use IP addresses directly since forever unless you had a very inept sysadmin!