* Posts by a_yank_lurker

4138 publicly visible posts • joined 16 Nov 2013

Redis does a Python, crushes 'offensive' master, slave code terms

a_yank_lurker

@AC instead of master/slave try SWAMBO and other-half.

Princely five years in US big house for Nigerian biz email scammer

a_yank_lurker

Re: I thought the whole idea was they lived in Nigeria

Actually, they may want to be sent to Club Fed as some do not provide as luxurious accommodations for their guests. But that depends on the extradition treaties.

The Reg takes the US government's insider threat training course

a_yank_lurker

Nothing Really New

I remember some security training way back in the late Dark Ages. Much of what they said was the biggest problem was insiders who are disgruntled, financially in trouble, or too eager to please not professional moles. Add a couple of more categories to the old list such as hoarders, etc. Each group has to be approached correctly with the disgruntled the most likely to make the initial contact.

One issue that was true then and is still true today, there is a lot of non-classified information that does not seem important. But if it is collected routinely it can give a picture of organizational changes and new priorities. Back in the Dark Ages this was commonly a phone directory.

Microsoft accidentally let encrypted Windows 10 out into the world

a_yank_lurker

Re: 19H1 - virus id?

How contagious is it?

Microsoft: You don't want to use Edge? Are you sure? Really sure?

a_yank_lurker

Stupid as Stupid Does

Chocolate factory is catching flak for their sleazy practices, rightfully so. But the issue is should Slurp sink to that level or lower. For long term customer relations and retention Slurp needs to rethink its entire customer relation policies. Angry customers will be looking for an alternative.and will become ex-customers. And they will not return. They also tend to be more vocal about leaving. This action shows a disdain for the customer. There are good reasons for the average user to have multiple browsers installed. Insulting the user is not a good business practice, ever.

Python joins movement to dump 'offensive' master, slave terms

a_yank_lurker

Re: I don't get it.

It's not the accuracy of the description that is the problem it is supposed connotations of the terms. The complainers do not understand that precise meanings and descriptions are important in communication. So if master-slave correctly describes the relationship between systems then there should be no problem.

Law firm seeking leak victims to launch £500m suit at British Airways

a_yank_lurker

GPDR Strikes?

Might we see how much teeth the GPDR really has? Also, can the EU step now? (second question out of ignorance of the legal details)

Register-Orbi-damned: Netgear account order irks infosec bods

a_yank_lurker

Fox in the Hen House

Sounds like the marketing failures are running NetGear which makes it a good reason to avoid them.

PPI pushers now need consent to cold-call you

a_yank_lurker

Re: If anyone

This type of fraudulent phone call is a world wide problem. I doubt there is not anyone with a phone who does not get several of these a week if not a day. Invariably these calls are originating from somewhere offshore so legal proceedings against them are difficult at best if not impossible. But it seems you Brits have the same problem we have with our incompetent bureaucracy coupled with the limited total mental capacity of the legislature. Czar Thomas Reed (Speaker of the US House of Representatives) once observed that too many Congress critters subtract from the sum total of human knowledge whenever they open their mouths. It seems this is generally of all legislative bodies worldwide not just the Congress.

AI biz borks US election spending data by using underpaid Amazon Mechanical Turks

a_yank_lurker

OCR not Online Entry?

It seems this fiasco could be avoided by having robust online data entry. But then this is the ferals we are talking about. Many of whom still have not heard of the wonderful device could a slide rule let alone a computer.

It's been 5 years already, let's gawp at Microsoft and Nokia's bloodbath

a_yank_lurker

Re: "I suspect MS shareholders would generally disagree."

A telling point about Amazon is Bezos' maniacal focus on the customer. He tries to understand his customers and have products for them. Also, being a retailer originally Amazon is used to operating in a low margin business that relies extensively on repeat customers to stay around. This is very different from the relatively high margins found with the cloud or software. One key difference is physical products, say cat litter, has a relatively high percentage of fixed costs for each bag sold that does not really change much. With software, once a certain number of units are sold or rented the costs to add more customers are much lower and the affect on the profit margin much more for unit added.

a_yank_lurker

Re: Nokia was a phone company that couldn't make the transition

@LDS - Hard challenges scare many who have no guts. Betting the future of the company on a product is nerve racking but if you pull it off the company often becomes wildly successful. Apple did it and many forget Boeing several times bet the farm on one product whose failure could take the company down. There are others. But to do it takes a leader who understands the risks and is willing to really lead get the troops motivated. Ballmer should an understanding that risks must be taken but often botched the execution. Nadella does not seem to be a risk taker and seems to be more a market follower. As Jobs observed about Apple (and all companies) whatever your core product is today you need to be willing to cannibalize it today for another product if you want to stay around or someone else will cannibalize your core product for you tomorrow.

A real shot in the Arm: 3% of global workforce surplus to requirements

a_yank_lurker

Re: Only 3%?

I would look at a company that enforces strict silos between groups within to have an extensive head count of useless PHBs in middle mismanagement. Ask the question: Can a peon assigned a task wander over to the originator of the task to discuss the requirements? If the answer is yes, then the company is probably relatively lean with very little fat. If the answer is no, then the company probably has many middle mismanagement PHBs jealously guarding their turf and plenty of weeds to eliminate.

Uncle Bob Martin once in a YouTube talk noted that there is a difference between being 'Agile' and being agile. The key difference was whether you adopted a formalism called Agile or do you allow people to discuss problems and solutions in ad hoc groups as needed with these people being the people actually involved in executing the project.

Tesla's chief accounting officer drives off after just a month on the job

a_yank_lurker

@msage - Apple was a profitable company back then unlike Tesla. I do not remember Tesla ever making a quarterly or annual profit nor coming close to meeting production goals. Apple was doing both in the throughout most of its history. Apple did have a near death experience and survived. Tesla reminds me of many of the late 90s DotCom bubble companies with an interesting product but no clue as to how to make a profit to survive. They eventually burned through the VC cash and burned spectacularly.

Another key difference is Apple was one the early companies in the PC market when PCs were emerging as useful devices around the home and office. Thus they had a chance to evolve with the market. Tesla is a late entry into a very mature market of cars and trucks. There are numerous well established companies who have been making cars for decades if not over a century. They know how to make a car. Other than the power plant there is nothing 'novel' about a Tesla. Even its 'novelty' is not new; electric cars have been manufactured since the 1890s with varying degrees of success and profitability. So there is nothing stopping say Ford or Toyota from making an all electric car and trying to sell it. Plus they can afford to have a few years of lack luster sales with minimal profits for an electric vehicle as the infrastructure supporting them improves. They also have the facilities to ramp up production rather quickly if consumer demand shifts.

Feel the shame: Email-scammed staffers aren't telling bosses about it

a_yank_lurker

Re: Tech Savvy Millenials

@AC - Though sweeping the core is correct. The implied assumption is someone who grew using a computer as a tool understands how they work. Other than being able to use some applications the majority of all users do not understand how a computer works. If they have to troubleshoot a problem they are DOA (dead on arrival).

Microsoft tells volume customers they can stay on Windows 7... for a bit longer... for a fee

a_yank_lurker

Re: Education

The minimum LTS support period should be 4-5 years from release. Any releases between LTS releases should be considered betaish; release that are ready for use but have some features that could be considered bleeding edge. These features will often find their way into the LTS but after they have been in the wild. But there would be no forced migration from LTS to the intermediate releases. Essentially look at the Ubuntu release model of LTS every 2 years (supported for 5 years) and semi-annual non-LTS releases which users usually skip.

Capita onshores IBM transformer man as chief growth officer

a_yank_lurker

Round Robin of Failures

Moving from one leaking vessel to another with no signs of learning - another overpaid PHB.

Windows Server 2019 Essentials incoming – but cheapo product's days are numbered

a_yank_lurker

After this week

With the fiasco of the last couple of days with Slurp, I would be very leery of their cloudy 'offerings'. When determining if your systems will work requires the sacrifice of a couple of goats each day you have a problem. Talking to my employer's help desk today for a Slurp issue, they noted that Slurp has plenty of issues of the aggravating kind. Yesterday's email fiasco caused a massive blitz as they were overwhelmed by people not being able to receive or send any. I was on sneakernet for a couple of hours while Slurp sorted out their blundering.

Cloudera and MongoDB execs: Time is running out for legacy vendors

a_yank_lurker

Re: Meh

I suspect most of the customer frustration is not with the db technology but with the vendors. The 'big 3' listed are all notorious for their shakedown antics when comes to 'license audits'. That is enough to get the attention of C-suites and does not bode well for long term commitment. However, that does not mean an alternative db type is the replacement, it just might mean ditching the 'big 3' for something like Postgresql or MariaDB.

Archive.org's Wayback Machine is legit legal evidence, US appeals court judges rule

a_yank_lurker

@Flakk - The totality of evidence has to point to the a consistent conclusion. Wayback Machine is only one source, other records are also a source. If the prosecution is only relying on Wayback they have a weak case. If Wayback tidies up all the loose ends then it makes the evidence more compelling. It appears the latter was done. Also, the prosecution provided witnesses to validate Wayback's methods that were cross-examined by the defense. So if there were serious holes, it should have come out with a competent defense.

Microsoft gives Windows 10 a name, throws folks a bone

a_yank_lurker

Re: "Slurp's Orifice has compatibility problems between version"

Orifice 2013 and 2018 always mess the layout of an elderly document we use every day work that is in the older .'doc' format if you save as a .docx format or any template derived from the elderly document. Given the original document is a controlled document it is not going to be updated anytime soon.

a_yank_lurker

Re: Windows 10...

or Upchuck Release?

a_yank_lurker

Re: "LibreOffice only does a majority of what home users need"

Slurp's Orifice has compatibility problems between version so complaining about someone else's problems is a bit of a cheap shot.

If you weren't rich enough to buy a Surface before, you may as well let that dream die

a_yank_lurker

Re: You don't cancel a successful program

I never quite figured out what value a Surface was when there are other Bloat based devices from many others that had as good or better specs at better prices. This is especially true since Slurp is not primarily a hardware manufacturer. Also, the marketing program smelled too much like Rooms-to-Go furniture sales for mediocre, over-priced furniture.

Anon man suing Google wants crim conviction to be forgotten

a_yank_lurker

Re: Right to be forgotten

For someone over here, convictions, court records, etc. are all public record and available from the courthouse. So if they are put online, whether by the court or by someone else, there is nothing one can do about it. All putting the records online does in these cases is makes doing due-diligence much easier. One can still visit the courthouse for the records.

Spies still super upset they can't get at your encrypted comms data

a_yank_lurker

Traitors

The excuse that encryption hampers criminal investigations is a strawman. If the communications were done face-to-face or other no electronic means (with burning of documents) it would be hard to reconstruct the conversations unless someone sings. Also, often what is often more important is the location and metadata as they will the contact history and device location. Make a couple of reasonable assumptions about the location and you can confirm or crack an alibi. The contact history shows who has been in contact and when, again often it confirms or cracks an alibi. In both cases the content is not always important. And since there is a conversation, you only need one party to sing for you.

US government upends critical spying case with new denial

a_yank_lurker

Cell with a view, pretty please

Can I have the cell in the corner with the nice view for the concertina wire? Or is it 'papieren, bitte'?

Mozilla changes Firefox policy from ‘do not track’ to ‘will not track’

a_yank_lurker

Time to

It will time to switch default browsers in a few weeks.

Let's get ethical, says Salesforce as revenues rocket 27% – thanks in part to US Border Patrol

a_yank_lurker

Ethical?

They must have just learned how to spell it; no if they will learn what it means. With the childish antics of many IT 'leaders' you must wonder if they have any idea what ethics and morals are.

Oracle trying hard to make sure Pentagon knows Amazon ain't the only cloud around

a_yank_lurker

Final Source

The Brass is doing what they typically do for a major weapons contract - choose a single vendor. This is a competitive bidding process before the award and some might invited to a second round. Almost all modern weapons contracts go through this. Apparently the Brass wants to handle this as if it was a weapons contract with a winner take-all outcome.

If you are going play the game you need to learn the rules.

VMware 'pressured' hotel to shut down tech event close to VMworld, IGEL sues resort giant

a_yank_lurker

Re: Skipped Cisco Live two years and will next

Prostitution is actually illegal in Clarke County (Las Wages). There are a couple of counties were it is legal in Nevada.

No need to code your webpage yourself, says Microsoft – draw it and our AI will do the rest

a_yank_lurker

Re: The return of front page

My experience with these products is they are a pain to update the site and often produce miserable code. Too often these products are marketed to PHBs who are penny wise and pound foolish.

Voting machine maker claims vote machine hack-fests a 'green light' for foreign hackers

a_yank_lurker

Re: Most Secure Voting Machine

@ivan5 - That problem is with the voter rolls and their maintenance plus whatever id is required to prove your identity to vote. A different issue altogether than the security of the actual vote. If the actual vote totals can easily be manipulated without easy detection by the counters then all elections are in question as one does not know what the real votes were. Cleaning up voter rolls is important but not as critical as making sure the votes can not be changed without detection. The 2000 US fiasco in Florida was an example of having the actual ballots for a recount (Bush won them all). Even if there were issues about how to count some ballots ("hanging chads") one had the physical evidence to look at.

a_yank_lurker

Re: Weasels!

Please do not insult weasels, they like to feast on vermin like ES&S.

Seriously, anything that is linked to the web is vulnerable to attack and needs to be secured. Does not matter what it is, it will be attacked. Some will be harder to get at as they might not be directly accessible, that only makes them somewhat less vulnerable not invulnerable. Anything that is mission critical as a voting machine should be considered should be thoroughly tested by outside experts to find the failures. If they can find them then black-hats can find them also.

If you have to simulate a phishing attack on your org, at least try to get something useful from it

a_yank_lurker

Re: What's the metric?

The metrics I would want to see is who is consistently falling for a phishing attack and how many failed the each test. I would not be surprised if there is a group of 'usual suspects' who usually fall for a phishing attack and there would be some random number who had a bad day, accidentally clicked on the link, etc. Also, properly designed, it might give a clue of how to screen emails from the outside to cut down the number of attacks getting through.

a_yank_lurker

@Zippy - I see training attacks occasionally. I think all large companies will do it to see what happens. There will always a few who will fall for a phish and almost everyone will be fooled a few times also. Even if the training attack is not as sophisticated as a real one might be, I think the idea of seeing who consistently falls for one is good idea.

ABBYY woes: Doc-reading software firm leaves thousands of scans blowing in wind

a_yank_lurker

Configuring Databases

It seems that too many do not take the time to properly secure their databases. While some dbs do try to get users to configure them correctly, the dbas should not assume they are properly secured until they have actually done the recommended steps in their entirety. Do not assume the db is secure by default, always assume it is insecure by default.

No do-overs! Appeals court won’t hear $8.8bn Oracle v Google rehash

a_yank_lurker

Re: On the one hand

What I would like to see is the verdict overturned with some harsh words by the Nine Seniles. Then for Chocolate Factory to sue Leisure Larry and his minions for a malicious suit to keep it going.

Defense Distributed starts selling gun CAD files amid court drama

a_yank_lurker

Re: Cute, but not for long

The problem is the barrel stress and poorly made/maintained barrels have been to blow up when fired. To use these plans to make a gun requires access to a machine shop complete with the proper equipment to heat treat the parts. Plus one has to start with the correct alloys. I doubt there it is economically for someone to DIY gunsmithing at home. It would be far cheaper to buy one.

Judge bars distribution of 3D gun files... er, five years after they were slapped onto the web

a_yank_lurker

Re: Where is the NRA?

Having plans to make a gun still require one to have some rather expensive equipment. Plus one would need to obtain the proper alloys and furnaces to heat treat parts, etc. Or as others have pointed out the gun would be a single use weapon that is possibly more dangerous to the shooter than the target. The NRA is not concerned with this because any sensible person who wants a gun will buy a well made one from a competent manufacturer.

Windows 10 July update. Surface Pro 4. Working fondleslab. Pick two

a_yank_lurker

Re: This is one of Microsofts biggest failures

@AndyMulhearn - I think Chocolate Factory's idea of perpetual beta is a bit different. My impression is they are saying that while each release ready for prime time the product itself will always be under constant development. Chrome releases are stable and generally problem free. But Chrome has new releases planned in the near future. They make sure the releases are stable and ready for the masses. But the browser itself is 'unfinished' in the sense that improvements and features will be added with time and rather frequently. Hence, in the sense of a release being good for 5 or 10 years it is always beta but in the sense each release is stable and works, it is not beta. So I think Slurp missed the key point; each release most be stable but the overall product is never quite finished. This works well for some software but not others. Also, it works well when the various bits of the system are more loosely coupled to each other (the browser is not part of the OS e.g.).

a_yank_lurker

Re: This is one of Microsofts biggest failures

The failure is to understand that proper testing is done by design. Testing code needs to try to break the code with a well defined test case. This is best done internally by a well trained and staffed testing organization who can work closely with the code wranglers when necessary. The test cases need to be derived to test conditions that are likely to break the code with special attention paid to those areas with historical problems like drivers.

The idea that an army of unpaid alpha and beta testers can substitute for them is idiotic at best. While I have an good idea what is involved in testing to do it correctly I would need to see the actual specifications to know what to test. (But I am a programmer not a tester so still not that good). None of the external 'testers' have access to these documents and are thus completely blind. Plus the 'testers' can not directly talk to the programmer when necessary; telemetry is a poor substitute.

Salesforce boss Marc Benioff objects to US immigration policy so much, he makes millions from, er, US immigration

a_yank_lurker

Re: Scum

The odd part about this is the company were I work has a habit of hiring older workers with obvious gray hairs for many technical positions. But we are not IT.

a_yank_lurker

Scum

They are complaining because someone decided to enforce the law. H-1B visas are intended to be a way to bring in highly skilled, international caliber workers; think Torvalds and van Rossum as examples. It is not to bring in low paid mediocrities from elsewhere (the precise country does not matter). The complaint they can not find US workers is disingenuous considering the way they treat workers, particularly older workers. They are reaping the whirlwind of the wind they sowed. Other industries and companies believe their employees are valuable. Some companies even have metrics about their retention rate and worry what they are doing wrong if the rate slips; mine does. So my question to the scum, why should anyone work for their companies when you are going to be badly treated?

As porn site pounds hard on piracy laws, Cox pulls out prematurely

a_yank_lurker

Copyright Issues

There is a fundamental problem with the DMCA. It is called the US Constitution specifically: "To promote the progress of science and useful arts, by securing for limited times to authors and inventors the exclusive right to their respective writings and discoveries." (Article 1, Section 8, Clause 8). The issue is the copyright length is longer than needed to 'promote the progress of science and useful arts'. As envisioned, 'limited times' was a few years not lifetime plus. Also, most works have a very limited active sales life when the vast majority of the sales occur. While not usually debated, one could argue that much of what is copyrighted fails the definition of 'useful arts'. Porn certainly would not meet the definition of 'useful arts'.

Keep yer plastic, says analyst: eSIMs aren't all they're cracked up to be

a_yank_lurker

Re: "number portability"

On this side of the pond in 'feral land', you have number portability. All it takes is signing up with a new carrier and getting a new SIM. If you do it right there is no cost to you. Also, some carriers are pay as you go and you buy the phone outright. Other than laziness and no pressing need or desire to change I can change any time as I am a pay as you go plane and own my phones outright.

IBM slaps patent on coffee-delivering drones that can read your MIND

a_yank_lurker

Re: "if I see someone of high status drinking coffee, I'll want coffee too"

Its amusing to see how many times PHBs fail to understand many if not most people will do what they want regardless of what someone else is doing most of the time. There are only a few social events where following the leader is necessary to a degree; but coffee?

a_yank_lurker

Re: Fade to Black

Napalm would be more pleasant than McD's sludge.

Mozilla accuses FCC of abdicating its role, ignoring comments in net neutrality lawsuit

a_yank_lurker

Chevron..

The Nine Seniles in their much lamented Chevron decision said the courts should defer to the agency's interpretation of the law unless it is totally off the rails. They abdicated judicial oversight of the administrative state. If Chevron is applied Mozilla loses. But if it gets to the Seniles they might wake up from the naps and pay attention this time and overturn Chevron, not very likely.

Face-PALM: US Patent and Trademark Office database down for 5 days and counting

a_yank_lurker

Re: Nice to see ..

Indian Business Machines aka Itsy Bitsy Morons aka I've Been Moved