* Posts by jdoe.700101

46 publicly visible posts • joined 18 May 2015

Surprise! Email from personal.
information.reveal@gmail.com is not going to contain good news

jdoe.700101

Re: but it's not always as easy as that to implement.

According to the disclaimer/warning (above) when setting up an Exchange account, yes.

When I noticed this functionality last year in the AWS WorkMail console it rang alarm bells, as I did not recall seeing the disclaimer at the time. After a bit of surfing I found (and lost) a youtube video by someone you unexpectedly confirmed using their phone, that "wipe" really did mean the full device.

Apple also confirmed it was expected behaviour and referenced - https://support.apple.com/en-au/guide/deployment/dep158966b23/1/web/1.0#dep10d49a1cc

jdoe.700101

Re: but it's not always as easy as that to implement.

When connecting to an MS Exchange server using IOS Mail, you are explicitly giving the Exchange administrator the ability to remotely manage (including wipe) your device, as stated in the setup description which reads:

"Adding an Exchange account will allow the Exchange administrator to remotely manage your device. The administrator can add/remove restrictions and remotely erase your device"

Word turns 40: From 'new kid on the block' to 'I can't believe it's not bloatware'

jdoe.700101

It could be argued that the Office as we know it (Word, Excel & Outlook) started life on the Mac, and that the early DOS version was an evolutionary dead-end. Mac Word in 1990 supported tables of contents, indexes, mutli-file documents (e.g. file per chapter), placed images, etc.. i.e. pretty much everything you needed for non-trivial technical documentation. Shortly afterwards I recall Microsoft saying that they wanted to use a common code base for Mac and WIndows.

Australian FinTech takes itself offline to deal with cyber incident that caused data leak

jdoe.700101

Given that they use AWS, it wouldn't surprise me if their "sophisticated" hacker stumbled across one or more open S3 buckets.

To CAPTCHA or not to CAPTCHA? Gartner analyst says OK — but don’t be robotic about it

jdoe.700101

A reasonably simple solution for smaller sites is to add an invisible field (e.g. a passwordConfirm text field or acceptAlllCookies checkbox) to forms, and then throw away any submissions where the invisible field is not the default value. This generally works because robots don't parse the css.

As Amazon pulls union-buster job ads, workers describe a 'Mad Max' atmosphere – unsafe, bullying, abusive

jdoe.700101

I have seen it applied in large financial organisations all the way down to team sizes of 10 or less. Meaning that there is no point trying to build a successful team, as you always need a sacrificial lamb.

I have also seen teams spread globally stacked ranked against each other, when the only thing that they have in common is that they work for same global department. e.g. is Alice in New York above or below Bob in Singapore, and where does Mallory in Bangalore sit in the rankings.

Florida man might just stick it to HP for injecting sneaky DRM update into his printers that rejected non-HP ink

jdoe.700101

Re: Even HP Cartridges don't work in HP printers

Canon also region locks their cartridges. I've just inherited a laser printer which I'll use till it dies, and go to the print shop when I need something in colour.

LastPass stores passwords so securely, not even its users can access them

jdoe.700101

You can still purchase a perpetual license for 1Password, they are just "de-emphasizing the standalone license option". When you download and start 1Password, it will prompt you to purchase a subscription, or license.

The Curse of macOS Catalina strikes again as AccountEdge stays 32-bit

jdoe.700101

Re: Confusing.

Apple has supported 64 bit apps since 2007 (Leopard), and 64-bit kernels since 2009 (Snow Leopard), so 10-12 years of "legacy" support seems pretty good to me.

Googlers hate it! This one weird trick lets websites dodge Chrome 76's defenses, detect you're in Incognito mode

jdoe.700101

A possible fix would be to keep the data in memory as is the case now, but simultaneously write random data of the same size to the filesystem, and read it back before for each read returns.

Max Schrems is back: Facebook, Google hit with GDPR complaint

jdoe.700101

Re: he is missing the lowest hanging fruit

He may also wish to ask WhatsApp why they are not enforcing their terms and services. Because I suspect that the majority of their users are in violation of the following:

Address Book. You provide us the phone numbers of WhatsApp users and your other contacts in your mobile phone address book on a regular basis. You confirm you are authorized to provide us such numbers to allow us to provide our Services.

Facebook exec extracts foot from mouth: We didn't really mean growth matters more than human life

jdoe.700101

Re: What a mess

I had a similar issue a couple of years ago, using details from my LinkedIn account. Not having a Facebook account didn't help, but after the third account appeared, the following request fixed the problem permanently:

"Could you please let me know what you require, in order to divulge all contact information (ip, email addresses, etc...) about the creator of these accounts, so that I may file a formal complaint with the appropriate authorities?"

Knowing what we know now, they have plenty of information to track such requests back to physical device.

Office junior had one job: Tearing perforated bits off tractor-feed dot matrix printer paper

jdoe.700101

Speaking of carbon paper...

I used a sheet of it the other day whilst filing my tax return at the Japanese tax office. Can't remember the last time I saw anyone else use carbon paper.

Insurance companies now telling you what tech to buy with um-missable price signals

jdoe.700101

Re: About time

At least Adobe isn't on the list...yet.

Apple: Sure, we banned VPN iOS apps in China, but, um, er, art!

jdoe.700101

Surely Apple is just observing the laws of the country. Whether one agrees with the laws or not, is a different issue. However from Apples perspective they have two choices, stay and observe the laws, or leave the country. If they were to walk away, one could argue that are not fulfilling their duty to their shareholders to maximise their profits, assuming that is in fact a duty.

As for the senators, maybe they could focus on reigning in the spooks in their own country first.

Amazon Key door-entry flaw: No easy fix to stop rogue couriers burgling your place unseen

jdoe.700101

If the Amazon door key requires power, internet and an app, to let you, or anyone else, open it from the inside, then I'd classify it as a death trap. It's bad enough that some insurance companies in some countries require deadlocks to be installed, but at least with deadlocks, you can leave a key in them when inside.

jdoe.700101

Why doesn't the device automatically lock the door if it loses network connectivity?

Dumb autonomous cars can save more lives than brilliant ones

jdoe.700101

Re: Better than the next guy

You're conflating two very different cases here. If a car is designed to safely stop and refuse to proceed autonomously because it detects a situation it can't cope with, then at most it's an inconvenience.

Assuming that the car can safely stop, that other cars nearby can also handle the car stopping, and that the car has manual controls, then yes it could be argued that its an inconvenience. However, if an autonomous car does the bulk of the driving, and leaves the unusual driving to the human, you could argue that they are making driving more dangerous. Because in such situations, the human will have less driving experience than previously.

jdoe.700101

Re: Better than the next guy

Autonomous cars need to be better than the next guy ALWAYS. If they decide to return control to the human, or stop, when they get confused, they're a liability. The problem with driving is that it is full of edge cases (road works, snow, flooding, dropped loads, protesters, cows, etc...) which humans are remarkably good at dealing with. Attention and reaction time however is where computers win, let them deal with that, and leave the driving to the human, until they can deal with the edge cases.

Mac High Sierra hijinks continue: Nasty apps can pull your passwords

jdoe.700101

Re: Plaintext passwords??

Unfortunately hashed passwords don't work so well if you are using them to connect to things such as Wi-Fi base stations, mail servers, etc...

jdoe.700101

Re: At least it takes some effort to install such apps..

I'd like it to be fixed in El Capitan too, as my 2008 MacPro can go no further, and I'm still waiting for Apple to offer a suitable replacement. i.e. lots of memory & internal disks.

Equifax CEO falls on his sword weeks after credit biz admits mega-breach

jdoe.700101

Maybe Equifax is different, but when I worked for a US finance company, all trading needed to be approved by the compliance department, and such approvals were good for 24 hours. Presumably this was to ensure that embarrassing situations like this could not arise.

WDC's My Cloud Home Duo is a natty piece of kit but beware iContent

jdoe.700101

Surely in a box that size they could have embedded the power supply.

Cloudflare coughs up a few grand for prior-art torpedoes to sink troll

jdoe.700101

Why not simply invalidate a patent when the holder fails to defend it, particularly when they initiate the action?

"Blackbird filed suit in July 2016 against six companies asserting this '448 patent. All of those cases were voluntarily dismissed by Blackbird within three months – fitting a pattern where Blackbird was only looking for small settlements from defendants who sought to avoid the costs and delays of litigation," Prince said.

Stand up who HASN'T been hit in the Equifax mega-hack – whoa, whoa, sit down everyone

jdoe.700101

Re: Credit ratings

I think another part of the 2008 issue what that everyone thought that they had successfully transferred the risk, and thus weren't too concerned about credit ratings.

jdoe.700101

Re: Co-incidence?

This reminds me of an old joke.

Q: what is the difference between car salesman and computer salesman?

A: car salesmen know when they are lying.

80% of IT projects in public sector delayed due to IR35 – report

jdoe.700101
Facepalm

Re: Numbers.

£185,000,000 spread over only 400,000 people, is only about £460 per person. That must be pretty close to a rounding error to all involved, except for the additional expenses that are presumably now incurred.

Red Hat banishes Btrfs from RHEL

jdoe.700101
Trollface

Re: After so many version of Fedora that promised brtfs as the default filesystem

A couple of simple mods to the systemd journal and we have a file system. Then simply add a couple more options to jouralctl and we have an ls replacement.

IBM CIO leaves for AWS – and Big Blue flings sueball to stop him

jdoe.700101

Surely Mr Smith is not crazy enough to use company equipment whilst communicating with Amazon. If so, he probably deserves the attention of IBMs lawyers.

.. ..-. / -.-- --- ..- / -.-. .- -. / .-. . .- -.. / - .... .. ... then a US Navy fondleslab just put you out of a job

jdoe.700101

When all else fails

you can still use your eyes...in theory - http://www.reuters.com/article/us-usa-navy-asia-exclusive-idUSKBN19H13C

UK parliamentary email compromised after 'sustained and determined cyber attack'

jdoe.700101

Re: If it did not have 2FA or certs it was asking to be hacked

The problem with failed login limits, is that it makes for the perfect denial of service attack. Ideally you take out the access control admins first, and then everyone else.

Who will save us from voice recog foolery from scumbags? Magnetometer!

jdoe.700101

How about...

just using the microphone in the ear pods?

Microsoft to spooks: WannaCrypt was inevitable, quit hoarding

jdoe.700101

Whilst I understand where MS is coming from, it doesn't help that they have history in (ab)using their update process to distribute unwanted changes..

Crooks can nick Brits' identities just by picking up the phone and lying

jdoe.700101

Re: 'Security' questions?

One of my banks allows the customer to choose their own web banking username. I generated mine using 1Password, and as such is 40 random characters. The password is only 10 random characters, as that is the maximum password length.

Beware of geeks bearing gifts: Evil game guides infect 2 million Androids

jdoe.700101

Maximum permissions

Surely a simple first step for Google would be to limit permissions based on application type. In this case available permissions ought to be minimal.

Taking it a step further, any developer requesting admin permissions could be vetted, as in theory happens when requesting a EV SSL certificate.

Nuh-uh, Google, you WILL hand over emails stored on foreign servers, says US judge

jdoe.700101

Terms of service

Given that Googles terms of service refer to "products and services (“Services”). The Services are provided by Google Inc. (“Google”), located at 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States", with the laws of California, USA applying, I'm having trouble understanding how Google has a leg to stand on here.

Maybe it's time for Google to start using their global offices for more than shuffling income offshore.

eBay threatens to block Australians from using offshore sellers

jdoe.700101

Not sure what Amazons problem is, they can apparently handle US tax, so handling GST should be a breeze.

Alternatively, why not get the banks to collect the GST, thus earning their overseas transaction fee?

Trump's visa plan leaks: American techies first

jdoe.700101

Re: As long as the H1B visa has the present restrictions, it needs to be cut

If the employer was decoupled from the visa except upon renewal, then the visa holder would be free to find a better paying job once they realised that they were being exploited. In theory this would naturally raise the salary floor and make such visa less attractive.

Kill Flash now? Chrome may be about to do just that

jdoe.700101

Re: Why has Flash been so bad?

Photoshop was actually developed externally and first? available as a BarneyScan XP, which came with the BarneyScan film scanner.

Adobes problem is that their products reached maturity years ago, and have been adding bloat in order to (try to) justify their upgrades.

This year's H-1B visa lottery jammed full in just six days

jdoe.700101

Untie the visa from the employer/sponsor

If the visa is not tied to the employer/sponsor, then the employer would have no hold over the recipient, who could change jobs at will (e.g for a better salary), and simply need to find a sponsor at visa renewal time. Problem would be reduced quite quickly. This is how the tech visas work in Japan, and most people figure it out pretty quickly.

Bloaty banking app? There's a good chance it was written in Britain

jdoe.700101

Re: It is literally like this

alternatively in Java:

long time = System.currentTimeMillis();

Eight in ten IBM Global Tech Services roles will be offshore by 2017

jdoe.700101

Re: IBM

It's Better Manually

India challenges US visa price hike at World Trade Organisation

jdoe.700101

They should unlink visas from jobs

Rather than increasing the visa fees, they should simply unlink the visa from specific jobs. Then the visa holder can work wherever they like within the life of the visa, but must have a sponsor during the initial application and renewal. This would restore a semblance of equality to salary negotiation, and allow locals to compete on a more even footing.

Samba man 'Tridge' accidentally helps to sink request for Oz voteware source code

jdoe.700101

Wrong FOI request

Surely Michael Cordover should have been asking for public access to the raw data, so that he (or anyone else) could then independently tally results.

How to hijack MILLIONS of Samsung mobes with man-in-the-middle diddle

jdoe.700101

Licking their lips

If the North Koreans don't already know about this, they certainly do now, and must be licking their lips at the thought of controlling 46% of their brothers phones. http://pocketnow.com/2015/01/22/apple-samsung-market-share-korea

So why the hell do we bail banks out?

jdoe.700101

Automatic nationalisation for TBTF

Why don't governments declare that any bank deemed to big to fail will be automatically nationalised without compensation to the shareholders? That would seem to concentrate senior management and wake up the institutional shareholders. After all who really cares about unvested bonuses, when you already own a couple of houses, cars, and have cashed in multiple previous bonuses.