* Posts by Twanky

36 posts • joined 17 May 2017

Um, excuse me. Do you have clearance to patch that MRI scanner?

Twanky

...putting something like a raspberry pi in

This. You've got a multi-meeelion eurodollar device which you dare not patch for various (some good) reasons. Stick a 1,000 eurodollar firewall/ips system between the network and the device. Allow what needs to be allowed but nothing else. Nail down the config. You can patch the firewall/IPS.

Yes, I know a Raspberry Pi does not cost 1,000 eurodollars but it must be in a case with a fancy logo, right?

Edit: Should have read more of the comments before jumping in - the point's been made further down but earlier.

0
0

National ID cards might not mean much when up against incompetence of the UK Home Office

Twanky

They've destroyed Capita!?

The article caused me to choose to visit https://www.gov.uk/guidance/identity-cards-and-new-identity-and-passport-service-suppliers#cancellation-of-the-national-identity-register where I found this:

---

Cancellation of the national identity register

The national identity register was destroyed on 10 February 2011. The personal details of everyone issued with an identity card which were recorded on the National Identity Register were securely destroyed. This included photograph and fingerprint biometrics. The register was destroyed by IPS along with the relevant contractors to approved security standards. The completion of the decommissioning will be reported to Parliament.

---

I got all excited. That'll learn 'em.

4
0

Universal Credit has never delivered bang for buck, but now there's no turning back – watchdog

Twanky

NI Hypothecation...

...can not work. Unless you're prepared to take the line of cutting welfare to never exceed the NI tax take.

If the economy is going well and employment is high the required welfare expenditure is reduced and the NI (and other taxes) paid into the Treasury are increased.

If the economy is not going well and UNemployment is high then the required welfare expenditure is increased just at the time when NI (and other taxes) paid into the Treasury are reduced.

2
0

Every bloody gadget in the house is ringing. Thanks, EE

Twanky

"a cold caller, telemarketer or spammer"

There's a difference?

1
0

Aussie bloke wins right to sue Google over 'underworld' images

Twanky

Re: But

*If* he was it's probably not a good idea to annoy him...

26
0

Boffins quietly cheering possible discovery of new fundamental particle: Sterile neutrino

Twanky

Re: This is not making physics any easier

Niels Bohr was more eloquent: 'If quantum mechanics hasn't profoundly shocked you, you haven't understood it yet.'

But 'batshit crazy' is probably what he meant.

18
0

Max Schrems is back: Facebook, Google hit with GDPR complaint

Twanky
Happy

I sincerely hope...

that Facebook attempts bully-boy tactics by threatening to withdraw their 'service' from EU countries.

It probably won't happen but I can dream.

I wonder if the eventual outcome will be a paid-for (with money) service?

16
1

IPv6 growth is slowing and no one knows why. Let's see if El Reg can address what's going on

Twanky

How to make the move?

My ISP (Plusnet) is IPv4 only.

I run a number of different IPv4 RFC 1918 subnets at home on different vLANs and/or WiFi SSIDs (as I used to for my work). I have a 'services' subnet for things like e-mail, LDAP (VM) servers, I have a 'Home Entertainments' subnet, a 'Guest' subnet (for visitors' phones etc) and a 'DMZ' for world accessible services like web, XMPP and IMAP. Part of the security of the set up is that servers in the DMZ can only reach the 'services' network through my pfsense firewall ruleset.

Sure I could turn on IPv6 for all this kit and I could use my Hurricane Electric IPv6 address block and assign routeable addresses to everything I need to - but unless I subnet my IPv6 block to mimic my internal IPv4 setup I effectively 'flatten' my carefully built multi-vLAN configuration. If I have to mimic the subnetting to achieve the same control over routing and packet filtering then there is little advantage to enabling IPv6 - apart from self-education and being ready to turn off IPv4 eventually...

As far as I can see, there are two ways way for a business network to move to IPv6:

1) subnet their address space to mimic IPv4 which seems like a lot of effort to achieve the status quo.

2) rip and replace.

There would have to be a major benefit to risk option 2 IMO.

Whatever you want (sorry - if you've now got an ear-worm).

6
0

Biometrics: Better than your mother's maiden name. Good luck changing your body if your info is stolen

Twanky

Re: Biometrics

"Biometrics are your USERNAME, *NOT* your PASSWORD!!"

Hmm. I have more than a dozen different e-mail addresses which are used as Usernames to log into different sites. I have many more made-up Usernames for other sites which then link back to some of those e-mail addresses.

I only have the usual eight fingers and two thumbs and one face (no digital accidents so far).

I don't want to assert the same Identity at multiple sites. ZoOm seems a backward step to me.

0
0

Flamin' Nora! Brit firefighters tackle blazing fly-tipped boat

Twanky

This is real fly tipping?

A shipping container? Nah. This is REAL fly tipping: http://www.bbc.co.uk/news/av/uk-england-london-36033602/fly-tipper-dumps-three-tonnes-of-waste-in-south-croydon-road

Scumbags.

Edit: Argh! I can't believe I linked to a Flash Only version of this vid... Sorry.

https://www.youtube.com/watch?v=cOKLXrXI9Ig

2
0

US Congress finally emits all 3,000 Russian 'troll' Facebook ads. Let's take a look at some

Twanky
Stop

Re: I fail to understand

Not assassinated. Just murdered.

3
1

UK government's cloud spending hits saturation: Love of Microsoft endures

Twanky

Love of Microsoft endures

I seem to recall that UK Gov recommended or mandated (or something) that national and local government offices should adopt ODF standards for 'electronic' documents. I've been failing to find evidence of this (either a report in the media or a statement from my local government bods) - or did I just dream it?

Just caught the edit window: https://www.gov.uk/guidance/open-document-format-odf-guidance-for-uk-government

2
0
Twanky

UK government's cloud spending hits saturation

Once all Gov IT is in the cloud then it will run at maintenance level costs. However, given that HMRC (the Customs bit in particular) have no idea what to plan to deliver in 3 years time (and really should not be blamed for that) I suspect that the plateau in spending is due to uncertainty not saturation.

What would be more useful would be an historical analysis of how overall Gov IT spending has been increasing and whether the cloud components were taking a share of the usual spend or appearing as additional spending or even contributing to a slower increase (I very much doubt this last idea).

0
0

It's World (Terrible) Password (Advice) Day!

Twanky
Coat

"think of an obscure song..."

My favourite is that bit in Hey Jude. 'Na na na na-na-na na'

Mines one of the ones with a little blue book in the pocket.

1
0

Microsoft's latest Windows 10 update downs Chrome, Cortana

Twanky

Re: It it ain't broke, you're not trying

Ubuntu != Linux

18
3

Who will fix our Internal Banking Mess? TSB hires IBM amid online banking woes

Twanky

Re: not a customer

"sounds like a complex undertaking done for good reasons. Customers should just be patient and not get agitated."

Don't feed the trolls :)

3
0

Google accidentally reveals new swipe-happy Android UI

Twanky

Re: To be honest

With gesture control it's very important to do things in the right order. Licking then biting THEN flinging poo at it...

8
0

Are you able to read this headline? Then you're not Julian Assange. His broadband is unplugged

Twanky

Balance

Pte Manning copied very sensitive government communications and released them to 3rd part(y|ies). The individual was tried by Court Martial and found guilty on a number of charges and sentenced to 35 years imprisonment - a sentence which was later commuted to 7 years time-served.

Mr Assange is the front man for an organisation which published the information that Pte Manning supplied. He claims he fears extradition to the US where he might face the death penalty. To avoid this he has confined himself in a building in London (technically Ecuadorian territory) for more than 5 years so far.

If the person who stole the information while supposedly under military discipline got a custodial sentence then the person who published it is *not* likely to get a harsher sentence (death penalty).

Some of the *other* stuff that Mr Assange's organisation has published has certainly annoyed many more people around the world and some might see political/media advantage in hastening his death and possibly casting the blame on others. I think him going to the US would probably extend his life rather than shorten it.

Mr Assange will die - eventually. Maybe from old-age (having witnessed that recently I would not wish it on anyone) or from some form of ill-health or even by being killed. He seems to be increasing his risk of the last option.

4
0

SpaceX blasted massive plasma hole in Earth's ionosphere

Twanky

Re: I don't understand!

1/100 c.

However I can't find why a sheep's speed in vacuum is limited. Also, what sort of vacuum? Dyson, Miele or Hoover?

0
0
Twanky

Re: Fountains

Charles Sheffield's The Web Between the Worlds is fun too. Mind you, I would not like to fly in a fully built space tower - can't see the HSE liking that at all.

0
0

Facebook confirms Cambridge Analytica stole its data; it’s a plot, claims former director

Twanky

270,000 people downloaded the app... 50 million profiles leaked...

184 other people's profiles per self-selected volunteer - excluding overlaps? Genuine question: would that be a usual number of 'friends'?

4
1

Fermi famously asked: 'Where is everybody?' Probably dead, says renewed Drake equation

Twanky

Re: Just a thought

I feel an experiment is necessary to determine whether our 'civilization' is currently detectable. We'd need to launch a couple of craft with a decent angle of separation such that they can communicate with each other but ground control will only directly communicate with one which acts as a relay for the other. The other then needs to scan for evidence of intelligent life on earth and report back via the relay.

So remember when you're feeling very small and insecure

How amazingly unlikely it is your birth

And pray that there's intelligent life somewhere up in space,

Because there's bugger all down here on Earth

source: http://www.lyricsondemand.com/e/ericidlelyrics/galaxysonglyrics.html

2
0

Fear the wrath of robots, for their judgement is final and irrevocable

Twanky

Re: The real error

Just tried finding and reading these comments using curl... :(

1
0

Microsoft says 'majority' of Windows 10 use will be 'streamlined S mode'

Twanky

Re: Mess

Be aware that Windows Feature Updates can cause other FUs on a dual/multi boot PC. If Windows does not understand the partitioning it seems quite happy to stamp all over it to get the update done. Fortunately for me, re-installing the various Linux partitions only cost me time - my data syncs to/from my servers.

1
1

NRA gives FCC boss Ajit Pai a gun as reward for killing net neutrality. Yeah, an actual gun

Twanky

Re: those cowardly cops in Parkland

Yes. Which is why people should know the RoE before calling them cowards. If they failed to follow the RoE by not going in then that's a different matter. However, I expect their RoE required them to 'consult superiors' or some such before going in. Too many constraints can stop people potentially doing what turns out with 20/20 hindsight to be the right thing.

0
2
Twanky

those cowardly cops in Parkland

Cowardly? I really would like to know what their rules of engagement were. I would not be at all surprised to find they followed those rules.

Of course, the RoE might have been too cautious - but if they'd broken the rules they'd probably be toast... Which they are now anyway.

4
3

The e-waste warrior, 28,000 copied Windows restore discs, and a fight to stay out of jail

Twanky

In summary...

Most comments seem to agree that Microsoft licence terms are too restrictive - who'd have thought?

Don't mess with Microsoft. They can afford better lawyers than you... and judges.

1
0

Iran: We have defeated evil nuclear-sensing Western lizards!

Twanky
Happy

Yobba Rays On!

0
0

Former ICE top lawyer raided US govt database to steal aliens' identities

Twanky

Re: For poetic justice

I like the idea. Only problem is: to where? Perhaps establishing a penal colony somewhere (say, Cuba) might be in order?

5
0

Web searching died the day they invented SEO

Twanky
Coat

Re: SEO = Sell Everything Online

Er. Yes.

We're not Google's customers and most of us didn't pay for the SEO gurus to do their thing. It should not surprise us that it's not aligned with our interests.

Mine's the one with the extra tin foil.

2
0

All your base are belong to us: Strava exercise app maps military sites, reveals where spies jog

Twanky
FAIL

Great news!

In May 2015 many news sites carried a story that the silly Chinese army had banned it's forces wearing smartwatches and other 'wearable tech' - on security grounds. <sarcasm>Paranoia. It's clearly foolish to ban such useful kit.</sarcasm>

2 1/2 years later and a company that tracks people through their kit publishes clear maps of where these people can be found and how frequently. Not only that but we can see where the people who are apparently most concerned about their physical fitness exercise around military and security facilities. Clearly the Chinese were not over-reacting.

It would not surprise me if various state agencies had already issued regulations restricting the use of this kit - but as they didn't explain why, or enforce the regulation, it got ignored along with all the other apparently unnecessary cruft.

I really hope that this becomes a much bigger news item. The world needs to understand that sharing any personal data without a damn good reason is an utterly foolish thing to do.

13
1

Brit MP Dorries: I gave my staff the, um, green light to use my login

Twanky

Executive/PA working

Much has already been said about the foolishness of MP's sharing passwords and the criminality of retaining data from a possibly illegal search by a plod leaving the service. Can't add anything to that.

The IT 'problems' associated with Executive/PA working are not new and there are many methods available to address them. These clearly are not being applied in Ms Dorries' and other MP's offices.

So why not? Almost certainly because it is easier for the MP to just get on with the job (as they see it) by giving people they trust their password.

It seems to me that the Palace of Westminster IT function has not made it easy enough for their Users to do things the right way.

1
0

You're such a goober, Uber: UK regulators blast hushed breach

Twanky
Flame

Re: Funny really...

'I wonder what other associated account data Uber actually hold'

This is an archive of something published on Uber's corporate blog. It shows that not only do they collect data about their users, they allow people to analyse it and derive information which is none of their business. https://web.archive.org/web/20141118192805/http://blog.uber.com/ridesofglory

...and then they boast about it in their blog. Brilliant.

3
0

Paradise Papers were not an inside job, says leaky offshore law firm

Twanky
Meh

One rule for the rich...

Oh now I understand.

If someone collects and leaks a truckload of personal/financial information about ordinary people then they're scumbags. If its about people richer than you then it's disclosure in the public interest.

Got it.

1
1

Do we need Windows patch legislation?

Twanky

Re: I can't see a poll!

If an essential device has unsupported software it needs to have a wrapper around it which is supported.

A firewall/content filter which can be updated dedicated to protecting a multi-million pound device that can't be updated should be a small price to pay.

1
0
Twanky

Eternal vendor support.

No. Hell no.

The boot should be on the other foot. Those who run essential public services should be required by law to ensure they are supported.

1
1

Forums

Biting the hand that feeds IT © 1998–2018