The Register Home Page

* Posts by Curious

88 publicly visible posts • joined 3 Oct 2007

Page:

Tech sector pours $1T into AI and sends customers the bill

Curious

If this "investment" in GPU and ASIC farms produces far lower profitable revenue than the speculators hoped, what level of bill increase should we expect when the costs are extracted from the 'traditional' cash cows of the tech industry?

Digital ad spend is well over 400 billion per year just in EU + US, so unless businesses put in the effort to minimise wasteful oversaturation spend here, the ad sellers have money to burn on this until the shareholders say stop.

Irish Rail writes down €50M after train IT project goes off the rails

Curious

How is Indra's new Estonia rail traffic control system going?

Indra have the contract to implement the Estonian rail traffic control also, over roughly the same time window.

Anyone have any info on how that is progressing?

"ESTONIAN Railways (ER) has awarded Indra a contract worth €18.4m to design, develop, implement, and launch a traffic control system on the country’s 1214km-long network."

July 2020

https://www.railjournal.com/signalling/indra-to-update-estonian-traffic-control-system/

Pass the key, passwords have passed their sell-by date

Curious

Re: Great!

There are passkey card options like PIN protected Fido2 cards for 15 quid. 300 passkeys per card. Though you'll want to maintain a backup card or 3 for the important services.

www.token2.com/shop/category/fido2-cards.

We'll see over time, hopefully they are less vulnerable to breakage over a long term than the older TOTP synchronised number generators.

OpenAI gets $122B to 'just build things' as the world blows them up

Curious

It's "Committed Capital" i.e. pledges from the investors to invest over future years. In February it was €110 billion, now it's €122 billion.

If the investors don't invest, then there is probably some penalty clause.

Like "forfeiture of a portion of the investor's share of future profits". Snark.

"

Traditionally, investors who commit capital to PE funds will have several years to make good on the commitment. Failing to do so can lead to penalties, such as the forfeiture of a portion of the investor's share of future profits. In some cases, the offending investors may also be required to sell their interest in the fund, either to other existing partners or to approved third parties.

"

https://www.investopedia.com/terms/c/committedcapital.asp

UK blinks on AI copyright carve-out after star-studded revolt

Curious

When's the full source of Windows going into train copilot public model?

Have Microsoft provided the full source of Windows, Office etc to train the publicly available copilot model?

If a government with access to the source code did so, would the resulting output be copyright free?

Copilot doesn't believe so.

"There is no publicly available statement indicating that Microsoft has supplied Windows source code—a highly protected, closed-source asset—to train Copilot or any other public LLM. Searches of Microsoft’s official announcements and documentation reveal no such disclosure, and historically, Microsoft guards Windows source code extremely tightly."

Lock down Microsoft Intune, feds warn after Stryker attack

Curious

Re: Can't believe I'm saying this....

Without any internal knowledge, I'd be fairly confident that Stryker use MFA and SIEM. But we've all seen that there's some legacy MFA that isn't worth much for high value roles.

Reportedly the attackers got to elevate from Administrator to MFA Entra Global admin, so Intune RBAC, and dual Intune administrator approval would be a speedbump after that.

Would the guidance from CISA and Microsoft have prevented this?

https://www.cisa.gov/news-events/alerts/2026/03/18/cisa-urges-endpoint-management-system-hardening-after-cyberattack-against-us-organization

I would guess that the guidance on multilevel Privileged Administrative Workstations might be more valuable,

https://techcommunity.microsoft.com/blog/microsoft-security-blog/how-to-enforce-usage-of-privileged-access-workstations-for-admins/4067207

I think you're letting Microsoft off easy though...

I believe Microsoft ought to assist in creating a deployment kit for this, in a similar way that we see the linux enterprise vendors providing security focused, minimal attack surface deployment choices at install time out-of-the-box.

As Microsoft have it currently, involves a lot of hunting around for various scripts on Github that aren't up to date.

https://learn.microsoft.com/en-us/security/privileged-access-workstations/privileged-access-deployment refers to Windows 10 20H2

https://github.com/Azure/securedworkstation

No fire sale for firewalls as memory shortages could push prices higher

Curious

Fortinet have caused plenty of articles and hassle where their SME and edge firewalls are underprovisioned with memory when memory was cheap, causing them to fall into conserve mode, especially after upgrading firmware or running proxy mode scanning services.

They seem to be so cagey about it that they don't publish the amount on most of their device datasheets, and customers are advised to wait for the 2nd or 3rd revision of their devices where Fortinet doubled the RAM out of necessity.

Customers have to scan the datasheet and guess the installed ram from the asterisks beside services that won't work with the device.

Their cost of goods is 18.4% of revenue, so it's not like it would skyrocket the customer cost to start with some memory headroom, much of which is understandably recurring service and support charges.

Whatever legitimate places AI has, inside an OS ain't one

Curious

Re: Integral to the OS

Do they understand how they are causing their products to be skin-crawlingly creepy, a couple of bad LLM in the OS or M365 actor headlines could have the politicians ranting for a company breakup?

The Microsoft management reacted with similar baffled expressions to the muted reactions when they presented the Kinect always connected mandatory IR camera + microphone at launch, living room face recognising, delivered with the Xbox One.

Or Musk's claim that the information all of Tesla's Optimus androids and Tesla cars will gather from walking around households will be worth trillions when "licensed" to xAI somehow without benefitting Tesla shareholders and certainly not customers.

The exascale offensive: America's race to rule AI HPC

Curious

Oblig:

I guess if there is a possibility of evolving a computer system into taking an interest in it's surroundings, threatening it with power cuts every 6 months or so due to government congress disagreements is one way.

And it's trained in advance in the topic of nuclear weapon simulation as a bonus.

HSBC spies $207B crater in OpenAI's expansion goals

Curious

The OECD is described as having 659.9 Million people of working age 15-64, employed and unemployed.

Do HSBC believe we're going to be volunteering a median of €6 quid a month to OpenAI, and they'll make money through us not actually making queries that cost OpenAI more than this + energy costs and datacentre costs decreasing greatly?

Maybe they think that commercial users will be paying for it on our behalf? What would that require, 180 per month for each adult in sales and advertising commission?

Why would HSBC think that the market for models won't be more fragmented, with the high value queries sent to LLMs that can statistically prove they provide consistently useful results when fed somewhat standardised input?

Chinese businesses will likely drive their own, and may be of more use due to localisation.

I'm sure that there will be gaming and leisure applications but again, the likes of Epic's Unreal Engine could provide trained models that run on NPU and their own service.

Researchers claim 'largest leak ever' after uncovering WhatsApp enumeration flaw

Curious

Re: University of Vain-a

Did you look through the paper? https://github.com/sbaresearch/whatsapp-census

The researchers do analysis of public key reuse, reoccurance and collisions, by country and client dataset gathering from the scraping.

"It contains only one piece of advice for privacy-conscious WhatsApp users: they should reconsider their profile photo and info field."

And that the scraped data can act as a reverse phone-book. profile picture -> mobile number, email, employer, and info that unwitting accountholders might intend only for their contacts.

Meta in 2021 had their spokesperson say...

"Protecting the privacy and security of people's data is fundamental to how our business works," the Meta spokesperson said, adding that the company "cooperated fully" with Ireland's DPC.

"We made changes to our systems during the time in question, including removing the ability to scrape our features in this way using phone numbers," the spokesperson added. "Unauthorised data scraping is unacceptable and against our rules and we will continue working with our peers on this industry challenge."

But the paper lists that it required 8 or so attempts over the course of a year to ger Meta to pay attention and acknowledge findings.

Just because it's easier than bin diving does not mean it's not valuable to know.

"Approximately 30 percent of users have entered something in the “Info” field of their profile, and some reveal a lot: political views, sexual or religious orientation, confessions of drug abuse are found there, as are drug dealers who advertise their product range in this very field. Beyond that, the Vienna researchers found information about the user's workplace, up to hyperlinks to profiles on social networks, on Tinder or OnlyFans. Email addresses were of course included,"

https://www.heise.de/en/news/3-5-Billion-Accounts-Complete-WhatsApp-Directory-Retrieved-and-Evaluated-11083244.html

"The easy accessibility of the photos would therefore have allowed the compilation of a database that, through facial recognition, often leads to the phone number and vice versa. Even profile pictures without faces can be talkative: sometimes car license plates, street signs, or landmarks are depicted."

"The Vienna scientists have found that WhatsApp sometimes reuses keys if you log out of WhatsApp on a phone and then open a new WhatsApp account on the same device with a new phone number. This is a security flaw that Meta is now trying to address."

Also the measures that Whatsapp put in place to discourage future scraping are listed, so can be checked if they disappear in a few years due to inconvenience.

AI is making Google and Meta even stronger and richer

Curious

Re: Who's losing?

Companies paying their advertising and sales budget for bots to 'train' using their ads and webstores?

Hundreds of millions of business PCs are still on Windows 10 as D-Day nears

Curious

As part of the october update, will Microsoft push full screen warnings again?

Can we expect that one of the updates delivered to windows 10 machines next week shall display full screen warnings at login time again, or will it be a polite taskbar notification?

Return on investment for Copilot? Microsoft has work to do

Curious

Re: It's too freaking expensive

Maybe not for an employee that will use it well, but when Microsoft's aim is to apply this cost to every employee that currently possesses a M365 account, it has to compete with other long term potential investments,

5 quid a month for an SME with 200 employees many of whom won't use excel =sum functions,

may be worse value than a hundred grand in industrial machinery depreciated over 8 years;

or exceed the entire IT laptop/desktop/onsite server spend over 8 years, in an environment when the majority of employees share a handful of devices between them, for a few minutes at a time.

China turns the screws on Nvidia with antitrust probe

Curious

Re: What did they expect?

Mellanox had most of it's employees in Israel + California.

It's Nvidia's revenue and distributors that the Chinese regulators are threatening, not dissimilar to the way EU regulators threaten fines of 4% of global revenue, or monopoly breakup demands upon US companies.

Senator blasts Microsoft for 'dangerous, insecure software' that helped pwn US hospitals

Curious

Re: You take the blame, and you take the blame

It doesn't need CEO jail time, Insurance audit questions similar to the ones that are asking "Do you use Exchange On-Premise" make a difference to IT directors and Finance directors.

I'm not sure that it's accurate to say customers don't want a secure by default windows. Microsoft claim this of Windows 11 in places...

https://www.microsoft.com/insidetrack/blog/hardware-backed-windows-11-empowers-microsoft-with-secure-by-default-baseline/

But in actuality, for a few quid, windows 11 with the usual trash apps, unnecessarily large attack surface by default, weak protections between what could be "system", "user", "app", "browser session data" partitions in files and memory.

The windows 11 setup asks enough dumb questions about what type of apps the user wants to use.

Why not have a "New install which implements M365 Compliance Manager choices", the hundreds of entries that are listed in M365 Compliance Manager, but require E3 licenses to use get access to a nice implementation UI?

The majority avoid want complex and expensive add ons that cause a new set of problems.

e.g. mac, linux configured on Azure active directory, or on-prem AD, with minimal guidance and tooling.

Oracle's $40B Nvidia hardware haul may be too hot for OpenAI's Abilene, Texas DC to handle

Curious

Besides LLMs and proof-of-work crypto coins, are these GPU farms of potential use for anything else?

Many of us think that the future demand for monster scale LLM farms is overblown;

Those that care to will be able to get adequate-enough and cheap models running on our own local hardware for common tasks interacting with our data. (If the client side setup is user friendly enough)

And the likes of Amazon are running custom application specific ICs.

If that's the case, what type of money earning computer tasks might these monster GPU farms be put towards, if they're selling a rack for a pittance in 3 years? Something that needs very fast and widespread model changes like security scanning against AI, and doesn't benefit sufficiently from the latest nVidia CUDA Compute Capability version?

Resellers may be sitting on costly pile of regret after US smartphone shopping spree

Curious

"In February, Apple said it would invest in US manufacturing and R&D, announcing plans to spend $500 billion".

I think Apple usually phrase it as "contribute to the US economy" rather than spend. E.g. tax payments, payments to suppliers.

They make a similar announcement at the start of each presidency.

17 Jan 2018 — Contributions will exceed $350 billion over five years, adding US jobs, investments in domestic suppliers and fueling the App Store economy.

26 Apr 2021 — Apple plans to make new contributions of more than $430 billion in the US and add 20,000 jobs across the country over the next five years.

Trump doubles down, vows to make Chinese imports even more expensive for Americans

Curious

Re: what's the deal with retaliatory tariffs?

A large portion of the goods deficit are attributable to Trump's 2017 Tax Cut and Jobs act, which rewards US pharma for moving IP abroad, and availing of the 10.5% tax on intangibles.

Entirely within US Congress power to fix their tax incentives.

If the pharma tariffs planned are done competently, they could make a large dent in the practice of US companies importing at greatly inflated prices.

The pharma companies are happy to manufacture in Puerto Rico, a US territory but considered offshore, for minimum wage, and get proportionally huge tax breaks for moderate employment gains.

Fix that + Ireland's transfers would but a big dent in the US eastern ocean import deficit.

Oh Brother. Printer giant denies dirty toner tricks as users cry foul

Curious

Re: Security risk

Perhaps because the HP CEO believes that HP has not coded the printer's interface used to communicate with the print cartridge with sufficient input sanitisation.

"

A researcher found a vulnerability over the serial interface between the cartridge and the printer. Essentially they found a buffer overflow. That's where you have got an interface that you may not have tested or validated well enough..."

"

https://www.action-intell.com/2022/10/05/hp-bug-bounty-program-finds-reprogrammable-chips-open-printers-to-malware.

Nope. You probably can't cash in by turning your office or farm into a datacenter

Curious

Re: AI datacenters that require 230 kW of available energy per rack.

Nvidia mentions a max of 4 x DGX B200 in a 52U Rack.

Each 14.3kW max.

with higher than normal cooling and power delivery required.

They'd need something very specialised for 100kW, you'd think.

El Reg has had articles before about datacenters like Colovere advertising 200 kW potential per rack using liquid cooling. Not equipment actually drawing that power though.

Copilot+ PCs? Customers just aren't buying it – yet

Curious

Local LLM support will end up used for games, the likes of Unreal engine will incorporate support for it in it's existing "Neural Network Engine", end up as a tickbox like raytracing or headset support is in games settings.

Will it be more? A high price for some teams background blurring and unused dictation capability.

And how much will it mess up all the applications that assume that a users's password/key entry is a legally binding verification of a person's action. E.g. docusign.

Europe hopes Trump trumps Biden's plan for US to play AI gatekeeper

Curious

Re: No limit for the Netherlands but for EU?

The manufacturers, distributors and very large end users are expected to report every 6 months on the quantities of compute that they deliver to what countries, what data centers, otherwise their license to buy and receive hardware will be at risk.

https://public-inspection.federalregister.gov/2025-00636.pdf

page 28

"

The UVEU [Data Center VEU: Universal Validated End User, headquartered in an exempted country ] is responsible for ensuring it complies with the

applicable AI TPP geographic allocations. To receive UVEU status, a DC that owns its advanced

computing capacity must certify that it will follow the guidelines outlined in supplement no. 10

to part 748 and go through an intensive application process"

page 35

"

As discussed, BIS and its interagency partners have

identified a set of destinations where (1) the government has implemented measures with a view

to preventing diversion of advanced AI technologies, and (2) there is an ecosystem that will

enable and encourage firms to use advanced AI models activities that may have significant

economic benefits. Those destinations, which are listed in paragraph (a) to Supplement No. 5 to

Part 740, are Australia, Belgium, Canada, Denmark, Finland, France, Germany, Ireland, Italy,

Japan, Netherlands, New Zealand, Norway, Republic of Korea, Spain, Sweden, Taiwan, the

United Kingdom, and the United States. For end users headquartered in these destinations, listed

in paragraph (a) of supplement no. 5 to Part 740, BIS is providing a license exception for export

or reexport to entities located in all destinations except Macau and those in Country Group D:5.

However, exporters and reexporters may not take advantage of this exception unless they ensure

that the end user has instituted specific security measures that will reduce the risk of diversion,

specified in paragraphs 14, 15, and 18 of supplement no. 10 to Part 748.

"

Nvidia snaps back at Biden's 'innovation-killing' AI chip export restrictions

Curious

Re: Going Dutch?

Exemption is for

"Australia, Belgium, Canada, Denmark, Finland, France, Germany, Ireland, Italy, Japan, the Netherlands, New Zealand, Norway, Republic of Korea, Spain, Sweden, Taiwan, the United Kingdom, and the United States" for all transactions involving certain types of end users.

https://public-inspection.federalregister.gov/2025-00636.pdf

Supposedly these countries have a low risk of diversion that Poland, Israel and many other NATO countries don't meet.

Linus Torvalds: 90% of AI marketing is hype

Curious

Re: I agree

Private health clinics are doing comprehensive body skin photography for a history of mole and lesion growth for ~£500.

And apparantly "AI" plays a part in highlighting changes.

https://onewelbeck.com/tests-diagnostics/mole-mapping/

"

Our mole mapping machine allows a full 360 degree view of your skin. This will document all your moles in great detail and the images will be stored for mole monitoring purposes. Individual moles can also be examined in greater detail using a microscopic light called a dermatoscope. All the images are examined by a dermatology consultant and stored securely. The mole mapping machine then uses artificial intelligence to flag up any changes to moles when mapping is repeated at a later date.

"

If Dell's Qualcomm-powered Copilot+ PC is typical of the genre, other PCs are toast

Curious

Re: Can I just have a normal Latitude?

What price are you seeing?

€946 for a 16GB Memory , 512GB SSD, 8 core snapdragon 5455 is about 100 quid cheaper than the similar intel 5450

OrderNum : s009l545014ukie_vp - Intel €1,060.31 excluding VAT

compared to gctol5455emea_vp - Qualcomm €945.77 excluding VAT

on the Dell premier site for SME.

Curious

Re: Can I just have a normal Latitude?

There's the Latitude 5455 and 7455 on the site.

Microsoft decides it's a good time for bad UI to die

Curious

Re: Yes, Settings is missing bits

In the author's trashing of the control panel, he seems to miss that the windows registry is the closest we have to a "shared, structured way of describing internal settings" that we use control panel, settings, local and group policies, powershell and regedit to fight with (the "stable" registry plus the "volatile" in-memory registry). From Windows 3.1 days.

However many applications such as .net applications have reverted away from the registry to unix-alike usually human readable config files, altered by non-standard application specific configuration tools.

Out of the list of possibilities above, which would I choose to walk a teacher through enabling ease of access configuration over a phonecall?

The control panel Ease of Access at least makes an attempt at using the whitespace to describe the tasks someone arriving on that page might use it for.

There will probably be a microsoft store app at some point to store and offer the user preferences along with the Microsoft account to push the rented cloud windows.

CrowdStrike president cheered after accepting 'Epic Fail' Pwnie award

Curious

They've added internal canary testing and customer control for staging release versions of template instances.

The content validator with mitigation improvements is scheduled to have deployed on August 19th.

Probably enough done to stop Crowdstrike from being replaced by CTOs.

https://www.crowdstrike.com/falcon-content-update-remediation-and-guidance-hub/

and root cause analysis PDF

"Significant work remains for the Windows ecosystem to support a robust security product that doesn't rely on a kernel driver for at least some of it's functionality. We are committed to working directly with Microsoft on an ongoing basis as Windows continues to add more support for security product needs in userspace."

Patch management still seemingly abysmal because no one wants the job

Curious

When will software companies stop bundling "features" and "ui changes" (requiring redocumentation and full revalidations) with their security fixes?

And Microsoft, trying to push new Teams and new Outlook as per-user-profile maintained apps does not help with these huge-attack-window applications (Teams shows as the highest impact threat in MS defender m365 Inventories despite it's autoupdate.).

Life, interrupted: How CrowdStrike's patch failure is messing up the world

Curious

What's the bet..

Whats the likelihood that Crowdstrike will announce on Monday that in future they will use AI to prevent this from ever happening again.

And the stock price will go 'oh, that's better.'

Cancer patient forced to make terrible decision after Qilin attack on London hospitals

Curious

Re: Hackers are responsible for what they do, but not solely.

In healthcare and medicine, there's audits on managing documentation and seen as a management failure to have old hardcopy available, which won't be looked on well in a court trial / investigation

Many managers take the digital only option, because it's easier to control that employees have only the current edition. Most employees won't have easy assess to print.

Having Quality Control people constantly searching each room in huge premises and replacing out paper folders isn't a task that management aren't willing to pay the overhead on.

Oracle Java license teams set to begin targeting Oracle users who don't think they use Oracle

Curious

Re: Legal in the EU?

The salespeople will be shooting fish in a government provided barrel in Ireland. Just phone the accounts department.

Ireland's revenue service provide "ROS Online Application" which bundles Java6 u15 for downloading revenue forms and filling in revenue declarations.

Probably every accountant has it installed.

It fails when the enclosed JRE is replaced with a modern JRE, even Adoptium 8 JRE isn't great.

Oracle Java police start knocking on Fortune 200's doors for first time

Curious

"

Oracle defines employee for Java licensing purposes as all of the employees of the organization, regardless of employment status, plus all of the full-time, part-time, and temporary employees of agents, outsourcers, contractors, or consultants that support the business.

"

Visions of Oracle auditors having to walk through US and Chinese prisons taking a headcount.

IMF boss warns of AI 'tsunami' coming for world's jobs

Curious

Would employees pay for our LLM manager?

Would a substantial proportion of employees pay their own money for a quality checking LLM 'manager' under their own control, which has the purpose to advise the employee that the work they are about to submit is garbage / problematic / land them in legal hot water; point at remedies and improvements that can reduce later hassle and rework?

i.e. industry specific Grammarly that makes us look better and more competent to others.

or Soar Scribe that assesses the words used by meeting participants and assigns a sentiment to the participant's contributions overall. And can be useful to revise a remembered sentiment which can be misleadingly skewed by personal dislikes such as tone of voice, or mishearing, or having-a-bad-day distortions.

In the IMF post, 60% of jobs are described as exposed, 1/2 improving value, 1/2 at risk of reduction. Isn't that the same ancient mantra of 1/3 of society are for Ark B?

There's loads of jobs that could be done by million quid robots at vastly improved speed but the bottlenecks feeding the robot, setup and protection costs around the robot would mean it's wasted investment and cheaper to pay a person to apply a bottlecap and put in a box.

Palantir's CEO calls 'woke' a 'central risk to Palantir, America and the world'

Curious

Re: What is “woke”

"The woke define people by one charaterisitic (that person is black, that person is gay, etc) and group them based on this single charateristic, then assume that they automatically have a lot in common with others who share that single characteristic (which they may not), and then put these groups into hierarchies, and sets them against each other."

How should we read this...

If this (flawed) definition is true only for "The woke" then the writer 43300 defines himself as being woke using his own definition.

It's inaccurate because the default for human brains is to instantly assign dozens of group presumptions and probabilities on the people they encounter.

Then in the second lump of the post, wokery is defined as "seeking equality of outcome, based solely on the basis of which arbitrary groups they have assigned people to"

No. That's taking the legal "action based on a particular protected characteristic". e.g. Public Sector Equality Duty 2010 in the UK.

Instead of poorly thought out versions of 'wokery' perhaps you can look up definitions.

Better yet, consider that overuse of muddled collective nouns like "the woke" which have original, modern expanded and pejorative understandings make a mess of your post.

for example

One of Oxford's definitions of woke is "alert to injustice in society, especially racism.". If you assess the equality duty act to be a cause of injustice, could your own post be considered as a woke alert?

Curious

Re: What is “woke”

That's not limited to those "infected with the wokeness"?

It's a primate brain thing dividing other people and creatures into multiple in-groups and out-groups; and being less forgiving, more reactionary, having "viscerally negative feelings", less respect for their thought process, less inhibited in commiting violence in those that we perceive as sharing fewer groups.

( Robert Sapolsky's book Behave suggests it hits in fractions of a second when measured under MRI, and requires prolonged neutral-to-positive individual contact and experience to train other parts of the brain to balance this out, or create positive in-groups to slow hostility.)

"Woke" bouncing against "socially conservative" are just two more groups where all the common positions are temporarily forgotten when two mobs stand in front of each other, and the common society is weak at holding them to rules of decorum and debate.

And in any large group we'll have those people with poorer impulse control, worse reactions than the normal.

Microsoft gives Hyper-V ceilings a Herculean hike

Curious

For SMEs, is the windows server cost per core having much of an effect on the server hardware that they buy?

i.e.buying dual 8 core CPUs rather than dual 24 cores, to avoid +10K in per core Datacenter licenses?

Broadcom has willingly dug its VMware hole, says cloud CEO

Curious

That was also the announced intention for Symantec products.

Anyone have industry knowledge about whether large customers have remained on those software products?

There are a lot more rivals with better solutions in that and I don't believe any of the theoretical broadcom hardware optimised or accelerated security products have made it to market.

UK finance minister promises NHS £3.4B IT investment to unlock £35B savings

Curious

The UK has rejoined the Horizon program, so maybe they'll be contributing to the EEHRxF updates (including FHIR) and EHDS

https://digitalhealthuptake.eu/resources/the-interoperability-of-ehr-systems-and-health-apps-in-the-european-health-data-space/

and allow some other frontrunner to trip over the gaps. And improve medical treatment for UK travellers in Europe.

Let the politicians have a xml tag in the spec for whatever political slogan they must include in "their" system.

City of London ditches Oracle for SAP in search of ERP enlightenment

Curious

Re: Frying pan

Is there a reason that a payroll application wouldn't be suited for an open source collaborative project?

Support contracts that finance departments would reliably pay to gain the new payroll rules as they change through the year.

And auditors can insist on 3rd party signed and validated binary build / install.

(Not much different to the way in which small businesses using trade weighing scales have to produce calibration certificates to inspectors )

The core of the application, UI, data storage could be a collaborative platform.

There's questions about how much of the application could be common for a substantial portion of the world to share, but there are plenty of existing applications around the world that can be learned from.

There are businesses writing and maintaining payroll applications for small customer bases within much smaller jurisdictions than the UK, and sustainable for not much money per year.

And there are businesses coping using old ERP systems where the database and rules have had minimal core changes in 30 years. A module offered to add functionality specific to an industry's regulations. And a UI makeover once per decade interacting with the same rules at the back.

LockBit shows no remorse for ransomware attack on children's hospital

Curious

The "friend of a mate's brother" or the kid doing computers in uni as a nixer is the most that most SMEs have access to.

The trained and competent consultants want higher billing work.

This year a local factory went to the consultants to get GE Proficy-Historian installed. These consultants have lots of multinationals in their client list. All the big claims about state-of-the-art.

Consultants as a fresh, no-legacy setup installed the GE 2016 version with an ancient OpenSSL / Tomcat that wouldn't have come to IT's attention until too late, had it not been too ancient to work with a recent Intel CPU.

Because it's what suits the consultants for whatever reason.

As for all the companies going to cloud to remove the need for internal It knowledge, especially Microsoft cloud and "Business Premium / E3 licensing" and P1 security which

1. doesn't cover the employees that mightn't use email but are still in the AD Hybrid directory as unlicensed users

2. doesn't allow IT to state the basic demand "these resources are not to be accessed outside this building/VPN and it's fixed ip addresses"

3. requires copying GUIDs into a group policy to get the much trumpted "Microsoft Defender Security " to have any meaningful effect. Abysmal ease-of-security-configuration is an upselling opportunity.

4. Commonly recommended Microsoft MFA authentication methods can be foiled by a QR code pointing at a proxy security page.

5. as microsoft revealed, their own setup can be insecure by some developers misconfigured test environment.

6. When microsoft detects a risky sign-in. you think they'll give IT an alert? Not without the extra P2 licensing. Tough luck cheapskate. You'd better start learning how to query Graph with Powershell and Get-MgRiskDetection. Or sit at security.microsoft.com pressing "refresh". Or pay and trust a third party like Barracuda XDR or similar to use their alert at lower cost than Microsoft (who deny you this alert).

Will AI take our jobs? That's what everyone is talking about at Davos right now

Curious

Re: They just can't help themselves, can they, ... trying to alter alternative results

It's software engineering speak for producing software that is reliable and the specifications are designed and followed.

https://en.wikipedia.org/wiki/Formal_methods

"correctness of software or other program properties can be guaranteed with mathematics-based assurance." .

https://ieeexplore.ieee.org/document/58790

(A squiggle heavy module from college that only one in a million software devs look at again after school. So will a formally correct LLM be the most likely method to make formally correct software more widespread?)

https://www.moritz.systems/blog/an-introduction-to-formal-verification/

Microsoft creates a new kind of credential: the 'Applied Skill'

Curious

Yes, definitely will. It will likely be useful by keeping up-to-date, precisely why a cert becomes un-useful.

Some of the modules are using automation to create them, then they are reviewed.

6 hours to get an up to date walkthrough of where the key menus for a task are in the ever-morphing labyrinth of M365, in a format similar to the guided Microsoft learn tutorials.

e.g. Secure Azure storage

As this site shows time and again, there are plenty of Azure developers that shy away from studying that sort of "IT janitorial stuff".

And Microsoft's technical pages aren't the nicest to digest.

'Slow AI' needed to stop autonomous weapons making humans worse

Curious

Re: Issues to focus on for "AI dev pause"

Vis-à-vis

"CAN do attitude: How thieves steal cars using network bus"

Break a robot tank's headlight and talk directly to the swarm.

It seems that we've a few decades of slowdown needed before we have decent tools and education for managing public / private certificates and permitted roles on all of these previously trusted internal subcomponents. (i.e. communication signed with cert A can call Device B with function C, versions D-E, parameters F and accept response G)

A LLM will be needed for creating the decision tree alone.

The Reg lists multinational corporations humans and alert systems having very public struggles with basic cert rollover on top-tier revenue critical services.

Microsoft enlarges its cockpit of Copilots to include security

Curious

Re: Well thank you, Borkzilla

Not an afterthought, a sales opportunity.

You've only got a P1 security license you pleb? You have a a duty to buy a P2 security license, and days of prepaid support instances. And our AI plugin to make sense of our graph api interface.

Anything else would be reckless, effectively handing the terabytes of data that your business sends to our cloud directly over to criminals /s

Hands up who DIDN'T exploit this years-old flaw to ransack a US govt web server...

Curious

If the customer's IT doesn't have their own Telerik annual developer subscription for a few hundred per year then they won't have access to Telerik component updates. And IT may lack the knowledge and build scripts to update, run test scripts and deploy themselves, if the development work was outsourced.

How many business .Net apps will never get updated from .net framework 3.5? We were quoted 40 grand to bring a fairly straightforward internal small business azure hosed application from .net core 4 LTS to .net 6 LTS. No feature changes.

Microsoft to enterprises: Patch your Exchange servers

Curious

Exchange on premise was part of our insurance company checklist, putting pressure on the company to take it out.

(Even Exchange management tools are listed as forbidden, so we have to manipulate "hybrid identity" user AD attributes such as 365 smtp proxy addresses by other methods.)

The exchange cumulative updates don't display in WSUS, and it's common for people that skip reading the entirety of the CU install recommendations to cause the Exchange server to become non-functional (e.g. having to manually upgrade the permissions of the installing user for the active directory extension changes; IIS frequently needed repairs afterwards as the update program didn't demand elevation )

Intel offers Irish staff a three-month break from being paid

Curious

The Irish Dept of Finance says that corporation tax receipts in 2022 Jan to November end has risen by €7.6 billion to €21.1 billion compared to November 2021.

That's what the Irish people are getting back. With pros and cons. Most of the cons are either self inflicted or the usual market forces when a multibillion dollar blob is dropped into a small city.

Not exactly Faustian, it's a deal with the corporate accountants and tax lawyers.

Windows Server to require TPM2.0 and Secure boot by default in future release

Curious

Other than Dell, have other manufacturers had difficulties with disappearing TPM 2.0

There are a few cases that I've encountered on Dell business machines of the BIOS losing the TPM 2.0 chip.

i.e.stops appearing in the BIOS, not available to windows (assuming no bitlocker to fubar).

Does this occur for many other makes?

https://www.dell.com/support/article/en-ie/sln305777/tpm-option-is-missing-in-the-system-bios-setup-latitude-precision-or-xps?lang=en

It looks like it's only the server hardware certification that will require it for now in that announcement ; the OS will still run without TPM 2 enabled..

Page: