The Register Home Page

* Posts by Philip Storry

347 publicly visible posts • joined 28 Nov 2007

Page:

Some Mullvad VPN customers tunnel for exit after co-founder donates millions to populist party

Philip Storry
FAIL

Re: Sad but not surprising

Or if they'd not spend their money supporting certain causes.

I'm blaming actions. That's probably the key difference here. Techbro is merely a general label I'm using, and somewhat generalising with.

When evaluating actions a techbro only doing tech stuff is the same as an immigrant working as a cleaner, or as a tenth generation native person in full time education. None of them are spending time and money supporting causes I think are awful, so they are not who I'm talking about.

The causes I think of as awful tend to be aimed at people who have traits that are not actions, but ones that they cannot change. For example certain racial or cultural traits that they had no choice over, and even their children - born into a country as citizens of it - will partly or fully retain, through no choice of their own.

Targeting people for things that they have no control over is quite different to what I'm doing. Offended techbros can remove themselves from the set by not doing the things I've lambasted.

The only acceptable use of "othering" is one based on actions that people had agency over. Anything else is bigotry.

Thanks for giving me the opportunity to clarify that.

Philip Storry
Mushroom

Re: Sad but not surprising

(I'm assuming you're the same AC as replied to elsewhere)

The Chat Control debate is indeed a poor set of events. No argument there.

But this happens in governments.

Our own government has had plenty of instances of trying to ban things. The entire age verification debacle, for example.

The EU isn't perfect. But it's much easier to change it when you're a member than to do so from the outside. The USA and China might have a chance of forcing change from outside, but we don't.

Which makes this argument something of a straw man.

Philip Storry
Mushroom

Re: Sad but not surprising

I shouldn't reply to anonymous cowards, but I'm making a rare exception here.

"Brexit only really promised the ability to take independent decisions." - No it didn't. This is an outright lie. Proponents of Brexit promised we'd be richer, happier, be rule makers and have a more prominent place in the world. All of those things were falsehoods. You have started your reply with an outright lie designed to try to rewrite history.

You then state that "neither of the parties in government since then took advantage". This isn't true a second lie. The Conservative government did so, with the Environment Act 2021. You may remember that as the act which reduced a number of environmental standards below EU requirements, including water quality. Allowing already profitable water companies to dump raw sewage into rivers and onto beaches in the pursuit of more profits. Strangely, this law did not get a warm welcome from the public, and is still controversial. It is a very real "Brexit Benefit", and you should own it and be proud of it. Good luck with that.

Those environmental regulations are excellent demonstration of the underlying issue. It turns out when we actually ask people what EU regulations they want to move away from, there are very few (if any). Go ask farmers or fisheries if they favour moving away from EU regulations. Ask manufacturing if they think ignoring CE mark requirements is a good idea. Ask small businesses if changing our standards and definitions would help reduce the already increased red tape and import duties that they face. Almost all answers would be negative. Businesses want alignment with the EU because it makes things simpler and cheaper for them. The UK market is not quite large enough to be attractive on its own.

We haven't used the ability to change the laws because it turns out that it's not a good idea to do so. In most cases it harms our businesses. This means that most of the "independent decisions" you're referring to end up in one of three buckets: 1. Something that was never a decision for the EU anyway; 2. Something important that will hurt if we diverge; 3. Can't hurt because (for us) it's trivial.

So in reality we're discussing options 2 and 3. The decisions we don't want to take because they'll hurt, so we delay or defer them. All the important decisions are automatically kicked into the long grass, out of sight and our of mind. Which leaves us with the trivial decisions.

What we have now is the freedom to bikeshed. To make decisions about the unimportant things. Because everything else was either not the EU's purview, or is something we need to be aligned on unless we want to hurt ourselves.

And this is before we even point out that the entire discussion is based on a falsehood anyway - that the EU's decisions weren't our decisions. As an EU member, we were involved in creating those rules. We were rule makers - just not solo rule makers. This entire discussion is based on a fundamental lie from the anti-European movement.

Frankly, you should be ashamed of the multi-layered dishonesty you're repeating.

Fortunately, 50% would vote to rejoin compared to the 38% that voted to leave. Your lies have been exposed by the reality of Brexit, and people are moving away from them. It's no longer a question of if we'll apply to rejoin, but a question of when, and if the EU will take us back.

Philip Storry

Re: Sad but not surprising

Yeah, I may have worded it a bit badly by referring to parties rather than positions. I think I used parties because that's who gets the money, but perhaps position or platform would be a better choice of word?

In the same 25 year period the right wing has learned to use populism. They will often promise things that people want and which are centrist or even left-wing positions, but then once in power they won't deliver. "Wouldn't you know it, but circumstances have changed" and now they're just going to have to do only the tax cuts and socialism for the wealthy, and they can't afford the other things that they promised.

I'm loathe to bring up the populism of Brexit, but it's a very pertinent example because it delivered not one jot of what it popularly promised. To anyone. Especially those that funded it and campaigned for it, who mostly wanted a "Singapore upon Thames" but then found that the public definitely didn't want that, they wanted what they'd been promised... and they'd never intended to deliver those promises. it's a perfect example of how populism fails to deliver.

Reform have a somewhat populist platform in that they'll say whatever they think people want to hear about things like building houses or funding healthcare. But they only ever had one draft law - deregulation of cryptocurrency. What a strange coincidence, given their leader's recently revealed funding! You'd think that they'd at least have some draft legislation on immigration issues or the NHS, but no... so it's not difficult to see what their actual priorities are. Or what they were planning on doing if they get into power.

Populism doesn't respect traditional political boundaries or delineations. It's like an LLM - it will tell you what you want to hear, because that's what it was designed to do. Correctness or ability to deliver simply doesn't matter to it.

I'd agree that unrealistic and naïve are good terms. I suspect we're going to end up arguing towards agreement simply because I used a poor bit of wording. ;-)

Philip Storry
Mushroom

Sad but not surprising

There seems to be a sickness in techbros.

During the dotcom boom, the rich tech folk seemed to have a social conscience, looking to donate into poorer communities. They mostly stayed out of politics, or at least kept such things private. Yes, One Laptop Per Child turned out to be somewhat misguided, but the thinking behind it is utterly opposite to how the techbros now seem to think.

Over 25 years there seems to have been a shift to the right. And an insidious one, at that. In being determined to keep their money, they've shacked up with the kind of political scum that mixes low taxes with "someone else is to blame, let's treat them really badly so we feel better about not fixing the problem we're blaming them for".

And before folks chip in to say that their viewpoints are correct, please remember that nobody in that "someone else" group is likely to have caused the actual problems we're facing. They didn't move manufacturing overseas, close all the branches on the high street or in the malls, or dump pollution over the land and into the rivers, offshore jobs, or anything else. They were never in a position to do that.

Here's a fun game to play - pick a problem in your community or country, and now name the illegal immigrant that caused it. The closest you'll get to an accurate answer is "Elon Musk", but he's usually celebrated by the broken people that are techbros.

These people could be fixing real problems. If they don't want to pay their taxes, they could donate to charities to fix the problem. Between them they could probably end childhood poverty, eradicate homelessness, and so much more.

But instead here we are. Blaming "the others".

What the hell went wrong? Why are tech bros so easily fooled by this crap? And, most importantly, is there any way to fix these broken people?

How do you solve a problem like Capita?

Philip Storry
Flame

Nope

That doesn't solve the problem.

The problem at the moment is that Capita are an external company who have no commitment to the services they work on, and whose incentives are to extract the maximum amount of money from their customer.

If we remove IR35 then all we get is more contractors and/or consultants. Who will have no commitment to the service that they work on, and whose incentives are to extract the maximum amount of money from their customer.

Both of these lead to the same underlying issue, which is that the government department has chosen to not employ its expertise directly or to develop expertise of its own. Without that expertise all it can do is throw taxpayer's money at the problem and hope.

Under your plan we replace firms like Capita with an army of highly paid contractors and consultants, all just working for the billable hours and able to take their expertise away at any point in time.

All you are doing with an IR35 reform is altering the shape of the problem slightly, by distributing it across many more contracts. It won't be better, and would probably be worse. At least if Capita's expert on $technology leaves they're still on the hook to get another expert, under "repeal IR35" that's not even the case, the department suddenly has all those overheads.

The real solution is to do it in house with their own employees, who they can try to encourage and enthuse, and perhaps even instil with a sense of pride in their service.

Poor effort. 2/10, try harder next time.

UK Cabinet Office hiring AI and innovation 'influencer' to build 'AI-first culture' in civil service

Philip Storry
Mushroom

The very definition of Government Waste

I've spent most of my adult life hearing those to the right of my politics tell me that the government is full of waste, especially in the form of jobs that don't need to exist.

For the most part I've been polite and held my tongue as I disagreed.

But this job doesn't need to exist. It's an absolute waste of money.

And yet there's a certain type of nutjob/grifter on the right that will think it does need to exist. That will take this as a good sign.

I'm taking solace in the hope that, for the most part, we can all come together and agree that this job really shouldn't be. It's a sign of the mad times we live in.

(Also, if AI is so damned great, why can't it do this job? Or would it cost more in tokens than employing someone?)

We've only gone and done it: Changed what you're used to

Philip Storry
Pint

Nice work folks

I'm liking it. And I'm especially liking that you kept RSS (you obviously know your audience).

But most of all I'm liking that this means El Reg has less likelihood of being killed by ancient technology debts, so is more likely to be here in the future.

Good work all round. Thanks!

Philip Storry
Thumb Up

I had that problem too, but it seems to be fixed now - I just opened a brand new article and there was a "0 comments" link that worked.

Hopefully it was just a brief blip!

PowerPoint punishment sent users into an infinite loop after lunch

Philip Storry
Thumb Up

Remember the BSOD screensaver?

I remember when the Blue Screen of Death screensaver first came out - long before Sysinternals became a Microsoft property.

We had a brand new server - over twenty grand's worth of equipment, destined to replace an existing SQL Server machine. When live, it would be the heart of the business and worth millions per year. So it absolutely, positively had to work.

It was being built by the boss's desk, before going into the server room. Load testing, checking networking configs, benchmarking storage, all of that kind of stuff.

Naturally, whilst the boss was out at lunch, we put the BSOD screensaver on it with a very long wait period. That afternoon, after 50 minutes of inactivity, the screensaver kicked in. The boss nearly had a heart attack as, out of the corner of his eye, this critical machine suddenly blue screened.

We did our best not to laugh too much. He was, when he discovered what had happened, distinctly unimpressed. But fortunately he did see the funny side of it eventually.

Google Chrome lacks protection against one of the most basic and common ways to track users online

Philip Storry
Mushroom

Nope

"Google didn't build Chrome because they care about users. They don't. They built Chrome to track users"

Nope.

Google built Chrome for much the same reason that Apple built Safari - because Microsoft were monopolistic gits.

Back in the days of the browser wars, Microsoft pushed IE forward. They even did some good work creating things like XmlHttpRequest, which allowed for dynamic loading of data without having to reload the whole page - basically the groundwork for modern interactive web page technologies.

But Microsoft also bundled Internet Explorer with Windows, and paid Apple to bundle IE on Macs. Yes, there was a time when the recommended and default browser for a Mac was Microsoft's Internet Explorer!

This had the desired effect for Microsoft of killing their main browser competitor, Netscape. Microsoft then stopped developing Internet Explorer a little while after they'd effectively neutralised Netscape.

Internet Explorer 6 was released in 2001, and Microsoft left it to wallow until 2006 when they released Internet Explorer 7 - five whole years!

Apple moved first, as they realised that Microsoft's interest in browsers was fading - so they forked KDE's KHTML in 2003 and created Safari. That became the default browser on Apple's platforms, but on Windows we were still stuck with IE, Opera, or builds of Firefox so early that it wasn't actually called Firefox yet. (It was originally called Phoenix then Firebird, both names ran into trademark troubles.)

Five years later, after Microsoft had finally released IE 7 and were talking about a possible IE8, Google got sick and tired of having to work around the IE Trident engine's inadequacies, forked WebKit/KHTML and created Chrome. Not because they wanted to track people, but simply because - like Apple - they realised that relying on Microsoft to reliably ship a stable, standards compliant browser was a mug's game.

That doesn't mean Chrome isn't slow to block fingerprinting/tracking technologies because of internal politics within Google. That may very well be the case, but I have no insight into that.

But let's not rewrite history here - Chrome and Safari exist because Microsoft were monopolistic gits, who stopped development of IE once they'd achieved their monopolistic goals.

Amazon put a filesystem on S3; I showed up with a test suite and bad intentions

Philip Storry
Coat

S3 is not a filesystem

But enough people were trying to use it as one that we stopped trying to hold back the tide.

Come on in, the water's... freezing. It's all those Glaciers nearby...

ServiceNow allegedly says salesman 'overachieved' and is not entitled to comp

Philip Storry
Pint

Re: ServiceNow have achieved the impossible

Thank you!

Philip Storry
Coat

ServiceNow have achieved the impossible

They have made me feel sympathy for someone in sales.

I may even be taking his side.

And I suspect I'm not alone.

What evil is this, that it can move us so unnaturally? Shall we see it vanquished, or will we be forced to ally with salespeople evermore? Ye gods, I hope not... we live in such strange and desperate times!

Gartner suggests Friday afternoon Copilot ban because tired users may be too lazy to check its mistakes

Philip Storry
FAIL

Hardly a new problem

LLMs are simply a new layer on top of an old problem here.

I recall looking at a number of organisational wide search devices back in the mid 2000s, including Google's on-premises search device.

In the end we didn't go ahead with any of them, because we weren't convinced that they could appropriately respect permissions in our document management system or on our Windows shares.

Both document stores presented a similar problem - the need to expand group memberships to ensure that security is preserved. Some solutions just didn't do it at all, some did it too well and ended up launching an internal denial of service attack on our Active Directory servers with each search. There was simply no decent middle ground that we could find that was worth the costs, so the project was dropped.

I suppose that the major issue here is that CoPilot's in a bind due to its nature.

All the search engine needed to do was take its list of results, take the logged in identity, and for each result query the directory and ensure that the user has access to it. If not, drop it from the results set and continue. This can be done relatively quickly, assuming the groups aren't too complicated. The system is often only returning pages of 10 results at a time so it simply needs to choose a slightly larger page size internally for results, on the assumption some will be dropped. Not too difficult, overall.

CoPilot, on the other hand, has to generate a response - burning through processing time - and then check each source it references in the response for security purposes. And if it has to discard that source, it must then generate a new response from that point onwards, hoping it doesn't reference something else that's not available for that person. It's easy to see how this could result in very long delays.

You could try to provide a list of documents the person has access to up front, but that's basically going to mean feeding millions of tokens to the model for each ad-hoc query, which is also expensive and time consuming.

LLMs simply aren't a good fit for any solution that requires granular security. I'm not going to say that this is an unsolvable problem, but I do suspect all the solutions are going to be both leaky and expensive. Hopefully someone much smarter than me can find a solution.

Also, those long delays as it rewrites its answers - could you use that as an inferred timing attack? Ask CoPilot "Will the QA department survive the upcoming restructure", and watch how long it takes to reply. If it takes a short while then you're fine, but if it's delayed because it's constantly having to discard results and rewrite then it's revealing the presence of an upcoming restructure, even if it's not telling you directly...

RSS dulls the pain of the modern web

Philip Storry
Pint

Thanks to El Reg for supporting RSS!

Thanks to El Reg for providing RSS feeds, it's how I read the site. I can skip the articles I don't want, and jump to the ones I do.

Like so many others I used Google Reader, but eventually landed on Newsblur. Yes, I have to pay a subscription, but I now have one place to find all my feeds, search them, and see what I've read/not read. Very handy.

I'm not sure that the internet is usable without RSS, so I'm very happy when I see a feed on a site.

Microsoft teases ‘reimagined SharePoint experience’ with added AI

Philip Storry
Trollface

Re: Reimagining

Your comment confuses me.

It implies that SharePoint has worked.

Do we have evidence for that assertion?

Philip Storry
Pint

Re: Valuable path length ...

I agree, and I partly covered that in another reply. But that was about NTFS and file lengths, and in replying to you I'd like to look at the other side...

Microsoft made a mistake when they tried to ape filenames in their URIs.

Take a look at Google Drive - it doesn't care what you called your file. Be it Doc, Sheet, or a PDF you uploaded, it gets a link that's just an alphanumerical string. Drive is effectively an Object Store, but the interface is good enough that nobody ever notices.

That gives Google a huge amount of flexibility.

OneDrive came out of Microsoft's Groove acquisition, and at that time Microsoft were still very much in their Monopolist Phase. So it was very natural that they'd try to attempt tight integration with the OS, and go with aping a filesystem on a webserver instead of using an object store. Personally I think that with the benefit of hindsight it was the wrong decision. It's too limiting on both ends of the solution - client and server.

They should have gone for an object store on the server, and a client that does local retrieval/sync/caching/searching of those objects. The client should also have an API so that local apps can work with it natively if they want to. But the danger there is that Microsoft would have to open up that API at some point, plus building this is a lot more engineering work for them. So they went for the fast option, despite it being complex, fragile and limiting.

Still, hindsight, eh?

Philip Storry
Thumb Up

Re: Valuable path length ...

Oh yeah, there's definitely potential for an issue on SharePoint's side.

Technically NTFS supports paths up to ~32Kb in size. You have to enable a registry entry on Windows to use that in applications, and it will break a lot of older apps that assume a 260 character buffer for path names.

For us sysadmins it's not unusual to see a fileserver with deep paths beyond the usual 260 limit because the share itself was created in a subdirectory on the disk. Also Apple clients or Linux clients care not for your pathetic legacy Windows 260 character limit, and will happily spaff files that go way past that limit. And NTFS will happily store them. Windows Explorer, however, will lose its tiny little mind trying to handle them unless you use various tricks.

I think that the URI limit for OneDrive is reputed to be around 400 characters, but it's the kind of thing that can vary depending on the action being requested.

Frankly, as most people have "C:\Users\John.Smith\OneDrive - Company Name\" placed before any file that they try to upload, they're much more likely to hit the 260 character limit issue than the OneDrive issue. Hence they blame the filesystem. Which is a shame, as OneDrive/SharePoint are much more deserving of ire than NTFS is...

Philip Storry
Mushroom

Re: Valuable path length ...

NTFS is a decent filesystem, and I feel I should come to its defence.

Sure, it's not the new CoW hotness. But that doesn't make it a bad filesystem, surely?

NTFS has outlasted every one of its peers except for XFS and variants of FAT - which is terrible, but just won't bloody die because it's so simple that even ChatGPT can understand it.

Comparing it with XFS, it comes out favourably. Both are decent filesystems, fast, reliable, with a good feature set. Not identical, so most people are going to lean towards one or the other, but they're closer than you'd think. I'd compare NTFS to FAT, but that's like comparing a modern car to throwing yourself off a cliff - both can get you to a destination, but one of them has safety issues.

The main issues with NTFS are what's above it. Windows' IFS stack means that NTFS often has lots of cruft intercepting file operations before it's even handling them; the various Windows file protection systems, an antivirus shim, OneDrive, and more. If you create a second non-OS partition and format it NTFS, you'll find it performs very well.

Microsoft have tried to replace it with ReFS, and it hasn't really taken. I built a fileserver two years ago and gave thought to using ReFS, but then realised that I could be forced by my Corporate Overlords to switch AV or backup solutions at the drop of a hat. Did I really want to risk incompatibilities with ReFS? Especially when NTFS was dong just fine, thank you. So NTFS it was.

For over 30 years NTFS has been one of the safest, most reliable and performant filesystems in the industry. It should get more respect for that.

UK to demand social platforms take down abusive intimate images within 48 hours

Philip Storry
Joke

You missed a bit...

X's statement is clearly unfairly truncated. I believe that the original stated:

"We remain committed to making X a safe platform for everyone and continue to have zero tolerance for any forms of child sexual exploitation, non-consensual nudity, and unwanted sexual content. Unless Elon thinks it's cool, in which case our position is obviously: **** you, we'll do whatever Elon wants us to."

It's shocking to see such a negative portrayal of the poor, honest, trustworthy, and reliable X. It's not like they've ever done anything to deserve it!

If Microsoft made a car... what would it be?

Philip Storry
Mushroom

It's a fleet, not one car

It depends on which product we're talking about.

Windows has very solid underpinnings. It's the stuff on top of it that's the problem. In that regard it's like a very solid supermini that's got sporting pretensions. Remember when the original hot hatches came out, and everyone had to have one, so we got a "sporty" Austin Maestro? Which wasn't actually sporty because they'd fundamentally misunderstood the brief. Well it's like that, except with a much better set of running gear under it.

I'm guessing it'd be like having Pagani try to make a hot hatch version of a Honda Jazz, except that their budget for it was "three quid, all the coffee you can drink, and whatever you can find in your factory". Oh, and they weren't allowed to touch the engine or other running gear. Everything is trying to be wild and crazy and modern, but there's no good REASON for it to be like that. And whilst a Zonda's nuttiness is compensated for by the sheer thrill of driving the thing, this still moves like a Honda Jazz, making its insanity unforgivable.

Office, meanwhile, has almost the opposite problem. Its underpinnings are a rotten, ancient, godawful curse - but they're trying to make a functional and attractive modern vehicle on top of that. The Microsoft Office car is probably more like someone trying to make a modern Crossover on the running gear of an Morris Oxford Series III, better known as the Hindustan Ambassador. The senior management love the idea because they get to re-use all this existing technology, but it's simply not capable of doing the actual job properly. Everyone using it knows this, but it's still a ubiquitous car in some places for historical reasons.

Everyone will have their own opinions of what other products like SQL Server or SharePoint are.

Microsoft isn't one car. They're a fleet of cars, and your management is determined that all Company Cars will be selected from that fleet. Which kinda sucks, as it means that the low level engineer gets a good car, and the high level manager gets a clown car that falls apart every time it stops moving. (I think we're all agreed that's SharePoint, right?)

Edinburgh councillors pull the plug on 'green' AI datacenter

Philip Storry
FAIL

It was vibe planned anyway

Apparently they didn't even approach the local water company about how they'd get water.

Lucky that datacenters don't need much water, right? It's just rows and rows of computers, which hate water. No need for it at all.

Pardon?

They actually need lots of water? For the cooling systems?

Oh.

That's that plan screwed then...

AWS says you're on your own if media codec patent owners come knocking

Philip Storry
Happy

Re: Excerpt from the Annual Meeting of Evil (Self-Described) Geniuses

No problems. Thanks for the question!

It took a bit of editing to reply, but was worthwhile so as to make it pertinent. There's a lot more to discuss - patents vs copyright, who benefits from patents, and market benefits. But they're topics for some other day... ;-)

Philip Storry

Re: Excerpt from the Annual Meeting of Evil (Self-Described) Geniuses

No. I'm not completely against the idea of software patents, but existing patent terms are a bad fit for software. I don't think that they are a fair balance of protection for labour versus effect on the market.

A patent is a government granted monopoly. We allow the time-limited protection of that monopoly in order to encourage innovation. But software patents have the opposite effect, locking up techniques and advances for far too long.

The term for a patent is 20 years, which is an eternity in software. The 20 year period is OK for physical inventions where someone may need acquire funding, to set up manufacturing, distribution and so forth. In the physical world a patent provides protection against someone else, probably a large company or a rich person, gazumping you by repurposing their existing funding/manufacturing/distribution.

In the digital world the barriers to entry are much, much lower. DOOM was all around the world in the 1990s long before physical versions were even being printed, let alone heading towards the shops. And that's in the pre-internet digital landscape. You can now write software now and have it available anywhere on the planet within minutes.

The manufacturing and distribution stages are at least an order of magnitude, probably several orders of magnitude, easier for digital goods (including software).

I think in the current climate a term of 4-6 years would be OK. I might even be persuaded to go as high as 10 years. But 20 years is simply ridiculous. It holds the market back too much.

And this is before we even start talking about overly broad patents, and how the patent assessors are underfunded, overworked, and ill-trained to see what is obvious vs innovative.

Philip Storry
Mushroom

Excerpt from the Annual Meeting of Evil (Self-Described) Geniuses

From the bowels of an intellectual hellscape that really shouldn't exist, we present: Software Patents!

Yes, that's right, we've managed to convince politicians and courts that mathematics and logic should be be patentable.

And boy, are we going to abuse this! It's very much a long-term play, but we think we could potentially hold back human progress by 20 years. And that's not a fixed term of 20 years, that's a sliding window we can keep moving into the future thanks to the magic of generating new patents or updating old ones!

Now, on to our next item on the agenda - charging people for air.

Whilst we've made great strides in getting people to pay for water, air remains a more difficult challenge...

Europe shrugs off tariffs, plots to end tech reliance on US

Philip Storry
Joke

Nice work.

Now here's your coat, go away and reflect on what you did here... ;-)

Philip Storry
Thumb Up

I believe that if we're to create any kind of Sovereign Cloud it will have to be through a government-owned company.

Partly so that profits can be re-invested to assist in growth and service development, but also to avoid loss of sovereignty through sale.

The US Cloud Act means that any US-owned company is incapable of providing the required security. As does an act in China. And no government wants to be seen to stand in the way of the Almighty Market, lest the City take its revenge.

So we should prevent it from ever being a problem by making it a government-owned but arms-length and not-for-profit company.

Latest Vivaldi release surfs a wave of anti-AI sentiment

Philip Storry

Re: Wait, What?

You're quite correct.

I had a brainfart. I simply thought "It's an awful idea, and the company name starts with P" and my brain autofilled the rest. Incorrectly.

Thanks for the correction!

Philip Storry
Thumb Up

I'm enjoying Vivaldi

I switched to Vivaldi last October, and I'm happy enough to have given them some money for it.

If anything, it has too many features. I'm occasionally stumbling over a new one and finding myself say "Well that's quite nice"... their focus is definitely more on power user web browsing. A good example being not just having workspaces, but also rules so that certain links always open in certain workspaces. I don't think I need that, but there's a chance...

My main reason for switching was just to see if I could survive without Chrome. Over the years I've used Netscape, Opera, Firefox (back when it was Pheonix and then briefly Firebird) before settling on Chrome. There was nothing wrong with Chrome as a product. Then Palantir said that they'd happily buy Chrome if Google were forced to sell it, and completely coincidentally I thought I should see how much friction there was in switching browsers...

Here I am, over three months later, and I'm still using Vivaldi. Highly recommended. Give it a try.

Old Windows quirks help punch through new admin defenses

Philip Storry
Windows

Re: DOS? There's still DOS in windows?

There's no DOS code in Windows as far as I know.

But there are plenty of applications out there which still use old DOS virtual device files, so Windows has to present them or risk hundreds of thousands of apps breaking.

These virtual device files are things like COM1-COM9, LPT1-LPT9, CON, AUX, NUL.

That last one is probably the killer. These virtual device files exist in every folder in DOS, so a common way of testing a path exists was to look for <pathname>\NUL. If that file doesn't exist, then the folder path doesn't either. You may have seen this is many a batch file back in the day, but somehow the exact same test made it into the core utility libraries of many, many programmers. And therefore many, many companies.

Killing the NUL virtual device file would probably break a huge amount of software.

The "DOS device object directory" referred to in the article is the system that creates and manages the mappings that allow this compatibility.

I hope that clarifies everything, feel free to ask if you have further questions.

Succession: Linux kernel community gets continuity plan for post-Linus era

Philip Storry
Coat

So negative...

Everyone's assuming that this would be because something horrible happens to Linus.

But it might be something good that makes him stop working on Linux.

For example: what if he gets an offer to go and work on something big and professional, like GNU?

(I'll get my coat.)

AWS flips switch on Euro cloud as customers fret about digital sovereignty

Philip Storry
Coat

Re: Performative hyperscaling

Surely all of Amazon's mime artists are busy manning the phones on their customer service desk?

Philip Storry
Mushroom

Performative hyperscaling

We have entered a brave new era - the era of performative hyperscaling!

This won't stop the US government from using the US CLOUD act to demand anything that it wants, for any reason. It cannot stop that.

But it can make it look like they're doing something about it.

Not anything effective, of course. The only effective change would be to move Amazon as a company to another country, so that they are free from the obligations of US law.

Still, as they say: "We must do something! This is something. Therefore we must do it."

It truly is a brave new world... (Same as the old world.)

Techie banned from client site for outage he didn’t cause

Philip Storry
Flame

This brings back bad memories

I don't recall ever being banned from a site, but I do remember a colleague of mine getting very close.

I was working as the head of the support & implementation team at a small company that did software development and consultancy. We had a client we'd recently migrated to a new mail system. They then reported a problem.

I was working on another project so I sent my colleague John* to fix it. (This was in the early 2000s before remote support was commonplace.) After some basic checks John was very confused by what he saw, called the office to confirm that the system had the wrong settings, and then fixed it.

A day later, the exact same issue. I considered sending someone else, but I figured I'd send John again as he now had some familiarity with the site. When he arrived they were unhappy, but he cracked on and found... the exact same issue. We spoke briefly on the phone, and confirmed through date/time stamps on the configuration that this had been changed, and that only certain admin accounts had access to change it. John fixed the issue, reported all of this to the client, then left.

The next day they had the exact same issue. The client was livid. They were also demanding we send someone "more competent" than John. I happened to have finished my other work so I went onsite to give a show of "seniority", in the hopes it would calm them.

Same issue - the configuration had been changed manually. Before leaving the site I asked if they had a CD burner. They did, so I created copies of the configuration and burnt them to two CDs - one for us to keep, one for the client. This was so that we could prove a change was definitely happening.

Whilst I'd been on site poor John had been back at the office in a rather awkward meeting with one of our Directors about his performance. This was John's first job, and he'd not long been with the company, so this was not a fun experience for him. He was very worried due to all of this, fearing he'd have a career outlived by most mayflies. I reassured him and made sure to speak to the director the next day, making it clear I trusted John completely and didn't trust the client.

Two days later, the client has yet another failure. I went out to the client, as they were still unhappy with John. It was the exact same configuration change. But this time I invited their IT manager to compare the backup that they had with the current configuration, and showed the date/time stamps on the current configuration. I made it clear that someone with admin access to their environment was making this change and sabotaging their system. With no other explanation available, he accepted that this. I fixed the problem, took another backup for evidence in the future, and went home.

A few days later our director spoke to me about this. After some internal investigation the client found that one of their technicians didn't like the new system, and had been sabotaging it in the hopes that they'd roll back to the old one.

I made sure that John got an apology from the director, but was less than happy that they'd not contacted myself or John to apologise.

When the same client had some deployment work a few weeks later, I allocated the visit to John. He didn't want to go, but I told him that I expected them to apologise to him in person, and to be more professional with him from now on. If that didn't happen, I'd never send him there again and would tell our management that this client wasn't worth the hassle and we should not renew their contract when it expired. To the client's credit, they apologised to him and treated him well.

Some clients simply aren't worth the hassle that they bring you. Being banned or unwelcome at a site is one of the (many) danger signs.

Looking back on it, I'm mostly happy with how it went. I should have asked John to take a backup after his second visit, but didn't know that they had a CD burner at that point. We did change our standard operating procedures after that, making sure everyone took spare CD-Rs onsite and offered to create a backup of configs before leaving.

--------

* Name changed, of course.

Earlier Horizon rollout could widen net for quashed Post Office convictions

Philip Storry
Thumb Up

Re: Anecdotal evidence

ICL were my first employer. I was later very shocked to find out that other companies did not work the same way.

I have many stories which not only prominently feature their unusual management practices, but would be impossible without them.

So yes, it's quite possible that there was no beta or pilot.

But the one thing I'd like to stress is that a pilot would probably be billable. And being billable made almost anything possible within ICL.

Therefore I suspect the chances of a pilot were high.

When I reflect on my time at ICL I come to the realisation that baffling, trying circumstances were inevitable. The only difference between billable and non-billable bafflement was that Management would acknowledge, even celebrate, the billable bafflement. Non-billable bafflement was ignored or actively denied, despite its obviously plentiful portions.

Philip Storry
Holmes

Anecdotal evidence

Software doesn't just magically appear. There are betas, pilots, and so forth.

I worked at ICL from 1995 to 1998. I was at the FCY03 building in Footscray, Sidcup. It was a three floor building with many outsourced support helpdesks in it. The flagship client was Microsoft, but there were many others - Escom, Seagate, Compaq, Polaroid, Motorola, Apple, just to name a few. (Actually if I recall correctly Apple were in FCY02, but many of their systems were hosted in FCY03 as 02 was a tiny outhouse of a building by comparison.)

I recall that in 1998 a small helpdesk for the Post Office was set up. It was on the ground floor, near the front of the building, at least to start with. I think it was intended to be around three to six people, quite small by our normal standards.

I'm sure I was told that it would expand as we were going to be supporting a new system for post office branches. I don't recall it ever arriving whilst I was there, and I think that when I left ICL that helpdesk was mostly supporting the Post Office's Post Code Database software. But there was a constant rumour that this tiny helpdesk would expand "soon" as they were just about to start rolling out this new system to post offices.

Aaaaaany day now. Any day. No, really, it could be any day now. Honest.

The reason this sticks in my mind is that there wasn't much more space on the ground floor. If they were going to grow that team, they'd probably have to move it to another floor. Maybe even another building. Which would mean not just repatching network ports but possibly also running new connections between floors or buildings, and all the hassle that can entail.

Around mid 1998 this ceased to be my concern as I moved on to pastures new.

But it wouldn't surprise me if there were some earlier cases than 1999. My recollection is that they were definitely saying they'd be supporting it. Any day now... so there were wheels moving in 1998, and someone may well have been using it in a pilot somewhere...

AMD clocks in with higher CPU speeds, leaves architecture untouched

Philip Storry
WTF?

Incremental improvement is good

The same Zen 5 cores?

Good. I'm totally fine with that, because the Zen 5 cores are excellent.

"We took our excellent thing and made it slightly better" is pretty much exactly what I want from hardware these days.

(Cramming AI in there? That's just the market these days. Even if I can't forgive it, the ceaseless waves of AI bullshit leave me with too little energy left to condemn it.)

Doom hits KiCad as PCB traces become demons and doors

Philip Storry
Alien

Maybe DOOM is an inevitable universal constant?

I have a growing suspicion that the only reason our universe exists is that some entity wanted to know just how many things DOOM could run on. So it span up this universe, just to find out.

The possibility that we only exist to explore the DOOM runtime space is both terrifying and yet strangely comforting, if only because it makes a lot more sense than many of the other reasons offered for our existence.

Who gets a Mac at work? Here's how companies decide

Philip Storry
Meh

Another point of anecdata

My employer was "PC first, Mac as an Exception", but is now "PC Only".

The reason for the change was a restructuring in which they let go of half the IT department. The cost of that is that we simply can't afford to manage two platforms. Packaging & deploying software on one platform is a pain, doing it across two is much more so. And that's before we get to the additional expense of the tooling used for that. Servicing just one platform is always going to be cheaper and easier, and for us Windows is the platform that all departments can use - some departments have software which can't run (or run well) on Macs, so it was an easy choice.

To put it simply, going PC only made things much cheaper.

Our parent company deploys Macs, but they're much larger so can more easily handle the costs of that.

One observation I'd share is that on the costs in terms of managing the machines (not purchasing costs) is that Macs are oriented towards being managed by a user, PCs are oriented towards being managed by either the user or an organisation. GPOs aren't perfect, but you can do a lot with them. You often hit restrictions on Macs where Apple will simply say "we don't allow automating that for security reasons", and have to do things manually. And that's the right stance for individuals, but not for a fleet of hundreds or thousands of machines. I'm sure Apple are improving on that, but there's definitely a difference in mindsets when it comes to machine management.

Ultimately there's no single answer. It will be different for all companies/organisations.

Texas senators cry foul over Smithsonian's pricey Space Shuttle shuffle

Philip Storry
Mushroom

Risks?

As ever the Republican Senators are fixated on costs, without seeking to understand the risks.

I assume that the private quotes they got include a damages clause for this irreplaceable national artefact? Right?

Yeah, I thought as much.

These schmucks are only concerned about a cheap success, and unwilling to fund a proper job that reduces the risks.

Farewell Discovery, it was nice knowing you whilst you were still in one piece.

To digital natives, Microsoft's IT stack makes Google's look like a model of sanity

Philip Storry
Meh

His mistake is in thinking it was designed...

None of this was designed at a larger scale. It's a mess because the industry has been messy.

Taking SharePoint as an example, it was built to provide a web-based Groupware system.

Microsoft's first attempt at Groupware was Exchange Public Folders, which were pretty bloody awful yet somehow still exists today. Meanwhile the web was happening, everyone wanted an Intranet, and Microsoft had no product for this. Well - they had IIS as a server, they had Office putting out HTML, but unless you wanted to upload your files via FTP or maybe tinker with WebDAV (remember that?), you were out of luck in Microsoft's portfolio.

Meanwhile, Lotus Notes has gained a webserver and can publish your applications to your intranet without much work at all. Yes, they're ugly as hell, but this is 1998 and most websites are ugly as hell - what terrifies Microsoft is that you can convert Notes applications to web applications with a few simple changes to your servers.

So SharePoint was born. It was a supermarket sweep trolley dash of technologies, taken from various Microsoft teams - Office, Development Tools, Server. It was such a rush job that a version 2 came out fairly quickly afterwards that broke compatibility with the first version.

SharePoint was never designed to scale up, or to be easy to integrate. It had a reputation as being a big, heavy, awkward product that nobody loved, but that fitted with company's IT strategy so was used anyway.

The fact that we're still using it is mildly shocking. SharePoint should have died years ago. It's one of the least popular offerings from Microsoft - for all their audiences. Developers, administrators, users - they tolerate SharePoint, knowing that better solutions are available but that this is what the IT strategy says we have to use.

The real surprise is that, having bought Groove, they then decided to integrate it with SharePoint and later use the Groove sync client to create OneDrive. Again, that wasn't part of any long term plan. It just happened. Microsoft needed personal storage, and they rummaged around in their product bag to see what they could cobble together quickly.

Give it twenty years, people will be saying the same thing about Google's platform. Their big advantage currently is that they offer a lot less, so there's less to integrate. That can't last...

EU starting registration of fingerprints and faces for short-stay foreigners

Philip Storry
Unhappy

Re: Another brexit benefit

And we can look forward to the Quitlings complaining about this.

Because Sovereignty is something that only the UK should have. And any time another country (or grouping of countries) exercises it in a way that annoys them, they're happy to be hypocrites.

If we had such a thing as a "self-awareness scanner" we could use their headlines & tweets to calibrate it to zero. ;-)

Mexit, not Brexit, is the new priority for the UK

Philip Storry

The elephant in the room is Brexit

This is the kind of project that would be much better done with the EU. If we're serious about doing it, then having the resources and talent of 27 other countries is going to make it much easier to be successful.

There will of course be those who will say no to that. They will trot out the usual "the EU can't do this, it'll be a waste of money". But those same people are almost certainly already here saying the same thing about our own government. So if we're going to do this, then we have to simply smile politely and nod at them, then ignore the buggers and go and do it.

It would be much simpler if we were still in the EU. We could point at GDS and say "we already have a model for doing this kind of thing, why not reuse that?"

But now we're out we'll have to foot the entire cost ourselves. At a time when we have a hole in our budget.

The key to remember is that the goal is that much-misunderstood word "sovereignty". In that regard having a close partner from the outside is a boon for the EU, as it helps remind them ensure that country's sovereignty is a priority, rather than the EU's needs. The EU needs to avoid the US CLOUD Act, and so do we. Our needs and goals are aligned here.

On the technical side, start with cloud infrastructure by creating standards for blob storage, then block storage & hypervisor infrastructure. At the same time start work on client software, investing in LibreOffice and similar tools. Make sure that everything is publicly, openly specified. Work on getting federated systems that allow for choice and resilience. Aim to finance local bit barns by getting sensitive government workloads moved into them, as well as opening them up for other customers.

This isn't impossible. It's actually quite possible, just very expensive. So sharing the costs with our neighbours is the obvious thing to do. We have something to offer them, they have something to offer us. The real problem is Brexit, which has boiled enough brains that the mere idea of cooperating is somehow unacceptable. It shouldn't be.

Microsoft pops legacy Exchange public folders on the chopping block

Philip Storry
FAIL

A long-lived failure...

After the major SharePoint issues at the tail end of last week, I noticed that some coverage came with a brief explanation of what SharePoint is. Apparently many of the youth of today have been blessed with not having to use it. Lucky sods!

But at no point did anyone explain why SharePoint came to be. Which is how I ended up writing (and then throwing away) a lengthy reminisce about the origins of SharePoint and the death of the entire Groupware market.

Exchange Public Folders - and their almost complete failure to deliver what the market wanted - were central to the early part of that history.

I'm still amused that they live on. They're by far the longest-lived of Microsoft's failures, having debuted in 1996. That's almost 30 years of the world looking at Public Folders and collectively responding "Thanks, but no thanks"...

Sadly my insane ramblings were a bit too lengthy for use even at this august forum. Still it's quite the coincidence that I find myself thinking about them again within seven days.

Publishers cry foul over W3C crusade to rid web of third-party cookies

Philip Storry
Mushroom

Come on in, the water's fine

My employer is moving to a new security platform, and one of its recommendations was that we should disable 3rd party cookies in Chrome.

I created a suitable GPO, a test OU, and have applied it to myself. It's been almost two weeks, and everything still seems to work.

I really was expecting it to cause issues with something. My biggest fear was that authentication via Entra ID or Okta would fail on one of our systems. But everything seems to be fine so far!

I'm sure we'll have to put some exceptions in at some point, but I'm really impressed at how uneventful it's been.

So, with the greatest of respect to the publishers... get stuffed.

PUTTY.ORG nothing to do with PuTTY – and now it's spouting pandemic piffle

Philip Storry
Pint

This is good work

Thank you for this public service. And not linking to them is the cherry on top - absolutely the right choice.

FWIW I've used Bitvise's SSH Server software for SFTP purposes, and it was decent enough. If it were my choice I'd just fire up a Linux box and provide SFTP with that, but if you're a Windows shop and are afraid of Penguins then Bitvise have you covered.

(And being a Windows shop with little Linux experience seemed to be the common strand each time I've encountered it.)

My only reservation was the logging, which uses XML. Heavily attribute-laden XML. Each connection generated a stream of almost impenetrable XML, which would be logged into files rolled over at 64Mb. My personal opinion is that such a thing should never exist, and some kind of punishment should be meted out to whoever decided that was acceptable logging. But being an anti-vaxxer is probably too severe a punishment, so maybe the universe over-corrected here?

Nearly 3 out of 4 Oracle Java users say they've been audited in the past 3 years

Philip Storry
Go

Re: Free Libre Open Source Java

Yes.

Which I know isn't FOSS. But in my experience the process of "choosing" Oracle is the same regardless of whether the alternative is proprietary or FOSS.

The tactics used will be the same. The background of the people pushing Oracle will be the same. The overall process will be depressingly familiar for many of us.

In that regard it wouldn't have mattered whether the question was "Why not use FOSS?", "Why not use a full Microsoft stack?", or "Why not use AWS cloud services?". If the context is "instead of Oracle" then the answer I'd give wouldn't change.

Philip Storry
Flame

Re: Free Libre Open Source Java

I once heard it referred to as "The Arsehole Pipeline".

Oracle have a lot of sales staff who, it is hypothesised, having made money selling the stuff then go into consultancy to tell people how to use it better. (For a very low given value of better.)

They know Oracle better than other options, so constantly recommend it. And companies tend to think that at the price they're charging, they must know what they're talking about.

I've seen ex-Oracle people push Oracle as the database for solutions, stating no other database will possibly work, even when the solution vendor's own documentation said otherwise. After calling my colleagues liars, they were confronted with the documentation - at which point they then tried the "alternatives will have abysmal performance" line. It was noted that the maximum users would be ~1000 people, and you'd be unlucky to have more than 100 concurrent operations in that scenario, which SQL Server would handle just fine. Yet it was still a fight to get them to acknowledge that SQL Server could even work.

Given that the organisation already had SQL Server expertise, experience, and infrastructure it should have been the natural selection. Instead the ex-Oracle consultant made it a hellish fight.

And guess what? Yes, that's right, the solution ran just fine on SQL Server, no problems at all.

But if the IT department hadn't pushed back, then they'd have suddenly acquired a very expensive Oracle system.

I've heard the same from a number of people over the years. There's just a pipeline of the buggers somewhere, spewed out into the world to put the con in consulting...

Philip Storry
Devil

Re: Lube

Oh dear sweet summer child...

Oracle will charge you merely to produce the QUOTE for the lube. The lube itself... will not be cheap.

Page: