Posts by InsaneGeek

Toyota servers ran out of storage, crashed production at 14 plants in Japan

Re: Out of space

My guess is this, let's say you have snapshots running on your storage. A DBA anticipates a large load of new data coming in and decides to move and around and delete a bunch of existing data and rebuild indexes, a fairly normal and expected action. However that DBA doesn't understand things end to end not knowing that deleting in the database doesn't free the space in the array and all the new inbound data of the rebuilt indexes will consume even more space in the array causing it to fill the array up. You are now in a situation with a full array, in the middle of rebuilding database indexes, and you are on a type of array that deleting snapshots takes a long time.

We will find you and we will sue you, Twitter tells 4 mystery alleged data-scrapers

Re: Four IP Addresses

I can guarantee they already have that in place, what Internet company of any size doesn't already have it on? If they didn't, twitter would have been knocked offline many years ago.

Deplatforming hate forums doesn't work, British boffins warn

Re: If you feed the trolls ...

I disagree, most of them really are simply trolls. All one has to do is look at the numbers the Southern Poverty Law Center and ADL reports and there are a total of 3-6000 KKK members, the largest white supremacist rally attracted a total of 150 people. Compare that to the number of posts seen online. It's obvious that the people who actively participate is extremely small compared to the rest of the population.

'Private cloud server' Jira upgraded for wider teams, dragged into culture wars

Re: Pussy Ass Bitch

But that information WAS in the Twitter files... where else do you think they got it from?

Zuckerberg: Yes, Facebook kept Hunter Biden's laptop under wraps

Re: Why does adobob ignore facts?

The important part that is missing is that:

1) Biden's haven't been able to point anything that is untrue

2) Multiple reporters from Washington Post, to NY Times verified the veracity of the emails by contacting others in the email chain. One even verified that the "big guy" in the email chain was referring to Joe Biden.

Twitter unveils US midterm election integrity plans, upsets almost everyone

Re: world leaders and politicians should be held to a higher standard when tweeting

Maybe you are just in a bubble....

2016 Hillary Clinton and DNC intentionally rigged the primary against Bernie Sanders (proven true)

2020 Democrats drum up bountygate hoax used repeatedly by Biden (proven to be false accusation)

2020 DNC sue in Wisconsin to get Green party kicked off ballot claiming thousands of valid signatures are invalid because some of the forms had the old address of the candidate who moved to a new home in the middle of the signing drive.

2020 Dems accuse Kyle Rittenhouse of bringing gun across state line (gun proven to have never left Wisconsin)

2020 Dems intentionally twist and take Trumps words out of context claiming covid is a Dem hoax (politifact, factcheck, snopes, etc all verify Trump did not say or mean that)

2021 Dems claim ivermectin overdoses are clogging Oklahoma hospitals causing shooting victims to die (proven false)

2021 DNC group pay members to act as white supremacists at Youngkin rally (group admitted to doing this and issued apology)

2022 DNC go through N. Carolina Green Party signatures, DNC members call up the signatures represent themselves as Green Party reps and request them to rescind their signature to not affect Democrat chances, reducing the signatures enough to get Green Party kicked off ballot. Federal Court blasts DNC for undermining Democracy and puts them back on the ballot.

2022 Dem PAC place adds about Lauren Boebert claiming she worked as an escort (proven false, group issued apology)

2022 Dems accuse border patrol agents of intentionally lashing immigrants with their horse whips (proven false)

2022 Connecticut Dem party forced to apologize to black Republican for racist "curious george" attacks

Ubiquiti sues Krebs on Security for defamation

Re: I cannot wait...

Maybe keep waiting... what happened was an employee was going to take a job at another company. While he was still employed there he used his credentials to download info from AWS to use as proof of a supposed vulnerability in the system. Pretending to the media and ubiquiti he broke into AWS via a security bug. He tried to extort them that he'd make public the (fake) security vulnerability. Using the AWS data he provided to back up his false claims themedia believed that he was a hacker and there actually had a security vulnerability that outside attackers could use. Ubiquiti lost 4 billion dollars in market capitalization due to the media reporting the false vulnerability claim.

There was no supposed breach to report to the customers, there was no modification of firmware or binaries. Just a guy downloading internal info and claiming he hacked in and tried to extort the company

Google: We disagree with Sonos patent ruling so much, we've changed our code to avoid infringement

Re: Real Class

Let's remember, this did spawn from Google having a meeting with Sonos; getting unreleased IP from them and then shortly there after deciding to drop Sonos and release their own product... which just so happened to have the same characteristics of the insider information from Sonos.

Stupid patent or not lets admit Google needs to get truly bent over for that type of action against a company minuscule to itself. That is way more morally repugnant that any patent.

GitLab scans its customers' source code, finds it's as fragile as you'd expect

Re: Public?

Gitlab says they use encryption at rest. If they are able to do private scans of your code that would mean that they have a way to access your unencrypted source code... all it would then take is finding an employee that would take some cash or getting hired under false pretenses to perform some rather insidious industrial espionage

Paragon 'optimistic' that its NTFS driver will be accepted into the Linux Kernel

Re: Are they really this unclear on the concept?

Possibly, but the military tend to buy it from the private sector rather than build it... like a fighter jet they buy it from lockheed-martin.

NetApp trims workforce by about six per cent, SolidFire seemingly not an eternal flame

Re: Gabe!

Depends on the context...

5.5% of the entire company is 11k people losing their jobs

11k people spread reasonably evenly across the company would be normal churn

but if let's say 75% of the 11k came from a single division then that would be unusual

The article seems to imply it's the later with Solidfire taking a targeted hit

'Boringly reliable': Red Hat architect thinks Kubernetes is 'mostly done' – but there are still plenty of bugs

Re: k8s is a mess

I think that was his whole point, he himself clearly it ugly and difficult. He's saying that the new feature list should be done, and work on squishing bugs. That the features that have been lingering in the "we'll get to that" pile need to either be pushed forward to get them complete or kill them off to focus on bug hunting

Speaker for yourself: Looks like 5 patents are table stakes as Google countersues Sonos

Re: Invention?

I believe the issue is that Sonos was the one who got the patent for synchronized speakers in multiple areas over the air. Sure like you said devices have been able to play zoned audio for decades (ie av matrix switches) but not separate units synchronizing audio amongst them to not have be able to not have any latency gaps between the devices that was what they had a decade before Alexa, Google home, etc existed

At last, the fix no one asked for: Portable home directories merged into systemd

Re: Jeez

Optional to use but it adds a large security attack vector and thousands of lines of (from previous systemd experience) of buggy code even if you don't use the feature

Remember that Sonos speaker you bought a few years back that works perfectly? It's about to be screwed for... reasons

Because for the 10 years I've had my multiple Sonos amps they've worked great. Outside of their remote that they killed off years ago because smart phones made it obsolete. This is the first time they are stopping code updates. Its not becoming a brick in May it wont get updates anymore. I'll be able to listen to all my mp3, flack, etc that I have on my network the risk will be that in the future a streaming service will modify their service and stop using a particular API and then you'd lose access to that service.

No other product has provided as good an ecosystem that gets the spouse approval vote for reliable, easy just works. After 10 years with 3x different hardware generations I'm ok (not happy but ok) with them no longer updating it.

Exploring AWS CodeGuru: New automated code review has smart features – but Java-only

Get you coming and going

So basically if you jump in today, you are paying to train AWS to give you better information in the future. Provided enough people give it information to learn it could become powerful but it seems like they need to either to a lot more training of it to being value or dramatically reduce the price until it is good.

Managing the Linux kernel at AWS: 'A large team of security experts' dealing with fallout from Spectre, Meltdown flaws

Re: Schlaeger is doing the right thing

I dont know with the tiny drip flowing out of Amazon and the firehose of opensource into I cant give them a Good Boy button. I think that if it wasn't so painful for them to maintain I'd wager they'd have kept it to themselves as a competitive advantage

We're almost into the third decade of the 21st century and we're still grading security bugs out of 10 like kids. Why?

Re: Who is "we", Kemosabe?

While what you said is absolutely true, I think he's going for the thought that some companies work on the process that security breaks things and the downtime risk is more important than security breach to them. The only recourse the security team have is some form of risk to mgmt of gross negligence, and using the number as a cudgel against them to put them individually at risk. That number often can be used as the trigger point of gross negligence to force them to divert resources, delay product release, etc that they would otherwise jam through, because we haven't gotten hacked yet. Not saying that companies that work that way are right or even sane but that's the way it often is

DoHn't believe the hype! You are being lied to by data-hungry ISPs, Mozilla warns lawmakers

Google complains about data hungry ISP's??? Those are some swinging balls

Where the ISP probably will sell your data, Google WILL sell your data. Seriously that's Google's whole point in existence to take user information and sell it. Not saying ISP's are better but come on Google's real complaint is that the ISP's have the DNS information they want and don't want to pay ISP's for it.

Not just adhesive, but alcohol-resistant adhesive: Well done, Apple. Airpods Pro repairability is a zero

Re: So much for "design"

They sound OK, better than average but they are not "very good". Everything is subjective in audio, but they are just like Bose speakers. Excellent marketing, better audio than cheap but excessively overpriced compared to competition in similar price range. I can't remember seeing Beats being in any top audio reviews for their quality and mainly see them consistently being beat out in the lists.

Just a friendly reminder there were no at-the-time classified secrets on Clinton's email server. Yes, the one everyone lost their minds over

Re: The Most Evil and Incompetent Secretary of State Evah !

Only one?

https://www.independent.co.uk/news/world/middle-east/peace-president-how-obama-came-to-bomb-seven-countries-in-six-years-9753131.html

Re: Ummm... missed a very big thing there

Yes I'm overly fixated on the technical aspect of it... since this is primarily a TECH site not a political site. Because if they would have followed due care aspects of things it wouldn't have been dragged out for months and months. It would have been a blip on the election radar instead it was dragged out till the last days of the election.

One needs to think about their own risks if they are managing an email system and how they would respond to getting a subpoena, and this is like a text book example of how not to respond to it.

Re: Ummm... missed a very big thing there

Umm... what outrage? I said that the article should have been about the technical aspect of it, and how you can have nothing incriminating in the emails but because you didn't follow due care can bite you in the ass.

The outrage I have is how stupid her team was to shoot themselves in their own foot. If they would have simply turned over everything at the beginning, it would have blown over, but no they deleted emails which then gave the impression of a coverup. After they started recovering the deleted emails it was dragged out forever and a day, instead of being over and done with earlier in the election, it was dragged out till the very end. The email debacle is of her own teams issue, it would have blown over early, it would have gone away but no her team responded like idiots and cost her the election.

Ummm... missed a very big thing there

The part with after being served and official subpoena, going through and then deleting emails. That's something that would have gotten any corp into the bankruptcy type fee... multi-million dollar fines have come about from just not having a proper retention tool. Like most things it's not the action that's the big oops, the coverup is. If her team would have just complied with the subpoena it would have been over and done with, but no her team tried to make things orders of magnitude worse and delete emails after receiving a legal document. In the end the emails were recovered but because of her teams stupid action, giving the courts the very real reason to drag out the issue to do an uber thorough screening, and release them to the public.

Your article should have been about how her teams lack of using proper email retention tools, and playing dangerously with legal subpeona's can put you at risk in the biggest issues ever (Presidential election) even if there is nothing bad in it.

Tech CEO thrown in the clink for seven years for H-1B gang-master role: Crim farmed out foreign staff as cheap labor

Let's be honest it wasn't immigration crimes that got him, it was the lack of paying taxes that got him. The government let's employers skate around immigration laws all day long, but not pay the IRS... well the government gives a real shit about their money. Defrauding others meh whatever, just say you wont do it again and walk away, but defrauding the IRS?? Oh hell no!

Stallman's final interview as FSF president: Last week we quizzed him over Microsoft visit. Now he quits top roles amid rape remarks outcry

Re: A product of his time

He's meaning that going back in time and applying today's moral compass to historical statements. i.e. Going through Abraham Lincoln's quotes and find that he used the "n-word", and his statues should be torn down because of it. Instead of understanding that society changes over time and what was perfectly acceptable and said without malice at the time should not be applied with the same moral standing of today. That maybe you should realize that what was normal, proper, correct statements that you make today WILL be unacceptable at some time in the future, if you are over 40 you've probably had that experience, but if you are under 40 you haven't had that society change happen and be held to your historical statements under changed moral rules.

Ransomware attackers have gone from 'spray and pray' to 'slayin' prey'

Kind of obvious really... consumers can move on from a ransomware account without that much pain other than the emotional aspect of losing family pictures, etc. and often don't have lots of disposable cash to gamble with the chance of it not getting back. Whereas a business infected with ransomware could go completely out of business, and they are going to be more willing to gamble on giving them money to get it back because if they don't get the encryption keys they are going out of business anyway.

LTO-8 tape media patent lawsuit cripples supply as Sony and Fujifilm face off in court

Sure this will be great on the long term

It's not like tape sales has been shrinking year after year or anything. Surely this wouldn't cause a number of the shrinking count of companies to just move to disk backups vs tape or anything. That would never happen

You think election meddling is bad now? Buckle up for 2020, US intel chief tells Congress

Re: And yet...

Yeah the last election in 2018 election? When the Democrats used the same false-flag tactics in Alabama against a Republican that they denounce the Russians for using and arresting people?

https://www.washingtonpost.com/opinions/democrats-used-russian-tactics-in-alabama-now-they-must-swear-them-off/2018/12/27/5b97c332-0941-11e9-a3f0-71c95106d96a_story.html

Apple might be 'collateral damage' in US and China trade dust-up

Oh no, the richest company in the world surely couldn't absorb this

The wealthiest company in the world, sitting with billions of dollars in cash on the sidelines might get slightly impacted by this.... oh nnoooossssss. I truly cares so much about Apple having to raise the price of their phones by half a cent to cover it.

Amazon twangs its Elastic File System at on-premises filer rivals

What??? Cheaper than filers?

"For sure, it will look cheaper than on-premises filers"

No for sure EFS is *more* expensive than on-premises filers. 100TB of EFS storage having the same 4x year lifespan as an on-premise filer.

$0.30 * 48 months * 100TB = $1.440 million dollars, pretty sure you can get 100TB of EMC, NetApp, etc NAS storage, put it in a datacenter pay for power/cooling and an admin for much less.

AWS Elastic File System is go

Holy crap that's expensive

To compare that to 250TB traditional private storage array who's life span is 4x years...

100TB (aka 1000gb*100) * $0.30 * 48 months = $1.44 million. So $1.4mil for a measly 100TB of storage, that's loan shark prices...

Why does mgmt continue to say cloud is cheap... it's like 5x times the price to maintain on site

Just in time for Xmas: Extra stealthy Point of Sale malware

Re: Bah!

Citibank cards in the US has had this for years now. The virtual number once used cannot be used at any other realtor, is valid by default for one month (but can be longer) and you can specify max ammount. The nice thing is if you have a reoccurring charge you can set a multi month virtual card, that even if stolen can't be used at any other realtor.

We turn Sonos PLAY:5 up to 11

Re: What happened to the HiFi

When was that ever the case? Everything I've ever seen is s.be your money for your speakers and spend as much there. Your amps, etc are important but secondary to the speakers.

My parents don't know I'm in SEO. They think I play piano in a brothel

No adds on your blog??

If you aren't running adds on your blog, then you are doing it wrong. You are missing out on tens of pennies each and every month, after a few hundred years that'll start to add up.

Does Linux need a new file system? Ex-Google engineer thinks so

Re: Nobody forces you to use it

Stopgap solution because of ridiculously large drives??? I'm guessing you are meaning raid protection as a stopgap not XFS, because XFS can scale upto 9 exabytes: i.e. 9 million terabytes, which is more than a million times larger than the largest capacity drive out today. Pretty sure you can't attach anywhere near a million drives to a system anytime soon and it's going to take a long time for capacity of storage to get a million times larger than it is today (particularly with the dramatic slowing in Kryder's law)

Pure Storage's 'disingenuous' financial figures still out there

I think it's about Pure who knew the numbers were wrong, for multiple years in their own presentations (both in public and NDA) intentionally used the incorrect numbers to falsely show that they were in a better state financially and in the market than they actually were. True they didn't have to talk the real numbers as they are private, but they sure as heck shouldn't have used those knowingly incorrect numbers in their own marketing material.

Got $600 for every Win Server 2003 box you're running? Uh-oh

Re: Dear custommer move to free Linux or else we fine you...

Let me ask you this... what was RedHat's response to the latest Ghost exploit for RHEL4 boxes? We have 5000+ RHEL 5+ servers and 2-300 still running RHEL4 (legacy apps we don't have code for from companies we purchased, etc). We were paying for a license on all the boxes (including 4 so they could be upgraded) but not extended RHEL 4 support. Redhat made a binary rpm for the security fix, but only was available if you purchased extended RHEL4 support for ALL old boxes, we couldn't even find the SRPM on their ftpsite multiple of days afterwards (also tried the can we buy a few licenses call they rejected it). Looked at CentOS, but they don't have any updates for RHEL4 anymore. RHEL4 was released in 2005, multiple years after Win 2003 and you've had to pay for security updates before one had to for Microsoft. If anything MS is showing how much better they are at long term support then linux is.

Report: American tech firms charge Britons a thumping nationality tax

Hello, cost of living difference???

The UK minimum wage is £6.50 and US is £4.25, a difference of ~35%, rent prices are ~21% higher in the UK, the consumer price index (excluding rent) in the UK is ~30% higher than the US... Why would anybody think the UK and the US have the exact same purchasing power and expect there to be price parity between the two. Workers make more in the UK than the US, so the prices will be higher for similar things, you are not getting screwed over because you can buy something in another country for less; but if you really feel that way move there and take the pay cut only to find out that at the end of the day your buying power didn't really change.

http://www.numbeo.com/cost-of-living/compare_countries_result.jsp?country1=United+States&country2=United+Kingdom

Microsoft's anti-malware crusade knackers '4 MILLION' No-IP users

No the claim is that Microsoft didn't contact the parent company of the the No-IP subdivision. There are no statements that Microsoft didn't contact No-IP, just that they didn't bring it up to the parent.

Storage management tools SUCK. We're getting what we pay for

Re: out of interest...

You can get a virtual EMC VNX and Isilon that will emulate everything as vmware guests (vnx won't act as a fibre channel target, but NFS/CIFS/HTTP/ISCSI fine). There isn't a virtual VMAX outside of EMC, but you can do a number of things using EMC's solutions enabler and pointing to a offline copy of a symapi database. The Isilon is more of a ask your sales guy thing, and he'll first point you to their hosted virtual isilon's that are the same just hosted inside EMC somewhere (they might also have hosted VNX's and actual virtual VMAX, but don't know on that for sure)

Top dog EMC’s dilemma: Seasonal dip or long-term problem?

Re: Is this right?

Yeah it's PB not TB number, which is guess technically still falls under the "more than 17 terabytes"

http://www.emc.com/about/news/press/2014/20140423-earnings.htm

EMC continued its industry leadership in enterprise flash storage, selling more than 17 petabytes of flash capacity in the first quarter of 2014 alone, an increase of more than 70% year over year.

VMware takes aim at AWS with hybrid cloudy infra service

Re: No price war

We've found that Amazon costs are about double the cost of doing it ourselves. That includes datacenter pace/power/cooling, physical equipment, network, and all associated staff to deal with it.

Amazon, etc are great if you don't have the staff to maintain the infrastructure or you are starting out where spending money on the datacenter is not as good investment as in developers, etc to make your product better. But once you get to a certain capacity, the clouds costs are really out of line compared to doing it yourself.

Random car shutdowns force Toyota to recall Prius hybrids - AGAIN

Re: To use or not to use computers, that is the question

Ummm... no your family car didn't lose it's "drive by wire steering" a few years back, And I'm pretty damn positive your friend also didn't lose his drive by wire steering either. The first production car Q50 that had drive by wire steering came out summer of 2013.

What you probably did have was "electronic power steering" which is dramatically different than "drive by wire steering".

Verizon: Us throttling AWS and Netflix? Not likely

Re: I thought Netflix had its own fat pipes

That's the interesting twist in the whole Net Neutrality thing. January last year Netflix was doing to ISP's what Neutrality was supposed to prevent. Unless your ISP enters into Netflix's OpenConnect, they intentionally give you a lower quality picture (after loud screaming by ISP's over Net Neutrality in September they gave in and allowed all ISP's high quality streams).

This is where I think the world is really going, rather than ISP's being the boogie man, I think the few really big websites, etc are going to start throwing around their weight and try to push ISP's to directly peer with them etc. or give them crappier service. Which under the current Net Neutrality law is legal since they aren't an ISP.

Euro judge flings out Cisco beefs against Microsoft-Skype deal

Re: More lols from

Umm... historically Cisco pretty much been the worst on creating proprietary protocols that only they support. Heck they have their own Cisco proprietary protocols wiki page http://en.wikipedia.org/wiki/Category:Cisco_protocols

Poker ace's vanishing hotel laptop WAS infected by card-shark – F-Secure

Re: obvious question

The obvious answer is that... if they did it without removing, the attacker would have been there when the owner walked into the room catching them doing it. Because they removed it from the room, when he came there was no one there to accuse, even though the attack was found out, the attackers remain anonymous.

A post-Snowden US had better not SQUEAL about Chinese cyber-spying

US will continue to complain... why wouldn't they?

Since absolutely nothing has actually come from US complaints about China, etc spying. I've always thought of it as purely a public way of saying "hey guys you need to be better at spying because it's way too obvious to us. We know you are going to be spying on us, but when you get caught so obviously we are going to publicly shame you for being so lame".

Seriously does anybody think that if you found another country spying on you, that you would intentionally keep it secret (other than in a Churchill keep it quiet that we broke the codes way)?

The importance of complexity

Asked to via hardware not code

While I wasn't asked to code a NP problem, I have a hardware equivalent request. Was asked to find a solution for a system where they wanted to add 50 million new files a day, and compare each file with 2 billion existing files. In short it ended up mathematically to wanting to do something around 3 million random file updates per second. That is something technically I could do with a large chunk of money, but then they told me they wanted to do it over NFS to a shared dataset which I just started to laugh maniacally. I think they got the point as shortly thereafter they rewrote things.

Acronis CEO: Anyone can undercut Amazon. Reg hack: Prove it

I'm willing to believe him

As I'm able to buy and run storage from a TLA vendor who starts with an "E" (who also isn't known for being cheap) even after factoring in power, cooling, admin costs, replicating to a different datacenter, etc for half the price of hosting the same amount of data in Amazon... I'd be willing to believe that someone else could do it as well.