* Posts by big_D

6775 publicly visible posts • joined 27 Nov 2009

UK, Ireland users call on SAP to extend indirect licensing deadline again as COVID-19 ravages project plans

big_D Silver badge

Re: Does anyone (apart from SAP and consultants) benefit from using SAP ?

i.e. it isn't good, but better than nothing.

A lot of smaller companies are also forved to use it, if they want to deliver to big business, they have to support SAP electronic data transfers, for example.

Vint Cerf suggests GDPR could hurt coronavirus vaccine development

big_D Silver badge

Re: Run-away techies pipe dreams meet problem-o-phile reasoning

And properly educate tech people about the law, it goes both ways.

big_D Silver badge

Re: Run-away techies pipe dreams meet problem-o-phile reasoning

Robert Koch Institute, in Germany, has an app to collect health data from smart watches to help with diagnosing Corona. The app stays within GDPR, because it has a privacy statement and is opt-in.

The data is anonymised and is used to help them detect early signs of COVID-19.

GDPR gets blamed for making things impossible, when it only makes people actually have to think about what they are doing and to get the correct permissions and to ensure the data is handled accordingly.

ALGOL 60 at 60: The greatest computer language you've never used and grandaddy of the programming family tree

big_D Silver badge
Facepalm

Re: No love for CORAL 66?

DEC's FORTRAN compiler was much more efficient..

I've told this here before, but we had a data centre full of VAXen and we were looking at possibly replacing some of them with a mainframe from a well known manufacturer. They actually delivered a test machine for us to try out, a whole room-full of big boxes!

The salesman gave us a tape with a FORTRAN program on it, which would "run for about a week" on the mainframe and several weeks on our test VAX. We should "load it, compile it, run it and call me in about a week, when the mainframe finishes its run".

He then left us to it. The ops put the FORTRAN tape through both machines, compiled the program and hit run simultaneously on both machines...

The salesman had a message to call us back, by the time he had returned to his office. The VAX had finished in about a second, his mainframe was still chundering away.

It turned out the FORTRAN compiler on the VAX was actually quite clever. It analysed the code: no input -> create a huge array -> fill array with random numbers -> no output. The compiler decided if there was no input and no output, there was no point running the bit in between, so it made an empty program stub. The mainframe compiler was not so clever...

Australians can demand visitors to their homes run contact-tracing app

big_D Silver badge

Re: Discrimination...

Yes, but aren't those houses still treated as commercial premises, if a business is being run out of them?

Probably you could refuse access to your private rooms, but the "commercial" rooms would be excluded from this and you'd have to let them in, whether they have the app or not.

big_D Silver badge

Discrimination...

I think the not allowing someone into the house unless they have the app is fine as an exception to the discrimination clause.

You can refuse somebody access to the premises for any reason, generally. If you tried to refuse them entry because they didn't have the app, you would be liable for discrimination, yet not letting them in, because you don't like them, don't want to hear about The Tower etc. is fine, so they could then claim discrimination... It is just how the law works.

M.A.L.S. for the win.

Better late than never... Google Chrome to kill off 'tiny' number of mobile web ads that gobble battery, CPU power

big_D Silver badge

Static image / text

If it is a static image or text, with no associated JavaScript, you can show an ad in my browser, otherwise you can get stuffed.

Node.js creator delivers Deno 1.0, a new runtime that fixes 'design mistakes in Node'

big_D Silver badge
Facepalm

It's bad enough...

running JavaScript inside the browser, why would you want to run it outside?

Sadly, 111 in this story isn't binary. It's decimal. It's the number of security fixes emitted by Microsoft this week

big_D Silver badge

Re: And unsupported versions of Windows

As the patches only cover supported versions of windows, they say that all supported versions.

Usually they affect unsupported versions as well.

big_D Silver badge

Outlook?

Any news on the two bugs introduced into Office 2016/2019/365 a couple of weeks back that stops search working if local caching is turned on and complains that you don't have rights to "send as..." on joined accounts?

NHS contact-tracing app is best in the world, says VMware CEO... whose company helped build it

big_D Silver badge

Re: Wear the mask - plenty of pensioners

Both sides of the grandparents of my step-daughters have no Internet and no mobile phones (in their 70s when I first met them, now in their late 80s). They don't see the need, they don't go out and they have the TV...

One sister-in-law shared a Nokia 3310 with her husband up until last year, now they share a smartphone, because grandchildren.

These are people who never used a computer at work, their children didn't have computers growing up and they never used/needed a computer at home...

Heck, my other half didn't get her first PC until her kids were in the equivalent of high school and she never used it, it was just for them to use for homework. The first time she had to use a computer was when she applied for her Master Craftsman Diploma in her mid 40s. I now turn on her computer once a month to fill in her timesheet for her.

big_D Silver badge

Re: Wear the mask

You forgot taking the mask off using just the bands and keeping your hands and other surfaces away from the inside of the mask, before it is disposed of / put on a 60°C wash cycle...

big_D Silver badge

Re: Wear the mask

I know plenty of pensioners as well who don't have mobile phones, let alone smartphones.

They only leave the house to go to the doctor, shopping or a short walk and for those couple of hours a week, they don't need a mobile, so they don't buy one.

Press F2 to pay respects. New Xiaomi Poco Pro has 5G, top-drawer Snapdragon chippery, 64MP camera

big_D Silver badge

2020-02-01, 2020-03-01, 2020-04-01 and 2020-05-01 have all been released with critical security patches since the January patch level.

My Samsung S20+ got the 2020-05-01 patches on 2020-05-04. Given that the last Samsung I owned, an S3, only received 2 patches in 18 months, I find that it is currently doing a very good job. I just hope they keep it up for the 3 years they provide the guarantee for...

big_D Silver badge

Most importantly, what is the monthly security patching like? How far behind the curve are they?

My Huawei Mate 10 Pro was usually a month behind Google's official patches and my current Samsung is reporting that it is 100% up to date with Google's patches.

big_D Silver badge

Re: 120Hz refresh rates

I tried it on my Galaxy S20+, didn't really notice much of a difference and turned it off again. Certainly not enough of a difference that I want to waste my battery on it.

Researchers spot thousands of Android apps leaking user data through misconfigured Firebase databases

big_D Silver badge
Facepalm

Which apps?

24,000 affected, but no list, not even of the most popular apps affected... :-S

Microsoft doc formats are the bane of office suites on Linux, SoftMaker's Office 2021 beta may have a solution

big_D Silver badge

Re: Seems like a losing battle, and there's an elephant in the room

First of all, Libreoffice has the same option to use Microsoft XML or Opendocument XML, so I can't see what the big play is surrounding file formats.

The big play around file format is how well they are supported and how well the application interprets that file format and displays it. OO.o and Libreoffice provide support for Open XML, but it works in a different way to Microsoft Office and it can't display the file "cleanly", there are always minor differences between them on how things are displayed, so the formatting goes to pot.

I've had presentation in PowerPoint that were displayed in OO.o or LO and the lines point to different objects on the page and the objects have moved as well! Word documents, the page formatting goes to pot, the ToC will say a section starts on page 12, which it does in Word, but due to formatting issues in LO, it will be on page 13 or 14 - the higher the page number the bigger the difference to where the ToC says things were and where they actually are.

(The same goes in the other direction, of course.)

If you are sharing documents with people, you really need to be on the same version of the same program - even version differences can cause formatting issues when swapping back and forth. I used Linux for a long time as my main workstation and worked with LO, but for documents that I had to share with clients (where I had to provide the original and not a PDF), I always had a Windows machine in the corner to check the formatting, before it went out. At some point, I was spending so much time correcting the formatting that I gave up and switched back to Windows and MS Office for document generation, because it saved time and I wasn't going to get a large, multi-thousand seat, client to switch from MS Office to LO, just because I wanted to use that.

Russia admits, yup, the Americans are right: One of our rocket's tanks just disintegrated in Earth's orbit

big_D Silver badge
Coat

Jerry Anderson

covered this in detail in his 1960s time-shifted documentary series UFO... Oh, wait, it wasn't a documentary? My bad.

Mine's the one with the purple wig in the pocket.

Incredible how you can steal data via Thunderbolt once you've taken the PC apart, attached a flash programmer, rewritten the firmware...

big_D Silver badge

Re: more of a neat trick than infosec Armageddon

If you fall into the dissident category or other high risk user, if your machine has been compromised (i.e. outside of your sight for any period of time), you'll either use it for banal things or you'll physically destroy it and get another device.

Microsoft fingers foreign object in fracture furore, serves up fresh dollop of Duo, and another Windows 10 'Meh' Update

big_D Silver badge

Re: "sell the product back to him"

I guess you've never heard pf Google, Amazon, GM? There are hundreds of companies that acquire and close / strip ang the acquisition disappears.

'We're changing shift, and no one can log on!' It was at this moment our hero knew server-lugging chap had screwed up

big_D Silver badge

marketing

The only people not there were in marketing.

"No idea why they were different!" remarked Steve.

The coloured pencils department are always special.

DBA locked in police-guarded COVID-19-quarantine hotel for the last week shares his story with The Register

big_D Silver badge

Re: Back in time

I was ill whilst on assignment and couldn't travel home for 2 weeks in 2001. I was stuck in my hotel room (too sick to get out of the room, not sick enough for a hospital bed).

I could order food from the hotel, I had wired Internet and I could order food deliveries from the local pizza parlour etc. Not that I was actually capable of eating, I lost nearly 40 lbs in under 2 weeks.

The best thing about being ill with a high fever in a hotel was calling room service at 3 in the morning and getting them to change the bedding. I will be forever grateful for the outstanding service and understanding of the staff at the hotel.

big_D Silver badge

Re: Sounds sensible

The only thing that doesn't sound "right" is no opening windows and not being allowed out of the room, that would drive me stir crazy, I don't like AC air and I can only sleep with the window open.

I don't see why they can't organize a short walk in the hotel grounds / in the entrance-way in small groups with distancing - I assume that guards are on duty 24/7, so putting up a fence and letting them walk around guarded should make them feel better.

Behold: The ghastly, preening, lesser-spotted Incredible Bullsh*tting Customer

big_D Silver badge
Coat

Social Media incompetence...

At a previous job, I was forced to take on the role of Social Media Manager. I was supposed to write a German post for Xing, an English post for LinkedIn and one in both languages for Facebook every single day... I tried to point out to the CEO that over posting isn't considered good practice, I also tried to tell him that the different platforms need different approaches, but he wasn't having any of it.

So we started our campaign. The first day or so went smoothly, although I had to submit the posts to approval to the CEO and he was never happy with the wording and re-wrote most of the short, witty posts into long meandering nonsense, it was also hard to find enough topics to write about as well, I tried to say we should put in things about the IT industry in general, but there was an iPhone zero-day, so I wrote a warning that Apple had patched the zero-day and users should update their phones. Vetoed, I can't bad-mouth other companies. Our own stuff? I couldn't mention our staff (GDPR), I couldn't mention our customers (he wouldn't let me get clearance to use their names), most of our products were taboo as well, we wrote software for the slaughter and meat-processing industry and he didn't want a PETA shitstorm attached to our posts...

Anyway, I usually found something to write about. But after a couple of days, the posts weren't appearing! I was called into the CEO's office and he tried to wipe the floor with me, the posts weren't appearing, I wasn't doing my job! I quickly went to his computer and navigated to the relevant Facebook, LinkedIn and Xing pages and there were the posts.

Well, I must be incompetent, because they weren't appearing in his feed! I tried to explain about their ranking systems and how they used his interests and browsing history to work out what was of interest to him, and that although he was CEO of the company, Facebook & Co. didn't know that and, based on him browsing his favourite football and basketball teams all day long, they had decided that his company wasn't of interest to him!

That didn't work, I had to find a way to change the Facebook ranking system, so that the company posts popped to the top of his feed every day! ARRGH! I quit left shortly thereafter and I'm much happier now.

Data centre reveals it modeled interiors on The Hunt for Red October sets

big_D Silver badge

Re: Remodelling

No Mr. Bond, I expect you to die!

big_D Silver badge

Re: Fun!

Good job he wasn't a Spaceballs fan and ask for Plaid! :-D

So you've set up MFA and solved the Elvish riddle, but some still think passwords alone are secure enough

big_D Silver badge

Re: Just make a really long password

Password + Dongle here.

Huawei looking to take on Apple in the 'hearables' space... with an almost identical AirPod clone that costs under £100

big_D Silver badge

Why?

Why do these manufacturers keep going for the shiny toothed "Oral B" look for their ear buds?

The Surface Buds are ugly enough, but at least it doesn't look like you are running round with a pair of toothbrush heads in your ears!

I find the Bose, Jabra, Samsung etc. buds a lot more stylish.

GitHub rolls out hosted Visual Studio Code in Codespaces

big_D Silver badge

Re: Github

No, that is Stack Overflow!

big_D Silver badge

The rest of your comment is sensible, but if you are working in a GitHub repo, why do you need svn? (Genuinely curious, I would have thought that you would use one or the other, not both, for a project.)

GoDaddy hack: Miscreant goes AWOL with 28,000 users' SSH login creds after vandalizing server-side file

big_D Silver badge

Re: How very 1990s

It sounds like it was a key-file that got altered.

GoDaddy wouldn't have the private keys, they would have the public keys to check against when logging on. At a guess, the hackers added their own public keys to the affected accounts to enable access.

Ex-Microsoft Office chief reflects on early malware and the 'global attack on the new Windows PC infrastructure'

big_D Silver badge

Re: " 20-page memo"

And, for the most part, if you are careful about the software you use, the data remains on your machine or on your network, it isn't blabbed out to clouds or software producers...

big_D Silver badge

Cloudy...

together with the sense that what really counts is not the device you use, but the cloud services you access.

Hmm, I use OneDrive to save my photos to from my smartphone, before downloading them to my local PC and NAS. That's about it for cloud at home.

At work, nearly all employees have a PC, about 5% of them have a company smartphone and they aren't allowed to install any third party apps onto the phone, only those provided by the IT department. The only cloud service we are currently allowed to use - and this rolled out last week - is Microsoft Teams. Everything else has to stay behind the firewall...

Not every cloud has a silver lining. I'd rather not have my data held to ransom.

Britain has no idea how close it came to ATMs flooding the streets with free money thanks to some crap code, 1970s style

big_D Silver badge

Re: lil Bobby tables

I did some testing for a retail outfit that was going online at the turn of the Century. It was my first security testing gig and I had to go through the site and see if it was secure.

The first thing I noticed was no SQL Escaping... They didn't seem to think it was important, a quick demonstration of bypassing the customer logon didn't impress them, nor did listing the users table... So for my next trick... DROP DATABASE.

Now, that got their attention!

big_D Silver badge

Re: Not the only Burroughs ATM story

I used to use Burroughs/Unisys kit and was on a training course in Milton Keynes. In the evening, we got talking and one of the Unisys instructors regaled us with a story about one of their engineers.

He worked in some remote place and, over a couple of years, every time he visited a customer to repair something, he order 2 of the thing being replace, instead of 1. They said that nobody had noticed and he would have gotten away with it, but he tried to order a new case - no engineer hat ever ordered a new case, so they made an investigation...

big_D Silver badge

Testing to destruction as well. That's what many engineers do, when they don't like something. Turn the voltage up to 11 and see what happens.

Sticking with rail, but skipping across the water, one company I worked at helped with the Australian VFT (Very Fast Train - very pragmatic naming in Australia, I always joked it would be replaced by the FFT, I'll leave you to work that out!). A colleague was at the launch press conference and allegedly, someone from the press asked what they would do if their was a kangaroo on the track (we are talking about a train doing in excess of 120mph).

The managers and consultants all looked at each other, shrugs were given, then some bright spark said "turn on the wipers?" I guess they hadn't thought about every scenario for the press conference, although I'm sure the engineers had tested up to camel/buffalo...

big_D Silver badge

Re: Test, test and test again...

It's called "frAgile".

FTFY

big_D Silver badge

Test, test and test again...

It was drummed into me, when I started analysis and programming, that 60% - 70% of a projects time is testing.

You received the spec and wrote your test plan, only then did you start on the code and the test harness. You coded to the spec and test plan, you didn't write the test plan to fit the code.

Then the code went to system testing, who only ever saw the spec, never the code, so their test plans were spec based.

When that was complete, the test was signed off and the code put into pre-production, where the customer had their acceptance testers. Once they had signed off the code as correct, it could be moved to production...

Nowadays, it often seems to be people throwing links between frameworks together, then throwing the whole lot "out there" and waiting for the screams.

Prank warning: You do know your smart speaker's paired with Spotify over the internet, don't you?

big_D Silver badge

Re: Once again I propose we rename IoT as IoV

As ever, caveat emptor.

Or in other words, the "S" in IoT standard for Security...

Cheshire Police celebrates three-year migration to Oracle Fusion by lobbing out tender for system to replace it... one year later

big_D Silver badge
Facepalm

Oracle...

So good, you'll want to replace it before you've started using it...

CFOs are crossing fingers and hoping a second wave of COVID-19 does not appear, says Gartner

big_D Silver badge

Santayana is holding his head in his hands, from within his grave...

Pimp my PostgreSQL: Swarm64 paints go-faster stripes on open-source database challenger

big_D Silver badge

EXPALIN ANALYZE is also only really of help if you know what you are doing, when it comes to SQL.

big_D Silver badge

I agree. And the main point is "installing PG". If you do that, it is a dream. If it is installed as an optional dependency of a project that actually uses it (see my Icinga experience below), it can be an absolute nightmare to get it set up, let alone set up properly.

big_D Silver badge
Thumb Up

Having had to bail out some projects that were written by people who could string together SQL statements, but not actually understand how a relational database works (and thus the servers ground to a halt once real workloads were put through them), I whole heartedly agree with your second paragraph.

big_D Silver badge

Only by journos who don't know the difference:

Market position has nothing to do with capabilities. It is solely popularity and MySQL had the marketing in the early days to get itself seen as the alternative to Oracle and SQL Server.

I like PostgreSQL, but even a lot of open source projects use MySQL/MariaDB as the default and PostgreSQL is often mentioned as an "option", but can be a pain to actually get working. I tried setting up a Debian (BusteR) system to run Icinga with PostgreSQL instead of MariaDB a couple of years ago. The installation failed, because the installation of PostgreSQL from within Icinga was borked; it would automatically install and configure MariaDB, but it would crash out if you chose PostgreSQL without first having installed PostgreSQL.

Having already installed Icinga on a test machine with MariaDB, we wanted to run a second test with PostgreSQL on another VM, we went through the exact same process, only we selected PostgreSQL from the install menu... BAM! Failure. It took several retries and a lot of searching for information, before I nuked the VM, reinstalled Debian from scratch, installed PostgreSQL and then Icinga, and the install worked perfectly!

It is instances like this, where PostgreSQL is a poorly documented and half-heartedly tested second class citizen in other projects that damages its reputation. I would chose PostrgreSQL over MySQL most of the time, but some projects just run more reliably, or actually install, if you use the MySQL/MariaDB option. It is a real shame.

US threatens to turf out four Chinese telcos amid concerns over national security... and COVID-19, doctors, schools, jobs, communists, etc

big_D Silver badge

Re: Pot meet kettle

Yes, National Security Letters - and then the companies involved can't even report that they had to hand over the data, without their execs landing in prison.

Dumpster diving to revive a crashing NetWare server? It was acceptable in the '90s

big_D Silver badge

You still need to physically hit the reset switch.

big_D Silver badge
Pint

Overtime <CR>

This wasn't me, I remember reading it when I was a young whipper-snapper. I think it was in either Practical Computing or PCW in the UK.

The journo had a friend (apocryphal?) who had worked on a large system in the 70s. It was fairly advanced and used an early teletype terminal. He would have to wait for the users to finish for the day, then he could start the reconciliation jobs. He would have to let them run, before powering down the computer and going home...

Only the jobs took hours to complete, which meant missing Corrie or valuable drinking time.

Being a primitive teletype with a roller and moving carriage, the BOFH candidate became creative. A line feed would execute a command, while CR/LF would execute the command and return the carriage to the start of the line... Being sneaky, he batched up all of the commands in the input buffer, then attached one end of a piece of string to the carriage and the other to the power switch of the computer (a throw switch, not a push button).

Thus the jobs would all run sequentially, the carriage would gradually move to its full extent and once the final job had run, it did a shutdown and when that sent the session termination string, the teletype would throw a carriage return, yanking the power switch of the computer to the off position in the process. Obviously, there were a few flaws with this, a spelling mistake in the type-ahead buffer would leave jobs un-run and failed jobs would be ignored...

But, hey, extra beer time whilst being paid overtime for running the jobs - the log showed when "he " shut down the machine, so they "knew" when he had left the building...