Posts by alain williams

Are you SAP-py now?! ERP giant overhauls pricing model following indirect access drama

Is SAP trying to become Oracle ?

It is moving in the same direction.

Company insiders behind 1 in 4 data breaches – study

Another mitigation strategy

is to not overwork people. When rushing to get something done quickly it is so easy to make mistakes, not take the time to check, ... The hapless employee is then held up to blame, not the manager who put them under too much pressure.

They're back! 'Feds only' encryption backdoors prepped in US by Dems

Mrs May: I have an idea that should work ...

please just employ me at the very reasonable salary of £200,000/year and I promise that I will try my hardest to code something that has a GCHQ only back door.

It is not a lot of money for the government to save us from evil terrorists & drug dealers (do think of the children), but will bolster my pension fund nicely - I only have a few years before retirement.

If we get a good designer who can make the app look pretty then all these nasty people will be seduced into using it rather than some free open source stuff.

Please, pretty please!

Accenture, Capgemini, Deloitte creating app to register 3m EU nationals living in Brexit Britain

A focus on security I hope

This is going to want a copy of all the information that is needed to open a bank account & similar. If someone can compromise it there are going to be many unhappy people.

Making this run on a mobile phone might be trendy, but is it secure ?

Hmmm

2018's Lenovo ThinkPad X1 Carbon laptop is a lovely lappie

"who uses a laptop’s speakers these days"

I do.

Not very often, but sometimes I come across a video clip that I want to watch, eg off BBC news. For something short I don't want to fish around to find some earphones to plug in.

Amazon and eBay agree to expose potential VAT evaders for UK tax man

It is not just lost VAT ...

but since they can charge 20% less than a native vendor (ie UK based who does pay VAT) they can undercut them and so UK jobs, etc, are lost. Thus the true loss to the UK is much more than the £1.5 billion VAT.

Mind the gap: Men paid 18.6% more than women in Blighty tech sector

Equality for men & women ?

how about we then get down with real equality and have full paid paternity for men to be even with women

What happens if a mum wants time off due to a sick/... child: it is usually granted without a fuss. If a dad does the same thing: often there is resistance from managers.

Following divorce: the kids go to mum 90% of the time & dad struggles to see them; mother then complains that her career/pay has suffered as a result. Share the childcare and everyone benefits.

Facebook dynamites its own APIs amid data slurp scandals, wrecks data slurp applications

NHS & Google

So has this brouhaha finally woken the NHS to the fact that giving patient data to Google is not a clever idea ?

Has Google deleted the data or just said that they have ?

Don't want to alarm you, but defence bods think North Korea could nuke UK 'within a few years'

Could but won't

The Norks are rational enough to know that if they nuked the UK or anywhere else then they would be reduced to glowing embers -- look at their recent actions. The summary of this report says as much. They will huff & puff and carry out more missile tests just enough to worry people in other countries.

Facebook can’t count, says Cambridge Analytica

Does the number matter even approximately ?

What they are trying to do is to distract the focus from ''they abused personal information'' to ''how many ?''

This is not too far from how political messages work these days -- sod the facts, produce vague, emotional messages that most listeners will interpret differently as being good for them.

OK: politicians have always done that, it used to be called 'spin'; but these days it seems more deliberate - we are in a 'post truth' era where people believe things despite clear evidence to the contrary.

One solution to wreck privacy-hating websites: Flood them with bogus info using browser tools

X-T&C header

It might be worth making your browser add a X-T&C header that said something like ''If you misuse my data then you pay me £1,000,000''. It might be hard to make it stick in the courts, but part of the problem is one way T&Cs, you either get to accept it down to the last comma or nothing at all**.

This is part of the Internet 'wild west' that is well overdue regulation; there should be standard T&Cs++ that have been prepared by even handed (consumer/business) lawyers - that people could thus trust.

IETF might even make an official T&C header.

** I admit to being one of the few who I know who does read T&Cs and frequently refuse to accept and thus not use some web site.

++ With schedules to specify things like delivery dates, etc.

It would totally help, EU told, if data we held on migrants was accurate

Log files ...

Log files should be kept to monitor access, specifying who accessed a system and why, and these should be available to national data protection agencies and the European Data Protection Supervisor on request.

They should also be made available to the individual who's records are being looked at. It is s/he who is really going to take an interest and ask why the ex's brother is looking at their record.

BT to slash landline rentals by 37%... for the broadbandless

What to tell BT ...

You do not have fixed line Internet; Virgin provides you with a TV connection and chucks in some Internet.

I can see why BT might offer cheaper to non Internet people - the line can be cheaper & the card in the telephone exchange is POTS only (so cheaper), no load on its ATM network, etc. Well if you get Internet via Virgin/who-ever-cable then BT do not need to provide any of the expensive kit either.

Java-aaaargh! Google faces $9bn copyright bill after Oracle scores 'fair use' court appeal win

Re: Still reeling

The EU has some sanity by explicitly saying it cannot be copyrighted:

https://arstechnica.com/tech-policy/2012/05/eus-top-court-apis-cant-be-copyrighted-would-monopolise-ideas/

Ooooh - another area of EU/USA courts disagreeing, time to order more popcorn!

I hope that the EU view prevails.

Adobe: New Unified Customer Profile will personalise ads as never before

This is what GDPR was designed to kill

and I hope that it just does that - stone dead, wooden stake through its heart.

Fleeing Facebook app users realise what they agreed to in apps years ago – total slurpage

Re: Facebook forcing people to use Messenger on mobile

in the past few months they disabled the messaging part from mobile website forcing people to use their Messaging app

Does this not fall under the computer misuse act ? You have not given FB permission to make such a change ... but it does it.

Airbus ditches Microsoft, flies off to Google

Re: "and switching to plain text"

and an UTF document will never be in "plain text" and an UTF document will never be in "plain text"

In a modern environment plain text is UTF-8.

Anyway the distinction being drawn is between a structured binary file (eg .ofd or .docx) and a text file containing some kind of markup (eg: markdown, LaTeX or even troff!) Both have their advantages.

Maplin shutdown sale prices still HIGHER than rivals

Support from Maplin ?

so how much support do you think that Maplin will give you on kit that you buy from them today ?

Dead companies do not give support -- which is part of the reason why the price as to be low enough to make the risk worth while.

Privacy folk raise alarm over schools snooping on kids' online habits

web web proxies for schools: Squid + DansGuardian

I remember doing that .... looking at the web logs the most enthusiastic 'pink pixel' site visitors were the teachers.

Much easier to get a robot ...

to monitor children than for adults (teachers in this case) to know what the kids in their charge are up to.

What kids need is to trust adults and be confident enough that they will seek guidance Adults should spend time with them, adults should get to know and care for them -- and the kids be aware that they are being cared for. A computer is not a substitute for that.

Also: kids will get up to a little mischief, and have done so for millennia, it is good for them to push boundaries, to explore as they get older. Feel the consequences of going too far. What about the perve from the Internet I hear people say -- that is what you need to build adult/child trust for -- so that the adult will get to know and so react/guide in what is really a relatively rare situation.

Sexting: education as to why it is a bad idea, then support/admonishment when it does happen. Making criminals out of kids for this is over the top.

Bullying: this is not new, on-line bullying is just a development, just as when kids stopped using slates and started using paper in the classroom.

Naughty pictures on the Internet ? A natural curiosity. 'No' is not the answer (& impossible to achieve), but educate the differences between sex & relationships, romance & love. Not new anyway -- in my day it was smuggled copies of Playboy.

All of the above need adults (teachers & parents) to spend time with kids, get to know them.

The trouble with a solicitor driven risk averse society is that kids are not allowed to be kids.

Man who gave interviews about his crimes asks court to delete Google results

Re: Easy one

Do I get moderated for speculating that NT1 is not Lord Lucan ?

So if I fall prey to NT2 ...

in a few years time, in spite of having done a search to try to determine if he is an honourable character - which draws a blank because he has been 'forgotten'. Can I seek compensation from google/etc or the courts or ... ?

Right to be forgotten should be about personal things (affairs, etc) and for those under 25; not those who have indulged in criminal activity.

.

Anyway: why go after search engines, surely the newspapers, etc, are the right targets ?

UK.gov's shift to AWS: It's squeaky-bum time for small cloud pushers

No joined up thinking at all

Individual government departments each seeking to save a few bob off their own budget; whereas, maybe for a little more, they could 'buy British' - which creates jobs, etc, in the UK that DO pay tax, that DO build up UK expertise, that DOES make them better able to complete internationally, that DOES keep British data within our borders, ...

Overall a few different choices ends up benefiting Britain overall.

But politicians won't do that: each trying to bring their departmental budgets down and, anyway, the benefits of beefing up British business probably won't be noticeable until after the next election -- so they don't give a toss!

HP is turning off 'Always On' data deals but won't say why

Bait & switch

Trading standards should get involved ... except that they have little money do to what they should these days.

Trouble is that most will soon forget that HP are liars by the time that they next buy something.

Auto manufacturers are asleep at the wheel when it comes to security

What motivation car manufacturers ?

A car stolen leads to a replacement being bought.

Like IoT the cost of a security failure is borne by the consumer; the cost of making secure is borne by the manufacturer.

Surprise: Norks not actually behind Olympic Destroyer malware outbreak – Kaspersky

No one will read this new report ...

other than a few nerds. However at the time the politicos made great hay of it being the Norks - which suits their political ends of portraying Kim Jong-il as being the current root of all evil and a great nuclear threat - not ½ as many words spoken when Putin did the same last week.

I'm not saying that Kim is a nice bloke, but lets start to compare him to Bashar al-Assad, Robert Mugabe, ...

Your entire ID is worth £820 to crooks on dark web black market

New business ...

generate made up IDs by the dozen and flog them off. Getting a good reputation in the first place on the dark web might be hard.

Do it too many times and someone might order me some cement overshoes, but I would have thought low risk.

Buffer overflow in Unix mailer Exim imperils 400,000 email servers

Re: There are alternatives...

Exim is still good for that.

UK.gov cooks up code of conduct to enforce a smidge of security on Internet of S**t kit

The vendor to the consumer should be liable ...

otherwise they will simply refer customers to the manufacturer; which is probably somewhere in China that ignore complaints. This will ensure that resellers will sell stuff that causes them least problems, ie kit that it well designed, tested and is well supported, etc. If a manufacturer cannot provide assurance, etc, they won't get sales - simples.

Also product (support) lifetimes should be reasonable. This does not mean 'until the next model is released', but the real lifetime that one expects. So: for a fridge - maybe 20 years, light switch - 50 years.

Women of Infosec call bullsh*t on RSA's claim it could only find one female speaker

Can we take gender out of computing

Let's be completely blind about speakers' irrelevant human attributes: weight, height, skin colour, gender; .... What matters is: do they know their stuff; is it relevant; can they speak in an engaging way ?

123 Reg suffers deja vu: Websites restored from August 2017 backups amid storage meltdown

Why do people still use 123reg ?

I suppose that their customers must be those who are new enough to this to have not realised that, as far as 123reg in concerned, cheap means expensive in terms of time lost.

Sysadmin left finger on power button for an hour to avert SAP outage

Typed 'Reboot' where ... ?

Telnetted into various Unix machines, wanted to restart the one in the server room. Whoops - I forgot which machine I was logged into and typed 'reboot' to a machine on the other side of the planet. It did not come up, had to wait until teatime for the guys there to come in and push a button :-(

Euro Commission gives tech firms an hour to take down terror content

This stuff terrifies me ...

can we please have it removed from the EU web site.

Equifax peeks under couch, finds 2.4 million more folk hit by breach

Re: They can no longer be trusted

follow the money

Google: Class search results as journalism so we can dodge Right To Be Forgotten

Re: Fahrenheit 451

We all did silly things when we were young and naive...

Agreed

I think there also needs to be a Statute of limitations of articles.

But only in some circumstances; perhaps some combination of:

* Petty crime, eg stealing a car, getting into fights, using (not dealing) drugs, ...

* Under a certain age. I would put this at acts done under 25, 5 years after the act was done. 25 might seem high but a magistrate friend of mine tell me that she saw the same youths time & again, then at 25 they asked for other things 'to be taken into account' - then she would not see them again. It appears to be an age at which many of us finally grow up.

* Maybe acts done under 20 should drop out of sight after 2 years.

Billionaire's Babylon beach ban battle barrels toward Supreme Court

Access via the sea in a boat ?

OK: not for everyone, but has anyone done that ?

Vatican sets up dedicated exorcism training course

Exorcism

is the catholic church's equivalent to the E-meter

A bit of intel on AMD's embedded Epyc and Ryzen processors

Re: Spectre & Meltdown

Who pays your bills ? Intel ?

If you were a half awake typical technical reader of El Reg you would well know that Meltdown is almost entirely an Intel problem - and that Intel is trying to blur the distinction.

Spectre does affect most chip vendors.

Fun fact: US Customs slaps eyeglass taxes on optical networking gear

Simple solution

Don't call it 'optical' but something like 'ultra short microwave'.

Who wanted a future in which AI can copy your voice and say things you never uttered? Who?!

Plausible deniability

"Your Honour must disregard that sound clip that the police produced in court. I never said that. I believe that the police have used AI to generate a fake recording."

Samsung left off Google's new official Androids-for-biz list

Who does Android Enterprise Recommended benefit ?

Google, the hardware vendor or the purchaser ?

I don't know, but doubt that it is the purchaser.

US state legal supremos show lots of love for proposed CLOUD Act (a law to snoop on citizens' info stored abroad)

Re: Agents of SHIELD link

A more accurate expansion of CLOUD is Companies Located Overseas Under Duress.

Or Computers Located Overseas Under Duress.

Use ad blockers? Mine some Monero to get access to news, says US site

Re: Go back to discrete ads served off your own machines

You just tell the advertiser you've served loads of ads and they'll believe you and give you tons of cash! Don't know why no-one's thought of this before....

Oh I do understand that it is harder. But it could be done ... independent audits & a bit of trust (which is sadly lacking in today's commerce).

The biggest problem is going to be deciding which ads to show on which page. In some ways it should be simpler: what is the page topic? Put something related. But ad flingers seem to want something much more dynamic & up to the minute. But fixed ads worked in print, so maybe a retro-ad movement might be a solution.

The only reason that the ads get blocked ...

it because they are not displaying them as in-line content generated by their web site; they have put ad-monger's javascript in their web site that would put so called 'tailored' adverts on their web page.

It is this javascript driven shmuck that I object to; partly because of the attempted tracking, partly because it eats bandwidth/slows the browser and partly as it is often garish, auto-plays noise/sound.

Go back to discrete ads served off your own machines and you will find that most of it gets displayed. Yes: you might earn less per page impression, but something is better than the nothing that you will get if I go elsewhere.

Careful with the 'virtual hugs' says new FreeBSD Code of Conduct

Re: TUBE

and then their next step is to try to get them no-platformed because their ideas make them feel uncomfortable.

What is a 'hug' ?

To one person a 'hug' might mean 'sympathy' (over a loss, misfortune, ...) while another might read it as an attempt of physical, sexual, ... closeness. The interpretation might even depend on how you feel about the person saying/hearing the word.

This big problem with this code of conduct is that it places too much weight on the perception of the 'listener' of the comments; a code of conduct should deal with the intent of the 'speaker'.

Add to this that we are dealing with people from all over the world with varying abilities in English/whatever, and who use words that have different subtleties of meaning in different cultures. Just because a geek can speak good techno-babble does not mean that they understand the nuances of all words.

Also we all make mistakes: how often has a smart/funny comment seemed great in your head but you realise a disaster when it comes out of your mouth ?

I am worried that someone will find themselves with a ban and either not understand why or feel that they are maligned by the ban.

I also worry that people will abuse the code of conduct to hurt someone who they dislike.

Windows slithers on to Arm, legless?

Wedded to Intel

That is part of Microsoft's problem. One CPU/instruction-set has really made things simpler for them and their users. However it is really difficult for them to change; 16 -> 32 -> 64 bit has caused enough problems.

This is something that Unix has addressed from the start. I remember 30+ years ago porting my programs to at least 3 different instruction-sets before I considered it ready for others to test. So different platforms have always been part of *nix programmer & user expectations, part of the culture.

Yes: need to think a bit more, but once you have the idea not that hard.

Opportunity knocked? Rover survives Martian winter, may not survive budget cuts

2 years Opportunity = Trump's new gin cabinet

He has a new fridge installed on Air Force one at double the price of Opportunity's annual maintainance.

Chrome adblockalypse will 'accelerate Google-Facebook duopoly'

Blocking Google

I no longer use google as a search engine - there are many others; hard to get completely free of them when, eg, some site comes up with a link to google maps. I doubt that google care if they do not see the 1% of people like me - plenty of other eyeballs to push ads at.

Crypto-gurus: Which idiots told the FBI that Feds-only backdoors in encryption are possible?

Please also ask T May

our Pry Minister - who also believes that Magic IT Pixie dust can make secure back doors.