Re: Rather self inflicted
I'll take you up on that. I would wager a round of drinks that the largest contributors were unpatched Internet of Shit devices and old routers handed out by ISPs. Then probably Windows machines.
321 publicly visible posts • joined 15 Jul 2010
The newest machines that can't (or rather, won't) run Windows 11 are 8 years old. I don't think it's going to affect the Commercial sector all that much; any given company rarely has anything that old. That being said, converting the users over to 11 is still an ongoing headache where I am. Home users are unlikely to give a damn whether or not they still get updates, to our detriment more than theirs.
Our security team forbids labelling servers, should any ne'er-do-wells get in and head straight to the backup server or domain controller.
Process is to look things up in the rack elevation tables, which are kept *pretty* well up to date and have someone flash a light on the thing to be doubly sure. Which sounds ridiculous, but I never trusted labels in the first place so it really just eliminates step one of three in identification with the other two steps above now being canon.
It's got ages of support, and any commonly failing bits can be replaced by the user. It's not bad for the money, especially since it's not pretty much obsolete at release like previous Fairphones were. This is the first time I can say it's a decent spec, albeit on the pricey side for said spec.
The last three phones to go out of use went like this:
Huawei V20 - Destroyed when the Missus used it for a Pokemon Go "baby" account and dropped it while trying to play on both hands at once. Well, not "destroyed", but a new screen worth more than the phone was needed. Processed at the local Recycling Centre.
Xiaomi Redmi Note 9 Pro - Donated to the Child, who was now old enough for a smart phone. It does not receive updates any more, but he's 14 and it doesn't matter. The Missus got a Note 12 Pro out of the deal. Which will probably eventually go to the Child when she gets a Note 16 Pro or something. Pokemon is rough on the battery and Xiaomis aren't any awful lot more new than a battery replacement is. Note 9 Pro will probably go in a drawer, being far too old to usefully trade in. My mum can use it when visiting from Canada.
Google Pixel 7 - Ah, here's the one. Google offered a Trade-in Bonus and a sale price on the Pixel 9 at the same time. I didn't *need* a new phone, but swapping a 7 for a 9 for £180 after trade in was too tempting to leave on the table. So hopefully someone is using my old Pixel 7 somewhere. Barring another deal like that, I expect to keep the Pixel 9 for 6-ish years.
So to get a useful trade-in, one must offer a useful trade-in deal. I felt slight guilt at swapping out a 2 year-old phone, but it does pretty much ensure it actually gets used, and paying £90/year to stay updated to the latest seems a decent value.
I mean, I mostly wouldn't buy them because they're turning out bad cars now. VW used to make a pretty decent machine, but their massive cost cutting (partly due to overinvestment in China, where the local carmakers have taken back a large part of the market) has resulted in some pretty poor models of late. Add to that the baffling decision a few years back to make every control in the car touch sensitive that they're only slowly rolling back now due to horrendous feedback from owners. I was in an Audi Q4 a few months ago, and the assembly quality and materials were shocking for what's supposedly a premium model. My Mazda is nicer.
Dieselgate ranks second in my reasons for avoiding them, because as others have said nearly everyone was gaming that system. Just not quite so nakedly cheating as VW was.
Celerons have see-sawed back and forth between "junk" and "pretty good deal" a number of times over the years. Mendocino and Tualatin Celerons? Brilliant for the money. Anything Netburst-based? Horrible junk. When they first went dual core back in Sandy Bridge days, they were a good deal again. But became junk as they kept the 2 cores only for 10 years. The very last Alder Lake ones with 1xP and 4xE cores were decent again. I suppose there are also the Atom-based ones, which really depended on usage (for a NAS? Great. For a laptop? Junk).
The security risks in deploying automation and renewing so often are surely greater than the risk of a compromised certificate. As you say, you almost never hear about such things and it would be rather big news for a major site. Even the rare compromise I've heard of has been at the intermediate/CA level where they have to cancel and then re-issue certs anyhow.
I work for a University. It's going to suck. Data Security have decided that an internal CA is not good enough for them, and we need commercial (because they also demand OV certs) certs for every bit of network kit. It's not so much the cost - Universities have a bulk buying power through JISC and GEANT - it's the headache of dozens of appliances that *cannot* have their certs renewed in an automated manner. Eventually everything will get updated to play nice, but I humbly predict that will happen after the certpocalypse these changes will bring. We're already paying extra for some commercial code to make certbot and the Citrix frontend play nice together and it's going to get worse. The contractors will be laughing.
"Do the SE / mini and they'll sell a mountain of them"
It's a common opinion, but the actual fact is that both the SE and the Mini are poor sellers - the discounted previous year's iPhone usually sells much better than them.
You could argue that this has a lot to do with Apple's pricing model rather than the devices, but that's just how Apple is and they're not going to change.
You can still find 3060/4060 Ti cards for not horrifying prices on Ebay, if you're okay with used. Should be well over 100% faster than an RX580. I have a 3060Ti and it's fine for 1440 gaming if you're not too into the whole ray tracing thing. DLSS3/4 is a massive, massive advantage to Nvidia cards because you can run in Performance mode with DLSS4 and still get great visuals and it really ramps the performance up.
It's the same (DNS block only) on Community Fibre, which I imagine is hugely popular with any London-based readers here. Given that setting my DNS to something else is one of the first things I do on an ISP's new router I've never seen any of the pirate sites blocked. I actually set the router to 1.1.1.3 (for the kiddies) and 1.1.1.1/8.8.8.8 directly on any devices where I care about such things being blocked. I keep saying I should make a PiHole, but I never get a round tuit.
As aggravating as Nvidia can be at times, I do have a grudging admiration for their ability to execute their plans over the past 10 years or so. Sort of like Intel was 15 year ago. AMD and Intel can't get into the market not because their products are particularly inferior (though you could argue lack of CUDA makes them so), but because Nvidia hasn't put a foot wrong in a very long time in IT years. Even with a *better* product, when the market leader has 90% of the market it's not enough. They have to make a mistake. And I think one thing that Nvidia has and the other two don't that helps them not bugger it up is that they actually know where they're going. CUDA's dominance is the result of a near-20 year campaign to put it where it is. I don't see anything out of AMD that indicates that kind of vision on the GPU front.
I did mention Intel before to point out that it's not inevitable that Nvidia continues to eat all the pies. Hubris is a thing in IT, and Intel was certainly guilty of it. They still dominate the market of course, but they've shown their weak side and AMD continues to nibble away at their marketshare. And this is exactly the sort of boost that the ARM-based companies need to get their foot into the lucrative consumer desktop/laptop world. Maybe finally become a general purpose option in the server room, too. One wrong step out of Nvidia when AMD or Intel are having a good year could cause a seismic shift in the GPU market. Let's see what 2025 brings us.
I manage rolling out Ubuntu with ansible, and one of the first steps in main.yml is uninstalling snap. I still prefer Debian, but there are a few things installed in the past that preferred Ubuntu for various reasons (eg: GitHub) I think most of those will now work on Debian as well, but you know how it is with these things hanging on.
There's a decent enough reason for the death of the manual transmission at least. It doesn't work too well with proper (not this "mild" nonsense) hybrids, and electric vehicles don't have gears at all.
The connected nonsense is exactly that, though. I know someone with a new RAV4 who gets a big reminder that they should sign up to Toyota's connected services every time they turn the car on.
I appreciate that there's always a painful price increase for the best of the best, but $200 extra for 200MHz and 4 E-cores really can't appeal to that many people. Or is the intent to make the $70 jump from 245K to 265K (2 more P-cores, 6 more E-cores, *and* 200MHz) look even more appealing than it already is?
"purchase store-sold software"
My inner 13 year-old is aghast. The closest we ever came to paying full price for software was pooling our money together to buy one for the five of us and then tearing apart the codewheel and photocopying it five times. I'm not even sure I grokked what piracy *was*, but I certainly didn't pay for any of my software. I had well over 100 floppies to go with it when I finally sold my C=64 onwards.
(NB: I'm not proud of this, it's simply how it was for a kid with no job)
And a lot of generational gains in the old days were purely on the clockspeed advantage a new process would bring. A 286-16 and a 386-16 were not too far apart in performance, but that was the fastest 286 and the 386 eventually hit 40MHz. Clockspeed is pretty much at a standstill now. Zen 5 is not running any faster than Zen 4 and has to rely purely on architectural advances (which are a lot harder to employ than cranking the clocks up) to be faster.
Clockspeed could work both ways, of course. I had an outrageously overclocked 486 that ran at 160MHz, which kept it competitive with the Pentium 75. The Pentium was an absolutely massive upgrade over the 486 and I'm not sure Intel ever had a generational gain that large ever again.
Is why we bought a Mazda over a Volvo. One has a knob and button based interface for entertainment and maps for a screen that's at eye level on top of the dash and manual button control for HVAC. The other has a Tesla-esque "iPad in the middle of the dash console" interface for everything.
No country on Earth implements mandatory bicycle insurance. But it has been trialed many times and always abandoned as a waste of time and money. Last time I checked, only Japan and North Korea persisted with mandatory registration and number plates. Though Denmark and the Netherlands have mandatory VIN registration as an anti-theft measure, it's not illegal to ride without one.
There's a very long and drawn out conversation to be had around bicycle registration and insurance, but the easiest counter to it is that it's been tried many times and almost always abandoned as a waste of money with no tangible benefits offered. Most countries want to encourage their lazy population to ride a bike, and mandatory insurance is sort of at cross purposes with that. (Never mind that a majority of cyclists do have third party cover via other insurance) The fact is that bicycle injuries are infinitesimal if you remove the ones that happen whilst breaking the law. And then the solution is to enforce existing law, not introduce new ones that will still be unenforced.
I've a consumer-grade Seagate 250GB from 2006 sitting in my PC. As my personal desktop, it's had to endure tens of thousands of power cycles over its life which I'm sure makes for a harsher environment than running 24/7. It's still perfectly adequate as a MAME repository, so it will sit there until it dies. There's an old WD Green 750GB sitting next to it in the case, from 2009 or so. That just holds backups of useful data from the NAS. I'd say aside from some tranches of disks that clearly have some sort of manufacturing defect, the consumer kit is almost/just as reliable. (FWIW, the 2006 era 7200rpm Seagate is much, *much* faster than the Green. On the order of twice as fast. Those Greens are dog slow.)
My rationale kind of works like this:
I pay to subscribe to Netflix, Prime, and Cinema Paradiso's DVD rental service. If it's not available on one those... well, Hollywood, I tried. I honestly made an effort to give you money to watch what I want to watch. If that doesn't work, off to 1337x it is.
People can threaten to move from Zen, but in the Good Old Days Zen offered what was basically a business service to consumers at... well, slightly elevated prices for consumer service but quite a lot less than business services. If you move to anyone else and expect the same goodies, you're paying for a business account. I think Zen knows this and their reaction to a lot of the criticism has been along the lines of "suck it up, buttercup" because they know you'll just pay more for the same elsewhere and it will stop most people from leaving once they have a look around. Count yourselves lucky that Zen has enough of their own IPs that CGNAT isn't being forced down your throats.
Will be happy to be proven wrong on that, as it will give me something to look at for myself!