* Posts by taxman

415 posts • joined 14 Sep 2010


Pokémon Go players fined for breaking down-under COVID-19 lockdown rules


Re: Crazy

So playing a GPS game based on being at real world locations (except that isn't the case) but doing it in a "virtual world" just seems to imply that the game you play could be run from being in a virtual world anyway ?

Going back to the item tho'. It just goes to show that there are a number of adults who think chasing after imaginary creatures based on code held in a database being actually on their streets is healthy.

E-scooter fanboy so hyped for Teesside to host UK's first trial


You obviously don't have any experience of Teesside, Have had 35 years there I agree you won't see many left lying around. Most will be lifted off the streets and later found around South Bank, Redcar, Cargo Fleet, Stockton, Thornaby and Haverton Hill.

Easyjet hacked: 9 million people's data accessed plus 2,200 folks' credit card details grabbed


That's a first!

So it is earier getting data and creadit card details from EasyJet than getting a refund on a cancelled flight!

Was due to go to Krakow in March but as Poland shut the airport EasyJet cancelled the flights. Got a refund for the flight out - but the flight back has been deleted from my bookings making the task of applying for a refund a tad difficult. Trying the creditcard route but they are similarly in being un-cooperative.

Capita, Fujitsu and pals tuck into slices of £3bn London NHS framework


3 Billion for IT?

Well I just checked the calendar because, well you know, it's easy to lose track of days at present. But nope. It's not April 1st!

We're doomed! Doomed, I tell you!

Crooks set up stall on UK govt's IT marketplace to peddle email fraud services targeting 'gullible' punters


Replacement for TITSUP

You guys need words for COCKUP, for future Cabinet Office efforts to confirm their continued qualification of the IT equivalent of the Darwin Award.

Brit competition regulator will soon be able to seize rogue traders' domains – and even Amazon accounts


So by saying...

"........ that the new powers are entering UK law as a result of changes made at EU level.", does that mean that if the UK had not been in the EU that this would have gotten onto the statute books?

If so then perhaps a good job things were delayed a tad.

Dutch spies helped Britain's GCHQ break Argentine crypto during Falklands War


Great name, great beer

From Augustiner. Delicious dark 7.5% beer. One to drink slowly, and goes great with a venison stew and rye bread. Can understand why the BND staff liked it.

Interesting that news of this group is now open source. But like all good secrets....

As Brit cyber-spies drop 'whitelist' and 'blacklist', tech boss says: If you’re thinking about getting in touch saying this is political correctness gone mad, don’t bother


May we still use

the terms of Dr Death and the Hobbit when referring questions to NCSC?

Bye, Russia: NASA wheels out astronauts, describes plan for first all-American manned launch into orbit since 2011


Ah, the memories

Looking at the capsule and fins behind it I am strongly reminded of the capsule of Fireball XL5!

Browse mode: We're not goofing off on the Sidebar of Shame and online shopping sites, says UK's Ministry of Defence


Re: Amazon

Why are they looking at amazon.com rather than .co.uk? Probably because there are regular visits to the US by MoD staff who could buy for themselves or pickup for colleagues without having to pay import tax. And not just visits to the US but they have a number of staff across the globe who would not use .co.uk.

But as a CS person of some years I am really surprised that the Daily Fail is so high up the list. That rag is not really read by the majority of CS staff.

Hey, Brits. Your Google data is leaving the EU before you are: Hoard to be shipped from Ireland to US next month


Government and Personal Data

Offshoring of Government data (that is any data held by Gov Depts being) has been fairly strictly controlled to a few countries. If memory serves me right it doesn't like any data going outside the EEA.

So I wonder if the Cabinet Office OGSIRO has issued a missive to Depts to ask which of them still us Google services. It wasn't all that long ago that some *large* ones did.

See also https://ico.org.uk/about-the-ico/news-and-events/news-and-blogs/2020/01/statement-on-data-protection-and-brexit-implementation-what-you-need-to-do/



Latest battery bruiser Android from budget Moto G range appears ahead of MWC after an Amazon whoopsie


Working outdoors

...in the UK it is really useful having a phone that can stand being used in rain - often. Shame this phone is only rain resistant (so would need drying off thoroughly before being put int a pocket again).

Not call, dude: UK govt says guaranteed surcharge-free EU roaming will end after Brexit transition period. Brits left at the mercy of networks


Has it started?

Try looking around for SIM only monthly deals. There used to a lot around at one point but now you have to be spending over £20 pm for data you don't want for the most part. GiffGaff still provide lower data levels for reasonable amounts, if you want to rely on the O2 coverage - not so good if you are in the Western part of the Isles. There are a couple of other smaller players too offering monthly deals. However, the big players have pulled out of these deals (latest being Three)and now require you to sign up for 12 or 24 month contracts if you want SIM deals at a similar price to their "old" monthly price.

El Reg tries – and fails – to get its talons on a Brexit tea towel



Still, we have ours on order anyway (£2.50 postage is not included). While it won't be here in time to mop up the spilled Champagne/floods of tears (delete as appropriate by the end of the month), hopefully it will survive to the end of 2020, when the real excrement will start.

Then it will be a bit damp, sport a few distressing stains and suffer a little fraying at the edges.

Welcome to The Reg's poetry corner... hiQ once again / beats LinkedIn on web scrape case / more appeals await


Take control

So if LinkedIn used, say, a WAF in front of their services that utilised rate limiting and repetition request rules to protect their customers being able to access their services how would the Courts deal with that? Could also go by reputation rules so that anything that looked like a scraper would be blocked if the browser action continued for several minutes it would get blocked for a cool down period.

All in the interest of protecting their service availability and customer access of course.

Pokemon No! Good news: You can now ban the virtual pests, er, pets to stop nerds wandering around your property


And the Rest of the World?

With respect to Pokémon GO in the United States:

So what about the rest of the world that also has to put up with these "players" cluttering up the streets and hanging around our homes?

And will this also be relevant to their other games like Ingress that uses the same locations, and the new Harry Potter "game" due out soon?

Veeam. Veeam. Veeeeeeeam. What was that? Oh, just the sound of half a billion bucks hitting backup biz's bucket


Veeam veeam

Does this mean that we can hopefully expect some interesting freebies at Infosec this year?

Word up: Embedded vids in Office docs can hide embedded nasties, infosec bods warn


MS Word conduit?

See icon

Got a new Surface? Have some firmware. Old Surface? La la la la la, we can't hear you


HP Sauce

Well my HP Touchpad is still working fine.

But I wonder how many UK Gov workers are having problems seeing as some Depts switched over to SP3s and 4s a couple of years ago.

Why are sat-nav walking directions always so hopeless?

Thumb Up

And even the free version provides you with access to enough maps and bells and whistles to enjoy while working out what those close brown wiggly lines mean to your rate of breathing!

Perfect timing for a two-bank TITSUP: Totally Inexcusable They've Stuffed Up Payday


Too much a coincidence?

One or two banks perhaps, but so many different businesses within a short space of time should make one think is there more to this than meets the eyes? Or is that just my normal suspicious self?

Still, glad I never made the decision to move over to using a mobile application. Never liked or trusted them.

Fallover Friday: NatWest, RBS and Ulster Bank go TITSUP*


Banks, banks and banks

Today the RBS group of banks (that all use the same firewall with such a single point of failure?), Barclays yesterday, Lloyds not so long ago along with Halifax. And so the list of names goes on. Seems to becoming more prevalent - and at a time when King Cash is being threatened. It does make you wonder if somewhere in the world there is a rubbing of hands.

Like tax? Love networks? UK taxmen have a job just for you


Re: Twaddle

At this grade it could be a CBE.

And how likely that the successful candidate could also be a Scot (or if an outsider some one from Sainsbury - HMRC appear to have given up on folk from Severn Trent and mobile phone companies for the time being).

Email security crisis... What email security crisis?


Re: Email is absolutely broken...

To secure YOUR sending emails you'll need the SPF/DKIM/DMARC trio applied - but that doesn't stop fraudulent email from coming in to you. In addition to setting up your own email receipt rules (like how can an email purporting to be from your own business be coming in from outside your domain) you need every other email sender to apply the trio - and/or use (read pay for) a propriety protection or alert system. Which is a growing industry.

The IETF have had plenty of time - and examples - to examine how broken email RFCs are and, along with the apwg and MAAWG, could have started to address some of issues (like checks on the header from address in addition to the envelope from address, IP/domain chains....). But perhaps they have realised that as use of email has progressed beyond that envisaged that it may be easier to try to educate to end user. Unfortunately that cannot be applied in many cases.

Dixons Carphone 'fesses to mega-breach: Probes 'attempt to compromise' 5.9m payment cards


Half a story

What I find interesting about a large number of these data breach stories is that so often there is one piece of information missing that is really useful - the period of the breach. This is not even mentioned in the press release from Dixons.

Techies! Britain's defence secretary wants you – for cyber-sniping at Russia


Joint Cyber Reserve

Had a thought about this way in, extra pay, chance to mess a bit with some more interesting pentest/hack/cracking stuff...then realised that perhaps the joint bit wasn't what I thought it could be when I read about the sailor being busted on HMS Queen Liz for peddling.

Sherlocks bong is the nearest thing

UK 'wife'-carrying champion named

Thumb Up

The Alternative one

Perhaps a little more trying for competitors with there being a little more up and down involved....it being Wales of course


Hypersonic nukes! Nuclear-powered drone subs! Putin unwraps his new (propaganda) toys


Trumps pal (allegedly)

Great announcement from the Russian Leader to enable the current US of A Leader demand greater spending on Defence (and De-Wall).

You don't think this is another way of "controlling" the US of A folk now that the social media front has been blown?

Scouse marketing scamps scalped £70k for 100,000+ nuisance calls


Re: And people wonder why we dumped our landline ?

And have you seen all the permissions the TrueCaller app wants to have on your phone? Microphone, picture gallery, camera, wifi connection info, com sec permission read and write......

Former UK.gov IT man and Python king's guide to neural networks


Re: Well...

Indeed. "That enabled them to expand from using just BlackBerry devices into support for Android, iOS and Chromebooks. "I was proud of that," he adds" Most still using Blackberry phones, odd bits like MoD accept Apple in "some" places. Some are using Windows OS phones.

Android? CESG passed Samsung Knox a couple of years ago but hasn't got traction yet.

But yes, Seems a nice guy. But why years working in a relatively low paid job!

MPs accuse Amazon and eBay of profiteering from VAT fraudsters


Ahem *Whois* cough

So HMRC, nay but also GDS and central Gov use Amazon for their own services.

Less of an elephant in the room, more a Brontosaurus!

Cybersecurity world faces 'chronic shortage' of qualified staff


Endemic problems

One of the issues often seen is that "management" are keen to be known as "experts" but do not have the aptitude or passion for the subject.

Once you get "management" to understand that they have to recognise that those with the correct aptitude and passion for the work should have money spent on them to obtain qualifications rather than "managers" who use the cash to attend "cyber" conferences, then you might, just might, get an improvement.

And Senior Management also need to start understanding that they need IT managers in place who also have an aptitude and passion for the work - and these need to be listened to. So often you see IT Dept managers who have no operational interest or ability but know who to appease Senior Management as that is where they have set their target to get to.

DMARC anti-phishing standard adoption is lagging even in big firms


“Deploying a DMARC policy where p=none along with a relevant SPF record is simple, but it is only the first step......"

Just having a DMARC record in place is a chocolate fireguard. Perhaps when writing reports like this the folk concerned really should make it clear that you also need a SPF or DKIM as well - as a minimum. But best to have both.

And yes we all know that DMARC+SPF alone "can" break when mail servers forward mail when p=reject. Particularly when mail forwarders or loadbalancers overwrite/insert their sending IP address in the header :-(

UK uni warns students of phishers trying to nick their tuition fees


Perhaps GoDaddy are having problems contacting the site admin Walid Sayed

Nearly three-quarters of convicted TV Licence non-payers are women


Re: See me...

"Cleveland topped the charts for the number of suspected evaders....."

Another very basic error. That county was abolished over 20 years ago and the area divided into 4 unitary borough councils. So really Warwickshire was top and London second.

Specsavers embraces Azure and AWS, recoils at Oracle's 'wow' factor

Paris Hilton

Re: Interesting

More interestingly will Louise McCarthy be leaving too. She was under Pavitt in TfL, HMRC, Aviva and now Specsavers.

Track record suggests.....

And could Pavitt return to HMRC now Dearnley has left?

Identity disorder: Does UK govt need Verify more than we do?


Re: Pension Forecast

You don't need a GGW account for a pension forecast, just a printer attached to your PC to print a form off and post it. Keeps folk employed (post office, drivers, civil servants).

And before you comment - how do you know if your application isn't just printed off at the other end and handled just like a posted application :-)

Update or shut up: Microsoft's choice for desktop Skypers


DLP disaster awaiting?

"....... the better to allow baked-in services like file sharing from within the Skype client....."

Oh dear. What could possibly go wrong here?

GCHQ cyber-chief slams security outfits peddling 'medieval witchcraft'


Bad news

Inland Revenue service? That's not existed for over 10 years.

If it refers to HMRC then they "got off their arse" and implemented DMARC and SPF back in 2013 and have been trying to get others to follow suit. Looks like their actions have been noticed and now NCSC have taken up the baton.

Parliamentary watchdog: Bank IT concerns not yet addressed


Regulating the FCA

Perhaps it would be an idea if the FCA looked into www.fssvcuk.com.

Looks like the FSA have now moved their operations to The Philippines!

GDS has no real strategy for £450m budget pot, internal plan reveals


Re: Top Civil Servants

If only that were true. Trouble with GDS is that this was a Cabinet Office initiative bringing in "experts" from outside the Civil Service to provide expert advice on how IT dev should be done. So althought a number of these are now CS they are not old stream....who have got their hands dirty by keeping legacy systems running and trying to do things on a shoestring as all the funding appears to go to new web functions with "cool" fonts.

£450m given to Depts would result in a lot of infrastructure improvements...but to GDS?!!!

Pentagon fastens lasers to military drones to zap missiles out of the skies


Dale Brown

Wings of Fire AL-52 Dragon plane.

Just saying

RBS and Natwest online banking goes titsup


El Reg Phishing?

Lovely piece of work. Say a site isn't up and running and make a note of all those who say they have no problem logging in.

So you bank with........ do you ;-) Thanks.

(email address, pseudonyms, bank.....)

BBC News website takes New Year's Eve break


Re: Akamai? Breach?

Then again are the Beeb just using Akamai for CDN rather than CDN and DDoS protection? They do have some IP addresses out in plain sight so a DDoS could have gone through the back door

Try looking up without the www and you get

canonical name bbc.co.uk.




Oh Dear


Address lookup

canonical name a1733.g.akamai.net.

aliases www.bbc.co.uk



So either it was a massive DDoS that could overcome Akamai's Edgeserevrs (assuming BBC do not just use European ones) or there was a bit of a cockup in some configuration activity within BBC or Akamai.

GCHQ creates Github repo, offers graph database code


Just a thought

Perhaps they are showing that they can produce better code than GDS as well as other things better than GDS?

So perhaps an attempt to shaft plans of GDS/Cabinet Office to take work away from CESG/GCHQ?

Bridge, ship 'n' tunnel – the Brunels' hidden Thames trip


I remember breaking ground on this back in 1975 when working for the Brunel Exhibition Rotherhithe through CSV. Two of us a shovel and a sledgehammer working a derelict site. Didn't make much of an impact and annoyed neighbours on a Sunday morning but found interesting hoards of illicit goods buried under rubble on the site.

Google polishes Chrome security with Password Alert


Black pots and kettles

What WOULD be of use to the world would be if Google stopped allowing it's mailing system be used by phishers in the first place.

Yahoo! Mail! goes! titsup! in! Blighty! due! to! mystery! error!


Re: Yahoo and DKIM

The thing about BT is that they are causing denials themselves with their CPcloud server acting as a mail forwarder. If you look at BT they are running THREE email services under the name of BTInternet.com, one of which uses the Yahoo! mail service. To direct to mail to the correct service the CPcloud server is stripping off the original header info and substitutes itself as the sender. A great way to get mail be labelled as Spam.



Biting the hand that feeds IT © 1998–2020