Posts by DavidRa

Cloudera had US candidates send resumes to a fake email address, DoJ charges

Why would there be any retries? You don't get a four day delay when you email an address with a typo and end up with [e-mail] instead of [e-mail] now do you?

You just get the non-delivery report straight away.

Project Glasswing and open source software: The good, the bad, and the ugly

Yeah yeah look at this genius with **working** code. Some of us chumps can't even get our code to compile.

Yahoo! Japan’s owner consolidating 164 OpenStack clusters into one

Re: Yahoo!

Spam is what the Gmail account is for. Actual people get a private address on a proper domain.

Hundreds of orgs compromised daily in Microsoft device code phishing attacks

Clean your own house first Microsoft

I suppose at some point they will consider allowing Azure stack hci (the premium hypervisor they want to push as a replacement for plain old Hyper-V clustering) to use real authentication to onboard then, not device flow?

Nah... Why do that when you can just blame others?

Hard drives already sold out for this year – AI to blame

Re: Think of the end game

It seems to me that it's all in weird custom form factors and connectors though. Your pokey little m.2 SSD outperforms SAS by a factor of three or more.

The server SSDs are suited only for the server grade kit they're plugged into and even the servers themselves are often custom sizes, or need liquid cooling.

Frankly it's a mess

AI vastly reduced stress of IPv6 migrations in university experiment

Ok then, what?

The underlying premise is that we have and need more computers than ipv4 addresses.

If you use class D and E space there will be lots of systems you have to replace because they consider those IPs invalid.

So obviously you can't do that. And even then it's a stopgap.

If you make the addresses longer then that's just IPv6 with a different number of bits. There is no possible way for an ipv4 only system to communicate with anything other than ipv4 systems because there's literally nowhere in the packet header for the extra bits.

And even then how do your routers know where to send the packets? They all have to understand and expect whatever new thing you're proposing.

IPv4 is by definition and by implementation fact exactly 32 bits and you can't magic in more bits while still keeping it only 32.

Patch or die: VMware vCenter Server bug fixed in 2024 under attack today

Free C&D for you!

Not mentioned, the Cease and Desist letter for having it installed after your maintenance is expired, even if you were under maintenance at the time

And you can't download it now unless you've paid the 10x price hike for the features you don't want or can't use.

Help desk boss fell for ‘Internet Cleaning Day’ prank - then swore he got the joke

Re: About a billion years ago in internet time (call it 1986) ...

It's always felt to me as if disgruntled should mean someone who has been deprived of their gruntles, and therefore that someone might instead be ungruntled, implying that they never had any gruntles with which to be gruntled in the first place.

Nextcloud cries foul over Google Play Store app rejection

Sure. And it's just coincidence that Google's own synchronisation app just happens to be the only one that won't be summarily broken by the change.

But hey choice is bad, just upload all your data to Google what could go wrong? No-one should have the right to avoid bundled services from the company that makes the phone OS right?

Users hated a new app – maybe so much they filed a fake support call

Re: "MS typically have only ever got each alternate version right"

Bloody autoscrewup

"the **rest** of eternity".

Re: "MS typically have only ever got each alternate version right"

Only if a random off the cuff comment from a developer is supposed to set an unchangeable roadmap for the test of eternity.

Microsoft total recalls Recall totally to Copilot+ PCs

Re: Alleged Use Case

> My work isn't organised or indexed by date; it's organised and indexed by project; I suspect that's true of most other people, too.

Of course it is. The point of recall is to ask questions like, "what did I do on the x project last week" or, "what was the name of the library I researched for chicken sexing a few days ago.

You have to understand that most people struggle to remember what they're presently eating let alone what they did a week ago.

I know it's the slippery slope argument but I'm still predicting that six months will go by and you'll be able to get cloud copilot to "assist" and mine more before it becomes automatic opt out.

Microsoft resets 'days since last Windows 11 problem' counter to 0

Re: M$

So somehow it's Microsoft's fault that a third party wrote a bad driver ...

You can argue you shouldn't get a stop error but you're ignoring thirty years of history, including third parties whinging that they were being locked out if Microsoft didn't allow them to write and install those crap drivers.

AI crawlers haven't learned to play nice with websites

I wouldn't mind seeing that, I have a few sites I'd really like to defend proactively.

'Gay furry hackers' say they've disbanded after raiding Project 2025's Heritage Foundation

Re: ...not that we're judging or anything

Not that we're judging? On the contrary, I propose that we judge away, and harshly at that.

Nasty regreSSHion bug in OpenSSH puts roughly 700K Linux boxes at risk

Re: 2024 finally Year of the Windows desktop

Yes it is OpenSSH but it's not like Windows uses glibc and UNIX signals. I suspect that might make it *slightly* harder to exploit on Windows.

Microsoft to tackle spam by restricting Exchange Online bulk email

Spam can diaf, but this hits actual legitimate senders

And by legitimate senders I mean things like mailboxes for your helpdesk platform for customers, your CRM etc. Just doing the maths for one app we have, it already has an extended-for-us limit of 2500 external recipients a day and we get to about 30% of the limits on a normal day and 70% on a busy day.

It's integrated with office 365 because that's where our other mailboxes are.

And now Microsoft wants more cash for the same function. We could send much more with on prem Exchange when we needed to, but cloud says no. We're not even a huge company - fewer than 20 staff.

And yes, we'll need to switch to ACS or similar. When the app supports that configuration, which it doesn't now and it isn't on the roadmap - oh yay more development cost because Microsoft wants more profits.

Microsoft veteran on how to blue screen your way to better testing

Re: Better testing

You said, "There is a better way and that's proven by the fact other OS don't have that same problem."

Unfortunately you seem to be unaware of the concepts of a UNIX/Linux/BSD/OSX kernel panic, original Mac "bomb" crash, which are all pretty much the same thing.

Something went wrong and continuing with error checks might corrupt things, so the safest thing to do is "Halt and catch fire". And it's a balancing act. Want stability? It'll cost more and/or be slower. Pick your poison.

As Broadcom nukes VMware's channel, the big winner is set to be Nutanix

AOOStar and MinisForums

There are a couple of different options I have found. AOOSTAR has some NUC-sized AMD units that have dual 2.5Gb networks plus wifi, three PCIe SSDs and up to probably 64GB of ram in the new one, and MinisForums put out the ms-01 recently with I think three SSD locations, dual 10Gb and dual 1Gb networks and a PCIe slot. That one supports 64GB but unofficially I've seen reports of 96 GB working.

I have a recent AOOStar unit and so far, so good.

What I haven't managed to find is a NUC / NUC+ sized box that will take 128GB or more.

Microsoft tests ‘Suggested Actions’ in Windows 11. Insiders: Can we turn it off?

Re: Just. Stop.

Well naturally. Why else are they so hellbent on ensuring that every machine is signed into a Microsoft account, even the ones that are isolated from the internet?

Atlassian boasts strong Q3 revenue growth in wake of two-week outage

Incompetence you say? All they did was create an internal API to unquestioningly and permanently delete things by number, and passed the wrong number to it. 800+ times. Because no-one noticed the wrong numbers were supplied.

Could happen to anyone!

Paris is looking at the list of IDs to be submitted to the API...

Free enterprise systems management tool Uyuni releases stable version

Meh, still needs openSUSE as the server

It does look like a great idea and is probably a good tool, but demands openSUSE for the server. So unless you're using it already, it's another Linux to learn and understand (while the base is the same the foibles matter a LOT).

Were it possible to deploy to Debian or Centos then maybe I'd consider it more thoughtfully.

Microsoft reveals revamped Azure CDN – in two editions

Ugh timing Microsoft!

I literally deployed Azure CDN today, brand new for a customer. The beauty of CDN plus storage account was low cost - I had a small static website that would have been literally cents per month. This change ratchets the costs up about 10000%. Couldn't you have waited a week till the project closed!? I would have avoided all the angst!

BOFH: The Geek's Countergambit – outwitted at an electronics store

Re: 3gb

Gave up on Seagate...

Don't know who makes all these now, but not one ever failed me.

Mostly Seagate and Western Digital.

Alert: Let's Encrypt to revoke about 2 million HTTPS certificates in two days

Re: Would be really nice

Thank you Bernard, that will be quite enough.

Say what you see: Four-letter fun on a late-night support call

Re: File a bug report to the manufacturer

The problem is that people don't read them anyway. Perfect case in point would be an error message that says

"Please call the help desk on 555 5555 and say that the Rostrum app had error Bingo"

They call and what you're told is that

* I can't log on

* There's no error message

* Windows is broken

* It's definitely not the same Bingo problem in Rostrum that twenty people have reported.

How do you make that any clearer?

GitHub's npm gave away a package name while it was in use, causing rethink

Re: In this case I think the correct decision was made.

I'm not so sure it's entirely on the dev. Surely part of the check before releasing the name should have included checking simple things, perhaps like "whether the bloody thing had been updated in the past year". I recognise that there are statements about "fixing the process" but really, given there was evidence of continuous use, it should be more like the ICANN result where the original owner gets it back.

Is it broken yet? Is it? Is it? Ooh that means I can buy a sparkly, new but otherwise hard-to-justify replacement!

I'm feeling personally attacked

How dare you sir? What gives you the right to denigrate me in this fashion? I'm shocked and appalled.

BOFH: I'm so pleased to be on the call, Boss. No, of course this isn't a recording

Re: Sorry I'm late

Is there any chance that some of them, or perhaps all of them, are... Alike?

Hi, Congress. FTC here. It would be so wonderful if you could let us recover money stolen from victims by crooks

Re: What's going on?

Just being deliberately obtuse perhaps, but this stance is consistent with the US stubborn belief that perfectly free markets are wonderful and business is the only thing worth supporting.

Allowing clawbacks for fraud opens businesses to such oppressive actions like having to deliver what's been sold lest the business have to refund.

I know it's not actually that had but it sure seems like it sometimes.

iFixit wants you to be legally able to break software locks to repair gizmos. Unsurprisingly, manufacturers are less keen

Re: Environmental repair tax

I am thinking of the company profits, and how good they'll look when not needlessly extracted from the pockets of the customers.

Microsoft previews Windows Server 2022: Someone took a spanner to core plumbing features

Re: Holds hand up....

I also prefer Core where possible but it's no longer true (if indeed it ever was) that there are fewer updates and reboots. Microsoft shot that idea down the moment they moved from individual updates to the CU model. Core and Desktop receive the same packages, same size and they install in about the same time on each.

I suspect I'm neither the first nor only person to call it the Cumulative Update for New Technology model on the back of Windows historical designation.

Buggy chkdsk in Windows update that caused boot failures and damaged file systems has been fixed

Re: When is it safe to make the jump?

For goodness sake. Windows 10 is more than five years old at this point. Windows 7 hasn't received security updates for a year.

You can pretend all you want that you're waiting to see what happens but reality says you've made the decision already to stay on old and familiar but increasingly insecure.

In my view you're the "XP is best" dinosaur from late Windows 7 timeframes.

What does my neighbour's Tesla have in common with a stairlift?

Re: EVs = bad for planet, bad for poor people, bad for practicality

I've considered the idea of solar + battery cars in the past, but even with double the efficiency of modern solar, I'd need 6m² of panels for the daily (220km) commute. I think I'm an outlier, but I don't think the fit for many will be as promising as Aptera suggest (since lots of parking is underground, for example, you're not going to get charged while you're away from the car).

Can't fault them for trying though.

Travel agent leaked customer data by – this is embarrassing – giving it away in a hackathon

Re: Postcodes [in the UK] can be personal too

It's not quite that simple though. Some postcodes in Australia cover quite large geographical areas with lots of people, others cover large areas with a few people, and still others might cover just a few suburbs in Sydney or Melbourne.

Wikipedia - Postcodes in Australia gives a few examples of extremes.

Given those sorts of examples, most Australians probably won't think of a postcode as being able to directly identify people.

Italian competition watchdog slaps Apple with €10m fine over allegedly misleading iPhone waterproofing claims

Re: Own Goal

Yes, but we dont then keep it at 97C despite being told that it is too hot and goes against policy which states it is supposed to be 80C. And continue doing so after complaints that it was too hot, because it saves $2 in replacing it over the course of the day.

Microsoft pledges to give Teams users multi-account sign-in then reels it back to one work and one personal

Browser profiles are the shiz for this

The trick here is to use Profiles in Edgium (I think it's called Profiles in Chrome too?) to separate out your personas. I have between 4 and 10 on the go at any one time - one for my company, and one each for every O365 or Azure customer.

Also, if you can get yourself onto the CSP program, you should be able to set up the tenants so you log in once, and have delegated access to the other tenancies; you can then switch between them using links at the top of the various admin portals.

Let's Encrypt warns about a third of Android devices will from next year stumble over sites that use its certs

Support old devices? What are you, a socialist or something?

Because if they support older devices, people who won't purchase new devices won't purchase any new devices and they might miss out on ten cents of advertising revenue. This is horrifically bad, because that ten cents of revenue might mean that the shareholders would need to spend 10c of their OWN MONEY for the 600 foot power yacht.

And apparently we can't have that.

With so many cloud services dependent on it, Azure Active Directory has become a single point of failure for Microsoft

Re: How it will all work out.

I believe the draft name is "Edge Computing" - locating the compute close to the users and data.

What a concept.

Oracle hosting TikTok US data. '25,000' moderators hired. Code reviews. Trump getting his cut... It's the season finale

Stop trying to look behind the curtain! There's nothing behind the curtain. Also, the emperor's clothes are fantastic.

Why cloud costs get out of control: Too much lift and shift, and pricing that is 'screwy and broken'

Re: I can see it now

I believe the new hotness is Edge Computing. Get the compute and services out where the users are for latency and performance.

Also known as on premise.

The point of containers is they aren't VMs, yet Microsoft licenses SQL Server in containers as if they were VMs

So your contention here seems to be that a SME with a need for SQL Server to support a line of business application for 50 users on 4 cores in a VM or container should pay the same as a large multinational who want to support 5,000 users on bare metal and 128 cores.

I don't agree with that opinion at all.

If you don't want to pay the licenses, buy or build a solution that doesn't require them. Otherwise - it's a business, pay for the software.

Brit MP demands answers from Fujitsu about Horizon IT system after Post Office staff jailed over accounting errors

Re: Any chance

I was given to understand that an EW is there on behalf of the court (and therefore "called" by the presiding judge), not either of the parties to the action. It seems that would be the only reasonable way to have someone who is impartial in their role as the EW (and specifically that's because they are _seen_ to be impartial as well).

Microsoft! Please, put down the rebrandogun. No one else needs to get hurt... But it's too late for Visual Studio Online

Re: Questionable value

Honestly, I've spent five weekends and countless nights trying to get K8s to run in a truly HA mode in my lab (3 masters, shared storage for volumes and 2+ workers). I've read dozens of K8s guides, 95% of which build an "HA" environment with a single cluster master accessible only from the master itself.

The other 5% are outdated (even though at least one was only 4 months old, it referenced a process that had been replaced two months prior to the guide date) or plain don't work as written.

At this point K8s feels like ivory tower academia desperately pretending it's open but rabidly protecting its IP so it *can't* be replicated on premise. That's not really a recipe for a future in which I want to be building IT.

That in turn means that I don't currently see containers as a way out of the cloud mess, in case it's not clear.

Spyware slinger NSO to Facebook: Pretty funny you're suing us in California when we have no US presence and use no American IT services...

Re: Class action suit?

I rather suspect that admitting that is irrelevant - wouldn't it be the case that only the owner of the mobile device would have standing (in the legal sense) in a disagreement about the specific devices?

After all, Alice can't sue Bob for Bob breaking into Candace's computer, right?

Is Chrome really secretly stalking you across Google sites using per-install ID numbers? We reveal the truth

Your information is out of date. Edge Stable has been available for several weeks (both v79 and v80 are in stable, and those map closely to Chromium versions with the same inflated numbers). While there are Dev and Canary channels (and I run in Dev) it's definitely wide release as of Jan 15.

And as far as I can see, Edgium doesn't send the X-Client-Data header (nor did it seem to have an equivalent for Microsoft properties so it seems to be MORE privacy conscious than Chrome).

I don't get the continued FUD about Microsoft hoovering up info - unlike Google where you don't pay for stuff (which supposedly means you're "the product", right) you do pay MS. And regardless of all the noise about it, I've never actually seen anyone show any data suggesting that MS really is copying everyone's hard disks to the cloud. Even when all the "privacy invasions" are left on.

Re: PII leak

While that's true, it doesn't mean they have (or that there won't be some kind of process failure that releases one of the stragglers to someone else).

Fed-up air safety bods ban A350 pilots from enjoying cockpit coffees

Re: Euphemisms

As opposed to the "CFIT" designation - Controlled Flight Into Terrain.

Remember when Europe’s entire Galileo satellite system fell over last summer? No you don’t. The official stats reveal it never happened

Re: European Space SLAs

's water music was referencing a song by Tom Lehrer, "Wernher von Braun".

A Notepad nightmare leaves sysadmin with something totally unprintable

Re: Support ticket

Not quite. The Exchange 5.5 Admin console had a nasty habit of not committing changes with the OK button, leading to those who administered Exchange being rapidly conditioned to clicking both in sequence.