Posts by Mr. Flibble

CT scanning tech could put an end to 100ml liquid limit on flights by 2024

Re: I don't understand

Also, you can't take more than 100WH of batteries..... unless you're disabled, then you're allowed more than, so surely just "employ" "disabled" terrorists....

Re: FWIW

The TSA are wankers, in particular spent ages going through by shit, asking "why" i had some documents in french, and if a pack of glow sticks would explode if they opened it. They were being deadly serious. All that security BS has put me off travelling there.

They also had security theatre of a box I had to put my feet on soon after 9/11 happened - it was away from anything else and wasn't even plugged in, it was just a stupid wooden box with a picture of a footprint on it. What was that for? just to scare retarded terrorists?

Laugh all you want. There will be a year of the Linux desktop

Re: Not sure I agree about that...

Hmm, not sure it's feature equivalent at all - I tried it as I really didn't want a Domain Controller at home, but wanted something similar.

The equivalent of AD Users and Computers GUI is rubbish, and there's no way of creating OUs easily. All users are just shown in a massive list, with not heirarchy.

You have to use something like "Apache Directory something" as a client instead to get the structure.

It also uses Dogtag for SSL certs for clients, and I thought, great, I can also use it for my CA, and asked in forums/IRC (can't remember) on the best way of doing this, and was told in no uncertain terms that this would be a bad idea and to use a separate instance for my CA, which adds complexity for no reason.

I'd like to like it, but gave up as after a while, a reboot would destroy the LDAP indexes and I would have faff about sorting it out before any auth services would actually load.

Ok, it was the Turnkey Linux image, so maybe if i had used something else it might have been more stable, but it in general if was pretty disappointing.

As much as I hate MS, I do like AD, it's just a shame they are trying to get rid of it so eventually you will only be able to useuse their cloudy crap....

If anyone else can recommend a decent OSS (LDAP) alternative to AD, I'm all ears....

Apple exec confirms iPhones will switch to USB-C because 'we have no choice'

Re: Apple is not making bank on $19 Lightning cables

So what is it about then?

CEO told to die in a car crash after firing engineers who had two full-time jobs

Re: Most of those red flags are complete nonsense

They have to use points??? Damn, I need to waste more of their time, sending me jobs that are totally outside my skillset/interest,..

Re: Judge on results, not appearances

I'm sure contractors can also improve stuff.

I do so myself from time to time.... Most of it falls on deaf ears and they're still doing easily-automateable shit when im asked back again to do similar stuff, and I'm like... 'What? You're still doing it that way???'

<sigh>

Re: Judge on results, not appearances

Oracle did that shit all the time... Log in to fix a problem, and then the session just sat there doing nothing for hours, got billed for the whole day....

Reds on the beds: Putin's war sparks Chinese chip boom, starting with electric blankets

Re: electric blankets and blackouts

They could be dangerous, but we've just bought some 12v ones that use <50w, This sounds rubbish, but if you turn them on 20mins before you go to bed, they're more than toasty-eough for my perpetually-cold gf, and usually she turns it off once she gets into bed.

HP pays $1.3m to settle dispute over printer security chip

"The agreement cannot be considered as an acknowledgement of any fault or wrongdoing by HP nor as an acknowledgement by Euroconsumers of the groundlessness of its claims," it added.

So it will happen again.... great...

Xcel smart thermostat users lose their cool after power company locks them out

Re: Control issues

Nice!

I use this; https://guide.openenergymonitor.org/technical/emonpi/, it's not particularly cheap, buy it's all open source, which is nice, and is realtime. U can monitor as many circuits as the number of CT clamps you have for the device.

Hive to pull the plug on smart home gadgets by 2025

Re: Thanks for the money but your stuffed.

No, quite, hence the "should".....

More than $100m in cryptocurrency stolen from blockchain biz

Re: Isn't it funny...

Fiat isn't an acronym, it means currency that isn't backed by something tangible, like precious metals.

It has nothing to do with the small car manufacturer either...

ZTE intros 'cloud laptop' that draws just five watts of power

Re: Work in the cloud...

Disco biscuits?

Half of bosses out of touch with reality, study shows

Re: Bollocks statistics

It;s because there's no "+1" option to rate the comment above

The monitor boom may have ended, says IDC

“We believe the changes wrought by the permanency of hybrid work and flexible learning will enable faster refresh rates across all user segments,” said Chou.

Great news! How many Hz are we talking about???

You wanna use GCHQ offshoot NCSC's threat intel feeds? Why not, say bosses

We've signed up for pDNS at work

Unfortunately you can only use it in public orgs (in my case, a council), but seems a good idea. You have to request your IP range to be whitelisted so you can use their servers are resolvers, and you get a "portal" which shows you reports of usage.

In theory it will then warn you if it sees too many requests for dodgy domains, and wierdly our org has gone from "green" status (no problems) to "orange" in the past few days, but annoyingly I can't find out what actually caused the state to change.....

You can also give them your website URLs and they will scan them for known vulnerabilities periodically, which is also useful.

Techies tell BCS: More and richer data required if COP26 climate pledges are to be met

Re: "the hardware range will be 100 per cent recyclable in the not-too-distant future."

@Mike 137 - totally.

Some of it may be security requirements - because vendors don't support old firmware or software, and the firms' security standards (or PCI-DSS), require replacements for perfectly good equipment in case they might have a security problem in the future, which the vendor is too cheap to patch.

A mate of gave me loads of Cisco 3750 switches and some old dell servers (they have 2003/2008 stickers on them) from where he worked. The switches are perfectly usable, and after patching I am using them in a council for a migration project, as it's a right waste of money to buy new ones which will only be temporary.

For the Dell servers, they've got crappy chips in them, but I will be slowly replacing them with multi-core ones, maybe adding some RAM, and they will be more than adequate to run VMs on etc. for a small company.

I can't blame my mate's company necessarily, maybe they had a big increase in users or newer software versions, but then they could have swapped the CPUs and added RAM/HDs etc themselves.

It is ridiculous how much money is wasted on replacing stuff that's perfectly adequate, but just done because the vendor wants to extract more money.

Re: @Mr. Flibble

@codejunky - thank you for the links, interesting stuff.

Chairman Mao did loads of stupid things, that is just one of many. I'm not exactly sure that more data would have helped, as he would have done his own thing anyway. How many others that suggested he was wrong about things and were subsequently shot/imprisoned etc?

Unfortunately the video of Allan Savory doesn't load. I'll look for it elsewhere, but yeah, that's sad.

I wouldn't call Greta "tarnished", maybe there's people behind her telling her what to say, i don't know, but thanks to her, at least more people are thinking about the problems our economy and lifestyle is creating for future generations, and that is to be applauded.

Re: @Mr. Flibble

I don't know, I'm not an export on the subject, but there's a shitload of reports etc on the subject that recommends sensible things. The "energy shortage" is lack of planning, not lack of data. References for the rest please...

Anyway, don't worry about too many insects, we're killing them off too.

"Yes! That's what we need! More reports and stats! There are only a few thousand reports on what is required to avert climate catastrophy, which is obviously not enough. This data collection and reports will only take a few years, only then will we actually think about fixing the problem."

.

.

.

Fucking morons. We need more action, not more data.

Judge in UK rules Amazon Ring doorbell audio recordings breach data protection laws

HHJ Clarke said "...it appears from the evidence before me that even if an activation zone is disabled so that the camera does not activate to film by movement in that area, activation by movement in one of the other non-disabled activation zones will cause the camera to film across the whole field of view."

.... no shit Sherlock, that's how it's supposed to work

The planet survived six hours without Facebook. Let's make it longer next time

Re: It will take a while

https://activitypub.rocks/ anyone?

Google staff who work from home might see pay cut under corporate policy – reports

Re: Childcare

Maybe now she realises you have to pay for that energy use yourselves, she'll start wearing a jumper or close the window.

It's time to decentralize the internet, again: What was distributed is now centralized by Google, Facebook, etc

Re: IPv6

You can have IPv6 if you choose a non-shit ISP.

Until recently you could also have a a range of static IPs, and unless again, you use a shit ISP that uses carrier-grade NAT, then you can also request a static IP. Even ISP-provided routers allow you to do either port forwarding, and/or a default IP to forward on to a specific machine as a "DMZ".

Whilst hoarding IPv4 addresses is shitty - a previous company I worked at up to 2017 had a /16, and only used < 50 IPs.

The number of national ISPs that will give you working IPv6 (even mine had non-working DNS servers until I told them about it), whilst small, is >0, pick one if you're bothered.

However, I have just realised you're probably in the US, so maybe the situation is crapper than the UK....

Dell won't ship energy-hungry PCs to California and five other US states due to power regulations

Re: @45RPM

"So why the hell did we insulate our homes if we are gonna boil"

Good insulation works both ways....

Restoring your privacy costs money, which makes it a marker of class

Unreliable?

Not sure what u mean by that. It seems to work fine for me, maybe Nextcloud have broken that function after they split from owncloud.

My old owncloud server works perfectly for calendars.

Could be South Korea

They do that kind of crap there....

Seagate UK customer stung by VAT on replacement drive shipped via the Netherlands

Re: Should not have Netherlands VAT ...

Sadly WD were no better years ago for speed. I have had nothing but problems with drive replacements with them, even before brexit.

Another WD was "fake", even though I bought it from an authorised reseller, and the last one, they were complaining about the serial number, even though it wasn't fake in the end.

It took so long to get 1 drive replaced (a month) another one started failing and eventually I lost the array.

Before you laugh at my lack of planning, it was a personal system and I wasn't rich enough to have spare drives lying around...

For that reason I'm no buying WD ever again.

China bans encryption exports – including quantum and key management tech

Re: @Christoph : Now I begin to understand

"The US couldn't possibly acknowledge that someone else could come up with something good, so they had to give it a new name.." - Not quite.

They'd already picked the name "AES" as a sort of competition to replace the "DES" standard. There were 8 (ish) competing algorithms at the start of the process, so whichever won would still have been called AES....

Signal goes Gaussian to take privacy to the next level: All your faces don't belong to us

Re: Fix the bugs first

never mind... found it: https://getsession.org

Re: question, my contacts

I think they hash the contacts phone numbers and just store that centrally.

I was trying to find a link that explains it, but my search-fu is weak today :(

Re: Fix the bugs first

Link for Session please :)

Namesco email 'scripting error' has last bastion of Demon Internet holdouts scratching their heads

Re: Mercury Communications

Yup, and BT still show adverts on the web gui even though they're charging.....

What's the difference between Windows 7 and a bin lorry? One is full of garbage, and the other… oh dear

Hmm, this wasn't a one-off occurrence - I saw one near Euston late last year, but it was too interlaced for for my crappy phone camera to take a good picture while it was moving :(

There are already Chinese components in your pocket – so why fret about 5G gear?

https://berthub.eu/articles/posts/5g-elephant-in-the-room/

Bon sang! French hospital contracts 6,000 PC-locking ransomware infection

DAMN YOU DIGITAL TRANSFORMATION!!!!

Am I the only one that thinks that the phrase "Digital Transformation" is retarded?

Questions hang over Gatwick Airport after low level drone near-miss report

Obligatory link

https://media.ccc.de/v/Camp2019-10235-the_great_british_drone_panic

If there were almost a million computer misuse crimes last year, Action Fraud is only passing 2% of cases to cops

I tried once

Not going to bother again.

Yes, it was low priority - someone from "Microsoft" saying my windows had expired etc etc, but their stupid web form didn't bother asking any relevant questions that could help in a potential investigation.

Waste of time. I just think its for gathering stats, not actually trying to fix anything.

Here we go again: US govt tells Facebook to kill end-to-end encryption for the sake of the children

Re: Watch your back

It's also available on f-droid:

https://f-droid.org/en/packages/org.telegram.messenger/ apparently with some tracking crap taken out.

I use it, and so far, so good....

In hilariously petulant move, Apple shuts Texas stores and reopens them few miles down the road – for patent reasons

Re: re: worst parasites

That's exactly what happens, watch this: https://www.thepatentscam.com

Hold horror stories: Chief, we've got a f*cking idiot on line 1. Oh, you heard all that

German Bastards

Our HQ was in Germany, so were usually an hour ahead of us in the UK.

Once we had a network problem, so I rang them up at about 4.25pm (UK time) to let them know. The phone rang, and then silence.

So I rang again, same thing. I thought they'd all disappeared off home early, and muttered "Bastards!" as I hung up.....

....

A few minutes later, someone rang my number and said "er... hello.... you called us bastards?"..... It turned out they were still in the office, it was just they could hear me, and I couldn't hear them... oops!

I apologised profusely, and they were surprisingly OK about it.

For several weeks afterwards they signed off their emails to me with "from the German Bastards" :)

Marriott: Good news. Hackers only took 383 million booking records ... and 5.3m unencrypted passport numbers

Re: Stored data

PCI-dss compliance centrally? No idea.

At certain starwood hotels i was working at this year, they clearly weren't, which was a little surprising. PCI-dss was a big deal at IHG a few years ago (maybe because they'd been hacked in the past and knew they'd be fined next time).

Marriott's Starwood hotels mega-hack: Half a BILLION guests' deets exposed over 4 years

Re: Remind me

Because you could have legged with with all the bathrobes/been smoking in a non-smoking room/trashed the place.

None of this will be found until hours after checkout when housekeeping goes round to clean rooms etc.

Re: Card numbers

1. Not all hotels have Opera cloudy servers. Some are still physically at the hotel.

2. It's quite possible that they breached "Valhalla", their back-end reservations database. This is probably why it is limited to Starwood hotels and not the whole group, as Marriott use a different system.

police-requested guest registration

Italy does this too, but they only get transferred from the hotel systems "on request".

PINs and needled: Experian site blabbed codes to unlock credit accounts for fraudsters

Re: Can someone tell me why?

I agree with most of your points, however, once I swapped my bank (savings only), and they spent ages giving back my personal details, so I went into complain, and they said they were sorry, but they were waiting for a credit check to complete.

When I asked them why that was needed as it was only a savings account, they said it was in because they were also offering a non-savings account at the same time (which I didn't want, and didn't ask for), so there's no guarentee this wont happen when you open a normal account.

Remember that lost memory stick from Heathrow Airport? The terrorist's wet dream? So does the ICO

Re: You only need a single hole in security to lose

Security Theatre? That's airports generally... Well, and beig full of pointless no-cheaper-than-elsewhere shops...

Civil rights group Liberty walks out on British cops' database consultation

Re: GDPR

Yes, it's great, but will any of them pay out?

UK chip and PIN readers fall ill: Don't switch off that terminal!

We have been told it's a certificate problem....

Gent had a power cut yesterday, and now all the hotels of a certain owner can't process cards :(

Oops.

We got 2 replacements for our devices taxied to Brussels from Luxembourg yesterday to fix 2 that were broken here, but I doubt anyone else is that lucky.

We were lucky cos we were doing a migration at the time, and our provider (3C) thought that they had caused the issue I assume.

At least the replacements worked or that would be 1 more hotel broken.

Apparently I'm not allowed to reflash the broken devices myself for security reasons, which is a bit shit, as surely everything is cryptographically signed anyway isn't it??......... <tumbleweed>.......