Posts by Pomgolian

Ubuntu 14.04 LTS media released with APT fix as end of support nears

Re: Problem with ESM

Absolutely. The $750 per server is doable, but the minimum charge or $2,500 isn't. They're shooting themselves in the foot with that.

Still using Skype? Good news! After HOURS of meetings, Microsoft reckons it knows when you're Not Active

I'd Settle For It Doing What I Tell It

By which I mean when I set my status to Invisible, ferking remember that and don't set it to anything else until *I* decide, manually, to do so. Since the Upgrade to 8, this has been a major pain in the arse.

So Brave: Browser biz sics Brit watchdogs on Google's info slurpage

Re: _c_a_t__/_e_t_c_/_h_o_s_t_s_

Yeah, I got some really messed up page, like a huge mobile site rendering on a desktop and a Google I'm not a robot CAPTCHA pop up when I posted it. I kind of saw the irony with that given the contents of the file.

cat /etc/hosts

cat /etc/hosts

0.0.0.0 www.googletagmanager.com

0.0.0.0 www.googleadservices.com

0.0.0.0 googleads.g.doubleclick.net

0.0.0.0 ad-emea.doubleclick.net

0.0.0.0 ad.doubleclick.net

0.0.0.0 doubleclick.net

0.0.0.0 www.doubleclick.net

0.0.0.0 www.google-analytics.com

0.0.0.0 google-analytics.com

So phar, so FUD: PHP flaw puts WordPress sites at risk of hacks

Re: Good alternatives to WordPress?

concrete5.org

First A380 flown in anger to be broken up for parts

Emirates

Having just made two trips from NZ to the UK in the last month, flying Emirates via Dubai on an A380-800 I found it a really comfortable trip. I'm 6'6" with long legs, and there was plenty of leg room in cattle class. In flight entertainment is great, too. I'd be sad to see the A380 go. I've flown other airlines including Air NZ and nothing came close to the A380. Virgin Atlantic had perhaps the most pathetic amount of leg room ever -I guess Virgin is simply a tighter fit...

Linus Torvalds decides world isn’t ready for Linux 5.0

Windows 3.11 -> 95 -> 98 -> 2000 -> XP -> Vista -> 7 -> 8 -> 10->Mint

FTFY

Internet engineers tear into United Nations' plan to move us all to IPv6

Whatever happened to...

IPv5? Just asking...

NAB mainframe turns its TOESUP* after power outage, offline 7 hours

Also Broke BNZ in New Zealand

New Zealand's BNZ are owned by NAB, and there was much wailing and nashing of teeth over the ditch for a few hours when nobody could pay for a latte or petrol etc. Cashpoints and cards were out.

New Monty Python movie to turn old jokes into new royalties

Sounds like....

...daylight shrubbery to me

Apple somehow plucks iPad sales out from 13-quarter death spiral

Re: Or maybe...

Exactly. Bought her indoors a new one last Christmas, because the one I'd bought in 2012 was S...O.......S..L..O..W and didn't hold its charge very long. New one's noticeably more plasticy/tacky feeling though.

WordPress is now 30 per cent of the web, daylight second

Wordpress is NOT a CMS

Please stop referring to it as a CMS it isn't. It's a blogging tool. Just because all sorts of crazy shit is built on top of it does not make it a CMS, or even a good idea. It's a piss poor insecure mess that I've had to clean up more times than I care to remember.

Apple tells GitHub to fork off: iGiant steps outside DMCA law in quest to halt iBoot leaks

@Boohoo4u

but not if someone forks Github first.

That was fast... unlike old iPhones: Apple sued for slowing down mobes

That probably explains..

..why my five year old iPad is like a snail on the tortoise's back.

And another thing: If the battery degradation is so great as to warrant this, why not fit a bigger fecking battery to start with, rather than trying to make every new model even slimmer than the one before. I for one wouldn't mind an extra 5mm thickness in exchange for a battery that pumps out the power for 5 years. It's a premium product and should be bloody well engineered like one.

WordPress captcha plugin on 300,000 sites had a sneaky backdoor

WordPress 4.9: This one's for you, developers!

Re: But...

Oh, you'd think so, wouldn't you?

But read this:

https://www.theregister.co.uk/2017/10/31/wordpress_security_fix_4_8_3/

and

https://blog.ircmaxell.com/2017/10/disclosure-wordpress-wpdb-sql-injection-technical.html

and then go and find a CMS that actually does walk the walk.

But...

... still the same vulnerable-by-design database layer shite that does not support parametrised or prepared queries which have been around for decades. Maybe by the time Wordpress 6 comes around they might actually fix that, but I do not have the lung capacity to endure the wait.

Patch your WordPress plugins: Scum are right now hijacking blogs

Re: Oh Joy?

>not having an admin account with the username "admin"

With the delightful new and shiny REST API, a complete list of user names can be exposed simply by poking the URL:

example.com/wp-json/wp/v2/users

unless you've been wise enough to install a plugin that blocks access for unauthenticated users

WordPress has adverse reaction to Facebook's React.js licence

Re: "...the popular content management system"

...and another thing: Wordpress is *not* a content management system. It's a blogging tool. The fact that lots of people build all kinds of crazy shit on top of it does not make it a content management system. I can pound in a screw with a pipe wrench, but that does not make the pipe wrench into a screwdriver.

'Don't Google Google, Googling Google is wrong', says Google

Because It's Not Google

I can't help thinking they're kind of missing the point: To be so synonymous with something that your name becomes a verb is surely evidence of significant if not total market penetration.

I always chortle every time I catch one of those tortuous scenes in the remake of Hawai'i 5 0 - the ones where they're trying to convince you to "bing" things. https://www.youtube.com/watch?v=E3ug8jrja7M

Guess Micro$oft will be ready to hoover up the honours.

Linus Torvalds may have damned systemd with faint praise

Re: Women Linux Lord ?

It's rightly said that you should love a woman for her personality. They have at least 10, so you can choose.

Set your alarms for 2.40am UTC – so you can watch Unix time hit 1,500,000,000

"So, shortly before beer o'clock Friday afternoon for us lucky few."

< ? php echo date('r', 1500000000);

Fri, 14 Jul 2017 14:40:00 +1200

Only downside to early Friday beers is that it's flippin' freezing in NZ right now.

'My dream job at Oracle left me homeless!' – A techie's relocation horror tale

Re: Surely Oracle could have found him somewhere to live

Sweet as, bro.

Re: Surely Oracle could have found him somewhere to live

You're right. This boat sleeps 8 people. We know there's only you sleeping on it, but you could have slept in any of the 8 berths, so we're charging you for all eight.

Surely Oracle could have found him somewhere to live

I understand houseboats are quite popular in Amsterdam. Apparently Oracle have at least one slow, old boat that they're not doing anything with right now...

FREE wildcard HTTPS certs from Let's Encrypt for every Reg reader*

Fantastic news

Let me be the first to buy those guys a beer.

https://letsencrypt.org/donate/

Create a user called '0day', get bonus root privs – thanks, Systemd!

FFS.

What sort of crippled mind thinks it's OK to carry on and run if the user you're supposed to be running as is invalid? Granted, an admin would have to screw up in the first place, but the brattitude being shown by poettering here is staggering.

Ad 'urgently' seeks company to build national e-ID system

Enough of the jokes

It's clearly time to Finnish...

Apple ups the stakes in patent royalties battle with Qualcomm

Well knock me down with a feather

I never ever thought I'd be on Apple's side, but if Qualcomm really are trying to have their cake and eat it, i.e. "here, buy our chips, oh, and about that licence fee", then hell has truly frozen over and I have to hope Apple wins that round. Just that one though.

Software dev bombshell: Programmers who use spaces earn MORE than those who use tabs

Re: correlation is not causation.

..and the correlation between pay and no underwear most probably correlates even more closely.

Proposed PATCH Act forces US snoops to quit hoarding code exploits

La La La..

>It's designed to force the US intelligence agencies to pass on vulnerabilities to developers and hardware >makers if there is evidence other people are exploiting them.

Anybody exploiting these flaw?

NSA: <fingers_in_ears>La la la</fingers_in_ears> Not that we can see...

OK. keep them to yourself then...

Verizon utters solemn Oath: Yahoo! will remain Yahoo!

What...

...bumbling incompetent oath came up with that? I'll swear nothing good will come of it.

Ubuntu splats TITSUP bug spread in update

Re: Chekov here: my nyetwork

Mine' snot.

Intermittent issues with PHP-FPM throwing a paddy for the last couple of days. Fixed now so all good.

Confirmed: TSA bans gear bigger than phones from airplane cabins

Re: Meh

Just because *you're* not paranoid, it does not mean *they* are not out to get you.

Meh

Shooting themselves in the foot. How do they expect to search your gizmos at the border if they dissuade you from taking them on a plane in the first place.....oh.....wait....maybe they're hoping to upgrade baggage handlers to spooks who clone your devices while rummaging through your underwear.

DNS lookups can reveal every web page you visit, says German boffin

Now we know..

..why Google has a free public DNS. So much for blocking cookies, DNT headers and NoScript. The bar stewards are still watching you.

Spammy Google Home spouts audio ads without warning – now throw yours in the trash

Disaster Waiting to Happen

I can't wait for the first law suit citing the reason for the divorce as the chatbot's adult themed ads based on the hubster's porn filled web surfing history :)

Firefox 52 kills plugins – except Flash – and runs up a red flag for HTTP

Those warnings are getting bloody annoying

I am a big boy now, and I can manage without the training wheels.

about:config

Search 'insecure'

Set

security.insecure_field_warning.contextual.enabled=false

security.insecure_password.ui.enabled=false

That's better.

As you were.

WordPress photo plugin opens 'a million sites' to SQLi database feasting

>The entire WordPress system is a dog's breakfast.

Feeding Wordpress to your dog would be considered animal cruelty and warrant a visit from the SPCA.

Re: Paying Users?

Unfortunately, no. While the wordpress core may be free, a number of plugins are not, and more often than not the user forgets to renew their licence or support or the "developer" who built the site has wandered off somewhere, leaving a dangerously insecure plugin in place with no easy update path. Sometimes these plugins are "recommended" by the latest and greatest theme and thus it's a downward spiral. Revslider was an example from a couple of years back, Gravity Forms being another more recent one. The lack of a core file upload facility and thus the implementation of this function in every godamn plugin out there is the major reason for the crap happening.

Licence-fee outsourcer Capita caught wringing BBC tax from vulnerable

@MiserD (FTFY)

>Why should it be folded into taxes?

Why should MY taxes pay for YOUR kids education and YOUR healthcare? I've never been sick a day in my life and I have no kids.

Pretty pathetic argument you make.

99.9% of people watch TV, listen to the radio or use iPlayer.

Google devs try to create new global namespace

Spam Me Senseless

Anyone with half a brain tries not to publish their email address on line, so that the spambots do not find it. This proposal would therefore appear to be an invitation to spam the user into oblivion, assuming that the associated mailbox might actually need to have a human attached to it.

US visitors must hand over Twitter, Facebook handles by law – newbie Rep starts ball rolling

The Wall

It seems to me that rather than build a physical wall, ostensibly to keep people out, they are doing everything they bloody well can to build a virtual one. I've always regarded America as a fscked up place full of nutjobs, but it's clear now that the loonies really are running the asylum. This bill may fall, but you can bet your ass/arse that just like the No.4, there will be another one along in a minute.

You want WHO?! Reg readers vote Tom Baker for Doctor 13. Of course

Re: Even for monkey shaggers

See icon ---->

WordPress fixed god-mode zero day without disclosing the problem

Re: Comments

+1 for "an exercise in turd polishing".

Re: So...

>Sorry, but that now makes it a CMS

...using a monkey wrench as a hammer repeatedly does not make it a hammer. It's still the wrong tool for the job.

Re: So...

Wordpress is not a CMS. It is a blogging tool.

If you want a proper CMS, one that has been well designed with the best components, take a look at www.concrete5.org

Oh, the things Vim could teach Silicon Valley's code slingers

The trouble with Emacs

...is that it's an overly complicated operating system

UK's lords want more details on adult website check plans

Re: Are you 18

+1 for "unmutual"

I am not a number, I am a free man!

@TheReg - what about a Prisoner icon? A nice Penny Farthing or something?

Yahoo! says! hackers! stole! ONE! BEELLION! user! accounts!

Re: I suppose

You're not by any chance referring to NZ's Spark, the former NZ Government owned telco?

If a set of outsourced incompetent jokes like Spark, has seen fit to pull the plug on them, then that speaks volumes about how irrelevant Yahoo! really have become.