Posts by fnusnu

Have I Been Pwned breach report email pwned entire firm's helldesk ticket system

The age-old exhortation rises to the fore once again: make sure you’re running the latest version of whatever software suite you’re relying on.

Yet putting this in the comments gets you massively downvoted for some stupid reason(s)

Had a bad weekend? Probably, if you're a Sectigo customer, after root cert expires and online chaos ensues

Then they are taking a massive risk.

"Of particular concern, the university said, are systems and devices that haven't seen security updates since 2015, such as Apple Mac OS X 10.11 (El Capitan) or earlier, Apple iOS 9 or earlier, Google Android 5.0 or earlier, Microsoft Windows Vista & 7 (if the Update Root Certificates Feature has been disabled since before June 2010), Microsoft Windows XP (if an Automatic Root Update has not been received since before June 2010), Mozilla Firefox 35 or earlier, Oracle Java 8u50 or earlier, and embedded devices (e.g. copy machines) that have not installed a firmware update since before mid 2015."

"In a perfect world, all of your libraries would be up-to-date and you wouldn't be using clownish TLS implementations like GnuTLS," wrote Ayer.

The only clowns here are those still using obsolete crap...

IBM Sametime could rise again as HCL makes shortlist for India's home-grown Zoom clone

Thereby proving the Indian government is as stupid as all the others: The government also prefers making local products because they meet the industry development goal of enhancing local expertise, developing, and productising software.

If someone could stop hackers pwning medical systems right now, that would be cool, say Red Cross and friends

Re: Haven't they heard of the Streisand effect?

You've also got a load of cowboy wannabe healthcare IT clowns who have allowed kit to delivered that is not up to scratch.

Mind your language: Microsoft set to swing the axe on 27 languages in iOS Outlook

Interesting

Latvian and Lithuanian, but not Estonian...

Nine in ten biz applications harbor out-of-date, unsupported, insecure open-source code, study shows

Re: Frankestein development, thanks to Stackoveflow, Github & C.

ReiserFS

Proof-of-concept open-source app can cut'n'paste from reality straight into Photoshop using a neural network

Re: Unintended consequences

It's 'bio break' nowadays

Baby, I swear it's déjà vu: TalkTalk customers unable to opt out of ISP's ad-jacking DNS – just like six years ago

The most annoying thing about it is that you can't just go back to the URL and correct the typo

Tor Project loses a third of staff in coronavirus cuts: Unlucky 13 out as nonprofit hacks back to core ops

Windows defender is fixed now

Apparently it was files with two dots in the name which caused the issue

Oh ... Fudge This Pandemic! Google walks back on decision to switch off FTP in Chrome 81

Oh look! All five people who still use it have downvoted my comment.

Bin it and focus on security. Just because people are working from home doesn't mean they can't find another way to transfer files insecurely.

Samsung's Galaxy S7 line has had a good run with four years of security updates – but you'll want to trade yours in now

LineageOS

Ivan Meler's doing a grand job here: https://forum.xda-developers.com/s7-edge/development/beta-lineageos-17-0-s7-edge-build-1-t3979973

Want to stay under the radar for a decade or more? This Chinese hacking crew did it... by aiming for Linux servers

Re: @Pascal Monett - So, one Linux myth bites the dust

"Proof is that actually nobody runs antivirus on Linux servers"

Absence of evidence is not evidence of absence

It's 2020 and hackers are still hijacking Windows PCs by exploiting font parser security holes. No patch, either

Re: "a miscreant can include a malformed multi-master font in a document"

All of them, along with the rest of Windows 7.

Microsoft frees Windows Subsystem for Linux 2 from the shackles of, er, Windows?

Now for Onedrive for Linux!

More than a billion hopelessly vulnerable Android gizmos in the wild that no longer receive security updates – research

The real problem here is that obsolete devices report that "You have the latest updates" What's needed is a message which says this phone will no longer receive updates after dd/mm/yyyy and after that date the message should change to "Your phone is no longer supported".

This would also make people think about which model they want to buy when they can see for themselves its eol date.

Samsung cops to data leak after unsolicited '1/1' Find my Mobile push notification

More weirdness

Did anyone else see a weird app get updated just after the 1/1 message incident? I think I am going mad as I can't see it listed. It was a Galaxy store update for something like 'image annotate' with an icon similar to the gallery icon flower thing.

Samsung gives China wide berth over coronavirus woes, uses sea and air freight to ship smartphone bits to Vietnamese factories

Great opportunity

Perhaps they could focus on the software for a while and get the Feb Android updates out.

This AI is full of holes: Brit council fixes thousands of road cracks spotted by algorithm using sat snaps

They could just ask google for the potholes reported in Waze.

Artful prankster creates Google Maps traffic jams by walking a cartful of old phones around Berlin

Re: Works for Waze too

Waze gives you a credibility weighting to prevent this.

Difficult season: Antivirus-flinger Avast decides to 'wind down' Jumpshot

Brit? Czech, surely?

If you never thought you'd hear a Microsoftie tell you to stop using Internet Explorer, lap it up: 'I beg you, let it retire to great bitbucket in the sky'

Surface RT

Still supported to 2023 and no Edge released for it.

Way to go MS!

No Mo'zilla for about 100 techies today: Firefox maker lays off staff as boss talks of 'difficult choices' and funding

Still no text zoom and reflow on Android

This is the one reason I use Opera on Android, and am happy to recommend it to others, especially friends whose eyesight cannot cope with small text.

Top Euro court advised: Cops, spies yelling 'national security' isn’t enough to force ISPs to hand over massive piles of people's private data

Re: "hovering up of data"

And a consonant ;)

Shhh! It's us, Microsoft. Yes, it's 2020. We're here with a new build of Windows 10

Re: Waving hand: ARM64 user

Throw it in the bin and buy a supported phone.

Remembering Y2K call-outs and the joy of the hourly contractor rate

He was there when they needed him. And that's why people love (us) contractors.

Oh noes! Half the NHS runs on Windows 7! Thankfully, here's Citrix with a virty vaccine

Re: Just think of the drivers

Your're one of the UK's biggest consumers of IT. Time to start flexing your muscles

The NHS budget has increased year on year. If the Citrix sales wallah wants to help he should offer their software for free

Join us on our new journey, says Wunderlist – as it vanishes down the Microsoft plughole

Todo works fine on Windows, Android, and iPadOS.

Co-op Bank online and mobile banking goes TITSUP*

Re: The UK really is a marvellous country

BNP: https://www.connexionfrance.com/French-news/IT-problem-leaves-tens-of-thousands-of-French-customers-of-BNP-Paribas-bank-unable-to-access-online-services

CM: https://uk.trustpilot.com/review/creditmutuel.fr

SG: https://www.ft.com/content/b4b21832-9cda-11e9-b8ce-8b459ed04726

Windows 10 Insiders: Begone, foul Store version of Notepad!

I still miss PFE

Now that was a great bit of software

Astronauts brave razor sharp edges and fiddly pipes to bring joy to boffins

Take that Kwikfit!

and a beer for the astronauts

'Big Bang': Great for creating the universe, but not as an approach to IT migration, TSB told

Gutted

Was hoping my mortgage was going to be deleted...

150 infosec bods now know who they're up against thanks to BT Security cc/bcc snafu

Re: Reply-all email chains are no laughing matter.

2 people have replied to all so far. The recall note was also cc'd to all

One man's mistake, missing backups and complete reboot: The tale of Europe's Galileo satellites going dark

Re: Doesn't inspire confidence....

Just like the EU itself. Good job we're leaving.

IT contractor has £240k bill torn up after IR35 win against UK taxman

Re: I cannot understand why HMRC pursues contractors so much.

Amazon pay every penny they owe. This might not be the amount your sixth-form socialist mind thinks it should be, but that's why we don't have teenagers setting tax laws.

Traffic lights worldwide set to change after Swedish engineer saw red over getting a ticket

Not quite

AMBER means ‘Stop’ at the stop line. You may go on only if the AMBER appears after you have crossed the stop line or are so close to it that to pull up might cause an accident

https://www.highwaycodeuk.co.uk/light-signals-controlling-traffic.html

UK children's charity: Social media firms rubbish at stopping grooming. Time for a mandatory... AI

Will nobody think of...

...asking the parents to take responsibility?

Be still, our drinking hearts: Help Reg name whisky beast conjured by Swedish distillers and AI blendbot

Intellisvens?

Enjoy the holiday weekend, America? Well-rested? Good. Supermicro server boards can be remotely hijacked

Re: How many ?

How many of the vulnerable servers even have a system administrator?

For Foxit's sake: PDF editor biz breached, users' passwords among stolen data

“Windows 8.1 falls under the same lifecycle policy as Windows 8, and will reach end of Mainstream Support on January 9, 2018, and end of Extended Support on January 10, 2023".

The story so far: How's that Autonomy High Court battle with HPE looking at half-time?

That slobbering sound I can hear...

Is that lawyers licking their lips at the thought of the fees they are going to bill?

Look at me. Look at me. I'm the El Capitan now: Cray to build US govt's $600m cray-cray exascale nuke app super

Imagine a beowulf cluster of these!

Advanced Software Group flogs £2bn stake to private equity biz that owned Phones4U

Pwn an iPhone to bank $1m and Check Point gripes about WhatsApp privacy again

Re: Its good that they upped the bounties

Fortunately some people are motivated by more than just money.

Disabled by default: Microsoft ups the ante in its war against VBScript on Internet Explorer

Edge for surface RT?

Would be good to have a secure browser for Surface RT users. All 3 of us...

BT boss warns 16-min walk from current HQ to new London base 'just the tip of the iceberg'

The Better Workplace Programme is going to take a lot of hard work but it will have a huge and positive impact on BT's working culture, our productivity and, ultimately, our ability to serve our customers."

And what of the share price? https://www.google.com/search?client=firefox-b-d&channel=crow&q=bt+share+price