Posts by ExpatZ

White House seizes 32 domains, issues criminal charges in massive election-meddling crackdown

Re: Yeah, sure thing.

And none of that is election interference, just stupid memes.

Muppet.

Yup.

They're gonna eat the FBI created BS right up and ask for seconds.

Yeah, sure thing.

More BS election year lies meant to scare us about Russia while the US sends the NED and a thousand other "NGO's" out into the world to start coups against goverments that won't bend knee.

I remember the last 2 elections, do you?

Funny how we all found out that Russian influence was total fabrication by the FBI and DHS at the behest of the two political parties.

Just like we did over the last 2 election cycles where they screamed about this.

Just hilarious.

Believe this crap if you have a psychological need to but as we shall find out in 3 or 4 years on some back page story this too is just more Reds under the Beds bullpucky being used to strip us all of even more freedoms, privacy and rights just like the last 2 runs.

Good God you all are such rubes.

White House thinks it's time to fix the insecure glue of the internet: Yup, BGP

Right.

So this is the US government, in specific the POLITICAL arm of it, saying they want the main routing protocol 'fixed'.

Alarm bells anyone? The country that runs surveilance on the entire planet including their own citizens that includes such hits as tracking your phone calls, collecting all your email, tracking all your connections, watching all your web traffic, tracking you via your cell phone (and intercepting the calls), runs connection and association software based on all that data and tries to weaken encryprtion protocols so they can snoop even harder.

The US, the worlds most prolific nation state hacker and pervasive invasive spy state wants changes made to the routing protocol that enhance tracking capability, does a red flag pop up for you now?

No?

Given the Dual_EC_DRBG fiasco what makes you think they haven't already backdoored this one too, particularly as it is used prolifically in APAC?

Still no red flags?

OK I see you don't remember Vault 7, Dual_EC_DRBG and know nothing about security.

Carry on.

Google raps Iran's APT42 for raining down spear-phishing attacks

Oh lookie that...

More Vault 7 nonsense.

Isn't it funny how the US target du jour is always at the top of the "They hacked us" headlines.

Why yes, yes it is evil Barry.

China-linked cyber-spies infect Russian govt, IT sector

Vault 7

Nuff said.

How to ingeniously and wirelessly inject malware onto someone's nearby Windows PC via Google's Quick Share

Yeah, Alphabet Corporation.

The Alphabet Corporation that has ties to and works with the Alphabet agencies.

Yeah, like that.

Trump campaign cites Iran election phish claim as evidence leaked docs were stolen

Rinse, repeat, drool some more.

The faces change, the stupid remains.

And gets dumber each election.

Lesser evil voting, this is what you get after 30 years of that lame failed strategy.

You are getting played, all of you, both parties.

Rubes.

US sends cybercriminals back to Russia in prisoner swap that freed WSJ journo, others

Re: An absolute disgrace

And theres te propagandised ignorance, well played.

Re: An absolute disgrace

That Russian assasin killed a Chechin terrorist known for his brutality, maybe you should go learn about whats up before you post politically supplied ignorance.

Latest MySQL release is underwhelming, say some DB experts

Uncle Larry at his old tricks.

Uncle Larry killed Solaris and Sun the same way, he wanted bits and pieces and so he bought them all, took what he wanted then let the rest wither away into nothingness.

It is Uncle Larry's way.

Well, that and coming up with ludicrous and usurious methods of exploiting his softwares large installed base to take even more cash from the companies suckered into using it.

Microsoft 365 remains 'degraded' as Azure outage resolved

Re: DNS

It was a bad patch.

Like it always is.

Re: So, Office 345 is down again

Depends on the SLA's, if they had good negotiators they'll get a hefty discount or maybe free services/cash for the losses.

If not they'll get fingered.

Re: Hitting Australia as well

None, they usually have no idea what they are doing and moved to Azure from Openstack, Proxmox or VMWare because some Microsoft salesperson took them to a nice restaraunt and fed them a ton of garbage about how it will be cheaper, help reduce staff and be safer with more uptime.

And being muppets without a clue, no IT experience and a business degree they bought the lies and made the moves and will now defend them because to to do otherwise would call their own positions into question.

They'll double down and then keep their heads down until their clueless managers move on to some other decision based on finger in the wind sales nonesense.

That at least has been my experience in the industry where such dumb and self defeating moves have been made.

Re: Weird..

Because this is not a thing that gets planned, it is incompetence.

Take off the foil hat, in IT incompetence is what allows hackers to do what they do and this wasn't a hack, it was a crappy untested patch/procedure.

Like always.

Re: Just goes to show...

Gonna be bad.

Most organisations have no idea what they are doing or what IT security is.

To most organisations IT is a cost center, something they have to deal with, something to spend as little as they can on and that includes their support staff running it.

Those guys will multiply the effects for the rest of us that do know what we are doing making it more difficult to fend off the damage.

Not really.

It is a the latest iteration of the virtual machine management system with orchestration, SDN/SDS/container capabilities that is fully distributed across multiple nodes and or datacenters depending on how you build it.

It is the new VMWare, lots of additional features and a new added feature of being multi compute frame and distributed with all the coolness that brings but it is exactly that at its most basic: the new VMWare.

It has a lot of bells and whistles and some serious advantages over VMWare but at its core that is what it is and all it does.

It is not a monolithic shared system like a mainframe or terminal server system of old.

Have every worked with mainframe or terminal systems?

I have.

Cloud is not that.

PUBLIC cloud os someone elses set of computers that you have no control over in any way and must hope that the people you are paying for it know what they are doing, it is the hope strategy to running your IT.

Use a private cloud IF you need cloud at all.

The vast majority do not.

Oh really?

My impression is that no one here has actully worked with one or has had do the company budgets regarding one.

My impression is that you all read web sites and articles extolling the virtues and that you come here to pretend you know what you are talking about but that none of you is actually in IT in any way that gets you paid.

Like I keep saying and you keep downvoting...

Public cloud is great for front ends, epehemeral stuff that needs to spin up for a heavy load then drop back off to a few web/api servers when that load drops.

Things that can go down and quickly be rerouted, that won't take the whole infra down with it.

Things without a ton of network traffic or disk/cpu use.

Small stuff, front ends.

It is useless and in many cases dangerous and stupid to put your core infra into it or base your entire offering off running in it.

It is also insanely expensive, arguments to the contrary NEVER hold true and the sales pitches never hold up to actual scrutiny.

And as every company that makes the move in a big way discovers it costs 2-5 times (or more depending on the underlying application) than a private cloud would cost to run every year, even with datacenter and support staff costs taken into account.

If you want cloud run a private cloud with a public cloud front end if you feel the need, doing it all in public cloud will empty the company accounts faster than a private cloud will, hit you with this kind of nonsense every year or more and make a situation where your company operates on hope instead of controls when it comes to patching, security, uptime and the quality of the people who run the underlying infrastructure that you are relying on.

Hope is not a viable business or IT strategy.

Go ahead and vote this reiteration of reality down like you all everytime I've pointed this out, the world is full of suckers who think spending more is better and there's nothing I can do about that but when it comes to MY infrastructure I can indeed take control and keep it safe from the people you hope will keep yours running.

Not sure many of you actually are systems admins or IT manageers here any more, seems more like a gathering of basement geeks who have never actually held a job doing it who get all their info from here or some other industry magazine/site.

Boeing's Starliner set for extended stay at the ISS as engineers on Earth try to recreate thruster issues

As it's Boeing involved and NASA has $5.8B into it neither of them is going to present us with anything other than rose coloured assessments until they are forced to call it a failure.

It is trash, it is too expensive, too small, too far behind technologically, and completely unreliable.

Scrap it, call it a day and never let Boeing near another NASA project again. Better yet just end them as a company for their criminal behaviour.

China's APT40 gang is ready to attack vulns within hours or days of public release

Vault 7, remember?

Additional hatch operations on a Boeing vehicle – but this time it's Starliner

Re: Rescue mission

What does it being Russian have to do with anything other than your propagandisation?

It is a more capable craft than most NASA has sent up and was the main way of getting there for over a decade.

Re: the thruster issues also needed to be better understood.

I would prefer this program to be scrapped and a more capable supplire found.

Re: Rescue mission

There is a Soyuz attached to the station for just such situations, no need to send up anything.

I think the biggest worry now is will this trash hit the station as it leaves.

Pure BS and spin.

It has thruster problems, He2 leaks and now from their attempts at an explanation for it not returning indicating possible hatch issues.

It was never fit to launch and was launched anyway to save what is left of Boeings tattered reputation and face for NASA's failed partnership with them.

This program is dead in the water and this ship unfit for pirpose. Time to get in the Soyuz and send the astronauts who piloted it home and then remote pilot this space trash to reentry to see if it even survives, without a crew.

China's FortiGate attacks more extensive than first thought

Re: Vault 7

Yeah, try not to look at reality why dontcha.

Re: Vault 7

Yeah, that was debunked like a day after it was "reported".

Do keep up.

Vault 7

Everyone remember Vault 7 right?

The CIA hacking kit that was designed to leave traces of their adversaries behind, remember that?

Who is calling China a threat to the world right now again?

Who is it that wants every European nation to stop doing business with China again?

Yeah, that makes far more sense than China hacking the Netherlands.

Looking forward to being proven right again.

China creates LLM trained to discuss Xi Jinping's philosophies

Re: Yeah, this is too dangerous for them.

Hillarious given that the US and Europe are doing just that.

Maybe pay attention to the laws restricting your speech being passed this year, in other words stop believing ands start verifying what you think you know for once in your life.

What you are told by the media and you corrupt authoritarian politicians is not what really is.

Google Cloud shows it can break things for lots of customers – not just one at a time

Yeah, this is one of the many myriad reasons why putting your entire critical infrastructure onto a cloud that you don't have full control over is a fools move.

Front ends, non critical edge use, sure thing, great applications for public cloud.

Your main infrastructure? Might as well just hire all your staff straight from Uni and cross your fingers that they never have to deal with things experienced admins have already learned from.

Which is what it appears everyone is basically doing these days, crossing their fingers that these public cloud services have hired competence and integrity.

Because when you do this that is all you can do: hope.

And hope is not a viable computing strategy.

Yeah, that's not a thing, it ALWAYS ends up costing more.

Been down that dead end road with multiple companies over the years.

It may take decade to shore up software supply chain security, says infosec CEO

Just another attack on opensource, it is much easier to use legal means to force big companies to place undisclosed back doors on closed source softrware than it is to sneak one into open source code that is constantly being looked at by thousands of developers who are specifically looking for such things.

Notice how the uptick of these attacks on open source coincide with the new spying laws in the US.

You all should go see what those laws say, it directly impacts the discussion and the security of our systems and data.

Undersea cables must have high-priority protection before they become top targets

It's pretty simple, only nations with advanced underwater capabilities are able to take those out so the US needs to stop antagonising and waging war against everyone and those nations will not target the lines.

Fat chance of that thouigh.

Kaspersky hits back at claims its AI helped Russia develop military drone systems

Whatever, the US government can shove it.

If the US government complains it is because thhey themselves are doing it and are just getting ahead of any criticism.

As usual.

They use Google AI to develop weapons and spy on everyone so who cares what those genocidal warmongering criminals want or say.

Apple's 'incredibly private' Safari is not so private in Europe

Re: Meh

Yeah, best to just go without privacy huh.

Re: Ah Apple

Right, because privacy is a nothing burger for Americans so why would anyone else on the planet want it?

Muppet.

Apple was never secure. By design.

Apple's browser was never secure, nor is iOS.

Take note of how easily the US military, intelligence services and police retreive data from it, they only cry about it when they want laws made to make everything as easy for them to walk in and get the data from.

If it is from the US it is compromised. Flat out.

ByteDance 'would rather' torpedo TikTok than sell it off

Re: I, for one, welcome our new insect overlords

Well put CIA mouthhpiece.

Not buying a word of mind you just acknowledging your effort at FUD.

Governments issue alerts after 'sophisticated' state-backed actor found exploiting flaws in Cisco security boxes

"In addition to the alert we have not confirmed evidence of this activity affecting US government networks at this time," as CISA spokesperson told The Register.

And now we know who the state actor is.

If American tech is used to design or make that chip, you better not ship it to Huawei, warns Uncle Sam

Re: And it's all based on ALLEGATIONS!

Nope, the evidence is the OPCW fabricated a report that the US asked for ot say what the US wanted and not what really happened.

Do keep up.

Re: China will become self sufficient in tech

Not nearly as much of that as there is international election manipulation, illegal warfare, banned weapons use, the several million dead from both of those as well as the velvet glove style Police State that is the US these days.

Not to mentio that the US has installed and/or directly supports 73% of the worlds dictatorships.

No one in the US has any standing to point at ANY other nation at this point about pretty much anything.

We've found it... the last shred of human decency in an IT director – all for a poxy Unix engineer

Most at the Director level that I have worked with (all very very large companies) were of two types:

The clueless self promoter with side deals and things that look like CoI's but are just shy of being legally so

And the abusive stress ball that also displays less competence than the title would suggest.

To have a guy like this one at that level would be a major change for the better at most companies.

Astroboffins peeved as SpaceX's Starlink sats block meteor spotting – and could make us miss a killer asteroid

Doubt it will have any effect at all on nocturnal wildlife and it certainly will NOT interfere with NEO searches, these are moving objects that have known trajectories that can be removed from the sample data easily and quickly without a ton of extra programming required.

Yes they will upset visual observers with their transits but so do all the others as well, usually I just try to track and resolve them anyway as an amateur.

The real problem here is the orbital congestion creating a bubble around the planet that is very difficult to launch through safely.

Father of Unix Ken Thompson checkmated: Old eight-char password is finally cracked

The only correct answer here so far.

Spot on.

Pass phrases and/or hardware tokens are the way now and for the forseeable future.

8 character passwords are no longer recommended and have not been for a couple years now because of the ease with which they are compromised as the latest demonstraton shows.

Content does not matter, even special characters have negligible benefits in a hash this short these days.

Use pass phrases where your admins allow.

Pass phrases are snippets of something that you can remember that make a sentence or nearly a sentence.

A good one had I not just used it on a public forum would be something like:

Don't panic and remember to bring your towel.

That is 42 characters long and won't be crackable until quantum computers are available over the next decade or so.

It is also very easy to remember and not really all that slow to type.

And it is secure, for now.

Pass phrases people: use them, love them, be secure.

America's latest 5G drama: Spectrum row bursts into the open with special adviser fingered as agent provocateur

Re: It stupidity anyway

And be dangerous to boot, to make it useful as a handset at those frequencies it would have to emit a completely unsafe amount of RF for being so close to a human body.

FedEx fed up playing box cop, sues Uncle Sam to make it stop: 'We do transportation, not law enforcement'

This has NOTHING to do with national security and everything to do with prosecuting an illegal trade war against China and providing state support for US businesses that don't need the protection.

What the cell...? Telcos around the world were so severely pwned, they didn't notice the hackers setting up VPN points

Vault 7, all you need to know to finger the first suspect for investigation.

Out of Steam? Wine draining away? Ubuntu's 64-bit-only x86 decision is causing migraines

And that is one of the MANY reasons I don't use Ubuntu.

Halleluja! The Second Coming of Windows Subsystem For Linux blesses Insider faithful

So no localhost yet eh, I know there will be more weirdness as well but then every hypervized setup has its wierdnesses.

Better not forget 127.0.0.1 as well though, it gets used more than localhost in a ton of stuff.