Posts by depicus

Severe vuln in WordPress plugin Profile Builder would happily hand anyone the keys to your kingdom

Re: CMS 101

Try telling that to Marketing who already lost the keys to the house but get what they want rather than what they need.

JavaScript tracking punks given a thrashing by good old-fashioned server log analytics

I gave up on Google Analytics years ago and search my own logs for errors, mainly through Logwatch which sends a nice list of errors and not founds so I can adjust my personal site if a file were missing or more likely a rise in scanners looking for haxkers.php which I can then add to the redirect list to send them off to the the FBI's web site.

Sadly marketing departments have more control over most companies web sites and pretty pictures are more important than functionality.

*Spits out coffee* £4m for a database of drone fliers, UK.gov? Defra did game shooters for £300k

What next a database for drug dealers !?!?!

PC Plod doesn't even come round for burglaries so what hope of ever being caught unless you really really really f*** up and crash into somebody who golfs with the Chief Constable.

UK is 'not a surveillance state' insists minister defending police face recog tech

Re: Yes it effing is!

In order to encourage only serious candidates to stand, a £500 deposit is required when submitting the nomination papers - returned if the candidate receives over five per cent of the total votes cast.

https://www.parliament.uk/about/mps-and-lords/members/electing-mps/candidates/

Cheapskate Brits appear to love their Poundland MVNOs as UK's big four snubbed in survey again

Re: EE

Indeed and these are two different metrics, Which is about customer service and OpenSignal is network.

Facebook: Yeah, we hoovered up 1.5 million email address books without permission. But it was an accident!

Re: Too late

Not if you never gave it access to your contacts although I notice now it makes things very difficult by swapping the users name for their number until you allow them to plunder your contacts.

NHS England digital boss in hot water over 'puff piece' written about her future employer

Easily led or stupid

Either she was coerced into writing it by her new employers, in which case it's a bonus she's left the NHS if she's that spineless or she's stupid enough to think nobody would notice this conflict, in that case good riddance I hope your replacement has more common sense.

I predict a riot: Amazon UK chief foresees 'civil unrest' for no-deal Brexit

Plausible

I remember the start of the year we had a few days of snow and it was near riot in the local Sainsburys so it's easily imaginable that a lack of custom officers may lead to travel chaos much like when the French like to go on strike.

Although what Amazon actually said was civil unrest was part of their contingency planning at all their facilities both here and around the world and that Brexit could trigger said plans all the way up to civil disorder and I suspect they've even planned for government overthrow. Of course any large organisation has contingency plans for many many eventualities but just because you have a plan and can foresee it doesn't mean you think it will happen.

Dixons Carphone profits drop 24% amid hack 'n' high street struggles

Not surprised and maybe the new CEO could start with teaching his staff manners and how not to break the law. I'll be happy when they are filing for administration.

Apple's QWERTY gets dirty, leaving fanbois shirty

Awful Keyboard of the Century.

I have the MacBook Pro and can confirm it's keyboard is truly awful. I have a can of air on the shelf for a 4 month old laptop and it needs using every week to blow out crap so the keys work. Truly awful design.

Contrast with my MacBook Air 2011 which still worked after trips to Africa and used on a bus with more red dust than Mars yet a Pro machine which never leaves the sofa craps out every few weeks.

Carphone Warehouse cops £400k fine after hack exposed 3 MEEELLION folks’ data

Craphone Warehouse

Who is surprised at a company which does everything on the cheap and treats their customers like shit would be anything but total *uckwads. Everything about Craphone Warehouse is rotten to the core.

GoPro exits drone market and slashes jobs amid sales warning

When they went on a "milk our current customers with this online crap" making you create an account and log in to use your own camera you knew they were in trouble.

TalkTalk banbans TeamTeamviewerviewer againagain

If TalkTalk really wanted to cut off the scammers then it could simply block some of the "call centre" numbers and ip addresses that use Teamviewer and 0800 numbers and have been for years. Yes they'd just move but at least it disrupts them for a few days.

Hello, Dixons Carphone? Yep, we're ringing from a 2015 handset. Profits down 60%, eh?

Best Christmas News Ever

The best news I've heard all year - cannot wait to dance on their grave when they go bust. I'm currently in a small claims court for a defective iPhone that in the first month they would not replace or refund under warranty.

Such poor customer service it's mind boggling but at least I'm now banned from their local shop :)

'DJI Mavic' drone seen menacing London City airliner after takeoff

Re: Ban the lot of them

I'm not surprised you're anonymous with such a stupid statement. Why is "ban it" peoples first response to everything !!!

London Mayor backs talks with Uber after head honcho's apology

"London Mayor backs talks with Uber after fearing loosing votes in the next election...."

There fixed for you ;)

Red panic: Best Buy yanks Kaspersky antivirus from shelves

If you want in-secure take a look at F-Secure which proxies SSL web browsing information including PayPal details on a localhost server using http......

DJI's Spark drones to be bricked by September 1 unless firmware updated

I bet 99.9% of drone users will just update anyway (myself included). It's hard to see who you are going to sue as they are a Chinese company and cleverly sell from China. But even if you could get a UK court to listen I'm sure DJI will just say it's for safety and to comply with local laws. Yes it sucks but nothing you can do about it.

Thinking about it you might be able to get an import ban but it would probably take years and cost a fortune and what drone owner is going to do that.

FYI: Web ad fraud looks really bad. Like, really, really bad. Bigly bad

Re: Why am I not surprised?

Except you and I are ultimately paying for this fraud.

Dixons Carphone: Brexit not a factor as Brits' gadget lust holds strong

Re: Alternatively

Such poor customer service I wonder how they are not in administration already.

Brit ISP TalkTalk blocks control tool TeamViewer

The sensible option would be to block TeamViewer from IP's that are known to be used by scammers, it's not as if I and I suspect others have reported these IP's to BT, Talk Talk and Sky yet nothing ever happens. And while we're at it block the telephone numbers these people use, some of which have been active for over 3 years.

Of course that would be sensible and easy so not likely to happen.

US tech giants take brave immigration stand that has nothing to do with profit whatsoever

Shock horror a company wants to make a profit....

In this global economy large companies are able to employ people anywhere in the world, the fact they bring them to the US to pay taxes there instead of just expanding their offices in other countries I'd think is a benefit/bonus to the US but looks like those regional offices will just get bigger and bigger.

Trump's FBI boss, Attorney General picks reckon your encryption's getting backdoored

Fools

A few years ago India blocked access to Github for a few days over the site hosting encryption code, it's reported that Syrian developers had released an app that was written using open source encryption for fighters in that country to securely communicate.

The horse has already bolted and all backdooring will do is make the US less secure and its tech companies less competitive.

Apple sings another iTune following Brexit as prices rise by up to a third

Re: More more more.... like Apple less less less

You are aware that developers get 70% of that aren't you !!!!!

Boy, 12, gets €100k bill from Google after confusing Adwords with Adsense

Re: I'm confused as to how someone can be that confused

Never underestimate the stupidity of adults let alone a 12 year old child. I know a few grown ups that this would probably confuse.

Microsoft snubs alert over Exchange hole

Re: DNS Hijacking

A Let's Encrypt cert can be issued in a few seconds if you have control of the domain or even just the sub domain.

DNS Hijacking

As DNS hijacking is easier than hacking into a server you'd think that "...provide[ing] a user's password in plain text..." to anything would not be a great idea especially domain passwords. I always thought the password was sent as a hash and then matched on the server and never sent in plain text which seems exceptionally easy to compromise.

Bad news: MySQL can dish out root access to cunning miscreants

....and there's no patch (yet) !!!

You can buy Windows 10 Enterprise E3 access for the price of a coffee

Re: you pay 7 bucks for a coffee?

I haven't installed a Windows server for about 4 years, I much prefer Linux for servers now and I like to make a small donation each month to an open source project with the money we save from paying for licensing so a win all round.

Microsoft waltzes users through Azure by killing VM conversion tool

Re: Microsoft=abandonment

Thankfully it's herding us to Linux servers :)

Microsoft won't back down from Windows 10 nagware 'trick'

We'll laugh at this in years to come as a good indicator of Microsofts decline from relevance. Hopefully it will now be tagged as the malware it is.

One-third of all HTTPS websites open to DROWN attack

It is an SMTP server so has no web sites or POP3 or IMAP or anything else just port 25 SMTP so I still think I'm unaffected as it shares nothing with any other service.

I'd question the 1/3 claim - it has one of my "sites" as affected, yet it's a SMTP server and, because we are PCIDSS compliant, is only used for SMTP so has no HTTP traffic. All the other sites are TLSv1.1/1.2 only so I think you can knock at least 1 site off that 1/3 total.

Go full SHA-256 by June or get locked out, say payments bods Bacs

It's odd that TLS v1.1 is a requirement of PCIDSS so how is anybody still using anything lower.... but I know a few mayor sites are.

Outfit throws fit, hits FitBit's hit kit with writ (Apple also involved)

Having read the last patent it just solidifies my thinking that patents are handed out like sweets at a kids party, with little regard to the scope and prior art.

Can't get a break: Pwned Linux ransomware pwned again, infects 3000

Re: @chemist - only ONE attempt to attack SSHD?

Turn off passwords and use a cert login helps.

UK terror law probe stresses 'safeguards' amid MI5 plot claims

Re: Common law duty

"It is a duty on all of us under English common law to help prevent crime"

No it is not.

Windows 10 is due in one month: Will it be ready?

No, it's nowhere near ready but like most software nowadays it's release and patch.

Sunday Times fires off copyright complaint at Snowden story critics

You are not embarrassed ?

When I did copyright law the VERY FIRST thing we learnt was fair use rights so I'd be f***** embarrassed to have to be the "lawyer" who sent out that statement.

Webcast: How to survive Windows Server 2003 end of life - safely

Why ?

Why do you feel the need to upgrade because you are told to ? A well secured 2003 server is still 1000 times more secure than a poorly secured Windows 2012 server. I'd sack the idiot who thinks upgrading creates a better sense of security rather than the person who has a secure network and isn't held to upgrade ransom.

ISIS command post obliterated after 'moron' jihadi snaps a selfie, says US Air Force

No info on the selfie or post strike images so I call US propaganda.

FBI: Apple and Google are helping ISIS by offering strong crypto

The fact that ISIS and other Syrian groups are rolling their own cryptographic software based on open source code and even hosting it on places like Github would suggest this is your basic scaremongering by people who do know better.

While I'm sure the plebs of most terror organisations may still use Apple and Google any self respecting terrorist middle management would be using their own systems.

Co-op Bank's creaky IT should be flogged off, growls UK.gov

The Coop in general seems to have been run into the ground. Check out the disaster that is the Coop Energy and two months later people still cannot log into their accounts and forget phoning as their service is nearly as bad as Orange.

EU net neutrality could kneecap the Tories' opt-out pr0n filter plans

Well Tor or Hola or any proxy or vpn service already blow any of this out of the water.

Please no non-consensual BACKDOOR SNIFFING, Mr Obama

WTF Richard Head

"This year, however, Prime Minister David Cameron publicly criticised the existence of encrypted messages which law enforcement and security services are unable to access, and stated his intention of gaining US support for the notion that "[We must not] allow a means of communications which it simply isn't possible to read"

The single most f***** stupid thing any person could ever say. I fear my government 100 times more than any "terrorist"...

Visual Studio running on OS X and Linux for free? SO close

IDE or Text Editor

Not Visual Studio as an IDE more a glorified text editor, but if VS was to come to OS X count me in.

Comments considered harmful: WordPress web hijack bug revealed

About time

I feel his frustration. Probably not on the same scale but it's blinking annoying to report a security vulnerability and have it ignored. Security though silence is not security.

MASSIVE FAIL: Indian gov DOXXES net neutrality campaigners

Re: Is that a screenshot of a detailed .net error?

Same type of error message I got from the co-op energy payment page last year, it took them 4 months, and multiple emails to them, to fix - great for a payment site.

NSA: 'Back doors are a bad idea, give us a FRONT door key'

Github

Github already hosts some forks of well known encryption libraries for users in the Middle East and I've read reports that the Syrian opposition uses modified open source programs to communicate as they cannot trust anything developed in the west. So I fail to see how this most ridiculous of ideas is going to help. Indeed how are these people even employed coming up with such stupid ideas.

Our world wide web is becoming more segregated by the day.

Thousands of UK drivers' details leaked through hole in parking ticket website

Well you have to ask why this data was being held in the first place. If the fines had already been paid then "Personal data processed for any purpose or purposes shall not be kept for longer than is necessary for that purpose or those purposes". But like most things in life nobody will be held accountable and despite some promises to tighten up security very little will happen because security costs and these companies are only interested in making money not protecting your data.