Posts by razorfishsl

Microsoft moved the goalposts once. Will Windows 12 bring another shift?

The TPM has NOTHING to do with securing the computer for security sake.

it has EVERYTHING to do with MS trying to kill linux

Microsoft gets twitchy over talk of Europe's tech independence

Trust microsoft.....

this is of course hte same Microsoft that jad Russian & Chinese spy's running about their systems...

and the same Ms , system , I have managed to thwart the security & login systems several times just during normal working.

And the same MS who seem annoyed that i wont work for free debugging their security systems.

the same company who string me along with their engineering team for 3-4 months over 5 separate security reports , only to give me a link to their forums where i can request improvements...

Definitely a company i'd feel safe putting all my data with.

VMware distributor Arrow says minimum software subs set to jump from 16 to 72 cores

Far More dangerous is the security risks of them preventing older shops with perpetual licenses from patching the software.

They should be investigated for this action.

SonicWall firewalls now under attack: Patch ASAP or risk intrusion via your SSL VPN

it's that openssl stack...

I already warned them that their STUPID marketing campaign on the firewall login page is causing problem with amplification attacks.

who the F*** put an https marketing campaign on the login for a fire wall?

Microsoft 365 price rises are coming – pay up or opt out (if you can find the button)

The problem is the world has a dependency on office software.

To get documents & spreadsheets from a customer requires you use Microsoft office.

they are CONTINUALLY changing the format, so that it breaks other software to prevent 100% compatibility.

Look for the label: White House rolls out 'Cyber Trust Mark' for smart devices

LOL...

There are sellers in China already offering network equipment & shite with this mark

I saw them getting ready , whilst doing a factory inspection in Shenzhen....

New Outlook marches onto Windows 10 for what little time it has left

Yep.. what they don't tell you is that it CANNOT use ".pst" files.

There users are going absolutely mental, becasue all the old records for legal compliance are stored in ".pst" exported archives.

also there is ZERO way to do an export of any data in the online version.

and to top it off, now you cannot do a export, MS has a plan to start charging for archived emails & data , pius an additional charge to actually access the material.

all this is coming in 2025

Microsoft won't let customers opt out of passkey push

DO NOT fall for this bullshit.

go read the supreme court ruling on this and police powers....

Basically it goes like this;

If the police ask you for access to your pass-worded device and you say no, they have to get a warrant and can only search for material in the warrant and they have to prove a crime or suspect one.

HOWEVER if your device is protected by "bio-metric" data ,the police are allowed to FORCE access by using your face or thumbprint WITHOUT A WARRANT.

giving them FULL access to EVERYTHING and without PROBABLE cause!!!

Linux Deepin 23: A polished distro from China that Western desktops could learn from

Re: Looks good but

Do you know in certain areas, you have to load mandated software onto your business accounts computers for the tax department.

After you log in & provide a usr id via mobile phone , you get an "update"package.

in that package loaded from government servers, is ....

A back door

A network scanning app

A screen cap & keyboard RAT.

I know this becasue of samples I submitted to an AV provider & the fact that the FBI said back in 2020 that his was floating about, its been improved since then.

Palo Alto Networks execs apologize for 'hostesses' dressed as lamps at Black Hat booth

She was about as useful as a broken lamp-stand.....

TBH... it just looks crass, not becasue of the women...., but the aesthetics of the event looks like it was a primary school project.

Using 1Password on Mac? Patch up if you don’t want your Vaults raided

Re: Avoid cloud services

Same.....

but don't let the store update your version 6.....

once it's done, the version 6 is strangely DEAD.... and wont run any longer, well it runs but you cannot log in.

Also they seem to have removed the "plugins" from their web site.

so if your V6 needs to reload the plugin into the browser.. strangely they are GONE..... Despite it being a perpetual license you can no longer get copies of the SW. or plugins, even if you have a valid license.

so a lot more is going on with this than just some "randomly found CVE"

This seems more like a way to F*** over the perpetual license owners...

going back a few years tehy already know this process was leaking and it was not an "issue"

They also admitted the PW were stored encrypted in main memory... after the master pw was entered.

But hte interesting thing is WTF are tehy STILL having the 7.x version in the apple store if they know it is F**ed...

or is that just a "hook" and then a forced upgrade to 8.x

Let's cut to the chase.....

I don't want a bunch of fuckwhits forcing me to store my pw in the cloud and charging me to do it...

nor do i want the same said fuckwhits to be spamming my screen with cloud signups every time I login to a website

DARPA suggests turning old C code automatically into Rust – using AI, of course

It's nonsense.....

since there are cases where you can NEVER predict the behavior of a program.

Threaded or I/O code in-particular....

Microsoft 365 remains 'degraded' as Azure outage resolved

ClownStrike take down clown Computer network

Wheres My Teeshirt.....

Sam Altman sues builder over $27M flooded, sewage-hit 'lemon' of a mega-mansion

If I'm paying $27 mil for a house... there better NOT be any "gypsum" ceilings or walls.

Game dev accuses Intel of selling ‘defective’ Raptor Lake CPUs

it's all nonsense, current is limited by resistance and voltage....

my kettle is connected to the national grid, which can supply thousands of amps, but i don't need to program my kettle to not use that current...

The reality is Intel F**ed up... they are allowing the microcode in their CPu's to pull more current than the silicon can handle.

it's the same misinformation and pisspoor designs they have continually done.

like saying their CPU can run at "XYZ Ghz" , it's all nonsense, becasue as soon as you try to meet that limit , all the other cores scale back, so maybe a limited number can run close to that speed.

Then you actually look at what they classify as "GHZ" and it's not actually GHZ speed, it's mult threading that gives a similar speed to what might be seen at that speed , when using manipulated code

Windows: Insecure by design

Until the issue of inter operability is sorted out, Linux will not replace windows.

there is NO viable way to run Linux in a large business and interact with windows users in other companies.

sorry been trying it for 20 years.

Word/Excel is continually being changed to prevent the seamless sharing of data, and not "open office" is NOT a solution.

If it were i'd be using it.

How Apple Wi-Fi Positioning System can be abused to track people around the globe

nope... turning off the ssid Bcast is a security risk... go do some research.. , WIFI does not work the way you think it does...

You're not imagining things – USB memory sticks are getting worse

Actually they are NOT getting worse.

What is getting worse is the amount being bought from China.

As regards the Changing of the Density, this has been on going for 20 years.....

It does not shorten the life of the cells, the issue is the range comparators, the level of the charge on the cell has to be detected, if the Vref for the comparators drifts , the WHOLE content will be misrepresented or will dissapear. (actually it is still there, but not detectable correctly)

They are actually more reliable is they are used now & again, since the cells get re-written based on the aging of the comparators.

If you write the contents out and the comparators Vref moves , then its game over.

also if you get hold of some very well known chip brand datasheets, after signing the NDA, you will see that they spec all the way down to 1 or 2 writes, with multiple reads.

they even spec specific pages missing... all this shite ends up in the market, since it may have a valid use in writing hardware that only needs to be written once at manufacture, but with changing parameter data.

all you are seeing is teh bottom of the barrel criminals going below the bottom of the barrel to make a profit., since now everyone else is doing the same.

it's all the big retailers, that are involved.

D-Link clears up 'exaggerations' around data breach

Re: Why would D-Link have end-user data?

Phone home & direct sales as well as registration data.

Only a complete Moron would use any of D-LINK'S kit.....

And before anyone says "it's safe if not connected directly to the internet.... no.... no it is not.

We have seen Russian malware come in via Chinese mobile phones provider networks , then attempt to bridge over to the other networks they can see,

Thereby attempting to bypass corporate firewalls.

Google wants to take a byte out of Oracle workloads with PostgreSQL migration service

Won't work....

There are may oracle type things that just cannot be implemented in PostgreSQL.

Then there is the potentially massive PLSQL code base that would need to be migrated in hte stored procedures...

After injecting pop-up ads for Bing into Windows, Microsoft now bends to Europe on links

They have also started doing it on their website for support.

It is impossible to open many pages , unless you use edge.

Euro monopoly cops to probe Microsoft for slipping Teams into Office

They should also look into MS perverting the HTML standard so it only works with Edge.

Stolen Microsoft key may have opened up a lot more than US govt email inboxes

And guess what.... Microsoft will slime its way out of this with ZERO liability.

When will this be stopped with legal requirements that prevent such companies from setting up shite services , then using users as testing agents.

A single company just totally destroyed a countries security & privacy...

WTF does it rely on a single key to access the whole of the system.

Quick: Manually patch this Zimbra bug that's under attack

You would have to be insane to be using Zimbra.....

This software has been absolutely riffled with critical exploits since the release of the original version...

every few months its "hay look another critical 9.x bug in zimbra"

Framework starts taking orders for 16-inch repairable, upgradeable laptop

Re: I have to say I would really like a laptop with the touchpad to the right

The main board is replaceable

Let's just hope it is better than their totally non existent website

https://frame.work/

Microsoft whips up unrest after revealing Azure AD name change

Dump the name dump the shame....

More worrying is the fact that they are adding in links to their services & websites that only work on their browser.

Just waiting for them to pull that shit on BI.

Japan's digital ID card gets emergency review amid data leaks

In Hong kong , Identity cards are done in person , by individuals of the government it two separate areas or floors.

and with fingerprints + facial identity..

it's not rocket science...

One person's trash is another's 'trashware' – the art of refurbing old computers

Even linux only moves forward...

The whole industry is eating CPU cycles to produce banality...

Hay look the window has rounded corners.....

A (cautionary) tale of two patched bugs, both exploited in the wild

TP-Link again.......

Time to geet some real programmers....

Microsoft stole our stolen dark web data, says security outfit

Well, if you supply a service , that relies on fixed data sets, serves you right...

Fortinet squashes hijack-my-VPN bug in FortiOS gear

fortinet is garbage kit...its the Australian Version of TP-LINK.

There are all sorts of problems , right from their earliest implementations , we battled with endless bugs ,strange behavior, 1980's version GUI and in the end we dropped their kit completely, due to their attitude of , well we shipped buggy OS but you still have to pay, despite hte bug being there from years before your support contract ended.

ALL companies should be responsible for "free fixes" to their kit, if bugs existed, it's time we grew up and stopped allowing companies to get away with this endless bullshit of

"well you need a support contract before we will give you the fixes for our own mistakes"

Chinese chipmaker insists it has Intel on-side, not inside

Just repackage & re-package all the E-waste.....

Boffins snap X-ray closeup of single atom – and by closeup we mean nanometres

The paper ill be keeping an eye out for..

Anal probing on a Nanometer scale..

Alpine Linux 3.18 fixes DNS over TCP issue, now ready for all the internet's problems

The whole UDP case was for SPEED.....

over TCP, you have to setup a formal connection , do your communication , verify the data, hold it open until you get it all, then tear it down.

as a result it is easier to DOS in tcp than over UDP ,as regards to taking hte DNS down..., then there is the issue with FIN packets...

Microsoft will upgrade Windows 10 21H2 users whether they like it or not

it's started already in Asia.....

all the 21H n are updating to 22H2 in the last few days..., caused all sorts of problems and required the rapid purchase of extra ram...

Alien rock causes cosmic disturbance in New Jersey home

it's clean on one side, which means it exploded after getting burned, so there are likely other pieces nearby...

Red Hat layoffs spark calls to unionize, CEO wades in

Ahhh yes.... IBM

No more feature updates for Windows 10 – current version is final

For Christ sake finally.

you aught to see this win 10 Crap in asia.....

There is adverts all over the menus and some damned cat or girl appears, just like clippy used to...

It is absolutely pounding our leased lines with the continual GARBAGE, that dose nothing to add value to a business.

More ads in Windows 11 Start Menu could be last straw for some

Sadly it is IMPOSSIBLE to move from windows, when many of your customers insist that they can only use office .

We have tried a number of times with trial migrations and have always had them destroyed by the customers insistence of using MS office.

There is a set of "copy" windows programs by a Chinese company "Kingsoft" that run on linux, but after taking a look at the network traffic from these programs we decided against using them.

Until someone comes up with a 100% viable way to GET OFF office, migration to another platform is impossible for many companies...

Microsoft stumps loyal fans by making OneDrive handle Outlook attachments

Actually them splitting out the "attachment" is potentially fraud...

Since they also handle business & legal emails for client storage, they are changing the email contents, to strip out the attachments.

Thereby tampering with the emails and changing the content...

since that content is no longer "inline" but extracted from the actual email.

in the real world an attachment to an email is NOT an attachment but inline text..., which they are both removing from and converting from the verbatim copy that went thru their systems.

there is no guarantee the email they reconstructed , is IDENTICAL to the email sent.

so in-effect they are fraudulently changing the contents of emails and misrepresenting the actual copy sent., specifically it is fraudulent ,because they do not state it is reconstructed and a misrepresentation of the actual email...

It's like me taking a 50 pound note, scraping off the ink, grinding the paper down, then reconstructing a new 50 from the material, then claiming it is genuine...

that is even before we get into are they storing the base 64 content of the email in one-drive , deliberately chewing up storage, or are they converting it back to binary, thereby potentially corrupting the verbatim copy..

UK.gov bans TikTok from its devices as a 'precaution' over spying fears

They need to replace the equipment

Microsoft delivers 75-count box of patches for Valentine's Day

Yep... just like they screwed over virtually Evey SYS admin.. a few months ago..

by preventing Computers from re-registering into AD using the SAME computer account.

so if you have machine "A", there are situations where it will not be allowed to register back into the AD if it disconnects...

they shout "Security fix" and "hardening"

Really...

so if it is "security hardening" , why is it only CLIENT side & not AD side?

What a crock of shit.... a "Security fix that any hacker can bypass locally on the machine... and no i'm not talking about the registry bypass.

They are deliberately throwing rocks in the road, to force people onto Azure... and off inhouse authentication.

Scammers steal $4 million in crypto during face-to-face meeting

Re: The entire operation used a clone phone

Yep... I keep telling HSBC about this in HK that thier shitty SMS messages about all the bank transfers can be listened into...

they say it is for security of their customers...

more like they are providing a feed to the HK government...

but they insist phones are secure devices if they have not been rooted....

They must have done it by intercepting the WIFI traffic....

bet they have found a way to merge data into a transaction to redirect it...

China's Yangtze Memory reportedly lays off staff, evicts them from company housing

Ah yes....... no matter how advanced they claim to be.... their main business is corruption...

Microsoft swears it's not coming for your data with scan for old Office versions

Re: Strange way to respect user privacy

LOL you are really funny......

AV programs are the biggest offenders of Telemetry....

Go see the amount that their cloud front end offers , every false positive & every file scanned that has malware is squirreled up into their cloud , including the users name...

when a virus is found a complete path is uploaded to their cloud.. which includes ur name folder and path... such as "big coloured girls" as was recently seen on our cloud av solution... along with the directors name...

So much for the rule for our stock market listing requiring all security risks files to be identified to the board & CEO in writing in a monthly report........

sometimes i really love my job..

Go to security school, GoTo – theft of encryption keys shows you need it

The other company to watch is those arrogant clowns over at 1password....