Posts by Doctor Syntax

Microsoft's Azure networking takes a worldwide tumble

Re: SaaS

DTaaS - Down Time as a Service

'LockBit of phishing' EvilProxy used in more than a million attacks every month

Treat any unsolicited email with links in it as probably phishing.

To make this work businesses need to start taking the high moral ground by not sending out emails that look like phishing emails - i.t. they are unsolicited and have links in them. They then need to publicise that emails claiming to be from themselves with links in them are phishing. They will probably need to enforce it by immediately terminating any employee who sends emails which look like phishing emails. Given that the "lets spam our customers because they're agog to learn about our latest brain-fart" mentality has spread so far into upper manglements that it will be very difficult to eliminate this.

Tesla asks customers to stop being wet blankets about chargers

Looks like Poe's law in operation. Sorry.

"So far it looks like the new Supercharger team has done less to roll out improved charging infrastructure"

Makes sense. The car sales are falling off. Fewer cars need fewer chargers. Cause and effect at work one way or the other.

Proofpoint phishing palaver plagues millions with 'perfectly spoofed' emails from IBM, Nike, Disney, others

Re: did not expose any Proofpoint customer data

And, of course, with customers of that size the traditional "a small number" was all they needed.

Yup, weasels. Weasels of the first order.

Automation needed to fight army of AI content harvesters stalking the web

Re: Whac-A-Mole

"I am planning to integrate it with a better nonsense generator API in future (OpenAI)"

Maybe target the output of the actual LLMs that are doing the scraping to promote faster model collapse.

Re: Whac-A-Mole

This might have been a follow-up to a suggestion I made. What I had in mind was feeding a steam of randomly selected words from the contents of /usr/share/dict or its equivalent with the added refinement of occasionality selecting a pair or triplet of words from the stream and subsequently throwing them in at intervals so the stream would become a stream of meaningless word associations padded out with random words.

Revamped UK cybersecurity bill couldn't come soon enough, but details are patchy

"patching is a painful process that requires rounds of testing and monitoring to ensure it's safe to push"

With recent events in mind perhaps the bill neds to include sanctions for issuing patches which are not adequately tested and for not issuing them at all. The first part of that would be to encourage and enable faster patching by organisations and the second would be to prevent evasion of the first.

Linux Mint 22 'Wilma' still the Bedrock choice for moving off Windows

Re: No Bedrock choice without KDE!

"it does not honour Windows keystrokes. That, like it or not, is the standard."

Windows key? Do we have to assume a Windows keyboard layout? I have a couple of wireless keyboards that are only partially Windows-like in layout. What if it's installed on a Mac? Does Mac follow the same set of combinations?

I doubt there's a set of key combinations which will suit everyone. What would mightily piss off KDE users would be deciding it's time to change key combinations to match Windows.

Taking the Flintmobile for a spin

I hope you didn't have to drive it with your feet.

Re: No Bedrock choice without KDE!

"Today, KDE suffers from far too many options scattered across illogically and unsystematically organized menus"

I'm a bit puzzled by this.

Do you mean the application menu hierarchy? That's editable so the organisation can be whatever you find logical.

System settings - there are a few oddities but not many that strike me. I can't see why Appearance and Personalisation are separate but Users and Startup&shutdown really should not be in those but in System Administration. At first it does appear illogical that Applications is in Personalisation but it has to be remembered that this is intrinsically a multi-user system and different users may have different choices here.

Re: Hm...

Except that Ubuntu repository is not Debian's it's their own.

NASA gives Falcon 9 thumbs-up to launch Crew-9

Re: Redundant things are there for a reason.

Are the brain organoids being grown for transplant into the Boeing board?

Silicon, stars, and sulfur make Apollo's unlikely legacy

Nice Royal Mint you have there. maybe I should look after it in case something should happen to it.

Re: You mean like this:

Does it have anything to reconcile Intelligent Design with the human back?

Quantum effects are there in your everyday life.

One is fluorescence - a molecule absorbs and re-emits light but loses some of the energy to heat. Non-quantum physics would expect the loss to show up in the dimming of the fluorescence. Because of quantum effects the emitted light is of longer wavelength because the energy of a photon depends on wavelength, red having less energy than blue. What's rather more mind-boggling is the duality of light - and that used to be part of my everyday life in the form of fluorescence microscopy. The fluorescence depended on he photon aspect of light but the illumination depended on interference effects in filters and a dichroic mirror to keep light in the excitation and fluorescence bands going where they were supposed to and nowhere else.

You need to show your workings as well as your answer.

Post-CrowdStrike, Microsoft to discourage use of kernel drivers by security tools

So they lowballed the numbers affected. By how many orders of magnitude?

Re: Blue Screen

It should only fail once in a Blue Moon.

Surely the fact that the instructions for recovery by booting into safe mode indicates that there is a state where either the driver wasn't loaded or else it didn't try to read the offending file if it did. There's a halfway house of some sort. It will be a matter of risk management as to exactly what is now and what that might be in the future.

"The Friday thing is unforgivable, absolutely."

That was my first thought but it new appears that they might release several a day everyday. That makes both the pre-release at source and pre-install at client tests even more important.

The updates are pulled in automatically so don't go through the IT department at all and if they did testing would be automated. Given that testing the specific functionality isn't going to be likely (do you want to keep samples of all the latest malware anywhere on your network?) about the only test is going to be determining whether it falls over or slows the system. Maybe some firewall rules that only allow intermittent access to the update server and not all the fleet at once might be possible, automateable and even allow for the inclusion of a sacrificial box as a trip-wire.

"it is cheaper and easier to reboot a PC into safe more and remove a dodgy file"

There was the Bitlocker issue for one thing and the sheer scale for another. Some of them may not have been very accessible - those in public information displays, for instance.

The instructions for fixing it implied it wasn't essential for booting into safe mode but that wasn't possible without manual entry of the key if Bitlocker was used. It seems there's a gap there between safely fetching keys from a server and not opening up networking to a degree that would be unacceptable without services such as CloudStrike.

Re: "Windows Security best practices for integrating and managing security tools"

Backward compatibility is fine provided that what it's compatible with is good practice and documented as what's supposed to happen. That doesn't include things like use-after-free. It also doesn't include using a few features for their own applications but not documenting them for vendors of competing products.

The port of the Windows 95 Start Menu was not all it seemed

Re: "it appears the setup/design team made the change after the code was written"

And the start of a long process.

Secure Boot useless on hundreds of PCs from major vendors after key leak

That explains the bind9 updates that landed here at the weekend.

US claims TikTok shipped personal data to China – very personal data

"A potential role for Oracle as an overseer of TikTok's source code was also rejected, on grounds that the sheer volume of the codebase – two billion lines as of 2022 – meant that a review would require at least three years of work on the code used at that time."

What? No AI pixie-dust to get the job done today?

And anyway, tech folk are generally anti-social.

Group of 91 nations agree to continue not taxing cross-border data movement – for now

"the ongoing efforts to have Big Tech pay for the traffic it generates"

I've always found this puzzling. I'm sure Big Tech has to pay for its internet connections. Did the vendors price them wrong? Very likely as they'd have been played off against each other and some salesman won with a low-ball bid.

Never put off until tomorrow what someone could erase today

Re: DAT - a technology we're sure few remember fondly

DAT meant removable storage capacious enough for a tower format server small enough to fit into a tower format server. A great solution if it didn't also involve the HP DAT library device.

Re: DAT - a technology we're sure few remember fondly

Hands up everyone who was expecting the click of death.

Study shock! AI hinders productivity and makes working worse

Re: Management drank the Kool Aid

Who said anything about sound mind?

No encouragement is needed.

In any hierarchical organisation those at the top of the hierarchy the only ability you can be sure will be found in those at the top will be the ability to climb hierarchies*. Any other abilities will be a bonus.

* Exception has to be made for those where the position is inherited. There what you get is a matter of pot-luck, hence the saying "rags to rags in three generations" is so often true.

Depressing but inevitable given that they believe it. To do otherwise would invite too much mental dissonance.

Re: Ah, the old one...

I've used the same logic to set boot intervals for running fsck on different partitions.

No, really, please ban Chinese DJI drones from America's skies, senators are urged

Re: Idiots

You were doing alright until your descent into casual ageism. I suppose I could put it down to your being young, naive, having not yet lived long enough to gain experience of the world to mentally equip yourself with the understanding that there have always been "modern times" and that these particular "modern times" depend heavily on the inventions of some of those now retired and thus in your despised category of "retirees".

CrowdStrike meets Murphy's Law: Anything that can go wrong will

Re: Canary Deployment

"Users are given control over the update policy."

Except that when the S/W fetches its own updates automatically, which I understand to have been the case here, that's a bit trickier. Some subterfuge might be necessary. Say your firewall is set to block the update server most of the time. Then it's opened for a time to let the canary update. If the canary remains perched then you can open it for the production servers for a short period. There's still the possibility of a race condition when an update is released between the closing of the canary window and the closing of the production window.

'A moose hit me' and other ways people damage their gizmos

Re: "or even leaving it on top of a car"

After a week's field course in East Anglia I was tying stuff on the LWB Landrover to return to London. Halfway back I realised I'd put the lecturer's penknife down on the roof and left it there. First out of the door when we got back and enthusiastically on the step to help unpack, more in hope then confidence. And it was still there.

Re: Dropping the phone while gardening

It gave the builders somewhere to put the house?

BOFH: Well, we did tell you to keep the BitLocker keys safe

Saddleworth?

Re: Bitlocker is a pain.

If it has Bitlocker on it there's more than that that's worth disabling.

Customer bricked a phone – and threatened to brick techie's face with it

Re: Motorola brick

The transceiver was a relatively minor part of it in portable mode. The battery usually accounted for most of it. In some cases, IIRC, they were lead/acid batteries.

Re: Strange policemen

"Yes, by letting him go they're telling him that behavior is acceptable."

Maybe they felt it would be better to have him go and change his underwear at home rather than deal with the situation down at the nick.

" Ihad to sign another statement to say I was happy with the outcome and was ok to let the matter rest."

I think I might have made a complaint about my time being wasted by being unnecessarily kept at the scene for an hour.

Boeing Starliner crew get their ISS sleepover extended

Re: This is unacceptable!

"And unmanned."

No, manned by chairman, a director and the product manager.

Kamala Harris's $7M support from LinkedIn founder comes with a request: Fire Lina Khan

Re: take the money

Or prosecute him?

"Your thinking has all the consistency of cottage cheese."

And the holes of Swiss.

Shuttle Columbia's near-miss: Why we should always expect the unexpected in space

Re: All the more reason to send robots, instead

I can't remember which account I read it in (it might have been something in Feynman) but the rule is "you need people to get money out of politicians".