Posts by hh121

Oracle says its cloud was in fact compromised

Shocked!!! Shocked I am. Who would have believed that bunch of shysters would turn out to be a complete bunch of shysters?

GitHub supply chain attack spills secrets from 23,000 projects

Re: This is unfixable

I saw the AC comment and I have no opinion on SHA-1, collisions etc, nor claim any expertise. Certainly wouldn't comment on it. I was referring to the idea that Linus looks at everything up and down the stack.

Re: Really ??

Your point is taken, but it doesn't address the basic problem of who is putting that software out there, how do you know who they are and if they can be trusted. You seem to think I can figure that out somehow for the millions of packages out there, but that shouldn't be my job, nor the job of everyone else out there to clear that hurdle. Just like everyone reads every EULA completely and understands it. Not.

Perhaps a better way of putting it would be that Microsoft/HP/IBM et al would suffer incredible reputational damage and loss of business ($$$) if they allowed someone to put something malicious into their packaged software. They are therefore far more likely to put significant resources and safeguards into their process, which is what I saw (from a distance) when I worked there a very long time ago.

And in this sort of scenario it wouldn't be me sueing Microsoft, it would be major corporations with an axe to grind, or governments threatening sanctions. I am certainly not delusional enough to try that myself.

Someone sneaking a package into github probably doesn't give a monkeys, specially if they're safely squirreled away in North Korea or Russia.

Re: This is unfixable

How much code does Linus actually look at (or amyone else you can name and actually trust), versus the swathes of code that gets lumped together in a distro, or randomly downloaded in some addon, just 'because'.

Ain't no million eyes on every element, let alone trustworthy eyes or even competent.

Re: Really ??

I've asked the same thing before and got nothing serious in reply - how do you trust any code from some rando on the interwebs, whether it's Linux distros, Github packages, Nuget packages and all the rest? At least with something provided by Microsoft/IBM/HP et al, you know they vetted their staff before hiring them, or you know who to sue if it all goes really pear-shaped.

Non-biz Skype kicks the bucket on May 5

Re: Enshitifiation

I'd be more inclined to think it's just about retiring something for which there is a strategic replacement (albeit without some of the features some people want) and there aren't enough users to justify keeping it going. I'd also be willing to bet that adding the callout features isn't worth the cost or hassle to do it.

Since Whatsapp came along I hadn't logged in to Skype more than once or twice, or used my Skype credit in many years, to the point the credit had been disabled for a good few years without me even noticing.

CoPilot on the other hand, I completely agree with you.

Re: Alternative

The only people I can see in skype are women I've never met trying to talk to me in foreign languages. Just weird.

Re: Eejits

When skype came out it 'just worked', and MSN Messenger definitely did not work at all under most circumstances I needed (like when i was trying to reach family overseas on different ISPs).

I was at MS at the time and made this point repeatedly to the Messenger product team to no great effect. I guess they decided the easiest solution was to buy Skype, but here we are 20 some years later...

That's a no. You will be able to make calls using that credit after may, but you'll have to use Teams Free or the Skype Web portal, but you can't buy any more credit. I just wasted the thick end of an hour on hold with MS support to find this out...

https://support.microsoft.com/en-us/skype/skype-is-retiring-in-may-2025-what-you-need-to-know-2a7d2501-427f-485e-8be0-2068a9f90472

Microsoft tests 45% M365 price hikes in Asia-Pacific to see how much you enjoy AI

Re: Changed to "Classic"

It wasn't as hard as expected (per the OP) to get to the Manage Subscription either. From Outlook/Word/Excel, File/Office Account, Manage Account, then under Manage Subscription when you click Cancel Subscription the confirmation screen offers you the switch to M365 Family Classic without AI for AU$139, or switch to Personal for AU$111. Amazingly the actual 'Switch Plan' link doesn't offer those options...

What isn't clear is what is still included in 'M365 Family Classic without AI' (the rest of the marketing site materials don't seem to have caught up yet). Luckily I don't have to pony up again till November so I can wait a while to see how this steaming pile of manure pans out, but based on a fair bit of experience with CoPilot so far, there is zero chance of me paying for it, since I had actually been looking for ways to turn the damn thing off in Word, Outlook and OneNote, desktop and mobile. It's a pain in the neck. "You appear to have written an email to your wife with a shopping list in it", thanks for that compelling insight.

Edgio bankruptcy results in endpoint change for Microsoft

Off topic, but for recent form in this area...See also - 2 weeks notice for a breaking change in Sharepoint Online PnP PowerShell, now requiring app registration and any Powershell solutions using it probably needed an authentication update. Announced in a github blog I'd guess has half a dozen readers.

In their defence they keep saying its a 'community' supported app, not a Microsoft product. Lot of microsoft people in that community by the way. But if they had built the Online Management Shell properly in the first place, with the features that PnP was papering over the cracks for, to a standard that actually dealt properly with error catching and reporting (dont get me started), maybe everyone's infrastructure wouldn't be such a hideous lashup dependent on randos.

25 years on from Y2K, let's all be glad it happened way back then

Re: And for other reasons

When I was still working on Oracle dbs (in the 90s) and had too much time on my hands, I tried the date arithmetic in Sql for the behaviour around year zero. I found that the year before 1AD is 1BC, it didn't recognise a year zero. Didn't seem important enough to report it though.

Guide for the perplexed – Google is no longer the best search engine

Re: This was predicted - in El Reg - years ago.

I have no idea of the details of how Perplexity works, and I agree with the premise of the OP, but I suspect/guess that a search based on an LLM is going to be massively difficult/expensive to keep the model current, regenerating or integrating all the growth of internet content every day. Or don't and it will drift into irrelevance as the model gets further and further out of date. Which might be fine if your question isn't related to time critical data, but plenty will be. Whether that's harder to do for an LLM versus a search engine would be interesting to get my head around.

Data is the new uranium – incredibly powerful and amazingly dangerous

Refined data might be (relatively) harmless when held by the white hat that refined it ("don't be evil" anyone?), but if it gets into the wrong hands...this is what CISOs are bricking themselves about. Seems like pretty apt analogy to me.

Nothing's going to stop most of these data gathering and refining exercises though, unless they are made illegal or highly regulated.

Cast a hex on ChatGPT to trick the AI into writing exploit code

Re: Real problem is

*this particular* llm approach to ai doesn't *understand* anything at all, right, wrong, good or bad. It's a guessing engine that leaves you to figure out whether the answer is at all relevant or meaningful. I don't see it being extrapolated into one that does either. A completely different approach might though, but I don't know if that's what they're asking us to believe in and invest in.

A key indicator might be the rate at which Altman cashes out (or claims to be diversifying) his investment...I've seen that movie before in the first internet bubble.

In the meantime, 'good enough' might be able to make a few people rich and a lot of people unemployed.

Is Microsoft's AI Copilot? CoPilot? Co-pilot? MVP creates site to help get it right

Re: BAU for MS is it not?

To be fair, sharepoint search is only half the solution you need. It has always left you to do the hard yards on tagging content to make it usable, and they have only just recently, 23 or so years since this all started, come out with the other half of the solution as a premium add on to do that automatically. And labelled it AI of course, because reasons, even though 3rd parties have been doing this kind of metadata extraction for at least 15 years.

MS was doing the classification and labelling in sharepoint content well before the AI bandwagon got rolling.

And the M365 solution is fine as long as you don't mind all your content going through the AI.

Perplexity AI decries News Corp's 'simply false' data scraping claims

It's difficult to imagine how I could care less about news Corp, but the book writers, journalists, musicians, actors, painters, photographers etc that I do want to see survive with jobs that can sustain them probably won't, and thats just for starters. This isn't some Luddite rebellion in specific roles, this is existential for vast swathes of the service industry where they're using our content (even this post) to teach something how to replace us. Fun times.

Microsoft whiz dishes the dirt on the Blue Screen Of Death's colorful past

The grey beards I worked with when starting out would talk of sitting in the computer room and being able to tell when it was stuck by the change and regularity of the clicking sounds emanating from the box.

One of the same wise men also said "why don't you get married, why should you be happy?". I have often dwelt on thosevpearls on later life. Actually, the wisest and nicest person there was a lady in her 60s who'd been in IT since year dot. Probably learned more off her about how to be in a team than anyone else

How to maintain code for a century: Just add Rust

A century you say

Wishful thinking is probably being kind. Delusional might be a bit more appropriate. As convincing as the argument that all open source code has a million eyeballs on it so it must be safe. As a grey beard, it seems like the IT grads I come across are getting further and further away from the guts of systems engineering into whatever today's abstract niche for job security might be. Can't see the attraction of the legacy stuff for the newbies. I'd be more inclined to believe there will be more of this (https://www.theregister.com/2024/07/25/ibm_q2_2024/) leveraging AI that actually works (if it ever does) to translate old platforms into (slightly more) modern ones, or maintain them, but that's probably wishful/delusional thinking too.

CrowdStrike file update bricks Windows machines around the world

Re: Related?

Yup. Also see https://www.theregister.com/2024/07/21/crowdstrike_linux_crashes_restoration_tools/ before we get (even further) into a smugathon. Anything working that far down the stack has the potential to break things. The era of Windows device driver issues was one of those things that caused some major re-thinks 20-30 years ago.

My work Win11 laptop is borked too. I noticed it as the first BSOD around 2.30 from Sydney time, rebooted and ran long enough to investigate the error message, figured it was a crowdstrike issue *that has happened at least a couple of times previously*, reported all this against my support ticket, then an hour or so later the infinite BSOD/reboot loop started.

At least our mob has a self-service get-your-bitlocker-key option they claim is working, so as an IT company we *may* have a decent proportion of people up and running on Monday. If they read their emails on their phones. I wonder about the coloured pencil brigade though.

Anyway, I don't feel the need to spend my weekend sorting my laptop out though, that can wait till Monday.

See above re:bitlocker. Can't reboot in safe mode without it, and getting those keys to large numbers of users will be entertaining, not to mention the security implications of slinging all those keys around in the first place. Assuming there's a user, and they're capable of applying that work around. It looks like massive numbers of POS systems are borked, so good luck there.

It's well past beer o'clock round here anyway.

Agile Manifesto co-author blasts failure rates report, talks up 'reimagining' project

Re: Agile misconceptions are rife

Don't understand the down vote, I see this all the time. All. The. Time. I am regularly asked to provide a fixed price quote for a fixed outcome and a fixed timeline using an 'agile' approach. And I make the same point - you can't do that. Sure I can quote you for 'n' iterations with 'x' resources, but by definition there's no certainty of what you'll end up with within that arbitrary cost/time frame.

How tech went from free love to pay-per-day

Re: Learning new UIs

MS Paint hasn't gone, it's just a freebie download from the MS Store. Notepad is present too, the fancy new multi-tabbed version. Woo hoo. Whether your work MOE includes them (my retail Acer laptop and work laptop MOE with Win11 did) is one thing (i.e. not a Microsoft issue per se), and whether they allow you to install things on a work laptop from the Store or anywhere else is another. Not sure that's quite the deal-breaker for Win11 though.

I was running Win10 and 11 concurrently when my work outfit hadn't seen fit to make the jump. Differences were pretty minor to my eye, although I was momentarily annoyed by the skinny scroll bars in the Start menu/AllApps and Windows Explorer (don't see it anywhere else though). That said, the bar goes normal width when you mouse over them for a second or so. Still not an earth shattering deal breaker for mine, but your mileage will vary. If that's the worst UI you've used in 30 years, what were you using in the 90s? I remember a wide selection of god-awful UIs from Digital, IBM, Microsoft, Novell and many others (they joy of working on 'portable' old Oracle). Hyperbole, I've heard of it.

Re: The gigantic statistical text-prediction models

This is probably howling into the void at this late date, but...to me LLMs do not have any intelligence. Given they don't know a right answer from a wrong one, how can they be AI? Maybe they should be called MEEBs for Massively Enhanced Eliza Bots, since that seems to be their main antecedent. Their main approach as I understand it is to guess the next words (image, sound) after the previous instance based on statistics. Also doesn't scream intelligence. Actually suggests a complete absence of reasoning and awareness.

They seem to be largely built off stolen IP too, and I'm looking forward to the music and film industries bringing down the hammer, albeit they're the only people who can probably afford to. The rest of you forum contributors and bit part players/artists/musicians et al, good luck. My guess is it will probably lead to the enSpotification (c) of content (like enshitification only monetized), where only the gatekeepers who are big enough to manage the downstream micro-liabilities can actually do it, and guess what kind of price they're going to charge for that, assuming anyone can figure out how to do it.

free love?

As far as I can see, love has never been free. Short term lust, maybe, with conditions.

Re: The gigantic statistical text-prediction models

I'd be happy with "I don't know", rather than spewing out random garbage, which is what I get for asking obscure things that don't have a lot of source material on the interwebs. Like Powershell manipulation of a Word document using CSOM to pick one completely random example. If you don't like the Word ribbon UI, you definitely don't want to go there. It's like trying to intuit the commands for vi without a manual.

Re: The ribbon

I was there at MS at the time of the switch but nowhere near the Office team. The message was that if they'd stuck with nested menus the number of functions was getting out of control, and they were still adding lots, so something had to give. So based on all the user research they did (non-trivial investments apparently) the ribbon was a simplification. I've been quite happy with it from the get-go (as a techie). My wife the Mac fascist was definitely in the WTF crowd with many of her colleagues seriously pissed as well. All of them more than willing to share that sentiment with me. That lasted well into the early years of our marriage. Fun times. Although I think they were more pissed at the finance and inventory software from Oracle that I worked on in the 90s that they were on the receiving end of. Wanna talk UIs/consistency/usability there? But the Office stuff has been pretty consistent since then, and the howling I was exposed to died down.

The Alt key shows you stuff-all hot keys (never used it), but the full list for Word at https://support.microsoft.com/en-au/office/keyboard-shortcuts-in-word-95ef89dd-7142-4b50-afb2-f762f663ceb2 and Excel at https://support.microsoft.com/en-au/office/keyboard-shortcuts-in-excel-1798d9d5-842a-42b8-9c99-9b7213f0040f still look pretty extensive. I know enough variations of Ctrl/Shift/Arrow and Ctrl-C/Ctrl-V to be as efficient as I need to be in Word and Excel, and I'm crafting text for about 60-70% of my working life. I might even bother to read those docs to see if I can do any of the Word styles a bit quicker, but hey, they're always there anyway...

Also, I did get into a long and tedious dialog with the Word feature suggestions team about sending documents with our (Microsoft's) styles in them to a customer, who would edit them and the doc would adopt the client's styles, then they'd send back the stuffed version. It was long and tedious discussion because they couldn't see what the problem was (apparently it was a 'feature'). I was very pleased when that got addressed (eventually). They do listen. It just takes bloody ages to even get on, let alone up the feature queue, and even longer to get out the door.

Outback shocker left Aussie techie with a secret not worth sharing

Re: Ouch!!

My wife still does. I value the peace and serenity when I don't bring this up.

Nearly 20% of running Microsoft SQL Servers have passed end of support

Re: "We're doing this, we're doing the other, now we're thinking about"

But even in a perfect world of features that are never deprecated, if they fix something in the db (any db), and you upgrade your server and hit a problem some time later in your 3rd party app, who's fault is it and who's responsible for fixing it? Who are are you calling (assuming they're still in business)? Who's pointing fingers at whom? Who's paying for it? Help desks and level 3/4 support with guaranteed response times aren't cheap.

I remember a time when 'sql' was supposed to be a compatible standard. Look how well that turned out.

Re: Just Maybe

Windows - maybe. Hasn't hurt me much really.

Office - always in the development tools, regularly every few years. Otherwise backwards compatibility is their USP

Sharepoint - definitely, but those features will not be mourned much, if at all. I'm more annoyed about how badly designed (if that's the right word) they were in the first place. To pick some random examples... Sp2010 workflows anyone? Followed closely by sp2013 workflows? Won't be missed when they fall off the twig shortly. 2026 they get euthenised, which is probably way overdue.

Sql server - don't think so, hence my point about compatibility mode. Has always seemed to be more additive than subtractive from what I've seen. But then I'm not a coal face dev or dba, so happy to stand corrected.

Re: No slack? From nearly 20 years of dev?

I agree completely, but having recently (last year) been through a db upgrade from only sql2008 to 2008r2 (because Windows EOL) for a mission critical legacy app where the supplier went out of business a decade ago, and the replacement initiative had been kicked down the road nearly as long, even on that tiny change the compat risks and the unknown testing coverage was giving management kittens. Which is why sql2014 and above weren't acceptable options (at least one db was in compat mode 80). We think it worked with r2, but who knows...

Re: Just Maybe

Is 10 years of primary version support and 16 years worth (and counting) of compatibility modes not enough? Guess not.

There's a marketing cadence for predictability, whether you like it or not. New features are coming, the issue is how reliable their arrival is (better than it was). Do you object to new features or their arrival schedule? Or is the idea should they never release any improvements ("I've got a great plan guys, we stand conpletely still")?

Re: Perennial problem

The best executed (and only real) CI/CD project I ever saw (late noughties) had completely automated regression testing implemented. The regression testing cost nearly twice as much as the actual application to build. God knows how you'd maintain it. Now justify that, even with a long term value proposition. And that was functional testing only, didn't even address performance/load testing.

Re: Microsoft has deliberately made it difficult

So...you think you can run your legacy app on Postgres 6 forever more without having to update it or the host OS and not worry about compatibility or vulnerabilities? Or today's app on Postgres 17 forever more on the same basis? Sorry, does not compute.

And for everyone who seems to think software should be free, or supported forever as-is, you're mad. The thing's I write aren't free nor is the maintenance.I don't work for free and I'm not anti open source, just making a living in a capitalist world.

No slack? From nearly 20 years of dev?

So they've got to fix security problems, and add new features, and worry about backwards compatibility (all the DB vendors, not just MS). And maybe change/disable something that was a problem.

If you look at the Sql Server compatibility matrix they do a decent job, just not indefinitely. 100 mode gets you back to sql 2008 (assuming they were using 100 mode)...With your really old apps you *might* get away with the oldest available compat mode in a supported version, *but*...

What do you think the chances are of anyone being able to test that legacy app and verify it's still working fully and correctly against any DB change at all? I'll open with a starting bid of 'nil' and work from there. Or after an OS upgrade? I'm not convinced most patch update testing i've seen proves anything useful beyond a smoke test that it's on.

Malicious xz backdoor reveals fragility of open source

I completely agree with your logic, but from my point of view the maintainers are randos in the interwebs as well, let alone the volume of submissions and dependencies they are presumably dealing with. Given the number of these things it seems like a bigger issue. https://en.m.wikipedia.org/wiki/List_of_Linux_distributions

But even if you accept the primary maintainers are the good guys, how many more weak points are there with a package maintained by one person who can be socially engineered off. Or a package submitted by a baddie that was initially perfectly clean and good, but they have a longer game in mind. It's still all a trust thing.

I am curious about the down-votes...like how would paying devs for their contributions have helped in this scenario? And how do you know who you can trust as a contributor? Or who you can trust putting together yet another distro (which I've flagged before on other threads), let alone the chain of packages that may or may not get included, SystemD or otherwise? They can't even figure out who this contributor is (are) or where they are, let alone whether they can be trusted (not)...seems to be a pretty fundamental problem in the whole community approach to me. Considering the hoops I have to jump through to get a bank account or phone service, perhaps the bar to entry is (way) too low for something with this level of impact.

I don't think this was a money problem (not that i have anything against that being resolved), this looks more like a verified user problem, following by a who's validating their output problem (or qualified to, or at all), followed by a complex eco system of packages.

Some rando on the interwebs can get into the chain and what's to stop them wreaking havoc? Damn right there's a chance there are other instances of this out there.

The big corps like MS, Oracle, Cisco etc might not be perfect (or even close), but they'd be slightly more aware of who their employees are, and who did what, although it probably wouldn't take much to compromise that avenue too. Maybe all they've got is better tracability...

DBA made ten years of data disappear with one misplaced parameter

As a wise man once said, if you don't have a test system, what you actually don't have is a production system... Truncate was one of the things that caused a sharp intake of breath whenever I hit the return key. I've done worse though.

Your PC can probably run inferencing just fine – so it's already an AI PC

Re: the pachyderm in the parlour

Yep, I can't remember the last time I saw a desktop in the real world, and I get to see a fair number of customer sites too.

JetBrains TeamCity under attack by ransomware thugs after disclosure mess

Still don't get it

Why publish the how-to at all, unless you're a complete self aggrandising wanker who wants to show off how clever you are. The people they're hurting aren't going to be buying anything from Rapid7, not before and definitely not after. Unless it's a bug bounty shake down merchant, in which case who's the one taking hostages here.

Year of Linux on the desktop creeps closer as market share rises a little

Re: "Repeat after me" guy here ...

I remember one bank of my acquaintance nixing a Foss email proposal because it lacked a delegation feature, so executives would have had to do all their own email. The horror. Outlook/Exchange prevailed. No idea if that's still an issue.

Re: Familiarity and compatibility

Your suspicion is entirely justified, I was at MS at the time, but the context of it was "here's what happens on one of our regular business spreadsheet templates", a template that had been in use for many years and was on every MS consultant's laptop, nothing rigged about it. I think the marketing droid who found it was surprised, it wasn't even that complicated a spreadsheet. Rate lookups and locked cells mostly.

Then again, a lot of the issues could easily be in the older versions of Excel that were still being supported for backward compatibility. If they cut the cruft free they'd get hammered for that instead (by their customers instead of the commentariat).

But this example was so long ago it was probably early on in the open source game too. Times change, compatibility will have certainly improved (I'd bet MS's stds compliance will have too, but many would probably bet not), and if someone can guarantee the compatibility you *might* get the decision makers onside. Good luck with the coloured pencil department. You can't be surprised by risk aversion though.

Familiarity and compatibility

I put the stickiness down to familiarity, with a side of no awareness. People know Windows and Office, and can't be bothered learning something new, and they probably dont know or care about Linux/Open Office etc anyway. Maybe its a marketing problem after all. I go back to Lotus 123 days too, and made that transition, I could do it again but why would I want to?

Also there's compatibility. If I'm working with partners or customers who are using Word and Excel, I have to be certain that whatever I'm using isn't going to bork their files. A long time ago someone at Microsoft demoed Open Office against Microsoft's standard internal expenses spreadsheet. As it opened, the existing data was corrupted, and when it was immediately saved without any changes it was corrupted again but differently. That's many versions ago and i'm certain it'll have improved, but who's on the hook if anything like that happened today? Ignoring evil old MS making something obscure and complicated, people need that to 'just work'.

And as has been noted, the browser UI for Office isn't much better than Notepad. It doesn't take long for me to hit the features that aren't present, so I have to use the desktop client apps. I've had documents fatally corrupted by Word in the browser and spent a lot of time fixing them on the desktop. Now I don't even bother trying to use it.

Finally, as of today OneDrive capacity for E3 subscribers is 'unlimited' (search for "e3 onedrive storage capacity"), if you have more than 5 subscribers. The initial default cap per user is 5TB, but if you jump through some hoops (calling support etc) it will be raised. Whether you want your users potentially syncing multiple TB to their laptop's 256GB SSD drive (accidentally or deliberately) is one for the philosophers.

Starting over: Rebooting the OS stack for fun and profit

Re: In the absence of files...

At the risk of approaching a rabbit hole, the reason for that sharepoint metadata-rather-than-folders thing is more because sharepoint doesn't treat the parent folders as a searchable attribute of the file. So the chances of a file called 'Jan2024.doc' in the folder 'board papers/fy24/europe' being found using a search for any of those terms would be iffy at best. Painful experience would rate it as unlikely.

That and the 400 char limit on URL length which is quite easy to hit if you drag a file share into a sharepoint library.

Of course getting people to enter metadata on new content (useful and valid you hope), or parsing it from existing content in bulk are both significant hurdles.

Crunchbang++ versus Bunsen Labs: The pair turn it up to 12

I get the principle of Linux, Liam's articles about the FOSS landscape are invariably interesting, but I always end up with the same question...why does anyone need all the rats and mice variants, where 'choice' just means another headache (which seems to get bigger with each of these articles). The concerns would be a) how can I be sure it's going to be kept up to date and secure, a b) how can I be sure there's nothing untoward in it, same as occurs to me when faced with any download/install of something that isn't from a trusted brand name. I barely trust my bank(s) and my telco(s) for software, let alone randos putting together distros.

Raspberry Pi Pico cracks BitLocker in under a minute

Re W11 requiring separate TPM chips...that's what I thought. And I was annoyed when the brand new (2 years ago) Gigabyte X570 board for my son's home build gaming rig didn't include one (according to the upgrade assessment tool), so I thought we were stuck on W10. But unbeknownst to me, when the system asked him for the umpteenth time if he wanted to update to W11 and he said Yes, it automagically enabled the soft TPM (don't ask me what happened, I wasn't there) and allowed the upgrade to proceed.

Missing Titan sub likely destroyed in implosion, no survivors

Re: "craft's carbon fiber hull"

Not my point, but to yours - as far as i know it was metal fatigue from the repeated compression decompression, then yes, it exploded rather than imploded. Or just broke up in flight which is just as bad. But they didn't find it because of the testing regime missing it. Didn't help that the Comet was the first of it's kind.

In the sub's case it sounds like a combo of that plus water ingress / unsuitable materials.

Shall we bring in Apollo 13 for another tangent with no pressure at all?

Re: "craft's carbon fiber hull"

I was De Havilland and Nimrod adjacent a long long time ago, and one of the things I heard was that the problem on the Comet was that the pressure testing of the hull didn't do the whole thing in one go, it was done in sections (cheaper natch), and the failure was at the join of one of those sections.

Once they figured it out, pressure tested it properly (all at once) and resolved any issues it was fine, but by that point no one was going to buy or get in a Comet as a commercial flight. I may be misremembering it, or it's another urban myth I've inadvertantly picked up along the way...that and the Concordski crash reasons.

It does have echoes for this incident though in the testing situation

The Nimrod flew a very long time, way longer than you would have expected a design of that vintage. The issue there i heard was feature creep (needs a bigger radar, which needs bigger bird strike shields, which needs bigger radar to punch through it...and so on) till it got to the mk3 and beyond, collapsed under its own budgetary weight and they bought Awacs instead. Still a good reliable airframe though.