Posts by plunet

Bork ventures to the Middle of Lidl

Re: middl of lidl

Ah, brings back memories of a old 386 that was running Harvard Graphics as a digitalish welcome display on a CRT in the 90s.

Birmingham City Council's Oracle ERP fiasco now £144M and still not working

Re: £144.4 million

Whilst your comment about nurses would be correct for those employee by the NHS, the council would and could be responsible directly or indirectly for funding or employing some community nurses.

And the vast majority of roads within the Birmingham City Council area are maintained by the city council, a limited number of trunk roads are the responsibility of National Highways, well under 5% by distance.

M6 (passing through the north and east of the city)

M5 (touching the southwest edge)

A38(M) Aston Expressway (trunk)

Possibly short sections of the A38 and A45 where designated as trunk routes

Ofcom comes knocking after BT, Three mobile outages cut 999 access

There's another failure that the Reg has failed to highlight. That it's taken best part of 5 months for OfCOM (Office of Comedy) to decide that an outage that impacted calls to 999 needed an investigation, after all it's hardly a laughing matter. Surely that should have been evident after 5 days not 5 months?

Researcher who found McDonald's free-food hack turns her attention to Chinese restaurant robots

They were trying to avoid the embarrassment of manually writing some Chinglish and that being sent out to the security researcher and consequently the text ending up in the popular IT press

Microsoft puts the squeeze on onmicrosoft.com freeloaders

Surprised that the spammers/scammers/etc have taken until 2025 to realise that this was a loophole that was exploitable.

The early days of Microsoft hosted email go back as far as 2010.

McDonald's not lovin' it when hacker exposes nuggets of rotten security

Seems like the burger slingers were not in a McFlurry to sort out their security.

No more Blocktoberfest? German court throws book at ad blockers

Re: Ads, GFY

An adblocker could be said to be dialing down and suppressing a portion of a website.

So twiddling the treble and bass knobs on my stereo which is playing my favourite record or casette is also by implication modifying the copyrighted music and also and infringement of copyright?

Italian hotels breached en masse since June, government confirms

Re: Retention of identity documents

"If you employ someone or rent them a house in the UK you need to verify that person has a right to live and/or work in the UK But you also have to be able to prove subsequently that you have done so - unless you want to risk prosecution, so you take a copy of all the various documents and keep them, perhaps long after that person has moved on."

Actually the UK is pivoting to an eVisa system, where the eVisa holder can create a sharing code that can be shared with other government agencies, employers, landlords, financial institutions, etc. and gives online authority that the person is legit. Whilst you still want to see the person's ID to check the photo with the eVisa share code and the online confirmation there should be no need for 3rd parties to retain a copy of government ID in the future if it works as intended. It's still quite new and everyone is finding their way with it still.

Yolk's on you – eggs break less when they land sideways

No doubt eggcellent news for all the egg heads that have been pondering egg dynamics

British govt agents step in as Harrods becomes third mega retailer under cyberattack

Re: We can't continue to regard these simply as "IT Problems"

On the substation fire, I think you're mistaken that it was a 400kV National Grid grid transformer, although it is very close to the St John's Wood 400kV substation.

Aberdeen Place A is actually one of three colocated 132kV distribution network substations operated by UKPN. In this instance there was no disruption to electricity supply. It was an impressive fire and cause some collateral damage to adjacent property and oil pollution into the canal underneath it was seemingly well handled.

£136M government grant saves troubled Post Office from suboptimal IT

Re: But, but, but...

The Post Office is owned by the UK Government, it was never sold.

You might be getting confused with the Royal Mail which was privatised and is about to be bought by a foreign investor.

Staff at UK's massive health service still have interoperability issues with electronic records

Re: Money

The common API already exists. At least in England. It's called the NHS Spine

Re: Brownfield

This really isn't the big deal you probably think it is. Contact the secretary at your GP surgery and ask for it to be updated, they are the authoritative source. Most systems should pick up that data change from the NHS Spine.

Re: Brownfield

There is an overall architecture for the data - in England it's called the NHS Spine. A common standard and secure infrastructure for the exchange of patient data between trusts and systems. The problem is the capability of the systems that trusts procure to fully leverage the Spine.

Some of the EPRs, for example Apollo's Epic, can facilitate data exchange between other trusts with Epic quiet well. But to other trusts using something other than Epic, good luck.

Re: Business as usual

The problem here is the MVP minimum viable product. Get the new EPR or system implemented with the minimum of kerfuffle. But there's then no finding available to take it to the next stage, sitting down with each ward or clinic team and working out how to exploit the new system to automate stuff they have to do manually within the guardrails of the organisational capabilities.

Medusa ransomware group claims attack on UK's Gateshead Council

The fact that a council is faced with some crumbling 1960s infrastructure is not a surprise. There are going to be many many more examples. In Gateshead, England, UK and beyond the western world.

Ryanair faces GDPR turbulence over customer ID checks

API data can be collected in advance for convenience but is only required at check in and is often tweaked/corrected at check in with a passport scan. Absolutely no requirement for it to be submitted ahead of travel for the kinds of places Ryanair fly to.

Big brands among thousands infected by payment-card-stealing CosmicSting crooks

Re: Matroshka Dolls

Ah, but the monolithic off the shelf e-commerce package is probably just as bad as it's either been knitted together using all the usual third party software and you're blind to it, or if they really have written it all themselves from the ground up just just gotta hope their own testing really stands up to muster.

'Hyperscale customer' to take massive datacenter site near London

The embargo in West London is broadly due to constraints on the lower voltage distribution network which in West London is broadly operated by SSE. New bit barns are now being sited where they can pick up power from the national grid substations eliminating the need to bother the distribution network.

Previous policy rumours for siting of bit barns suggested harnessing former heavy industrial sites with existing high capacity grid feeds, usually in areas where the economic situation is depressed due to the loss of those former industries, and people who need jobs and retraining. Whatever happened to this relatively sensible idea....? Teesport might not meet latency requirements for some workloads but would be a site ripe for redevelopment and retraining, and has good connections to the national grid

Malaysia's plan to block overseas DNS dies after a day

Re: A different take on "its always DNS" ;)

They're not going to block roaming cellular traffic being tunnelled back to the subscribers home network. Even China doesn't do that.

They're mainly looking to inconvenience/protect residents of Malaysia when using domestic internet access. Roaming access on foreign SIM cards isn't going to be a priority.

Japan stops measuring train crowding by ease of newspaper readership

Re: Fishy

There's no plaice even for sardines

Administrators have update lessons to learn from the CrowdStrike outage

Let's face it, all of the AV and anti malware vendors have had their dodgy and duff updates in the past, with varying impacts. Crowdstrike's duff update was more spectacular than most but most of the vendors could face the same issue one day.

So what is the industry to do? It's a constant battle to keep the baddies out of our systems and services, and keeping signatures up to date multiple times a day along with a dose of behavioural analysis (recently renamed to AI) so far has been the thing to do. We currently have a dose of whataboutery, we could do some update rings on signatures, but that seems to defeat the point somewhat. So what are the practical options to do something different?

London council accuses watchdog of 'exaggerating' danger of 2020 raid on residents' data

What would make more sense is if the ICO could impose auditable improvement plans maybe with the compromised entity committing to certain outcomes including capital and operational investment.

It's similar to off the shelf SLA statements where supplier commits to pay customer 2 shillings in the event of a SLA failure provider that you claim on the right form etc. A service improvement plan that ensures that whatever went wrong can't happen again is surely more value to both supplier and customer.

Selfie-based authentication raises eyebrows among infosec experts

Payment providers have been using facial recognition for payment authorisation at checkouts in China for several years already.

Google Translate now fluent in 110 additional languages from Abkhaz to Zulu

Bring back the babelfish

Whilst I think it was always a bit fishy that the THHGTGG suggested it caused a lot of wars, when altavista came up with the babelfish branding for (I think) one of the first online translation engines, it was a stroke of genius.

British Airways blames T5 luggage chaos on fault 'outside of our control'

Re: Baggage ops

BA's "under the wing" ground handing operations at LHR are run in-house and are not outsourced.

Google password resets not enough to stop these info-stealing malware strains

Re: Session cookie stealing is not an unknown thing

Perhaps it should be an option on the password change page, with perhaps the default to invalidate all sessions and an explainer to help users choose the right thing to do.

If you're just changing your password because you want to and not because any any specific risk, then forcing all sessions to reset might a sledgehammer to crack a nut in terms of user experience.

Driverless cars swerve traffic tickets in California even if they break the law

Re: How to improve AI training in one easy step

No you don't start with the owner in the UK. You start with the registered keeper which is the name or entity on the V5C.

The registered keeper is quite often different to who the owner might be (eg. leasing or finance company).

Suits ignored IT's warnings, so the tech team went for the neck

Seems like you missed out on a field trip to the errant laptop in Majorca to retrieve the so important missing emails.

Nobody would ever work on the live server, right? Not intentionally, anyway

The way that ntl:hell was sticky plastered together back in the day, I would imagine that the web server shutdown it also shut down all the transparent web proxies that ntl: never wanted to admit that they were using and caused a broadband duvet day.

Microsoft’s Dublin DC power plant gets the, er, green light

Re: more than 150 diesel generators

Surely the point is that they have both gas and diesel generators. They will have the option to mix and match between both to not only keep the bit barn going but also get paid for supplying power to the grid at considerable profit when needed.

Microsoft's Azure West Europe region blew away in freak summer storm

Re: Fibre underground is not effected by storms they strung it on poles...

Would not necessarily need to be an arial fibre run for bad weather and assoicated power failures to still cause impacts to fibre below ground.

Re: Never noticed

But as the article says, traffic to/from the front door of the region wasn't impacted. Only traffic being synced between DCs within the region for availability purposes was impacted. Perhaps you don't have any availability services, or you failed to notice that background syncs of data were failing.

WeChat makes facial recog payment systems talk to the hand

Re: I wonder who asked for this

Have you been to China? Using facial recognition for payment authorisation is not uncommon in shops kitted out with the relevent point of sale equipment.

They might not have asked for it, but its there, and it does get used, although I think it hit considerable problems with the masks the mandate for which were not removed earlier this year.

QR codes are still the main way to pay, but biometrics are there and are being used for day to day payments.

Britain's largest private pension scheme reveals scale of Capita break-in

It's the humans that are insecure here

It seems that it's not the actual pensions system/database that was compromised but some fileserver used by Crapita to do admin tasks on the pensions system. It appears this fileserver had various dump/export files from the pensions database for various clients probably used for massaging data and bulk updates, the problem is that they were left lying around and were not encrypted...

Microsoft breaks geolocation, locking users out of Azure and M365

IPv6 still the poor relation chez Microsoft

"Making matters worse, the IP addresses in question appear to be IPv4. Shame, Microsoft, get thee to IPv6!"

That's because last time I checked Microsoft offered no geolocation on IPv6. If you don't offer it you can't break it.

OneDrive back on its feet, but ongoing Skype credit problem hasn't gone away

Re: "international roaming is a lot more affordable"

Teams can absolutely make phone calls but maybe not at a sensible cost for the occasional outbound phone call.

"The Skype for Business product – once used by such venerables as particle accelerator boffins at CERN, which swapped it with softphone client CERNphone in June – was replaced by Teams in 2019 and reached end-of-life last year."

Errr, the author has conflated SfB with SfB Online.

SfB Online was retired back in 2019 in favour of Teams. But SfB as an onprem or hosted solution is still very much a thing and supported by M$.

Programming error created billion-dollar mistake that made the coder ... a hero?

Re: Worst code I ever saw...

Here in Switzerland, kids are being taught touch typing starting in 4th grade (approx 9-10 yrs)...

Factor in the options of QWERTY, AZERTY (French) or QWERTZ (German) keyboards and those yoofs must have a a bunch of fun.

Cloudflare finds a way through China's network defences

And the elephant in the room

Unfortunately this article is fairly useless as it fails to specify whether to make content available in China with this new cloudflare agreement needs the usual ICP licence. There are plenty of CDN providers that have reach into China, including Cloudflare even before this 'announcement'. The main issue for most is whether it's worth the effort and hoop jumping to get and probably more importantly maintain an ICP licence.

India seeks verified IDs to register email accounts

"with China's centralized virtual currencies WeChat pay and Alipay processing 294.6 trillion won"

Is that the won / wrong currency, it doesn't seem very Korea / clear to me...

Google Translate dropped in mainland China

It's my understanding that they would have had to maintain a registration / licence with the Chinese authorities to be able to operate that service with a .cn domain name presumably also hosted within China. The registration and licence needs a named individual in China to be legally responsible for the service and be answerable for its content. With the increasing scrutiny of online services in China perhaps there was no appetite for the paperwork and personal risk.

Outlook email users alerted to suspicious activity from Microsoft-owned IP address

I think you will find that an Azure AD P1 licence is sufficient for enabling Conditional Access.

Vital UK customs system outage contributes to travel chaos at its borders

Re: Sounds about right

"Updated to add at 16:00 on April 18, 2022"

Just after Easter weekend.... so maybe they discovered the Easter Egg that was left in GVMS by some contractors that got shafted by IR35.

Nottingham University awards cloud finance and HR deal in £29.75m deal 2.5 years after Unit4 upgrade

They do have CS courses and students. But I struggle to understand how getting the students to program up this requirement would make any sense? Assuming the students can pull it off, after they have graduated who would be keeping the product up to date to meet changing business and regulatory requirements, fix bugs, patch components they have used, and generally support the end to end solution. And you have also got the complication that you have student data subjects probably requiring admin access to the very backend systems that govern their fees, rent payments for halls, and all manner of other key business data. Yeh...

BT Wholesale wants the channel to give SMBs a nudge before copper sunset in 2025

South Korea?

Impromptu game of Robot Wars sparks fire in warehouse at UK e-tailer Ocado

Self-check out...

Unexpected hot bot in bagging area. Please extinguish bot and sell investments in Ocado before continuing.

Anyone still using cash? British £50 banknote honouring Alan Turing arrives

"note is due to become available in bank branches and ATMs over the coming days"

ATMs dispensing £50 notes? They must be in a parallel universe. Maybe in the lobby of Coutts & Co, and other wealth management instutitions.

If you can't log into Azure, Teams or Xbox Live right now: Microsoft cloud services in worldwide outage

As it was a DNS based outage, it's not entirely surprising that DNS is a separate infrastructure for Azure in China. DNS is one of the methods the motherland imposes at a technical to limit access to some internet resources outside the country. Other methods are also in use.

It's 2020, so let's just go ahead and let Amazon have everyone's handprints so it can process payments

So last decade...

Biometrics for payments.... Amazon just trialing this?

Try going to China where Alipay has been doing facial recognition for payment for quite some time now. When you realise that between then Alipay and WeChat pay now account for something like 90% of payments for most retail transactions in China, and you realise just how far ahead payments tech is in China and how the rest of the world is in serious catch up mode. No one forces you to use it, but most retails over there now frown on needing to handle cash - even the subsistence farmer selling their goods by the side of the road have their AliPay and WeChatPay QR codes printed out to take payment.