Posts by EnviableOne

The UK's first industrial contribution to the ISS: An end to sneakernet for spacefarers

Boeing Jim, Really

Acorns next meeting ....

East London council breaks off 20-year Oracle relationship to shack up with cloud ERP nobodies by year's end

Yeah because that works really well when they try it: cf NPfIT

Man arrested after UK school finds wiped hard drives on devices connected to network

most schools have Windows Boxen, unless they have been benificiaries of the iThing emporium's Education program,

you'll probably need a few more lines and something like fdisk or diskpart

Fedora's Chromium maintainer suggests switching to Firefox as Google yanks features in favour of Chrome

Re: Another reason to use Firefox, run your own sync server

They could at least have ported it to Python 3.0

Re: @nematoad

Murphys Golden rule:

The one with the Gold Makes the rules

So it seems Jeff just lost the rule rights to Elon

Bye-bye Bridenstine: Outgoing chief leaves NASA in good shape, though Boots on Moon by '24 goal looks doubtful

Re: Lost leadership

very well said, the role of artimis is to funnel large amounts of Cash to Boeing and LM so they keep their plants and offices in states where the senate space commitee's members represent

Indian government slams Facebook over WhatsApp 'privacy' update, wants its own Europe-style opt-out switch

Re: GDPR

no it wasn't

GDPR does not and never did directly apply to the uk

the Data Protection Act 2018 however implements the controls as listed in the version of the GDPR on its date of publication.

150,000 lost UK police records looking more like 400,000 as Home Office continues to blame 'human error'

Re: Technical issue?

My first suspicion is the Housekeeping error was a new junior clerk that did just what the court requested

However, its not like people learn from their mistakes

OWASP top 10 2003 ≈ OWASP top 10 2017

Coming in at number 5, it's a blast from the past! Tenable's 2020 security flaw chart show features hits of yesteryear

Re: Not just Tenable

Checkm8 - people can't afford the new shiny

Epic Games files competition lawsuit against Google in the UK over Fortnite's ejection from Play Store

I've done this comparison in the past,

you need to compare apples with apples.

App sales are equivalent of an online marketplace IE Amazon Marketplace, Ebay, which charge (all told) IRO 15% on purchases

In game currency is basicaly payment processing, so looking at Square, Paypal, Worldpay, etc.

you are looking at around 7.5%

Google have half (if their lucky) a leg to stand on, as other stores are allowed, but apple have none, as they dont allow any other store on their platform.

Xiaomi hit by US sanctions: Can't list on stock exchanges and investors can't invest

Re: As long as the UK doesn't copy it

Because Shiney, "its got an apple logo on it, so its better than whatever you have"

Xiaomi, Oppo, Vivo, OnePlus, Huawei, TCL(Alacatel,blackberry), Lenovo(Motorola) all make very good phones at a fraction of the cost, but 50% of right pondians and 60% of left pondians wont buy anything without the fruit based logo

Re: Doesn't really make sense

theyre all banned at my network level too.

none of that anti-social data slurping in Ma Hoose

Surprising everyone, spending watchdog says the UK's 2025 deadline for nationwide gigabit broadband is 'unreachable'

Re: Gigabit Broadband

Same with 5G

if everyone could get 10Mbps and 3G it might be worth pushing 1Gbps and 5G, but the so called Universal Service Obligation, is starting to look like a most people something, if you feel like it.

IIRC BT were gearing up to roll out fibre everywhere in the 90s before HMG flogged their remaining 50% they even built fibre fabs in ipswich and birmingham

Buggy code, fragile legacy systems, ill-conceived projects cost US businesses $2 trillion in 2020

Re: I fail to see the problem

the answer is not detecting the defects and fixing them

the answer is not making the defects in the first place.

this is why you need programmers and engineers, not coders.

Heres an acronym for the Authour of the piece:

Forget Usual Coding Knowledge Or Finding Faults, Treat With Adept Talent

Re: Blame the management

totally agree

in a software firm you need a core group of Programmers or software engineers to create the program logic and flow a build in the security etc., then you need a miriad of coders to translate this logic into the miriad of languages used across the miriad of platforms.

Manglement in their effort to cut costs said why are we paying the core group so much, why not just pay them the same, so quality did as it does and left the sinking ships, this is why we see less and less inovative features, and more tweaks to current code, building up more and more technical debt....

How good are you at scoring security vulnerabilities, really? Boffins seek infosec pros to take rating skill survey

which version

now which version were the experts working on?

theres at least 3 to choose from 2,3 or 3.1 and the maths is a nightmare

also its wether they are base temporal or environmental too!!!

Paperless what? Pah! UK government looks to ink £900m in printer deals

Re: Have any friends of the Government

that and the almighty wet signature.

paper savings from many paperless systems are negated by having to print so much of it out to be signed.

Dems to ISPs: You're not gonna hike broadband prices, slap restrictions on folks in a pandemic, are you?

Virgin are owned By Liberty Global - says everythiing USAians need to know.

In the UK most people have 2 choices, get something down the withering OpenBreach(Kingston if your in Hull) Copper lines or over Virgin Fibre/COAX network, where available

The rare happy few have a third party provider with their own fibre and a decent service, at a not unreasonable cost. (GigaClear, CityFibre, Hyperoptic, B4RN, and others)

the less-rare unhappy ones either dont have a phone line thats reliable enough to get a connection, are uneconomical to provide to and have to resort to Mobile Internet, if not in a blackspot, or god-forbid Satelite broadband to satisfy their need

Pork-tracking website problems add extra crackling to US-Taiwan-China tensions

Re: Pompeo rewrote the rules

IMHO, the PRC/ROC issue is one of the biggest threats that could become WW3

with both china an russia very local and USA firmly on the POC side, it could escalate very fast

Trump's gone quiet, Parler nuked, Twitter protest never happened: There's an eerie calm – but at what cost?

Re: And so Conquests Second Law is proved true yet again..

what you have to understand is that your speech is free, but so is anyone elses

It just so happens that society in america has become so polarised, and your identity defined by Red or Blue, there are no longer shades, there is no purple.

Each exists in its own bubble with out the other, where its view is re-inforced by opinions drressed as facts.

There are now at least 3 sides to every story: yours; mine and the cold hard truth. with the algortihms and partisan media, all that matters to you is yours and all that matters to me is mine, and the truth ceases to be.

Re: The First Amendment

the president isn't, they require the authorisation of congress to declare war

Re: AWS now liable?

https://xkcd.com/908/

Re: AWS now liable?

This is why their is a law and the courts get to rule on intent ....

and ultimatley why these high profile cases were lost.

The right to refuse service depends on the grounds on which you refuse.

Re: AWS now liable?

fully agree, they are Their T&Cs, THEY set and enforce them as THEY choose

Thou shalt not hack indiscriminately, High Court of England tells Britain's spy agencies

Re: The great thing about British courts ...

IOW, the courts interpret the law, parliment makes it.

Precedent is great, it fixes all the grey areas,

if i higher court have made a decison like this use it to guide this decision, the problem comes when precident is wrong, and you need to persue it to the top to change it.....

SolarWinds takes a leaf out of Zoom's book, hires A-Team of Stamos and Krebs to sort out its security woes

Re: Papering over the cracks

Hope it stops them buying decent software and ruining it for a while

ZIP folders were originally a Microsoft engineer's side hustle until bosses figured out he worked for Microsoft

Azure Amazon Region

its got to be in the works

Brazil South + North + Peru + Columbia + Bolivia, Ecuador, French Guiana, Guyana, Suriname, and Venezuela.

either that or Amazon Web Services Region

UK union pens letter to data watchdog on icky workplace monitoring systems like Microsoft's Productivity Score

Re: Doing a deal with the devil, or maybe Jesus?

wheras in st.Petersburg, we're frezzing our arses off ....

and no i'm not showing you the rose

UK MoD bungs Boeing £500m to plug gap left by a system it should have provided under £800m contract from 2010

BDS and BCA are both divisions of the boeing company HQ'd in Chicago, still run under the same parent by the McDD management who have the one guiding principle:

"make me more dollars"

iPhone factory workers riot over unpaid wages in India

Re: As of December 2020 Apple has a market cap of $2.081 T

I stuggle to find your point, as you are fully contradicting yourself. firstly you need to compare apples and apples, thew a51 probably competes with the SE, but you have to look at the S Series to compare to the iPhone.

OS to OS, iOS counts for 2.69% of mobiles in india, Android 96.28%

Vendor wise Xiaomi have 27.32%, Samsung 20.1% Vivo 13.62% Oppo 11% Realme 8.62% and Apple a lowly 2.69%

(latest from statcounter)

but with the smartphone market penetration at a lowly 36.7% there are a lot of indians who have multiple mobiles and a lot more that dont have any

US aviation regulator issues safety bulletins over flaws in software updates for Boeing 747, 777, 787 airliners

TBF I'd fly a COMAC run by Aeroflot first and thats says everything you need to know

Re: A Boeing Spokesperson said:

who said boeings were economical to operate

they just arent for a given generational/type combination, the boeing is probably less economical

McDD execs have one proiority and thats the almighty dollar.

they will show lip service to anythign as long as it increases the margin they can make on each bird the manage to flog

Your ship comms app is 'secured' with a Flash interface, doesn't sanitise SQL inputs and leaks user data, you say?

Re: Shipping network security

cf Beruit - loading is automated, systems computer controlled, and probably only a handful of servers

We're not saying this is how SolarWinds was backdoored, but its FTP password 'leaked on GitHub in plaintext'

Re: GE puts default password in radiology devices

in the same way as Health and saftey didnt improve much until CEOs were made criminally responsible

45 million medical scans from hospitals all over the world left exposed online for anyone to view – some servers were laced with malware

Re: Security model is upside down so they can't implement SSO

NHS records are not online, the only things that are available across the entire NHS (if you can say such a thing still exists) are the Summary care record (which you can opt out of) and the demographic data linked to your NHS Number.

The actual detail of your record is maintained in a miriad of diferent systems, that are generally completley incompatable with each other,) held and operated by GPs, Hospitals, Community Teams, Support Units and other entities that you deal with and the transfer of which is covered by a miriad of controller/processor and controller/controller agreements.

The majority of your information is stored in your GP record, and this gets shuttled around the country when you move doctors or a specialist needs the detail.

This information is dicom images. these are ultrasounds, xrays, cts etc they are transfered in a common format, which is constantly maintained and updated, the current version 2020d, there are usually 5 a year, its even has an ISO Standard 12052.

As with all standards, the majority of issues are not with the actual standard, but its implementation.

This specific incident is more down to an imaging system and vendor implementation. Normally if these are stored in the cloud the demographics are stripped from the images before they leave the organisation and replaced with a unique reference.

Capita finally finds buyer for education software biz, private equity Montagu to pay £400m

AGile, CLoud based, one more for Modern Software Bingo ....

World+dog share in collective panic attack as Google slides off the face of the internet

Re: Try again *later*

too long untill i installed the HTCPCP -TEA extension

Re: The Register contacted Google

its not Samsung or LG

Japan pours millions into AI-powered dating to get its people making babies again

Re: Alternative AI

It'll be a Brave New world

----> the one with a copy of Huxley's superior work in it

How'd they do that? It's classified: Microsoft's Azure cloud goes Top Secret

Re: the UK Government will be wagging it's tail soon

not just HM's

All Gs and IT do not mix well.

centralised projects end up being either useless white elephants or have so much customisation to fit local use cases, that costs spiral, and they turn into a Money pit.

CentOS project changes focus, no more rebuild of Red Hat Enterprise Linux – you'll have to flow with the Stream

TBF RH had every intention of keeping their promises, this move is all Big Blue and very little RH

Trumpian politics continue as senators advance controversial Republican FCC commissioner nominee

The DNC need to win at least 1 seat in georgia

If they take 1 senate seat VP Harris gets the deciding vote in tiebreakers, so they win.

If they dont get one, then welcome to 4 years of deadlock

Four or so things we found interesting about Qualcomm's Snapdragon 888, its latest 5G chip for high-end Androids

if samsung are making this, cant ait to see the inprovements in the next gen Exynos

also bad conotations 88=HH

Re: 5nm engraving, wow

Murphys golden rule trumps all.

so Jeff makes the rules

President Trump's rushed-through H-1B techie visa crackdown halted by federal judge

The system is broken, but....

the system may be broken, but it has been for a long time.

the Trump admin's case that this is an emergency, so they dont need to consult, is laughable, and the court got it right.

if theyd started this earlier in the administration rather than all the wall nonsense and muslim bans, they might have actually done some good.

if they had done their due consultation, this system might actually have worked, Higest paid or most needed proffesions prioritised requirement of sallary at 110-115% of market rate for the role, and wide industry acceptance and it would have sailed through.

rushing through with wildy unworkable limts and no consultation, its a joke.

Supreme Court mulls whether a cop looking up a license plate for cash is equivalent to watching Instagram at work

Re: They have far more important things to worry about here

exactly, the government defined the requirement of a "substantial meal," without defining the term

its up to the court to decide on the definition of substantial and meal should a case were somone is prosecuted under that statute appear before them and a hgiher court has yet to make that determination.

Cayman Islands investment fund left entire filestore viewable by world+dog in unsecured Azure blob

Re: Stop calling it cloud

ahh, another miss-apprehesion, no mention of padlock, the name is more generic, implying it is a storage space, with the facility to be locked up, much like blobs or buckets ...

just because it can be locked up does not in any way imply that it has ...

Cyberup campaign: 80% of infosec pros fear they might fall foul of UK's outdated Computer Misuse Act

Re: let's just make everything a crime

thats the problem with the current CMA, effectivley every action you take can be considered in one of the 5 offenses:

1.Unauthorised access to computer material.

2.Unauthorised access with intent to commit or facilitate commission of further offences.

3.Unauthorised acts with intent to impair, or with recklessness as to impairing, operation of computer, etc.

3za.Unauthorised acts causing, or creating risk of, serious damage

3a,Making, supplying or obtaining articles for use in offence under 1,3,3za

the definititions are to broad and the penalties too lenient.

basically its the worst of both worlds, we can charge you with CMA violations for everything, but all you get is a slap on the wrist, wheras fraud charges have a better scale, and considerably larger maximums

Compsci guru wants 'right to be forgotten' for old email, urges Google and friends to expire, reveal crypto-keys

Rotate Yes, Release No

Rotate your keys, retire old ones, but dont release them, its just a faf on.

I rotate keys about every 6 months, and have 1 active, and othe onld one in dns, so after a year, the keys just arent there anymore.

DKIM is a point in time solution to verify the email is comming from who it said it did, it is not an ongoing proof of this.

So on my domain, if the email hasnt arrived or been checked in 1 year, DKIM wont verify as the selector wont exist, or if it does, it will have a different key.

why release the keys, it makes no sense to, as DKIM has no use for the private key after the message is signed, and the public one is sitting there in DNS untill its no longer useful.