* Posts by steviebuk

2635 publicly visible posts • joined 27 Feb 2017

WTF, EFS? Experts warn Windows encryption could spawn nasty new ransomware

steviebuk Silver badge

Re: This fails to surprise me...

Be anal like I had been doing (I need to start again as I got lazy).

Monday full backup

Tues-Thurs - incremental backups

Frid - Full 1 week backup.

Repeat for 3 weeks.

4th week the Friday week backup becomes - Month 1 backup.

Repeat for 3 months, so then you always have 3 months worth of backups. Then start overwriting after the 3 months. You could also add taking one large full backup and keep that as a year backup, obviously will be out of date but better than nothing.

Hospital hacker spared prison after plod find almost 9,000 cardiac images at his home

steviebuk Silver badge

Re: Differences...

Only just changed though :)

steviebuk Silver badge

Re: Differences...

There was the old case of the local idiots hounding of a paediatrician doctor out of her own home because they mistakenly confused the term with paedophile. So there is some vigilantism although that was 20 years ago now.

Unlocking news: We decrypt those cryptic headlines about Scottish cops bypassing smartphone encryption

steviebuk Silver badge

Re: The FEDs want remote access...

Because they don't know and can't see what is on the other side they have a natural fear. If you create a minor shelter on the other side until they get used to using it, that can help them use it.

Azure consultant's Google image search results hotlinking sueball booted off the pitch by High Court

steviebuk Silver badge

What a tit

Am I the only one that thinks so. I used to, haven't looked recently so can't remember if its still setup, have hotlink protection on (surely as an Azure consultant he should of had the skills to code this himself back then) and the images would point to Avril Lavigne with her middle finger up. Childish? Yep. Did I find it funny? Yes. Am I still a man child? Yes.

This is also a system for GPs, right? UK doctors seek clarity over Health dept's £40m single sign-on funding

steviebuk Silver badge

Lets hope its secure.

I've already had to report spam coming from one of their breach NHSMail mailboxes. Not spoofed either, someone had actually breached a mailbox.

Squirrel away a little IT budget for likely Brexit uncertainty, CIOs warned

steviebuk Silver badge

Re: Corporate responsibility

I somewhat disagree. I still feel some were mislead and no, not out of stupidity but because they either have decided they are too busy to look the facts up for themselves and/or blindly believe what mob head says. Doesn't mean they are stupid, may mean they are easily lead and too lazy or genuinely too busy to look up the facts themselves.

steviebuk Silver badge

Re: Corporate responsibility

Its called democracy. People can vote how they wish. They also have the right to not vote. You can be annoyed with their way of voting but calling them fuckers doesn't really help. They used their democratic right to vote how they did. We could argue they were mislead by a cock with a mop for hair but still.

steviebuk Silver badge

Our consultants are available

"You need enterprise agility" we can help you implement that at an affordable rate. Sign up now on a discount for our consultants.

No Mo'zilla for about 100 techies today: Firefox maker lays off staff as boss talks of 'difficult choices' and funding

steviebuk Silver badge

I hated chrome...

...but was forced, somewhat, to use it for new job. Got used to it and now I struggle to cope without the official plugin from google that allows you to right click text from a website and then save to Google keep. Google keep is one of the only things in google i like and is really useful for note taking. I still use firefox at home but miss this feature a lot.

Totally Subcontracted Business: TSB to outsource entire IT estate to IBM for a cool $1bn after 2019 meltdown

steviebuk Silver badge

So the old...

...bosses fuck up and now the IT team are forced to either move to IBM or be made redundant. While knob bosses enjoy their pay off from not being fired like would happen to anyone else but being asked to leave with a golden handshake.

steviebuk Silver badge

Maybe....

...its time to open an account with them and stick in a spare £100 or two. Leave it until the inevitable outage account and ask for compensation due to not being able to access your account.

Welcome to the 2020s: Booby-trapped Office files, NSA tipping off Windows cert-spoofing bugs, RDP flaws...

steviebuk Silver badge

So...

... we're told to "Get off Windows 7 from Tuesday 14th Jan or the world will end and your bank account will be cleared out." Only to find there are also RDP bugs in Windows 10 and cert ones. Nice.

US hands UK 'dossier' on Huawei: Really! Still using their kit? That's just... one... step... beyond

steviebuk Silver badge

Won't make a difference

When we have a nuclear power station being built by Chinese. What's stopping them putting a backdoor in that. War breaks out, they hobble it remotely. Or worse, turn it into a bomb.

World's richest bloke battles Oz catastro-fire with incredible AU$1m donation (aka load of cheap greenwashing)

steviebuk Silver badge

I don't mind the "charity auctions" and I don't might the rich getting a tax rebate for donating to charity. Both help each other. The rich get to have a party and feel better about themselves, even if they continue to be tits, the charity gets their donation. Same with the tax rebate. Encourages the rich to donate so they can get less tax, they benefit so then does the charities.

steviebuk Silver badge

The ending comment was spot on

"Because there’s only one thing more annoying that a billionaire seeking credit for charitable giving and that’s a pointy-fingered Twitter twat complaining about it in order to make themselves look better."

The annoying part is the pimping of Amazon to donate to Blazeaid's "Wish list" the wish list that knob head himself could fully fulfil himself.

Oh, have I'm just become like one of the Twitter Twats?

What was Boeing through their heads? Emails show staff wouldn't put their families on a 737 Max over safety fears

steviebuk Silver badge

Re: How many other manufacturers?

Only if you have someone on the inside who can grab the emails without being spotted. Its rare to have someone in that position.

steviebuk Silver badge

Reading...

...the articles the other day about this makes you wonder how they didn't think emails could be used as evidence and a very clear sign or very clear evidence a lot of them need to do prison time for corporate manslaughter.

We’ve had enough of your beach-blocking shenanigans, California tells stubborn Sun co-founder: Kiss our lawsuit

steviebuk Silver badge

Re: He sounds like...

Agreed but as people keep telling me, the rich stay rich cause they are tight fucks. So he probably doesn't want to loose that 10%. I'd rather loose 10% than been seen to be an arsehole.

steviebuk Silver badge

He sounds like...

...a right cunt. If he's lost several court cases why didn't they send someone down too rip off the gates? He's especially a cunt if he also claims he hardly visits the place. So why continue on insisting too block access.

Google and IBM square off in Schrodinger’s catfight over quantum supremacy

steviebuk Silver badge

Only time this will become useful...

...is if it ends up cheap and can be used to create our very own Star Trek holodecks :)

Microsoft engineer caught up in sudden spate of entirely coincidental grilling of Iranian-Americans at US borders

steviebuk Silver badge

Re: And the consequenques fo failing to act?

And he appears clueless thinking that if he hits the cultural sites (that is of interest to historians, not just Iranians), that they won't send people over to do the same in the US. Trump is truly a fucking idiot.

In a desperate bid to stay relevant in 2020's geopolitical upheaval, N. Korea upgrades its Apple Jeus macOS malware

steviebuk Silver badge

But...

... Apple's don't get virus' so the hipster fans keep blindly believing.

A Notepad nightmare leaves sysadmin with something totally unprintable

steviebuk Silver badge

A couple of stories

Back in the days of DOS in the 90s our college got the FORM virus. I managed to get it on a floppy disk and take it home to play. While looking at it in a HEX editor and seeing the message it was supposed too (but never did all the years we had it) display, I managed to infect the boot sector of our home computer with it. Balls. System would no longer boot. Luckily had a bootable 5 1/4 floppy that I'd used for booting to be able to play Frontier: Elite II and used that to boot the PC daily instead. I guess the virus needed to load into memory from the boot sector of the HDD to be able to infect other floppies. Because despite the HDD being infected for over a year (never had the original Windows 3.1 disk so couldn't rebuild), no other floppy ever got infected with FORM.

And frying my family friends Commodore 64 is the second story. Late 80s early 90s. Would go round most weekends and play on it. Would even buy the odd magazine with a cover tape now and then just to play the demo on it (Operation Wolf was the only one I remember getting on a tape as a demo). We never had a Commodore so was the only place I could get the Commodore fix was at theirs, and of course seeing them in the local WHSmith.

He had discovered POKE commands this fateful day, you could use while a game was loading or playing to put in cheats. But, to get to the POKE you had to interrupt the game. This required careful jumping of the expansion board at the back of the Commodore (I don't remember the exact details). This would jump you out of the game, enter the POKE for your cheat then carry on. He was successful and as always because he was doing it, I wasn't paying attention to how it was done and what NOT to do. So when he said he was going out for a bit, I said I'd stay which they were fine with :). Left me to play on the Commodore. I then decided

"I'll do that POKE command." I knew nothing about computers back then. Blindly did the shorting of the expansion or cartridge slot without fully reading the guide and the Commodore turned off and wouldn't come back on.

Oh shit. Panic kicked in. I waited a bit then went to their backroom where his sister and mum where sat. Said I'd gotten bored of the Commodore so watched TV with them for a while. Then about an hour later I said I'd best head home. The short walk home I thought about what I'd done.

Later that day I got the call "Was the Commodore working when you left?"

"Erm, yes, yes it was" was my shameful reply.

He had to send it off to get repaired. I think he got it done for free because I think there were issues with some randomly frying back then without 12 year old boys trying to do POKE commands. But that could be a false memory to suppress my guilt.

It's been over 30 years since that day and I don't see them anymore but I've also never confessed to frying his Commodore 64.

IT exec sets up fake biz, uses it to bill his bosses $6m for phantom gear, gets caught by Microsoft Word metadata

steviebuk Silver badge

Re: idiot

You need a criminal mind to help protect yourself. I always say this when I have thoughts like you on "How I would of done it" people mistake it as the thought you'd actually do it. But planning ways to do it, but not actually do it, is always interesting.

Don't Xiaomi pics of other people's places! Chinese kitmaker fingers dodgy Boxing Day cache update after Google banishes it from Home

steviebuk Silver badge

I'd like someone...

...to do test on cleverdog cameras. I think they are a bit shit but got them for the cats. Curious to know how insecure they are as I suspect they have a flaw somewhere. Ironically they state in their t&c that if you find any flaw in their setup. Server or kit, then its not their fault :)

Senior health tech pros warn NHS England: Be transparent with mass database trawl or face public backlash

steviebuk Silver badge

Was it here or the private eye

Where I read the NHS will not make any money from this. They have to pay for this and then pay to get the data back when these companies sell it back to them.

El Reg presents: Your one-step guide on where not to store electronic mail

steviebuk Silver badge

Re: Still an issue today

I can't fully remember their stupid logic but if I'm remembering right they were aware in was the bin. The thought obviously never cross their mind that it could be emptied at any point.

steviebuk Silver badge

Still an issue today

I still see this today. About 10 years ago saw someone using the recycle bin as another folder. They'd put sub folders within it. Nuts. Its why I always double check before I empty someone's bin.

'For those that have been spared the delights of Outlook and its ilk, the .pst file can normally be found lurking locally on a user's computer or network share, and isn't necessarily subject to the same size restrictions as an Exchange mailbox."

PST files shouldn't be stored on a network drive. Had an issue 2 years back of Outlook randomly freezing on a users laptop and wouldn't recover. Ran a trace when it did it with Process Monitor and there it was. Despite having full access to the network drive the pst file was on, outlook was stuck unable to connect to the path. File wasn't required anymore so I got rid of it but was also I confirmed my suspicions with MS site that pst files shouldn't be stored on network drives.

Remembering Y2K call-outs and the joy of the hourly contractor rate

steviebuk Silver badge

HMRC...

...will now come calling for back dated IR35 pay.

steviebuk Silver badge

Re: 1K

That's always annoyed me. People not in IT don't realise nothing happened as all the critical stuff was fixed before anything could happen. If it had been left to happened, they'd then be moaning "Why didn't you fix this stuff before the date?". Idiots.

It's cool for Brit snoops to break the law, says secretive spy court. Just hold on while we pull off some legal jujitsu to let MI5 off the hook...

steviebuk Silver badge

Re: 007 ... license to kill

No one rolls over for Spain but I am sure Scotland would roll over for American.

Boeing, Boeing, gone! CEO Muilenburg quits 'effective immediately'

steviebuk Silver badge

And..

“operate a renewed commitment to full transparency, including effective and proactive communication with the FAA, other global regulators and its customers” ...maybe do some proper fucking testing.

Microsoft: Oh Christmas Tree, Oh Christmas Tree, my PowerShell has gone RC

steviebuk Silver badge

I really...

...need to stop being lazy and try and learn Powershell. I was looking back at the Commodore 64 the other day and thought "I want to finally learn Basic" :) why? What use will it be, I should really learn Powershell.

The only thing is sometimes the Powershell environment annoys me. Only just having discovered the & command in cmd so you can do

Gpresult /h a.html & a.html

Which runs the first command and then the 2nd. Couldn't do this in Powershell. Then someone pointed out you do

gpresult /h a.html; .\a.html

Which wasn't obvious to me considering Powershell had alias for other cmd commands

HPE goes on the warpath, attacks AWS over vendor lock-in

steviebuk Silver badge

Re: What lunch?

But that fibre line into your building also provides you with your cloud service. So put a spade through that and your cloud access also goes down.

Capita unfurls new consulting arm. Hmm, what shall we call it?

steviebuk Silver badge

Re: Sad to hear about....

Probably not. I believe the CEO this year gave lots of people pay rises. Lots of us object in the yearly AGM meeting but not everyone bothers to vote so their votes just get used as an agree.

steviebuk Silver badge

Sad to hear about....

....national trust. Heard about that earlier so need to force myself not to renew next year in protest.

Patch now: Published Citrix applications leave networks of 'potentially 80,000' firms at risk from attackers

steviebuk Silver badge

Is this by "breaking out"

Most of the Citrix setups aren't setup properly. So from a dialogue box, such as a save box, you can browse the local server, run cmd, then run IE or whatever other browser is installed. Then use their server to browse the Internet bypassing any local filtering. Also download all your exploits to that server from itself.

No one would leave a server so open I hear you say. Yes they would. A finance department were using a very small company to supply them with their finance app. With the main company we were at forcing a move to "cloud" for every department this small company didn't want to loose business so said they now had a "cloud" version of their app. They didn't really. It was just stuck on a server in one data centre. I said I wanted to test it before fully going live. They hadn't implemented 2fa, which they put on after my suggestion. Then once on the server it was easy to break out of the app, browse the server, run whatever you wanted and surf the net to your hearts content. They originally were gonna make it live in that state!

Huawei's P40 and P40 Pro handsets will not ship with Google Mobile Services, Richard Yu confirms

steviebuk Silver badge

Re: Maybe not such a bad thing

Because if you attempt to compete they'll either buy you out (no one is gonna reject several million to not have to worry about work again) or bury you in patient lawsuits. Shouldn't stop people trying though.

Fresh docs detail 10-year link between Geek Squad informers and Feds

steviebuk Silver badge

Geek Squad should never be trusted...

...considering way back before Wininternals was purchased by Microsoft, Mark and Bryce released some extra tools of theirs under a license. Went to Geek Squad to show them, at Mark's and Bryce's own expense, the tools and gave them free training. Geek Squad said no thanks then continued to use the tools without a license anyway. So Mark and Bryce sued and won :)

https://sysinternals.d4rk4.ru/Blog/2006/04/why-winternals-sued-best-buy.html

Canada's .ca supremo in hot water after cyber-smut stash allegedly found on his work Mac ‒ and three IT bods fired

steviebuk Silver badge

Re: Question for the community

I guess true. If none of it was illegal then was none of their business unless of course the policy they sign when they join up states they shouldn't have it on company machines. If it was found on their laptops, that said CEO would of had them fired. You could also argue the point of going to HR was to cover yourself. You'd now seen it, he'd realise later that you'd seen it and panic and because no one has been told, blame you for putting it on there. So you're covering yourself before that happens by just mentioning it to HR "We had to copy files of the CEO's old machine. Just thought you might want to know there appears to be porn there".

But you could also just argue "As we were in the folder ready to move it, thumbnails were on so it was impossible to not see the files. Besides. We had to make sure we'd got everything the CEO wanted so obviously had to check the folders in case he'd saved files in other areas of the drive you normally wouldn't save too".

It's a difficult one. Very difficult as you could then give the same defence to Gary Glitter who took his PC in to repair at PC World. At which point they obviously had a look through his files and then found the shit they did and rightly reported him. Could he argue "Why were you looking through my files in the first place?"

IBM tailors Swift relationship after 'review of open source priorities'

steviebuk Silver badge

Re: IBM's specialty

Not if you're stuck with cocks hiring other cocks to carry on the cockness. A place I worked at used to have cocks but luckily for them they hired a CEO who isn't a cock and they began to remove all the old cocks to replace them with ones that weren't cocks. So the culture changed for the better. There were actual non cocks over the years before that and they stayed, they were just drowned out over the previous years by the main cocks so couldn't steer the company away from that attitude until the new CEO arrived.

I suspect IBM has clearly, never managed to get rid of all the main cockness.

Chinese e-commerce site LightInTheBox.com bared 1.3TB of server logs, user data and more

steviebuk Silver badge

Re: Just wonderful

鼓勵別人

Apparently.

Amazon Germany faces Christmas strikes from elf stackers, packers and dispatchers

steviebuk Silver badge

Re: Amazon is Evil

Not talking about stopping using capitalism, was saying it is possible to stop using Amazon. Shop elsewhere and don't using their streaming service would be two areas. But you'd need millions of people to agree to do it for it to have an effect.

steviebuk Silver badge

Re: Amazon is Evil

True. As much as we hate them, the only way to stop them is to stop using them. The problem is, this Christmas I was sat on the bog ordering stuff via Amazon as it's quick and easy, but still dislike them.

Buzz kill: Crook, 73, conned investors into shoveling millions into geek-friendly caffeine-loaded chocs that didn't exist. Now he's in jail

steviebuk Silver badge

Sounds like...

...quite a lot of "Startups" on Kickstarter

GlaxoSmithKline ditches IR35 contractors: Go PAYE or go home

steviebuk Silver badge

Sod ya then...

...if only I'd had the confidence to say that years ago. Anyway. That's what these contractors should say, if they can afford it, know they are skilled enough to easily get work elsewhere then I'd up and leave and let Glaxo be stuck in the lurch when they realise all their knowledgeable contractors have left. Because of their bullshit "Be perm or else" threat.

Ever wonder how hackers could possibly pwn power plants? Here are 54 Siemens bugs that could explain things

steviebuk Silver badge

Difficult..

"So far, Siemens says it has only been able to patch three of the bugs. Siemens recommends administrators lock down the server from any sort of external network access."

....with certain software vendors pushing more and more of their stuff to the cloud.

Why is the printer spouting nonsense... and who on earth tried to wire this plug?

steviebuk Silver badge

Re: It's a four lettered word!

That's probably just what they said to make it seem like they didn't need you. That's why I got out of the NHS because the IT culture in the NHS is nasty. Too much back stabbing, ignoring contractors who make sensible suggestions like "Why don't we get our own hard drive crusher so we can do them ourselves. Then we can guarantee no drives will go walk about". I was ignored, then a few years later, after I'd departed, a certain trust struggled to find someone to crush their drives for them in the timescale they wanted. So gave those drives to a "small company" that claimed they would (not vetted). That company sold the drives on EBay without wiping. Someone bought them and reported it to the papers. That trust got hit with a MASSIVE fine. I returned several years later to find "the importance of this incident" and "We now have our own hard drive crusher". The knobs.

And the other time I pointed out the flaw in the laptop encryption. I kept a laptop aside that wasn't on very often. When the encryption would lock me out of another laptop for various reasons, I'd boot the other laptop up where my encryption account wasn't locked. That would then unlock the machine I'd just locked. I informed them several times "It's working as intended. It's actually a feature". Oh fuck off then if you're going to continue to ignore me because "I'm a lowly contractor/temp". I left, and a few months later someone more senior reported the issue and oh look suddenly it "Was an issue. The laptops were set to win over the server. We've now changed this so the server wins over the laptops".

Fucking knobs. Can't stand NHS IT but then I've been unfortunate to be in two trusts with unfriendly engineers (they weren't all bad mind you). And one thing you notice when in the NHS is how they piss so much money away in different departments on specialist contractors and so much middle management. One trust I was in there was so much "Jobs for the boys" play going around it was awful. I'm sure if an investigation had been put in place during those years, some charges would of been bought on some of them.

Sorry, went on a rant :)