Posts by DuncanLarge 1026 publicly visible posts • joined 10 Apr 2017
> It’s called a certificate revocation list (CRL) and it works just fine.
Unless you are using Chrome, which ignores certificate revocation instead relying on a built in list. Everyone else uses a standard method of checking for revocation but chrome removed support.
So if you dont (or cant) update chrome, youre stuffed.
https://scotthelme.co.uk/certificate-revocation-google-chrome/
TBH those have been an issue for a long time before this. I have a HMC for our AS400 that rarely need to be accessed. When it is however its a right PITA to connect to. It supports HTTPS but a version that chrome and firefox refuse to connect to. So, I should use IE?? Nope, even IE says NO WAY!. Only Edge works funnily enough. Then the actual login process and interface that is loaded is not HTML with CSS, but Java. So I have to convince the browsers to load Java 8 and run the thing which requires me to add exceptions to Java also because the Java being loaded isnt signed.
Its a right PITA to do on a saturday morning over a VPN and all you want to to is reboot the AS400 into a restricted state so you can manually initiate a full system save to tape. And all of this can be avoided by connecting to the HMC using the AS400 terminal client but IBM's new terminal client, that is Java based, does not support HMC's yet so you have to use the older System Navigator client which would work just fine if only the new VPN that you were asked to test was not blocking the ports.
Who the hell uses Safari? The internet explorer of apple products?
I doubt anyone will care to renew their certs this frequently till Google and Firefox join in. Users who complain that Safari is popping up warnings will be told:
"Our website is secure and designed to work with modern browsers like Chrome, Firefox and Edge. Sorry to inform you that we do not specifically support Safari".
Well the only thing that comes to mind is if you have several devices that have the same IP they would be able to detect that.
But for that to happen al least one of your devices would need its address set to static, so you probably would be able to debug such a situation yourself.
Unfortunately this may be of limited use. Rule one when trying to analyse a suspects drive is to image it and work on the image. If the drive then wipes itself al thats happened is the curent image is wiped. As you keep an unaltered original image sitting around you can just spin up another copy for a second attempt.
No
My cheap BIWIN chinese 256GB M.2 SSD locks up the system when I sequentially copy data off it. Oh, it copies fast, but dont expect to be able to use the PC till its finished. My Ryzen 5 1600 B350 12GB DDR4 2400 system shouldn't freeze and become non responsive t user input while it copies.
None of the internal or external HDD's have ever done that.
You mean HDD storage, not SATA. All my SSD's are SATA.
I did go an use an M.2 for a bit. Bloody thing was a bit of chinese **** that stole 2x SATA ports that I actually wanted to use and locked up the PCIe bus when sequentially copying. I could have moved to a decent PCIe M.2 card but considering that I would still be denied my 2x SATA ports I though bugger it and replaced the M.2 with a faster and less **** SATA SSD.
Lesson leaned for when I upgrade my MB in 5 years, DONT get one that steals ports just to support the M.2.
> Given the crash in SSDs prices
I'm still waiting, till that "crash" meets my requirements.
I may even hold out for the tech that will replace SSD (NAND) as I tend to think its a bit backwards (*) and a stop gap measure. Give me memristors...
* Backwards in that its unable to update a small bit of data without rewriting several megabytes of data needlessly. HDD's (modern ones) only use 4KB sectors. NAND will probably not reach that so I'll wait, mostly.
> and the UI is absolutely outdated
I always wonder how people manage to decide a UI is outdated (besides from its ability to display many colours).
I find recent UI's unnecessarily full of white space while lacking user feedback elements that have been standard for years, for good reason.
I also fail to see house decorations as outdated (apart from the glaringly obvious). Maybe its just me.
My preferred window manager is Window Maker and I love the Motif widgets oooh yearh...
> Managing Office 365 is the same as or easier than managing any IMAP server
A 14 year old can manage an IMAP server. I know, I did it.
> Managing Outlook endpoints (not just PCs, but phones) is definitely easier than managing IMAP endpoints.
No. Only in an admins dreams.
> Managing end users that use outlook is easier than managing thunderbird users (mostly).
I manage O365 every day.
Its a nightmare of:
- sync issues
- "password required" but no password box is being displayed
- Apple iPhones getting emails before the laptop resulting in VIP users getting really pissed off and asking IT why that is
- users calling up saying they cant send as this mailbox or view that mailbox only for IT to find that they are configured correctly in the cloud but their outlook is buggered and must be reinstalled
- Outlook failing to install the latest updates with a useless message saying why
- The office 365 installer that downloads the installation from the net will get to 75% then fail saying you should try again later. IT bod (me) then downloads the offline installer which is comprosed of an xml file and an executable I HAD TO WRITE IN C# myself just to install it.
Sure, office is easier...
> I don't remember seeing anything like that in emails on Outlook
You have to turn it on.
I only view plain text in Outlook unless I need the HTML formatting which unfortunately is fairly often :(
I use thunderbird at home after I got tired managing all of it on my phone.
At work I'm forced to use Outlook.
I also like using Mutt.
> Sonos 5 have not been sold for around 8-9 years
Neither has my car, but its still expected to work.
> It's odd that we've got used to hi-fi/stereo systems lasting decades and are unhappy about this
Speak for yourself. Personally I would preffer my devices to last and not add to the insane pile of e-waste we all have to help create because marketing.
> yet we're used to having to replace our PCs/Laptops/mobile phones/TVs every 3-5 years when they become out of date or die on you
I have never understood what people do with their computers to cause them to die so prematurely. Most of my laptops are made in 2012 and my oldest is a netbook from around 2009. Apart from speed and being limited to only 2GB of RAM, that netbook still lasts approx 7 hours on a charge and runs all the software I would ever need to run on it. And its 32bit only :D
My 2012 laptops are all lenovo's with various ports etc. They will run 64 bit just fine as they are either core i5 or i7's.
I did upgrade my PC a couple of years back. My 10 year old Athlon 64 3 core system got upgraded to a Ryzen 5. This was only done to let me decode HD youtube and twitch after they switched codecs. There was nothing else the old system couldnt do, the 3 core athlon just didnt have the grunt of a similar Intel chip so maxed out all 3 cores decoding the video. It also didnt help that at the time Debian did not have any hardware acceleration support for HTML 5 video so the CPU had to do all of it.
I expect to be running this 6 core Ryzen for at least 10 years, maybe I will move to a faster processor if its cheap enough otherwise I see no need to change anything when my cores are barley ticking over when decoding the HD video without hardware acceleration.
Sounds like a case of:
"I wrote the code, stop asking me to do it properly".
In this day and age, when given a language like Rust that actually works hard to make code safer, you'd think that a developer of a web framework would work hard to ensure the safety of this code.
Ditch the performance and interoperability. Thats a problem for others to sort, such as fixing their browsers to work in a more interoperable way and do we really worry about performance now? We are spoilt with huge amounts of memory and processors with 64 cores. I remember the "breaking of the 1GHz barrier" being a big thing, on a single core machine which MIGHT have 1GB of RAM.
Security is everything when concerning the web these days and if this developer was acting in this caviler way regarding using the features of Rust to provide what should have been a good attempt of bringing a secure development platform to the web then I say bye bye and good luck to him. Your users were demanding something that basically was common sense these days, you had a chance to create a platform that developers would flock to knowing that its secure and hardened but instead you seem to have got in a sulk about an entire community because they demanded you stop taking shortcuts.
Thats the thing about Free Software and Open Source. Other people can see your code and change it for the better. The communities tend to try and keep things centralised, although they dont need to and in many cases they didnt, creating a fork. Here they were telling you what the problems are. Perhaps they were wrong, Linus frequently find many who are, but here they seem to all be saying the same thing and have a point. So instead of telling them to create a fork, that would likely be better, more secure than you version, you decide to call the community toxic and quit.
Perhaps your code was toxic. Of you go now. Give the keys to the person taking over from you, maybe they will sort out the mess.
I have a whole stack of HDD drives to be tested in the PC computer I built for the job. My other computer isnt a PC computer but an Acorn one which has 12 MB or RAM memory and 1MB of video memory and a HDD drive which spins loudly. It run on the RISC OS operating system and looks great on an LCD display. I have a gool ol' CRT tube monitor that I cold use but the LCD display is lighter to move about.
Hopefully I will be able to put a CD writer in it because burning CD-R recordable discs would make a good way of transferring data without having to faff about trying to get enternet working.
Many of my other electronics use not LCD displayes but VFD displays.
At work I'm currently moving data to a SAAS service which is pretty boring hence why I'm here.
I still use a Risc PC for a few things. The ancient software does not rot, although the bits on the ancient drive may do so. The ancient software also does not mutate and gain viral powers, reaching out over my network to find a way to infect my brain and gain sentience...
The solution for ANYONE needing to run an old version of quicken (as an example) is to simply unplug the machine from the network. George R.R Martin happily runs DOS just so he can keep using his fave wordprocessor after all.
I grew up in the 90's and home networks and the internet were novel back then and when you really look at it they are still optional for many tasks.
You should be able to grab a new or recent secondhand machine (which could also open a can of worms but lets ignore that for the sake of the argument) to use for stuff that does need internet access like banking.
If you cant, walk into your branch and bank there. It will stop them closing and keep some people in work ;)
> Keep your browser up to date? Fire up an XP VM and try to install the latest version of Chrome or Firefox.
Ahem
Why would you do that? Dont browse from these operating systems.
Ahem
There are more browsers in the world than Chrome or FIrefox. NetSurf will work fine.
Ahem (again)
Why would you do that? Dont browse from these operating systems.
> As long as no one e.g. uses a browser with security defects
Find me such a browser.
However, how are you going to ensure that the font renderer is also free of defects? And the libraries that decode jpg's. What about the sound subsystem?
And then you have the TCP/IP stack itself, although that would require another machine to be attacked or maybe the router that hasnt been updated for years.
> To be honest, the days of direct connection from a modem are quite a way behind us. How many people have machines that are genuinely "on the Internet"? They might be able to access the Internet through a router, but so long as you set things up sensibly they're not going to be visible on public Internet for all and sundry to see.
Its important to make sure that the machine does not pull down random data from the net, like while you are browsing in a browser.
If you require win 7 to run some software that wont run on win 8, 8.1 or 10 the the answer is keep your win 7 box on a separate network and off the internet.
There are no updates coming, no need for the internet. Software updates you need installing can be transferred over via USB from a safe machine. Run the win 7 machine as a VM preferably so you can snapshot and recover should you have an infected usb stick or image it regularly using cloezilla.
Basically get it off the net and any network connected to the net and enjoy.
> the license chosen is more free!
Ah but that is not a benefit. Its not a benefit to leave hour house unprotected is it? Well, it makes it easier for you to get in and out, considering there are no locks but its nicer and safer to add locks to prevent the nasty people getting in.
Thus the GPL gives you the protection from nasty people taking advantage of you and removing your freedom.
I'd like to stay free, I'd prefer to infringe on the handcuff owners freedom by locking up their handcuffs so they have no choice but to behave.
Windows 3.11 is a lot better to use than 10.
On linux I love to use Window Maker much of the time.
Anyway. Windows 10 has 2 control panels. It has dropped anything that gets you close to theming the desktop. I cant even chose what colours I want for window title bars in the foreground vs background. The differences between such windows is subtle and I find I frequently lose track of what window has focus. Btw I am colourblind, if I have an issue with a colour that I want to resolve I expect to be able to change the colour of practically anything I see in the UI. Like in all versions of windows I have used since win 3.11 when I was a child.
There are several types of scrollbar, one of which annoyingly hides itself till you go looking for it. You need pixel perfect skills to find and activate it! IF you are lucky enough your scroll wheel will scroll, without you finding and clicking on the scrollbar first.
Focus is all over the place. If I enter my password incorrectly on the login screen I must grab the mouse and move my pointer to click on the "Ok" button to dismiss the "password incorrect" message. Why cant I just press enter? Thats how its supposed to work! THE OK BUTTON IS THE ONLY UI ELEMENT THAT I CAN INTERACT WITH AT THIS POINT THUS IT SHOULD HAVE FOCUS!!!
Some dialogs end up stealing focus and they REMAIN below the parent window. You have to alt-tab to find them. If you dont know to do that you call IT and have me go over to your machine to find out why the application is unresponsive. Sometimes alt-tab wont bring it to the front, out comes task manager.
Oh yes, launching task manager as a normal user requires you to enter your password. This was true since win 8.1 but now if an admin wants to run something in a users session you are asked to enter the USERS NON ADMIN PASWWORD even though that user clearly is NOT AN ADMIN. So I must find the hidden scrollbar on the password prompt, click on it because the scroll wheel wont work till I do, to scroll down to the "other user" button thing that does not look like it can be clicked, click that to then be able to enter my admin details.
Again, there are several different types of password prompt!
The flat UI elements are totally confusing. Is this clickable? Click click click... Must I click it in the corner? No its just text, but according to the KB article its supposed to be clickable... Oh it can only be clicked in certain circumstances but does not grey out like a button used to.
The thumbnail previews on the task bar, although cool, just stop working and get replaced with a picture of a spinny thing that doesnt spin. The IT guy, which is me then tries to TURN THEM OFF with the OFFICIALLY RECOMMENDED process from microsoft which involves digging deep to launch the original control panel and unticking a tick box only for THE SETTING TO DO JACK SHIT! Then IT guy must grab the users laptop to fiddle around randomly trying all sorts of things including reinstalling the graphics drivers and refreshing windows to HAVE THE PROBLEM HAPPEN AGAIN A WEEK LATER EVEN THOUGH IT HAS BEEN TURNED OFF.
I use multiple screens and multiple desktops. Moving windows between them is an annoyance. Moving between the desktops sometimes kills explorer.
The search bar searches the internet BEFORE searching my local machine. If I type "calc" to launch calculator too soon after booting I end up searching the web. WTF
Also the search bar DOES NOT find what I know to be there. One day it sees a program I want to launch only for it to show something in the app store the next day. I then have to open the start menu to try and locate it.
Notifications pop up covering the UI of system tray apps that I am interacting with. The notifications think I'm interacting with them and stay there. The close button of the notification is almost invisible to me as I cant see it because I'm colourblind and CANT change the F'ING colours of MY computer and MY UX (user experience).
Uninstalling the Xbox stuff from company laptops is a fruitless exercise as it installs itself again the next day. Yes there probably is a GPO to handle it, but I uninstalled it. IT SHOULD BE GONE.
Dont get me started on the ribbon interface of O365.
Dont talk to me about Onedrive.
and FFS CAN I PLEASE HAVE AN ERROR MESSAGE THAT DOES NOT JUST SAY "SOMETHING WENT WRONG" LIKE I'M AN IDIOT WHO NEEDS CUDDLING. AND WHEN I DO GET AN ERROR CODE HAVE SOME F'ING DOCUMENTATION ABOUT IT MICROSOFT!!!!!!!!!!
Not a Linux issue at all.
Just because my car wont run on diesel does not mean I cant drive a car. I run it on what works.
BTW the desktop encompasses more than just a few specific things like a photo printer or a mixing deck. I know plenty of people who USE windows and will be unable to make use of that. So I guess the need a mac?
> Unless there's a realistic alternative to Windows 7 that comes up (Linux isn't it, sorry)
Seriously what could you possibly have a problem with after all this time?
I've been using Linux for at least a decade as my main home OS and in that time everything has become so easy I started to miss the days of editing configuration file. And I'm using Debian!
The only thing you may miss is something that fully replaces Office (specifically outlook as Office is easily replaced), well thats nothing to do with Linux and everything to do with your workflow / work requirements. And for that you will have to stay with M$ unless you are determined enough to work around any little issues like that, like using Outlook via the browser.
In fact most of everything works in a browser these days, so basically you need Linux to mount USB flash drives / USB HDD's, launch a decent browser like chrome or firefox and maybe play a few steam games.
> removed from the sample data easily and quickly without a ton of extra programming required.
Read it again.
1. You ca not see something that is obscured. Go on take a photo of a sign but have someone standing in front of the sign obscuring it. Load up photoshop and show off your magical ability to remove the foreground subject revealing the sign that was obscured. Such feats of computer technology only are possible in movies.Note that YOU ARE NOT ALLOWED TO CHEAT and refer to previous and post images to construct a fake psuedo image that is an approximation of what would have been there. You are observing a live event and you MUST recreate the exact frame and detail that was obscured by the satellite. Try it, you cant do it can you.
2. How do you fix the data? Part of the article describes how the scopes sensors are being saturated by the mega brightness of these things. Then there is the issue of crosstalk. Do you have the skills needed to correct for random crosstalk errors in your very sensitive device?
After you magically reveal the sign behind the man get in your car and try driving at night with a security floodlight shining in your eyes. Do you think you can digitally improve that?
> Git doesn't use SHA-1 for a defence against attackers, it uses it as a database key for each file.
This is incorrect. Git uses the SHA-1 hash to confirm the integrity of each commit blob which also serves as an identifier for that blob. Thus if a commit is modified, you know because it gets a unique hash. Thus GIT does use SHA-1 to defend against an attacker as it is the way you know a file has been tampered with. If it worked properly a miscreant modifying a file WOULD NOT be able to have that modified file masquerade as a previous, valid commit.
So if you stay with SHA-1 in GIT you basically let those who do manage to get in via your "other problems" to go around as the invisible man modifying the target code with nothing but the kluge collision detection code that currently is used. Well why not also find a way to turn that code off as part of the attack? Then what do you have as your defense?
Once someone is in your GIT repository and have disabled your collision detect kluge and they can generate the collision they want to insert their version of a commit, the only defense you have left is the fact they must distribute that to all other repositories.
That's your only defense, a bit of difficult to do stuff. Which if they have got this far, getting inside, generating a collision, other stuff, then whats one one item to tackle?
Personally I would like them getting in the front door to be tough, then walking down the corridor to be scary and bloody with attack dogs running at them, way way before they manage to get to the door they need to enter to insert their collision only to find its made of plywood because someone thought the dogs would be enough. I want that door made of good solid english oak with Arnie standing in font of it, then beyond that door is a fire pit 50 metres deep...
There is no reason to continue using SHA-1. I use SHA-256 for file hashes and have done so for years. I also took a look at if there was a speed difference when computing a hash. I found none that was significant, although it was just my desktop and my personal files, not thousands of files being modified every day but with current server and even desktops with 64 cores there really shouldn't be a problem.
But a plywood door would be cheaper, as long as its hard to distribute the change to all other repositories. Till it becomes easy. Then who will answer for the plywood door?
All of that is fine.
If you don't distribute the binaries, you don't need to distribute the source. It maters not if anyone is using the data your software created, that's just the output.
Thats totally different from the Apache license issue. There you ARE distributing the software.
I cant remember the games title but there is an indie game recently released in episodic form that has you play as an android who begins to uncover a conspiracy in your android populated world that everyone else is oblivious to.
All this because you, as the android, disabled automatic updates and did not get the most recent OTA update from the government.
The Register 
Biting the hand that feeds IT
Copyright. All rights reserved © 1998–2025
