* Posts by IamStillIan

53 publicly visible posts • joined 10 Apr 2017

Page:

Microsoft Edge ignores user wishes, slurps tabs from Chrome without permission

IamStillIan

Still with Firefox

I've used Firefox since before the days of Chrome and Edge - never really saw an incentive to switch?

Mozilla isn't perfect, but they definately do better on this stuff that either of those two.

Electric vehicles earn shocking report card for reliability

IamStillIan

If you're lucky enough to live somewhere that's possible and be able to make it work for you, then that's definately the greener option.

Unfortunately not everywhere has invested in infrastructure to make that possible, and not everyone is physically capable of the more active options.

I agree, this should be the prefered model, and demand reduction (i.e. reducing needless travel) is essential regardless, but it's never going to provide 100% coverage, so some EV's along side it makes sense.

IamStillIan

Re: We need the technological progress...

The sad part is that this could have been a major part of the solution.

Unfortunately vested interests denying we had a problem inhibited progress, so the technology isn't ready, and we don't have time to wait for it.

Brit pensions scheme flushed £74M when it walked from Atos deal

IamStillIan

"Which would appear to mean that these clowns were previously entirely happy to spend tens of millions with a supplier with no experience of the UK defined benefit market, who was unable to evidence a digital first service, and presented inadequate evidence of service transition and data migration."

While I get your drift, these big public sector contracts have issues in that regard.

It's pretty common to run into public sector contracts which require "has done <really niche and specific thing which could only possibly be satisfied by the incumbant because no one else has had that contract but them>", which destroys the whole tendering concept.

If you actually want a choice, you have to be willing to tolerate someone who hasn't done exactly the same thing. If you're not, and the incumbant figures that out, they'll explain about the 1000% price inflation to keep them on..

World checks it's not April 1 as Apple signals support for full US right-to-repair rule

IamStillIan

Re: "They use third-party parts"

"Companies such as Apple should realize that if I need to repair my iPhone (if I had one), I may not be in a position to buy a new one and that could mean I'd buy an Android so I have a phone to use. OTOH, if I could have my iPhone repaired for the same or less locally, the same day, I'd continue on with an Apple phone."

If they believed that (and they do study the market), they'd change. Apple phones are the more up market option; which means they tend to be owned by people who can afford to replace them, or at very laest consider it an essential which is worth spending larger sums on. People who are really struggling with that, probably already moved elsewhere..

IamStillIan

Re: "They use third-party parts"

The presumption you're making here is that they're lesser quality, when in many cases they're the same. Even if they're not, cost/benefit may fall in favour of the lesser part.

I do agree about the need for transparacy through, and I support that amendment to the legislation (that repair shops must indicate the parts they're using).

None of this is new, and templates for the model already exist.

Car manufacturers used to do this with spares, and the result was extortinate pricing. Once independant competition was made possible, the manufactures prices fell (still higher, but the very existance of another option reduced monopolistc extortion). It also made extension of life beyond manufacturer support a viable option.

JavaScript survey: Most use React but satisfaction low

IamStillIan

Re: Representative?

I have no issue with the fact that Javascript was made for something very different, so the language itself isn't to blame for that.

However, the way it's used now means it's become a barrier to progress, and is underminding the web.

IamStillIan

Re: The language to make the web slower

Bring on WebAssembly..

It's not perfect, but as the first realistic chance of taking down Javascript since it rose to prominance, we've got to support it...

IamStillIan

Re: Representative?

I'd have said the popularity of TypeScript is proof that JavaScript isn't fit for purpose and people do want strong typing...

22 million Brits suffer broadband outage blues and are paying a premium for it

IamStillIan

Most of us don't need more speed...

> people in the UK typically buy on price rather than speed

This focus on speed is the real point - it's popular with marketing folks, but not actually catering to the real need.

People knock on my door asking if I'd like to upgrade my 100mb/s service to 500mb/s - and I ask, what would I do with 500mb/s at home, and they waffle a load of nonesense which could be done on a 25mb/s connetion.

Speed isn't the issue, stability and reliability is. Where's all the marketing saying "Guarenteed xxx uptime, and wacking great compensation if we don't deliver" - that I'd pay for.

The only effort I've seen is "guarenteed wifi in every room" type offers, which means they'll give you a mesh repeater if you've got a bit house; no commitment on the main service they actually provide.

Twitter rewards remaining loyal staff by decimating them

IamStillIan

Maybe this is part of a personal Tax write down excercise for Musk.

He's concerned that Telsa 's losses aren't enough to match PayPals resulting a profit sometime soon, so needs a large loss maker to make sure he doesn't accidently contribute any tax.

First rocket launch from UK soil now has... a logo

IamStillIan

Careful what you promise - at the current rate of going you mightn't be able to afford a pint by then...

Dems propose privacy-respecting digital dollar

IamStillIan

Re: what's it for?

But this nothing at all to counter that?

IamStillIan

what's it for?

The goal here seems to be to put huge amounts of effort into making something new for the sake of it. The objective is to make the capabilites and limitations of something match it's predecessor by design.

As side from slightly smaller wallets, whats the point?

Labour Party supplier ransomware attack: Who holds ex-members' data and on what legal basis?

IamStillIan

Re: The Other Lot

Na - if it was the roll they'd be the processor, and have to notify the administering council(s), who'd presumably have to mail us all ..

Data transfers between the EU and the US: Still unclear on what you're supposed to do? Here's an explainer

IamStillIan

"At its core, the General Data Protection Regulation [...] was about promoting accountability."

I thought it was supposed to be about consistency, "comply once ,do business everywhere", without having to learn each national set of rules. That went well...

Share your experience: How does your organization introduce new systems?

IamStillIan

External

Also seem to have missed "Client pressure" as an option. As a small organisation with significantly larger clients, it's not uncommon for them to "expect" as do do things Thier way, regardless if whether there's any advantage or it even makes sense in the situation.

Tick box compliance stuff...

Sharing medical records with researchers: Assumed consent works in theory – just not yet in practice

IamStillIan

Anonoymisation is more complex than its given credit for. You get back to the same problem; who decides what's good enough?

As scrubber notes, positioning this as saving lives vs not is a false representation. It's macro research vs local service effectiveness, with an added bonus of providing an avenue for sought-out prejudice.

IamStillIan

It's about trust

What we're weighing up here is the potential benefits of it getting to the right people Vs our confidence it won't get to the wrong people.

The problem is that trust in Government in the UK is at an all time low. With a PM who unashamedly lies to us, goes back on his word with our neighbours as a badge of honour and is already in discussions about rolling back data protection laws for profit, it's seems we're only we ever one casually waved though regulatory change from anything we might have though was satisfactory being swept away.

How can you expect people to to take a leap of faith in that context?

Cloudflare dumps Google's reCAPTCHA, moves to hCaptcha as free ride ends (and something about privacy)

IamStillIan

Re: HCaptcha absolutely sucks

It does seem to be somewhat tedious.

UK Info Commish quietly urged court to swat away 100k Morrisons data breach sueball

IamStillIan

This tone assumes Morrisons was powerless against KPMG's proposed mechanism,.

Morrisons is of course entitled to refuse a process they consider to be contrary to their data protection obligations.

They're required to be audited, they're not required to be audited according to a process invented by a third party they don't agree with. Of course they may not have reviewed it..

Microsoft Azure gains Availability Zones and Immutable Blobs

IamStillIan

Re: "can be created and read, but not updated or deleted"

Presumably it's intended for legally required retention, and as such subject-delete request's will be refused.

You want how much?! Israel opts not to renew its Office 365 vows

IamStillIan

Re: £££££££££££

"That seems like an edge case to me. I'm purely speculating here, but it seems to me that an org that is so small that it can't sort out infrastructure is probably also so small that the infrastructure it needs is simple enough that they could sort it out themselves."

As someone in this position, I see both sides. We use o365, but that's because we're a dev shop working on MS stuff and get it free though the partner program. If we weren't a dev shop we'd likely not have the infrastructure / skills in house run something like that ourselves.

It takes care of a lot of bits of stuff - AD, Fleet admin, E-Mails, OneDrive, Office, various resilliance and audit issues.. so it probably would be worth the full cost if you were starting out with none of that. Once you learn a little bbit about it, there's also various approahes around to avoid the full costs (I mean the legal ones).

Here's why AI can't make a catchier tune than the worst pop song in the charts right now

IamStillIan

You could just use the Harrington 1200

https://www.youtube.com/watch?v=rqkUISJej2o

Farewell then, Slack: The grown-ups have arrived

IamStillIan

Slack has the more aggressive privacy policy - basically that they can share everything in every message with third parties....; that was a problem for us.

Teams doesn't take that stance.

Things that make you go hmmm: Do crypto key servers violate GDPR?

IamStillIan

Re: How about blockchain

We had slighlty mixed messaged on that.

On one hand you've got "required to function" granting exception, and a clause (somewhere, can't find it right now) pharsed as "…taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures".

On the other hand, you've got the ICO publishing things (I think it was clarification statement about backups) that say "technical difficulties doing it aren't an excuse".

IamStillIan

In which case, see standard process for someone who releases something into the public domain without your consent; liability lies with them, not the key server. Once in the public domain, there's not a lot that can be done.

I could have a local cache of your key recorded from the key server, which I did on the understanding you'd consented to typical use of the pgp system. Is the onus on me to monitor the key server for status changes?

DXC execs to investors: It's say-on-pay time. Give us a bump, would you?

IamStillIan

Re: Well you can't buy morale

I can second that from folks I've interviewed. I've had numerous DXC ppl applying for jobs and there typical reason for wanting to leave their existing job is (subject to business lingo gumph) "I need to get off the sinking ship".

Smyte users not smitten with Twitter: APIs killed minutes after biz gobble

IamStillIan

So what they're saying is they bought the company, got access to the deatils of what they were doing, realised it was probaly illegal / in breach of something or other somewhere, and put a stop to it?

Sounds like the due dilligence failure was before the aquisition..

Lib Dems, UKIP's websites go TITSUP* on UK local election launch day

IamStillIan

I think you're suffering optimism bias towards the rest of the net.

Sure, it's all lies, but not below average.

Microsoft: Yes, we agree that Irish email dispute is moot... now what's this new warrant about?

IamStillIan

US legal position

So complying with a US law will mean violating EU law. That comes with a set of follow up quetsions:

1. Is there anything in US law which permits "we can't do that, it'd be against someone else's law" as a defence?

2. If Microsoft refuses to comply, gets fined, and still refuses to comply, can it continue to be punished or is that the end of the matter?

3. Is there a limit to what they could be fined? Basically, on a pure buiness costs basis, what makes more sense, breaking GDPR or braking CLOUD?

Microsoft's Teams lights solitary candle, hipsters don't notice

IamStillIan

Re: My users are loving Teams!

The MS terms are still stronger than Slack offer with regards to compliance. One of my colleagues blogged about it: https://gavurin.com/privacy-that-is-slack-with-your-data/

Oi, drag this creaking, 217-year-old UK census into the data-driven age

IamStillIan

Re: Data protection.

That exemption is a Member State Derogation. ie. Member states can execute discretion to legislate over these areas. The UK won't be a member state, so we won't be entitled to derogations of our own making unless we obtain an agreement to the contrary, dispite the fact we're pretty likely to stiill have to comply with thme.

IamStillIan

Re: Data protection.

Won't get away with that under the GDPR changes, which will be full in force by 2021, unless there;s a Brexit based get out put in place.

IamStillIan

Missing the point

One of the really important points of the census is to validate all the other data excercises going on day to day. ie. is the admin data any good, or does government miss big sections of the population (always shows that it does..).

This move threatens to render missed groups off the radar indefinately, which has all kinds of knock on in service provision, democracy etc.

Doing bits of it online to save postage is seems fine form that this point of view, but not doing it at all is a huge failing.

Private browsing isn't: Boffins say smut-mode can't hide your tracks

IamStillIan

Re: I dont believe there is ever likely to be full privacy on the internet

"I dont believe there is ever likely to be full privacy on the internet"

That'd basically be oxymoronic. The internet exists to communicate data. "Full privacy" for everyone about everything would mean don't communicate any data... As you say, it's about agreeing boundaries. The system is still relatively immature (compared to walking down the street..), opinions vary, the scope is wide, and enforcement is difficult. We're a long way off.

You walk down your street with knowledge of the area / community, and having decided the risk is acceptable; there maybe some streets you don't walk down because you don't feel that's true.

The real difference vs the down the street analogy is the scale and extent at which it can happen. People elsewhere in the world can do it en-masse in your street, and every other street. That changes the discussion because you no longer know which streets are safe, or what communicty you're interacting with, so your ability to choose is being eroded. Oddly enough that's an inverse privacy problem, where those doing the monitoring have too much privacy.

Ubuntu wants to slurp PCs' vital statistics – even location – with new desktop installs

IamStillIan

Creative thinking

Data Canonical seeks "would include" the following:

- Network connectivity or not

So in the case of not, how does it report back? Print it out and ask you to post it?

Uber: Ah yeah, we pay women drivers less than men. We can explain!

IamStillIan

That's rather mixed bag then:

"due domestic demands" - that would indicate the issue is socital bias in domestic responsibilities; not really within an employers scope to mitigate, but clearly a route cause for various other gender issues.

"gaming the system" - seems to be about experience rather than gender. It's probably still something Uber should address; presumably through tweaks to the pricing model to try and minimise the advantages so all fares yield equvilant rewards. They'll never get that perfect, but can probably do better that an current. This however, would be primarily for the benefit of the customers rather than the

drivers.

UK Home Office grilled over biometrics, being clingy with folks' mugshots

IamStillIan

Re: "Computer says no..."

What you've overlooked is that they've deliberately not assigned any ids or dependable reference data to anything, in order to make sure nothing like this could be forced up on them.

Serverless: Should we be scared? Maybe. Is it a silly name? Possibly

IamStillIan

Re: Oh, shit...

JavaScript for infrastrucutre? Anyone can use it; but no one can use to make anything you'd be confident in..

UK.gov denies data processing framework is 'sinister' – but admits ICO has concerns

IamStillIan

That's my assumption as well, and I see the point of that; otherwise any crook can just turn round, claim to be a researcher and simply "not have reported it yet".

Whether 72hrs is the right number is a fair question, along with how extensive the report is.

If it's a simple "Dear ICO, I believe that combining X with Y can reveal Z, but I'm sitll working on. Cheers" then that could be reasonable. If we're talking about an indepth analysis, then that's a different situation.

Up, up and a-weigh! Boeing flies cargo drone with 225kg payload

IamStillIan

Just think what Joseph Barbera could do with that.

Braking news: Nissan Canada hacked, up to 1.1m Canucks exposed

IamStillIan

Re: Not too bad, all things considered

I'm inclined to agree with jmch.

While there is some residual risk fo taking 10 days to notify, it's probably better average for something of this size.

it practice it does take a bit of time to confirm it's actually happened, evaluate exactly what data has been taken, and which people need notifying.

They could have used the 2 step-model; of a general "something has been breached, be alert, details to follow", followed by a "this does/doesn't actually imapct you peronsally, in this way...", but I guess that's being balanced vs reputational damage risk of broadcasting a worse meessage than they actually need to.

I guess

Oi, force Microsoft to cough up emails on Irish servers to the Feds, US states urge Supremes

IamStillIan

Re: It should be about where the user was, not the server, it seems to me.

It's more than difficut to manage. In infeasibly problematic without effectively a new interational agreement on it and a huge wodge of policy everyone has to find ways to implement.

There are issues around how to record such information, confidence in such information, burden of proof.

Then there are ambiguities around things made in multiple juristrictions (collaborative authoring), out of duristiction (international waters), the list goes on and on.

No more mister nice GUI: Visual tools stapled to Azure Data Factory

IamStillIan

"Because, yeah, devs hate code and love GUIs."

I actually think that's a misunderstanding. There's quite a mix of people who do this knida stuff.

Devs who write it themselves where there's an off-the-shelf solution available have special circumstances or are doing it wrong.

The data science crowd prefer to save their smarts for the analytics bit, they'd probably rather just push some buttons and have the data automagically become available.

Slack re-invents the extranet and shared Notes databases with cross-company teams

IamStillIan

Interesting timeing, I believe Microsoft Launchers this features on Teams yesterday..

So much data, so little time: How to not flip your wig processing it

IamStillIan

I concur; usecase is everything.

Additional reporting servers are a cost; not all systems need to be so timely; why make things more expensive when there's no benefit?

If Machine Learning is the question, open source is the answer. Right?

IamStillIan

Re: So "Tensorflow" is going to be like VBscript for machine learning?

They tried that, but it worked out it was unquiely capable and started demanding a ludacris salary.

Numbers war: How Bayesian vs frequentist statistics influence AI

IamStillIan

Re: "How can you possibly do statistics on a guess!?"

I think the response is "How can you possible do statistics without a guess!?". Given that there are no comprehensive models of the world, and practically nothing is truely independant, you always assume something, whether you realise it or not.

UK Tory party pledges 'digital' charter, wants Verify to back online gov

IamStillIan

Re: One must ask ones self

"Usually the last time you announce it."

Do you have evidence to back that up? We often see already assigned funding being reannounced under new guises again and again...

Page: