* Posts by doublelayer

10494 publicly visible posts • joined 22 Feb 2018

Opt-out is the right approach for sharing your medical records with researchers

doublelayer Silver badge

Re: Very sensible approach to my mind.

I would also be happy to contribute anonymized information, but there are clear harms from a breech. Here are a few situations:

Someone who has medical conditions may have that appear in checks of public data, which could be misinterpreted by others. For example, the original poster in this thread's history of cancer might convince employers that they will be more likely to have a health situation requiring time off work, so they don't get a job. That's a single possibility which can harm someone severely. The same can happen in locations where private health care means that people's risk for conditions can increase what they have to pay for their health care. Both situations can also apply to children if your health information suggests a risk for inherited illnesses, and since there isn't sufficient data to ensure that, the risk can be used even if it's incorrect.

There are less severe risks too. While it probably won't directly hurt you to have advertisers hold your medical data, that wouldn't be popular for the simple reason that it's creepy. Medical data is among the most private out there, and therefore the controls over who can see it must be strong. Assuming that anything you like will be fine is not strong.

doublelayer Silver badge

Re: NHS Data Slurp As A Threat

Sure, that could be done. Birth year is sufficient for age. And truncate the post code or have a better way of representing truly large geographic areas, especially important for rural post codes which contain few people. And probably take a close look at any other information in there, because if they keep data that isn't identifying in itself but can be correlated for something that does, that needs work too.

I would gladly give my medical information to researchers, if I could trust that they couldn't deanonymize me and only medical research would have access. I have no way to guarantee either. Worse, I know of plenty of places which would love having that data and would go to lengths, both legal and illegal, to obtain it. Forcing everyone to opt out when the problem lies with the collectors' refusal to treat the data subjects respectfully is therefore not acceptable.

US nuke sub plans leaked on SD card hidden in peanut butter sandwich, claims FBI

doublelayer Silver badge

Re: Intelligent idiot playing out a james bond fantasy

His attempts weren't as good as he would want, but I must warn you that yours have lots of problems and as stated would likely fail.

"Why not just encrypt the blobs, as many times as they presumably felt secure upload somewhere like pastebin or mega, or even usenet from proton mail via tor"

You know how big some files can be? If you upload gigabytes to an anonymous system, they may log how you did it. If you're under surveillance, which they were, they would notice a large upload through Tor. And Usenet? You can't store that large a chunk on Usenet. Using someone else's dead drop location is a bad idea, but using your own and then telling them about it is less likely to be immediately obvious.

"steganography and then sell the image as an NFT to boot..."

Steganography is great, but it's not efficient. You have to post a lot of material in which your data is hiding, which is much easier for a key or a short message but quite hard for submarine plans. Then, you have to tell somebody about where all your data is, which leads you to the same problem you had with uploading it. That's if you managed to find enough material which doesn't identify you, since this is supposed to be anonymous.

If you're considering a life of crime involving lots of data exchange, you need better methods.

Apple beat Epic Games 9-1 in court. Now it's appealed the one point it lost

doublelayer Silver badge

Re: Freemium game model

"Apple does nothing for free and why should it?"

Because they didn't write the game. People are paying for the game. Apple shouldn't get money for something they didn't create. Apple did create the hardware and OS, and they got paid for that when the user bought the device. They got a lot of money from that transaction, and they have no obligation to start paying that money to someone else who didn't do the work. The same should apply to software developers.

Microsoft vows to make its Surface laptops, Xbox kit easier to fix by 2022

doublelayer Silver badge

Step 1: Don't go backwards

If Microsoft or somebody in it recognizes the damage the lack of repairibility is doing to users and the environment, which they're at least pretending, the first step is to not take steps that will lead to more obsolescence. I think you know where I'm going. Landfills filled with broken Surface tablets is bad enough, but their abandonment of perfectly serviceable hardware by cutting Windows support will fill them even faster. There are only so many people will be buying to put Linux or BSD on, and Microsoft, not the hardware manufacturers, is causing the problem this time. True, by continuing to support Windows 10 for a while, they're making that process longer and therefore harder to see, but that isn't a solution.

EU readies 'antitrust charges' against Apple Pay for locking rivals out of iPhone NFC chip

doublelayer Silver badge

Re: I can guarantee the second sentence

Did your account have fixed or variable fees for card types? The reason I ask is that people I know (not me, I don't know) who accept payments have informed me that variable fee contracts are quite common. Cards which are simple charge them lower fees, whereas cards that are more expensive for the banks to operate because they reward users or provide other services earn a higher one. Both cards are operated by the same card provider. They have many other factors that affect how high the fee is. I don't think that applies to everyone though, so it's possible that you had a different kind which doesn't pass these fees on. If yours did work as described, then maybe Apple Pay is the exception.

doublelayer Silver badge

"Merchants don't pay Apple's 0.15% fee, banks do. The merchant fees are the same for Apple Pay and non Apple Pay transactions."

I am not an expert here, but I don't think you can guarantee the second sentence. Banks are responsible for separating out the numbers and sending the funds to Apple, but they may have a mechanism to change the merchant fee based on that. For some contracts, fees are charged in a range, and banks charge at the high end of the range when they have extra charges they wish to pass along. This is transparent to the user in most cases, and it doesn't apply to all merchants, but it does happen. Various services that a payment method provides may seem free without knowing what comparative fees are, and merchants don't always have a choice to refuse those payment methods because there are few options and limited ability to control which is used.

doublelayer Silver badge

You may not suffer, but people who would like to use other platforms do. Places who effectively must support Apple Pay, paying Apple their merchant fees, do. Not caring about a lack of competition doesn't stop that lack from existing, nor does your one experience necessarily mean you're the standard.

Raspberry Pi looks to set up African retail channel to make buying a mini computer there as easy as Pi

doublelayer Silver badge

Re: Pi vs PC

That doesn't hurt I'm sure, but depending on their goal, it's not quite enough. For education, you need some method of I/O, and most screens do need mains power. Even if it's one of the tiny HDMI screens that run off USB power, it's going to kill any battery you try to run it from. It's great when power is available but limited, but if you don't have consistent power at all, it's not well suited to it. Devices like a laptop which can run from an internal battery are better at that, but they're also a lot more expensive.

doublelayer Silver badge

Re: Mini computer

The latest Pi has multiple I/O methods to more quickly move data around. You could run a lot of SSH connections to it. I don't know how many you can do before it slows down, but thirty works at least. Of course, if you're trying to run GUIs on those connections or if they're running complex software, that would be effective in making it sluggish. With relatively simple programs for data entry and manipulation though, I don't think it would be a problem. Don't get me wrong, the efficiency of old computers is very impressive, but if we limit ourselves to the activities they performed, our modern computers can demonstrate their advancement.

doublelayer Silver badge

Re: Mini computer

And you can support 25 SSH connections on a Pi with no difficulty. The terminals will probably be more powerful than it is, but you can do it. A text user interface is really cheap now. I don't know what the problem is with your laptop, but if it's just someone going overboard with the JS, that's not really the fault of the other links in the chain.

Well pedanted on the units. I'd like to blame my shift key, but really don't know how I missed that.

doublelayer Silver badge

Re: Mini computer

It's orders of magnitude faster than any old minicomputer. While Wikipedia is vague about what last qualifies, it does say that the term was last really used in the mid-to-late 1980s. The IBM AS/400 would be a good comparison, but Wikipedia also lacks specs on it for some reason. However, it does say that the CPU used was clocked at 22 mHz. Even the lowest-end Pi outstrips that clock rate significantly (Raspberry Pi Zero at 1000 mHz), and although the architecture means the rates aren't directly proportional, that means at least twenty times faster. Memory speed and size are also significantly larger.

I did find sufficient specs to compare the Pi against a different computer of the era, although it's not quite a mini. It's the Cray X-MP from 1988. That was more a supercomputer than a mini, but even it lags behind that lowest-end of Pis. That's on all aspects--CPU performance, memory speed and quantity, storage speed and quantity, to say nothing of the multimillions price of one and $5 price of the other. Now add in the fact that the newest Pi out there has four cores at 1.5 GHz and 8 GB of memory. It's amazing how well such things have improved in the last three decades.

Microsoft's .NET Foundation under fire as resigning board member questions its role

doublelayer Silver badge

Re: Can't entirely agree

It may be, but this case isn't as clear as some others. Microsoft was going to make a program with the same goal, and they could easily have some devs read the source, which was freely available, and get ideas that way. They weren't using the hiring process to sneak secret information about how the code worked out of the guy, because that information was already public. They got his hopes up about a job and then didn't give him one, but that's not really the same.

In addition, it's a lesson that we have all learned and tell to others: businesses aren't your friend. In an interview, provide information to prove you can do the job, but don't hand over important stuff if you want to keep that secret. Even after you get a job, don't give them stuff if you want it to be secret. Even if they promise you they'll do so, get a contract reviewed by someone knowledgeable beforehand. If they decide they don't want you anymore, they'll send you away, so no need to show them more loyalty than they're showing you.

Progress report: Asahi Linux brings forth a usable basic desktop on Apple's M1

doublelayer Silver badge

Re: Looks interesting

For now, they appear not to care. They've made it clear that they're not helping with driver support (Linux or Windows) or releasing the docs they already have. Neither have they been that active at blocking this from working. If at some point they're no longer happy with people running something other than Mac OS on their hardware, I have no doubt they'll release new firmware which breaks everything. Also, when they have new processors, it's almost certain they will have firmware changes which, intentionally or not, means this project has to start again for most components.

User to chatbot: Help! My kid has COVID! Chatbot to user: Always wear a condom

doublelayer Silver badge

Do chatbots ever work?

Has anyone reading this ever used a chatbot successfully? The only times I've gotten what I wanted was when I really wanted a link to information, there wasn't one, but a suggested question was what I needed to type for the chatbot to cough it up*. For situations where the bot had to understand me, it usually didn't work and most often wasn't at all serviceable. Chatbots cannot replace humans for actual complex support cases, but I don't even think they can for the basics.

*Note to chatbot developers: the anecdote I mention is not a successful result. Put your links on the page so I don't have to hunt for them.

Netflix sued by South Korean ISP after Squid Game fans swell traffic to '1.2Tbps'

doublelayer Silver badge

Re: broadcast -vs- streaming

People are watching the same episodes at different times. You can't broadcast that without setting up the Squid Game Marathon Channel, and that's a lot more expensive than using a wire. And when people are done with this show, they'll still be using video a lot, but no longer watch the same thing. It's not broadcasting because it's different things to different people at a time of their choice.

doublelayer Silver badge

"The problem here is that the Internet is a hugely inefficient way to deliver television to millions of people compared to broadcasting radio-waves, and that's not going to change any time soon."

It's not that inefficient for delivering specific videos. If I want something that you don't want, then the internet gets it just to me without impacting you. Radio waves work very well for people who all want the same thing in the same format at the same time, but a lot of modern videos don't work on that basis. People want video on-demand, they want to watch things that others don't want to, they want full streams which aren't popular with their neighbors, and in each case wire works better than radio waves. This isn't new or limited to the internet. Although digital broadcast has increased the number of channels you can send through the air, it's nothing to the number you can send over a wire.

doublelayer Silver badge

Re: If only there was a protocol to replace client/server by a network of peers

And this would decrease the bandwidth when lots of people want the same file how, exactly? The servers didn't go down. The network was overburdened. P2P will do nothing to change that.

doublelayer Silver badge

Re: Frightening...

I suppose that's a commentary on Google's changability. I get the wikipedia article about the animal and two non-squid-game results on the first page of Google. Everything else is about the show, and mostly because Google's auto-suggester is pushing most real results onto the second page to make room for news articles and videos about the show they want me to read. If I go back to Duck Duck Go. I get three articles about the animal, including anatomy and behavior; two about cooking squid; the wikipedia article for the animal, the Squid caching proxy, a dictionary definition, and a mobile app.

I stopped using Google a few years ago for privacy reasons, but now I'm thinking I might have won on quality too.

doublelayer Silver badge

Re: Looks like the ISP wants 2 bites of the cherry

"Doesn't the ISP have a fiduciary duty to supply reliable service to customers who don't watch Netflix, but may need to remain connected with whoever provides service to Netflix for, say, work reasons?"

No, or at least not any more than they have a duty to let people watch Netflix. They decide what their duties are when they make a contract. They make two kinds of contract: subscriber contracts with their customers and peering contracts with other ISPs. If they decide to be one of the few ISPs that blocks part of the internet without government censorship, then they have the right to do that and they'll undoubtedly lose customers (subject to anticompetition laws depending on the government and market involved).

If customers requested the same amount of bandwidth, but it all went to different sites, the ISP would just have to figure out what they're going to do, be that decreasing speeds or putting in more capacity. It doesn't change anything that they're using one particular site this time. They can use their various peering arrangements to try to extract more money from the places sending them that data, and it might work, but if they fail to do so, their product suffers. That's like the fights between airlines for airport landing space--you can't cut off an airport without angering some people who want to fly there, so that's a business decision you have to make. The airline can't blame a customer for wanting to fly where they don't want to go, and SK can't blame Netflix for having data that people want to read. SK can only change the terms for people with whom they have contracts, and Netflix isn't one.

Got enterprise workstations and hope to run Windows 11? Survey says: You lose. Over half the gear's not fit for it

doublelayer Silver badge

Re: "an upgrade will have to happen in the coming months or years"

You misunderstand. Some attacks occur entirely through JS, and your tighter standards might do something about those, but a lot of them are more basic redirections which standard HTML could do. Take, for example, the fake download link method. Find a page where you can download a program and has ads. Post an ad on it with another link that also says download. Users click on the wrong one and download your executable instead. A firewall can't prevent that, and even eliminating JS in its entirety can't prevent that. Ad standards and enforcement could prevent that, but I'll be dead by that point. At least a modern machine both limits what that compromised executable can do and has a chance of recognizing it and blocking it before the user clicks.

doublelayer Silver badge

Re: Windows 11 Beta

This argument mostly doesn't work for two reasons. First, if you get malware on your machine, it's probably not because you have old drivers. Yes, your hardware may have vulns which are a problem, but you could have that now and it's not Microsoft's problem. So new drivers will probably be a little better, but not as big a deal as you make it out to be. Second, their stated requirements do not exactly align with your driver plan. There are processors older than that generation with more modern drivers and there are components which don't have them but will still work under Windows 11, to say nothing of the TPM requirement which has a similar age effect but nothing to do with drivers. If that were the only reason, it really would make sense to say so and check for that.

One other problem: they're not just saying that they won't help with support. They're also actively putting stumbling blocks in the way whenever the hardware doesn't meet their requirements. Sure, for the insider builds, they're minor and can be circumvented with a few scripts or registry changes. I do not think it will stay that way as production builds run along, and in any case I wouldn't do that on others' machines. If Windows 11 becomes insecure on older hardware, it's almost certainly not due to outdated drivers. It's because Microsoft will have made the update process so convoluted that people don't patch the holes that will be there, and in that case Microsoft is entirely culpable for what will happen to the users.

doublelayer Silver badge

Re: Immutable OS’s are the answer

Among other things, you'll find that installing things, changing OS configuration, and updating components for security are kind of hard when it's done that way. I assume you'll have a writable location where you put all your programs, and eventually all your utilities, until your immutable OS is just a kernel floating around with all the same problems that a mutable OS would have.

doublelayer Silver badge

Re: market position

That argument would work quite well if it weren't for the many people running the beta builds on lots of hardware that doesn't meet the requirements. Old chips, and in some cases, chips that never were supposed to run Windows 10 have been made to run Windows 11 correctly. There is, therefore, no reason they can't use legacy drivers. If Windows 11 cannot do so on release, it is only because they've cut out that code intentionally to break them. Windows has always supported backward compatibility with most things, and that has been one of its strengths when scheduling the year of Linux on the desktop, at least in the office. This probably won't dethrone them, but it isn't helping their case.

doublelayer Silver badge

Re: "an upgrade will have to happen in the coming months or years"

Yes, eventually, as in 2025. People will definitely be using 10 until then, likely later. So the predictions that lots of sales will start in 2022 are extremely optimistic on Dell's part. The problem is that nobody really wants any of the stuff in Windows 11. The only feature that interests me in the slightest is the Android app compatibility thing, and I know I'm going to test it out, play around for maybe two or three hours, then never use it again. The features to be had are not worth the upgrading.

Sir Tim Berners-Lee and the BBC stage a very British coup to rescue our data from Facebook and friends

doublelayer Silver badge

Re: Not going to happen

Nothing's been done officially, but some politicians have discussed weakening the DPA because it restricts businesses who might otherwise want to locate in the UK. I don't think any of them have started any of the work involved in actually doing that, but a few have suggested it might be a good idea. Unless the new commissioner of the ICO starts actually doing something though, they might not have to bother. No enforcement is as good as no regulation in many cases.

doublelayer Silver badge

Re: Pointless

"Then you would pay for most of the stuff on the Web."

No, because monetization methods that don't involve stealing user data would still be allowed. Running ads that aren't tailored to the user, for example. They've been done before, they work elsewhere, this paper does it with the sponsored articles I rarely read. I'm sure advertising companies would be happy to sell you information about the sites the people you want will be reading so you can put your adverts there. It will be made up, of course, but they already make up all the targeting they claim to do anyway.

"We want content, but we don't want to pay for it."

Not necessarily. I do like free content, but there is stuff I'm willing to pay for. If they did what I proposed, they could easily have a non-individualized ads method for free and a paid plan to remove them. I'd likely join that one for sites I like.

doublelayer Silver badge

Re: Can't get my head around this concept

Except that wouldn't work very well for two reasons. The first we have already seen--regulators have the power to go after data collection using privacy laws, but they mostly don't. It doesn't matter what new laws they bring in if regulators still don't do their job, unless they give more public power, and that too is limited.

The other reason is because the data is basically being treated as money in this situation. If Google went to a subscription model and it now costs a fiver per month to use it, arguments that they're charging too much would be ignored. If they charge in data, they can still argue that it's just their price so what is there to regulate? Having something stolen is a more understandable argument than being scalped to use something almost required for the internet.

If this got adopted and everyone flocked to Duck Duck Go, I'd be happy about that. I don't think that's guaranteed or even the most likely option.

2FA? More like 2F-in-the-way: It seems no one wants me to pay for their services after all

doublelayer Silver badge

Which is more work, so it is harder. If you want it to be even more secure, keep disabling the easiest method and adding another one, like this:

1. Don't use SMS, so SIM swapping won't work.

2. Make the user have a passcode on their phone, so simple theft won't work.

3. Make the authentication app have a custom unlock code, so stealing a phone after somehow extracting the device code from the user won't work.

4. Etc until you are happy with the level of difficulty and risk you're dealing with.

Having just a password is around -4 on this list.

doublelayer Silver badge

A user id never was a security proposal. What it is is another detail the user needs to remember for almost always no reason. I have a username here to identify myself to you guys, and in fact I don't even know why I set it to what it is--I couldn't think of anything back when creating the account and went with this one. For other things where I don't need a pseudonym to label myself, there is no purpose in a custom username. It's another thing to memorize, and it doesn't secure anything.

What do iOS and Android have in common? Their apps suck at privacy, boffins say

doublelayer Silver badge

Re: Two-fold problem

"Don't blame the developers, blame the accout managers and senior management."

As a dev myself, this is almost always my favorite course, and more often than not is the correct one when there is a problem. This case is one of the exceptions that proves that rule.

If I don't want to punch you in the face, but I do it anyway, I am still guilty of assault. I might be able to blame someone else for making me, and they too may face consequences, but the fact remains that I had the choice to do it or not and I chose to do so. Only the most extreme of circumstances (I.E. someone being threatened with much worse should I not do so) would justify that, and that only for a generous victim--a judge wouldn't agree. The same is true of tracking users in an unlawful or unethical manner.

You are very right that people may not have the ability to instantly change jobs, and there is a price for those who refuse to act unethically when the person employing them wants them to. You will find, however, that there are a lot of those people, and the devs being asked to track people are not at all the worst off in that situation. Plenty of people have fewer opportunities and more restrictions, and yet obey the laws and act ethically. When they do not, they go to prison or I dislike them, respectively. Devs do not deserve more sympathy than the rest in that situation, and it does not exonerate them in the slightest.

Fairphone makes wireless earbuds less foul, by charging batteries carefully

doublelayer Silver badge

Re: Which is greener?

I suppose that depends on the difference in lifetimes between the two. I've had a lot of cheap earphone cables break, meaning I've just discarded the strand of copper. If the earphones concerned were cheap, I likely discarded the audio bit at the end because it couldn't be replaced. If the cable was removable, things are probably better, but the jack can also sustain damage and it's harder to deal with that. If Bluetooth ones break less, then that could lessen the environmental difference. I do not have statistics to prove whether that happens.

Unpatched flaw 'weaponises' Apple AirTags to turn them into the phisherman's friend

doublelayer Silver badge

Re: "We did not copy Tile"

"the Tile app uses literally every trick in the book (or iOS) to stay running, even if you don't want it to."

I need some help here. If you've installed the Tile app so you can track things like your phone from a unit or participate in the network, why don't you want it to run? That renders both functions useless, and if you didn't want them, you could turn them off. Apple, meanwhile, supports both things because they have their app running all the time, which they can do without hacking because their hacks are written directly into IOS. How is that any different?

When you say that Tile left a hole in the market, what exactly is that hole? The only difference I can see is that Apple's can use UWB which makes them easier to find if close to them, but Tile didn't leave that open, Apple forbade them from using that functionality despite Tile requesting it and protesting the double standard. If that's not the hole you saw, what is?

I don't use either, so you are probably right about reselling them (though they're cheap enough that I don't know how often you would try).

doublelayer Silver badge

Re: "We did not copy Tile"

"As far as I know, iPhone users can't opt their phones out of being part of the network."

If they fix this flaw, I don't think there are many problems being part of the network. If you still want to opt out, Settings -> Apple ID (at the top) -> Find My -> Find My iPhone -> Find My Network -> switch to off. At least that's the path on IOS 14. I don't know if it has changed with IOS 15. It means you can't use the network yourself and you won't be part of it for others.

Anonymous: We've leaked disk images stolen from far-right-friendly web host Epik

doublelayer Silver badge

"So hacking is OK if you disagree with the political stance of the target? Is that the message we're supposed to take from this exercise in flummery?"

Did the article say it was acceptable? No, it didn't. It just reported that it had been done and reported the facts. It never said the action was morally valid, legally acceptable (it wasn't, it's a crime), or condoned by the paper. Just as it would have reported a different kind of data breech, the article covered whose data was taken, by whom, what was claimed by those who took it, and the findings of people looking at the dump.

As for your assumption that dissent isn't being tolerated by the register, I note that your comment was not removed by the moderators who are undoubtedly reading this topic closely, nor have they prevented the upvotes you have received. They are allowing your views, negative to them though they are.

US school districts blame Amazon for nationwide bus driver shortage

doublelayer Silver badge

Re: similar

Oh no. I've seen the amount of extra space they use when delivering SD cards, which do not have to go in separate boxes in case the packing machine is reading. To contain an entire child, they're likely to have boxes the size of houses.

tz database community up in arms over proposals to merge certain time zones

doublelayer Silver badge

Re: Is the database really that big

"A slider that has one end labelled DST isn’t a complex interface"

I don't know about that. I remember distinctly a device which had time zone settings in two menus. The first required you to select your UTC offset. That for me was easy, but I doubt the general public who would also be using this device would automatically know that. The second: daylight saving time disable/enable. When I first saw that, I assumed that meant that I should select whether my country did DST. As far as I knew, my time zone contained some countries doing DST and some countries not, with all those observing it starting on the same date. I quickly realized how that was a stupid assumption, as there are time zones that don't have just two categories. I then assumed that the switch would change the clock by an hour, so I should just switch it when the clocks change. I tested it and it didn't.

Only later did I discover that there was an NTP update running, and I was supposed to switch it whenever the clock changed then wait for NTP to get UTC again, reflect my switch,and update the clock accordingly. By the way, that's skipping the part for many non-developers who aren't paranoid about getting DST wrong (XKCD) and don't know whether "enable" means summer or winter. Those who get it wrong have the clock wrong by an hour all year long. Is a "select your location" thing really so tricky? I ended up disabling NTP and just remembering to change the clock.

doublelayer Silver badge

Re: Is the database really that big

The software the router runs all has to know about that. If you set up a filter, then:

1. The interface must know your time zone so you set it at local time.

2. The filter program, which is likely a different process, needs to know about your time zone.

3. The log the user sees has to know about the time zone.

Given that most of the routers out there are running something with a Linux core which can handle time zones and has sufficient storage to store the relatively small database, why not have the OS handle time zones like any software on a normal computer would do?

doublelayer Silver badge

Re: Wow, just wow

We didn't lose any information. A program stopped containing it. You can look up historical time information in many places. The question is whether the TZ database needs to contain all of what it currently contains. For the same reason, the TZ database won't correctly handle the calendar switch before the Gregorian became nearly universal, but if you want to see how each country did it at different times making a big mess, you can still look that up. People tracking historical events do this frequently. It's like asking whether a textbook should contain the full text of a historical speech--if it is decided that it's not needed for the educational experience, one can still look the speech up and read it elsewhere.

doublelayer Silver badge

If we throw out daylight saving time, which we can and probably should. We also have to deal with the countries that decided to have fractional time zones, among them Australia (some states at UTC+9:30), India (UTC+05:30) Canada (one province at UTC-3:30) and the weirdest Nepal at UTC+5:45. Also China's insistence on using one time zone when they're big enough to need three, and it's not even the middle one. Here's what currently happens to the map when you use the time zones as they currently exist: https://xkcd.com/1799.

doublelayer Silver badge

Re: Is the database really that big

"I suppose there might be a few things like thermostats which have local interaction with a clock involved, but... Have a "DST" toggle button?"

No, please don't do that. Such things confuse a lot of people (I.E. which position should this switch be set to now? Was it set right the last time?). If it's smart enough to know what date and time zone it is, it can switch that automatically unless configured not to. Having to change a dumb clock is fine, but having to change something which is smarter and probably not obvious that it has a clock is just a pain. If we have to do DST (and we really don't), then the computer should do the adding and subtracting.

REvil customers complain ransomware gang uses backdoors to filch ransoms

doublelayer Silver badge

I expect they take ransoms from a few victims, telling the partners that those victims simply chose not to pay up. That way, they get more of the profit while still giving the partners a few successes to keep them working. Likely one partner noticed people decrypting after being informed that the victim didn't choose to pay.

Amazon's AI chips find their way into Astro butler bot, latest wall-hanging display

doublelayer Silver badge

Re: Ruining my entertainment

I don't think "dated" is the word you're looking for. I'd go with "better product designers".

Take the camera-on-wheels with its capability of carrying two kilograms of something. A perfectly useful method of retrieving items, is it not? Well, I think the science fiction writers have realized that such a device also needs an arm which can retrieve an item so it can be carried over, which this one just doesn't have. All this brings is a tiny motorized cart with limited range. You still have to have a person on both ends to move things in to and out of the thing, and I'm also guessing this moves slower than standard walking speed. So what good is that?

Amazon delivery staff 'denied bonus' pay by AI cameras misjudging their driving

doublelayer Silver badge

Re: Too soon

As for time limits, testers definitely shouldn't work as long as drivers because they're doing different jobs. The testers are there to make sure that, if it turns out the cars are not safe enough to drive on their own, nobody gets hurt or as few as possible. If they're successful, they eventually leave and the cars drive alone with more public confidence in their safety. That takes a slightly different skill set than a normal driver who already knows that they have to control everything all the way through.

The AI-specific lanes would work, but I don't think that's going to happen. It's too expensive to install those in most places.

doublelayer Silver badge

Re: Too soon

It's being pushed by people who build such things and hope to sell them, just like every other product. That's what companies do, and this isn't unusual. In addition, though the companies want it to succeed for their own profit, those things you mentioned are actually possible benefits we would get from having it done.

As for "it has happened before", yes it has and it was really the same. You could make arguments like this for literally any technological advancement and people did. That is what progress looks like, and pain is inevitable in it. When computers automated lots of administrative actions, some people lost their jobs. Yet we still benefited quite a lot from them and, since you're posting here, I suspect you have benefited more than most. Whether the drivers of delivery vehicles lose their jobs to self-driving vehicles, more train transport, or drones, it's going to happen if the technology is efficient enough. Instead of trying to hold it back in the hopes that nothing changes and we don't have to care about the negatives of the current situation, we should plan for what we're going to do when progress happens.

Indian state cuts off internet for millions to stop cheating in exams

doublelayer Silver badge

Re: Are they really cheating?

Yes, because in the job they're going to get, they need memorization. They are going to be teachers. If you're teaching chemistry, you need to know chemistry. You can refer to the periodic table to find the numbers you've forgotten, but if you have to use the internet to know what a covalent bond does, then you're no use teaching that to the students because you'll spend half the time looking stuff up. The same is true of most other subjects. You may not need to be a genius, but you do need to understand the topic.

I generally think a lot of tests are unnecessarily restrictive, but successful searching does not mean you know what you're doing. The tests can allow the use of those resources most of the time, but only if the time limit means someone has to use them only in the important cases.

Metro Bank techies placed at risk of redundancy, severance terms criticised

doublelayer Silver badge

Re: Agile isn't nebulous

Well, the Agile Manifesto principles list says that the business people and the techs should be working together, and they weren't doing that, and it said to trust each other and give them what they need. I'd say it disagrees on two points. Why I'm being asked to support a manifesto I mainly opposed in the original post is beyond me though.

As for this circumstance, I don't know the organization and I don't know what the IT department was doing. From your tone, it sounds like the external vendor provided a product which accomplished the goal, so the business got what it needed. I must also caution you that it can and does frequently go the other way--the vendor sells a product, IT is told to install it, it takes forever, breaks a lot, doesn't do what the business needs, and the business people have lost their purchase price. That's one place where the manifesto is actually correct: the business people and the techs should work together in the meetings in order to test out the products being offered to ensure the first option happens and the second is avoided.

doublelayer Silver badge

Re: Agile isn't nebulous

"The thing is, argue against the statement?"

Sure. Let's try that.

"Would your customers prefer exquisite documentation about the project and the code base, or actual working software?"

Both, usually. In a project where documentation is weighted as heavily, then things take longer, but the documentation matches. Compared to the many projects I've seen where the documentation has problems, that is usually better. What happens there is that documentation is patchy, sometimes out of date, and you get more support requests. That's taking up your time and theirs because the docs were incorrect or missing. If I leave a job with documentation in place, someone can pick it up later. If I leave with patchy docs, they will either read those and come to hate me the second or third time the code doesn't match what they read or will have to call me to ask for help.

"Would your customer prefer working software now, with continual updates to improve it, or wait a lot longer and then have to wait another lengthy period for any changes?"

This one is easy: yes, they would prefer the agile method in most cases. However, I generally wouldn't. If the customer wants something, they should mention it at the start so I can plan for it. If they request a change 80% of the way through their original request which requires a redesign, they've wasted a bunch of my time. If they don't care how long I spend working on it and they pay me for it, that's fine with me. They do care about both things, so it's not. I'm fine with change requests that are minor, but nontechnical people rarely understand what is a minor change and what is massive.

"Would you adopt a development methodology that doesn't support changing requirements, even late in development? Have you ever had the luxury of an implementation project that didn't have those?"

Of course not. However, my methodology is to try to gather enough information so that there are likely to be few major changes at the end, not to embrace the chaos and let anybody change whatever they want.

"They're not vague statements, they're basic positions and principles."

Which get constantly redefined and which don't actually tell you anything.

"They're not prescriptive, they trust you to be a professional and take ownership of your own methodology. They don't tell you to do this or that, they encourage a mindset."

They encourage a mindset of basic platitudes. "Trust [the workers] and give them what they need" isn't original and it doesn't tell people anything. It's like telling people to be nice; it's better if they are, but exactly how that gets implemented and what benefits it brings need more elucidation.

"the Agile Manifesto merely articulates the approach that a very large group of experienced professionals have found to be the most effective."

Except the only thing I can understand clearly from their proposal is "accept change all the time". Everything else has multiple possible meanings.

"Disclosure: I've successfully delivered software into a production environment at a bank using Extreme Programming, and worked in and alongside teams using agile methods and methodologies for two decades. They deliver."

And I work on an agile team as well. It's fine. If we're actually agile, though how could I know? Our documentation does have the patchy problem, so maybe that's a good sign.

I think a lot of companies that do internal coding already did a lot of the agile process. Probably less in contracting or consulting, though I am young enough that I haven't seen a lot of what things were like before the manifesto. Accepting change didn't have to be written into the requirements if managers were still demanding things get changed, and knowing managers like I do, I don't think they just started doing that.

If your head's not in the cloud, you're not in the right place

doublelayer Silver badge

Re: Sounds like a cry for help.

Maybe you're thinking of the OVH fire? France instead of the US but most of the rest of the facts match. They didn't move anybody and took a month to recover most of it.

The multiple DCs isn't so the cloud provider automatically moves you in case of problems, though in the case of smallish long-term problems they probably would. It is so you can have a multi-region setup which fails over without having to build multiple DCs. Having duplicate infrastructure in different countries when you're on prem takes months of planning and finding colocation facilities if not building or buying your own. Doing it on cloud can be a selection from a list box (warning, your bill will increase). Even doing it manually is a lot faster. Your company might already have computer rooms in multiple countries for you to do it, but a lot of them don't.

Don't touch that dial – the new guy just closed the application that no one is meant to close

doublelayer Silver badge

Re: Its the worst

I think that particular one is no longer a thing. With ACPI and equivalents, it's more likely that holding the button will force a shutdown whereas pressing it quickly will do an orderly one (or, we can hope, do nothing). That cuts off the last second of abort opportunity, but at least it doesn't leave that painful moment or the despair of having missed that too.