* Posts by rcxb

1019 publicly visible posts • joined 22 Aug 2018

Cisco rations VPNs for staff as strain of 100,000+ home workers hits its network

rcxb Silver badge

no other vendor can come close to matching their performance per $.

Open Source VPN software on an old server running Linux is nearly zero cost... Be it OpenVPN, WireGuard, OpenConnect/ocserv, isakmp, etc. Easily beats everything else on performance/$$$ metrics.

Internet Archive opens National Emergency Library with unlimited lending of 1.4m books for stuck-at-home netizens amid virus pandemic

rcxb Silver badge

This completely undermines copyright.

Did you know there are buildings you can walk into, in practically every major city, where you can look through copyrighted works at no cost? You can even take them home for days or weeks at a time at no charge. Publishers absolutely hate those places. I've heard them called "libraries".

rcxb Silver badge

Re: WTF is that shit?

I never found it anything more than just an annoyance

Those looking for service manuals for old, small single-engine aircraft have quite a different opinion on the subject of copyright restrictions on abandoned works.

And there's a whole spectrum of people in-between those two extremes.

Leaving Las Vegas... for good? IT industry conference circuit won't look the same on other side of COVID-19 pandemic

rcxb Silver badge

Since your staff don't need t o be in the office all the time, they won't be and suddenly you don't need 15% of your in-office seats.

Except you still need to have all that office space when everyone does show up once in a while, whatever the occasion.

upgrade ability (in 15 years, I can count on one hand the number of desktops that have been upgraded - if someone needs more, they get a new machine).

Do you throw out the desktops when a monitor stops working? Or a keyboard? How much time does it take your IT department to swap one of those, exactly?

so when the office is shut due to power problems, nae problem, everyone gets a day off?

I'm sure companies like Amazon will be very happy to hear all their warehouse workers can go home and get their work done on company laptops when one of their warehouses loses power.

rcxb Silver badge

Re: I disagree

Human emotions aside, the ongoing Economic effects from this global shutdown will take decades to dissipate

It's just as likely once we get to the end of this pandemic the pent-up consumer demand will lead to a huge upsurge in the economy, quickly recovering all value lost during the recession. It's possible consumer buying habits will change for the better for years to come after such a wake-up call.

rcxb Silver badge

Why the heck did we buy loads of desktop PCs? They are now all sat in offices gathering dust whilst we scramble around to buy loads of laptops.

You'll find Laptop hardware has a great deal of extra cost both up-front and in maintenance. Compare replacing a damaged keyboard on each. Compare installing whole-drive encryption and tracking (CompTrace) onto laptops, which you don't need with desktops. Compare the cost of all new laptops for your whole company come upgrade time, versus desktops, where you can reuse old monitors and peripherals.

If you need it, you spend the time and money on Laptops, of course. If you don't strictly need it, giving out Chromebooks and letting employees RDP into their desktops can be cheaper, more secure, and retain all the benefits of desktops (low cost, better security, better ergonomics, better performance, etc.)

Delivery drones: Where are they when we really need them?

rcxb Silver badge

Re: "Futurist predict"

poles have a longer life than pumps, require little to no maintenance, and are cheap and easy to replace

There are plenty of areas where poles do NOT have a long life... some areas are dense with trees have frequent ice storms that bring down utilities lines and poles, etc. They're quite difficult to replace after such storms as well, due to dangerous icy driving conditions, many roads blocked by snow, downed trees, etc.

rcxb Silver badge

Re: "Futurist predict"

Direct burial is an unfortunate half-step that ends up costing more money in the log-run. Taking the next step to utility tunnels resolves all those issues, and offers many more advantages.

rcxb Silver badge

Drones are successfully delivering blood to hospitals across Rwanda:

https://www.youtube.com/watch?v=bnoUBfLxZz0

Grsecurity maker finally coughs up $300k to foot open-source pioneer Bruce Perens' legal bill in row over GPL

rcxb Silver badge

Re: So, let me get this straight

Most professions aren’t entitled to claim their professional opinions are first amendment protected if they are wrong.

Bruce Perens is not a lawyer. He is not a professional on contract law. He has no training or credentials that would lead anyone to believe he is an expert on the subject. His opinions were not expressed in a report he was paid to produce for a client, but instead a comment he posted on his own blog.

I'm sure you're trying to make some point about something, but whatever it is, it has nothing to do with the current topic.

Microsoft staff giggle beneath the weight of a 52,000-person Reply-All email storm

rcxb Silver badge

Re: Bcc FTW!

That's actually slightly useful.

If you get no answers at all, Amazon will hide your question. Bad answers will make the question show up on the product page, where others may come along and give a proper answer.

Now... those who give a 4-star review with a rambling response about why they got it, and how they've given it to someone else and have no idea if it works... They should be removed from the gene pool.

rcxb Silver badge

Re: This yor folt

Hard to call it stealing when there is no possible way for you to give over your money for it.

What happens when the maintainer of a JS library downloaded 26m times a week goes to prison for killing someone with a motorbike? Core-js just found out

rcxb Silver badge

Re: No updates for 18 months? MONTHS?????

You can blame yourself for depending on so many undocumented behaviours, edge cases, etc. I bet most Reg readers hate those javascript-heavy sites which depend on pixel-perfect page layout to work at all. My browser is not your graphical toolkit. I'm looking for information, not ever-changing interface paradigms to keep re-learning.

Forget about those pesky closures, Windows 10 has an important message for you

rcxb Silver badge

Re: The long, dark teatime of the next few months

No it doesn't. I've spent a lot of time on dairy farms. Just try to make cheese out of your UHT and let me know how that goes.

rcxb Silver badge

Re: The long, dark teatime of the next few months

I've tried UHT. It bears absolutely no resemblance to milk.

rcxb Silver badge

Re: The long, dark teatime of the next few months

Low shelf-life? On the shelf, milk doesn't even last for a day... In the refrigerator, you might get a week out of it. In the freezer, though, mlk will be just fine for months. Can't say I've tried keeping it for years at a time, personally. Just give it 3 days in the refrigerator to thaw out, and a good shake to ensure it stays homogenized.

COVID-19 not blamed for tech outage: We were just being a bit crap, says TeamViewer

rcxb Silver badge

99.9% uptime? What's that, about 3.5 days of downtime per year? And I bet that 0.1% doesn't fall on weekend and holidays, either.

Analyst calls it: This is the 'biggest fall ever in the history of the worldwide smartphone market'

rcxb Silver badge

Re: Apple cart upset?

iPhones are apparently the opposite of milk... I could previously buy more than two of those, but no longer.

Netflix starts 30-day video data diet at EU's request to ensure network availability during coronavirus crisis

rcxb Silver badge

Advertisments are negotiated on long-term contracts, so the advertisements won't change, and broadcasters won't be coming up short for quite a while.

There is always somebody else that wants to advertise, if the price is right and they've got a large, possibly captive audience to reach... Right now it might be companies selling online services, Coca-Cola, takeaway restaurants, etc. Anybody that's still operating and isn't over-capacity / out-of-stock on their merchandise.

Firefox to burn FTP out of its browser, starting slowly in version 77 due in April

rcxb Silver badge

Re: "FTP is an insecure protocol and there are no reasons to prefer it over HTTPS"

Bolting GOOD encryption, integrity and authentication onto FTP is extremely difficult due to the design of the protocol. You have multiple channels, multiple modes, bidirectional connection establishment, and so much more.

Why would anybody put the effort into bolting, when SFTP and HTTPS both exist, and both can do the same job, if desired.

Amazon launches itself into retail IT with 'all the necessary technologies'. Not saying which, but you know...

rcxb Silver badge

Re: Madness

Step 3: Amazon's tech doesn't work out all that well, so the wrong customers get billed from your store, they get angry at you, then you're out customers, product, and cash.

Chips that pass in the night: How risky is RISC-V to Arm, Intel and the others? Very

rcxb Silver badge

Re: The trade war changed everything

You're talking about domestic consumption... I'm talking about China's export market. Huawei doesn't want to just own the Chinese market... that part is easy enough. What they (and the government) want is the world. There their products have to be good enough to be able to compete with non-embargoed competitors.

rcxb Silver badge

Intel and AMD don't just have a duopoly on "x86"... what they have is the whole high-end computing segment. (POWER is negligible).

If someone puts together a RISC-V chip with some incredibly useful functionality... Intel and AMD will stick it in the design of their next processors, too. x86es didn't have FPUs, now they do. Add in MMX, 3d now, SIMD, sse2, and all the other fun stuff you'll find from grep -m1 ^flags /proc/cpuinfo ... That's why Intel and AMD have remained relevant, as other architectures fell by the wayside.

Other posters have already mentioned Intel and AMD benefit greatly from a standard architecture as well, which is seriously hindering ARM's growth, and that's the *advantage* that's going to help RISC-V? Not likely.

And x86 has competition... If AMD went away, Intel would crank up prices and slow down their R&D spends. THEN they might be in a position to be disrupted by the next big thing.

rcxb Silver badge

Re: The trade war changed everything

China went all-in with MIPS years ago. That didn't get them far. I could make a list of all the similar Chinese tech initiatives that never went anywhere... They are big, but not big enough to overcome economies of scale and focused R&D of the entire rest of the world.

An open architecture won't save them, either. Somebody needs to fab the chips, and Taiwan isn't guaranteed to remain on friendly terms. China can't keep-up on fabs, so they'll have to burn an awful lot of money just to stay a couple die shrinks behind the rest of the world and at a constant competitive disadvantage.

I'm sure they'll do it, if it actually comes to it rather than be entirely cut-off, but doing so would put them at several additional disadvantages to western technology companies. Really, China is just using it as another big bluff to get better terms in the negotiations, as they've done several times before. China want to scare western businesses into continuing to sell them the rope needed for their own future noose...

Former US Homeland Security Inspector General accused of stealing govt code and trying to resell it to... the US govt

rcxb Silver badge

Re: Govt Employees are honorable and patriotic.

a two-party monopoly that is bent on destroying it's other half regardless the cost to all of us.

Don't worry... The US will be a one-party system soon enough.

More than a billion hopelessly vulnerable Android gizmos in the wild that no longer receive security updates – research

rcxb Silver badge

Re: I used to have an Android phone

If you'd spent the same amount of money on a flagship Android phone you are spending on an iPhone, you'd get updates for years, as well.

But yes, Android has many low-end options, where Apple does not. Some people absolutely HATE having choices and flexibility, and for them, there's Apple.

rcxb Silver badge

Re: And in comparison...

There is no large software eco-system with plenty of opensource choice

So you've never heard of F-Droid?

https://f-droid.org/

rcxb Silver badge

Re: And in comparison...

My phone is running KitKat, it's rooted with a firewall & privacy manager.

How's that going to help when you get an MMS message with Stagefright exploit blasted at you?

Your smug sense of superiority isn't any protection.

Let's Encrypt? Let's revoke 3 million HTTPS certificates on Wednesday, more like: Check code loop blunder strikes

rcxb Silver badge

The rules for CAA makes it essential to check at the time of issuance, not before or after or just whenever you get around to it. Specifically they require the check to happen no more than 8 hours before you issue the certificate.

That's a flimsy argument. You can't model a practical threat where I want to allow LE to issues certs for my domain today, but I didn't yesterday, and so the cert issued yesterday (which also validated domain control and the like) is dangerous. The other case is infinitely more risky.

a much smaller list of names for which if the check is run today it fails

Exactly! Those small number are the ONLY ones that should be revoked. Maybe they were valid when issued, or maybe not, but there you actually have a high risk that the bug caused something untoward to occur. The rest are meh.

rcxb Silver badge

Why the mass revocation? Doesn't sound like anything bad happened. The checks just weren't up to snuff. So LE should go back and re-check the domains that were issued certs to see which, if any, should not have been issued from them, and only revoke those few. The certs will all be gone in a couple months anyhow.

Raspberry Pi goes 2GB for the price of 1GB in honour of mini-computer's eighth birthday

rcxb Silver badge

Re: Better options

You can buy a USB card with GPIO ports for all of £2.

Give as many GPIO pins as you want to any old PC.

rcxb Silver badge

Better options

Why get a $35 Pi, then spend on a case, power supply, disk, USB hub, etc., when you could just get an Atom mini-PC that includes all those, outperforms an Arm CPU, has dual-video outputs, and is compatible with any software you could possibly want?

£110 for a 4GB (+64GB SSD) version:

https://www.amazon.co.uk/Fanless-X7-E3950/dp/B07Z94W8CJ/

rcxb Silver badge

2GB minumum

Linux isn't too happy on 2GB these days, thanks to web browsers... Firefox says 2GB is the MINIMUM for their 64-bit version, but if you stick with the 32-bit version, that drops to just 512MB. https://www.mozilla.org/en-US/firefox/73.0.1/system-requirements/

Chrome and Opera kindly fail to mention how much memory their monstrosities will consume.

If it's Goodenough for me, it's Goodenough for you: Canuck utility biz goes all in on solid-state glass battery boffinry

rcxb Silver badge

Re: Still a problem though

To charge an EV battery fully in just minutes would require a cable the size of a fire hose

Tesla Supercharger cables are nowhere near the size of a fire-hose. Doubling or quadrupling them still won't incrase them to the size of a fire-hose... Closer to a garden-hose, really.

And that's the naive way to go. Assemble your batteries into higher-voltage packs, and you could double charging time with ZERO increase in the size of conductors. As typical charging times today are already under an hour, doubling the voltage and doubling the current would get you charging times of 15 minutes or so.

Another option is to shorten the charging cables... Design your parking spots to better align the vehicle charging receptacle with the charging station, and you can significantly reduce the charging cable length. Half the length means half the resistance. There's no reason to limit EV charging stations to the same designs as legacy fuel stations.

'I give fusion power a higher chance of succeeding than quantum computing' says the R in the RSA crypto-algorithm

rcxb Silver badge

Re: Glib rejoinder

I'm not sure that qualifies as "interesting" there - just the Trolley Problem with a different backdrop.

It isn't. The AC's description is simply lacking.

The crux of the Outer Limit's episode is that someone discovered building a city-destroying bomb is inexpensive and technically simple. It is inevitable that others will make the same discovery, the knowledge will get out, and every psychopath out there will soon have as many nukes as they feel like making.

Wi-Fi of more than a billion PCs, phones, gadgets can be snooped on. But you're using HTTPS, SSH, VPNs... right?

rcxb Silver badge

Re: "MitM attacks on unencrypted network traffic do happen"

will my non broadcasting router still accept the spew despite being hidden

It's not "hidden" it's just not "advertising." That means your WiFi isn't broadcasting out its name every few seconds, when otherwise doing nothing. Whenever there's any traffic on your WiFi at all, the SSID is being sent out on every one of those packets, and is trivial to find. Disabling advertisements does nothing but make things harder for the already-inept.

Just go install WiFi Analyzer on your mobile to see all the "hidden" devices in your area.

Pope tells his followers to log off for Lent

rcxb Silver badge

Re: My alternative

For years I've been looking for a good set of earplugs that can be slept in (comforably). Haven't found good ones yet. Even those advertised as such are no better than bog-standard foam plugs.

Poor old Google. Its cloud division only brought in $8.9bn last year. So it's chucking a few billion at US offices and data centres

rcxb Silver badge

While Google is too much of a monster as it is, I'm all for them cutting-in on the Amazon and Microsoft duopoly, since it doesn't seem like anyone else will. Facebook might be a good candidate to break into the same market.

Flat Earther and wannabe astronaut killed in homemade rocket

rcxb Silver badge

Re: What an incredibly stupid way to die.

Reminds me of:

https://en.wikipedia.org/wiki/Franz_Reichelt#Eiffel_Tower_jump

AMD takes a bite out of Intel's PC market share across Europe amid microprocessor shortages, rising Ryzen

rcxb Silver badge

It takes just as long to buy an AMD based PC as an Intel one, ditto installing Windows, apps, etc. Other than creating a new master image with the required drivers I don't see what is different and you would need to do that for a new range of Intel based PCs anyway.

It's not more expensive to sell AMD PCs than Intel, but it is more expensive to have to sell BOTH, slightly different models.

For your home PC, you just put something together, and if it seems to work, you go. For big vendors, all their hardware gets extensively tested and certified as compatible with all the major software out there, and full compatibility in all the edge cases with all different possible (supported) combinations of hardware is tested as well.

Businesses that buy thousands of PCs from a vendor in a go don't expect to get something that works most of the time. If they want to stick a SCSI controller card next to high-end video card, it all has to work.

I remember my old PC Chips motherboard... If a case screw happened to make contact with the metal plating around the holes, the second IDE channel would freeze. Worked perfect out of the case on a bench for testing (as the seller told me when I returned it), but in a case, it would go wonky. Even with good, name brand gear, there's still all those edge cases where it doesn't always support every configuration somebody might try.

Your McDonald's demo has expired. For full functionality, please purchase a licence or try another fast-food joint

rcxb Silver badge

Fill me in on your new vision

Wake me up with indecision

Help me trust your mighty wisdom

Yes I eat cow, I am not proud

Web body mulls halving HTTPS cert lifetimes. That screaming in the distance is HTTPS cert sellers fearing orgs will bail for Let's Encrypt

rcxb Silver badge

For internal sites, I've already changed everything to self-signed, or rather our own certificate authority, because while a wildcard cert is cheap, the two year lifetimes are unnecessary maintenance burden.

The big reason we pay for certs for public facing sites is:

A) Doing it once every 2-3 years is manageable and poses less risk of something breaking when LE's auto-renew every month doesn't work quite right.

B) LE moved to be "more secure" which means dropping legacy browser support, which actually means making the web less secure for users who have good reasons to be unable to upgrade, and we certainly don't want to be unable to take their money due to browser choice.

Apple wants to eliminate both. The only real problem here is Apple. The best solution is to tell our Apple-using customers to switch to Firefox because Safari is broken. If that becomes untenable, then switching to LE is suddenly the least terrible alternative, and quickly, all other certificate authorities die out.

Assange lawyer: Trump offered WikiLeaker a pardon in exchange for denying Russia hacked Democrats' email

rcxb Silver badge

It's a tough one. Trump is perhaps the only public figure in the western world with less credibility and more insane conspiracy theories than Assange. Can we get Putin to weigh-in, too?

Shipping is so insecure we could have driven off in an oil rig, says Pen Test Partners

rcxb Silver badge

Where's the Da Vinci virus when you need it?

Is it a bird? Is it a plane? No, it's a flying solar panel: BAE Systems' satellite alternative makes maiden flight in Oz

rcxb Silver badge

Lightning is more likely to be of serious concern:

https://en.wikipedia.org/wiki/Upper-atmospheric_lightning

AT&T insists it's not blocking Tutanota after secure email biz cries foul, cites loss of net neutrality as cause

rcxb Silver badge

All in the Wording

"Blocking" is such an unkind word. Instead, let's say AT&T is encouraging customers to explore alternative service providers.

Netgear's routerlogin.com HTTPS cert snafu now has a live proof of concept

rcxb Silver badge

Re: Unintended consequences of Browser Fascism

Actually, it seems it was:

On January 20th at approximately 6:39 am UTC, [Entrust Datacard] received a notification from a third party that one of our customer’s private keys had been exposed. As such, we were required to revoke the certificate due to key compromise within 24 hours, in accordance with BR 4.9.1.1.

https://bugzilla.mozilla.org/show_bug.cgi?id=1611241

rcxb Silver badge

Re: Is this really a big deal?

No. Normally SSL/HTTPS/TLS connections will offer you a high degree of protection from such code injection and modifications. In this case, the private key is public, so anybody can do nasty MITM with routerlogin.com.

rcxb Silver badge

Re: Unintended consequences of Browser Fascism

Why didn't the issuing authority immediately revoke the cert, after finding out the private key is in the wild? Thereby giving Netgear an even bigger problem than a self-signed cert?

There's got to be Huawei we can defeat Chinese tech giant, thinks US attorney-general. Aha, let's buy stake in Ericsson and Nokia

rcxb Silver badge

Cisco and Juniper do NOT make 5G equipment. There's no benefit to either of them. It's a very strange conspiracy theory people keep repeating.

The fact that Barr is suggesting US investment in European companies who DO make 5G equipment is proof enough that there are no US competitors in the 5G space.