* Posts by 0laf

1977 publicly visible posts • joined 25 Nov 2009

Tesla slashes vehicle and self-driving-ish software prices as shares plummet

0laf

Possibly what the OP is referring to is the trade in price.

To my understanding government policy put a heavy onus on the trade to sell new EVs, not used EVs. So the trade in is unwanted by the dealership as it detracts from chances of selling a new car (and hitting gov targets and avoiding fines). So they dealership offers the owner a derisable trade in figure.

But a dealer being a dealer they'll take the car wack on a markup and stick it somewhere.

Stick a 3yr old Taycan on webuyanycar and it'll give you a ballpark figure.

[click click] just did that and on a low mileage 4yr old Taycan they offer £40k (I know they'll offer less on the day but as a ballpark normal trade in). On a car that was probably specced at about £95k new that's a 58% loss in 4yr. Not great for a Porsche but not unusual or excessive for most car brands.

0laf
Terminator

Drunk test

Can I legally climb into the back of my 'full self drive' car drunk as a skunk and have it take my wasted ass home?

If not I have no interest in your overpriced cruise control option.

I have 'active cruise control' in one car and tbh it's a PITA and worse than basic CC.

Rarest, strangest, form of Windows saved techie from moment of security madness

0laf

I'm starting to think that misconfigurations and borks actually save quite a few ar$es.

I know of at least two ransomware attacks on a previous employer that were dodged because of fecked up networks and EUD configurations.

That will teach those pesky ransomware flingers to trust that we've got competently setup networks for tehm to exploit

Ex-Amazon exec claims she was asked to ignore copyright law in race to AI

0laf

Any fallout from a business (particularly big business) not acting lawfully is just another business risk.

It's really not a big deal to these big companies, they just run the numbers. How likely is it we'd get caught, how big will the fine be and how likely is it we'd have to pay?

And the reality right now is that although they are likely to get caught the chance of them paying a fine significant enough to cause an effect on the business is very small.

And the change of that fine impacting on the personal situation (financial or otherwise) of any executive officer is negligable.

Therefore to act unlawfully is possibly desirable in business risk terms.

Boston Dynamics' humanoid Atlas is dead, long live the ... new commercial Atlas

0laf
Childcatcher

Reminds me of the robots from the Lost in Space remake. They were not all good :-(

What's up with AI lately? Let's start with soaring costs, public anger, regulations...

0laf

Re: It's only economically sensible to replace human labor with AI...

That kind of long term thinking won't get you anywhere in this company!

We need to keep the shareholders happy this quarter.

Post Office slapped down for late disclosure of documents in Horizon scandal inquiry

0laf

Re: MPs on a jury duty style system

It's a global disaster in the making tbh. It seems to be a universal rule that those who will succeed in politics are exactly those people who should be taken around the back of a shed and disposed of for the benefit of the rest of us. I've known people who have gone into local politics with the intention of putting their money where their mouth is and trying to make things better. For the most part these people are undermined and ground down by the majority of fellow politicians who are sociopathic narcissists. Eventually most give up and leave politics before they lose their sanity and health.

I also love the term 'professional politician',. What that seems to mean now is someone who went to Oxbridge to study politics and economics before using Ma and Pa's money to get an unpaid internship with the family friend MP as a SPAD. Then being dropped into a safe seat when they have made enough friends or logged enough dirt on collegues.

Experience of having an actual job or not having a trust fund to fall back on is to be avoided.

What we end up with then are mentally defective, rich people with no experience of anything outside academia or employment in within their parents social circle.

Local councils struggle with ill-fitting software despite spending billions with suppliers

0laf

Re: Problems and solutions not welcome

Kindof but not quite.

You can't cross the borders with Councils, Scottish councils are very different to English councils with additional responsibilities plus have to act under Scottish Law and have to deal with Holyrood not just Westminster. They can play together just not very easily with English peers.

Even where functions are identical the pressure is not normally to mirror systems and services in both authorities but to remove the service and have it carried out entirely by the other. Inevitably this would result in job losses to one party. Normally no elected member wants to be seen as the one taking job losses, so since both authorties cannot 'win' the service inevitably the idea is abandonded.

In addition there are political rivalries to deal with and unless party lines are similar in neighbouring authorities the elected members will not normally play nice with each other. Political point scoring will always win out over services to citizens. I freely admit than there are elected members who are there to do good for their community but they are usually crowded out by the sociopaths who just want to see their face in the papers and pretend they are part of some important political drama.

INC Ransom claims to be behind 'cyber incident' at UK city council

0laf

Re: The real question

Training users has become the easy catch-all excuse to underinvest in technology but more inportantly skills.

Public sector is usually pretty good at finding capital funding for new toys but very bad at funding the bodies to run and maintain those toys.

So you get the boardroom able to talk big words about investment in security, meanwhile that investment is never properly configured or maintained or the guy that did do it leaves and is never replaced. The £300k security wonder become a black box that just uses up electricity and collects dust.

Been seeing the same problem for close to 30yr. Beancounters can never see value in people. If they'd paid £40k for a skilled admin they might never have needed the £300k box.

0laf

Re: Interesting

Public sector victims generally won't pay. But councils hold a lot of sensitve information on citizens so this could be nasty when the scum dump the data

Time to examine the anatomy of the British Library ransomware nightmare

0laf

Re: No change

Apology accepted with due grace.

I am resoundingly bitter, jaded and very likely washed up by those decades as a blamehound and cleaner of shit stained fans and the walls behind them.

Still fighting the good fight that people who stay "hacker" really mean "cracker"

0laf

Re: Reason #854637

If you have to budget for an employee you need to include what was described to me as "on-costs". So taking on an employee at £20k actually had to be costed at £30k to cover pension, NI, holidays etc.

As a contractor you pay those yourself. So a comparison would be an employee with "on-costs" against a contractor rate. But a contractor also has no economy of scale for pensions and insurance for sick leave and does not have the reassurance of a notice period.

And if you think £500 a day is expensive what do you think the government is paying the big firms like Fujitsu to supply specialist contractors? It's likely to be in the region of £1200 to £2000 a day.

this is the loonacy of government, they won't employ someone to do the job at £300 a day but they will pay £2000 to outsource it to Fujitsu et all.

0laf
Trollface

Re: No change

I still believe in "Information Security" because my remit still includes paper and would include slate or vellum if the data was written on it. If you don't use the currently fashionable term you'll be ignored or maligned. I've been through many cycles of buzzwork bingo driven by sales droids. I don't like the game but you have to play it.

If you knew your shit, you'd know that too.

0laf

Re: Reason #854637

Self employed consultancy wages are a poor comparison for all the reasons given, you need to half the headline figure to get a realistic comparison with a salaried employee. God knows how to compare it when IR35 is in the mix.

As for shit salaries there are some decent number out there but I used work security in public sector and held responsibilities up to the boardroom level, was on call 24/7, was incident lead, was volunteering on several national projects and held multiple industry professional certifications. I struggled to get more than £35k as did my peers in similar organisations because I didn't manage staff and that's how the wagers were calculated.. Professional value or difficulty of replacement wasn't considered. In fairness even the lawyers weren't paid much more. Eventually the private sector made an offer I couldn't refuse. Double money and, in the end, less work and less stress.

If you look back El Reg to a year ago there was an article then lambasting the Government for advertising for a head of cyber security for HMG Treasury for £50k. At the same time Renfewshire Council was offering £55k for an infosec manager.

I'm not alone, most of the security people left in the public sector are only waiting on pensions.

0laf
FAIL

No change

Lots of platitudes and good intentions but this is near identical in method and cause to multiple atatcks going back 5 or 6 years not. Very specificallly it's almost identical to the attack on SEPA in 2020 which pretty much wiped out that organisation and probably lead to criminal investigations collapsing.

Before that Redcar and Cleveland also wenbt through a catastrophic attack. There have also been dozens of other smaller scale or contained attacks that have happened. And these are in the public sector where they are generallly open about the attacks.

It's very clear that still, systemically cyber security is not actually taken seriously (outside of soundbites when the shit hits the fan) and no lessons are being learned.

I've worked in cyber security for over 20yr now and really very little has matured outside of the technology. IT is still the odd unit in the basement to be avoided at all costs and the first target for cuts. IMHO health and safety as a good model, cyber security has about another 20yr to go before anyone will really get a grip on it and then maybe there will be criminal sanctions for failures that can and have lead to deaths, maybe indirectly, but some of these attacks will have contributed to peoples ends.

Tech trade union confirms cyberattack behind IT, email outage

0laf
Childcatcher

Bingo

Does everyone have their incident bingo cards ready?

Sophisticated attack

Security our priority

Our members data is our highest concern

Our network was not breached our data was protected at all times

There is no evidence our network was breached

Your data is for sale on the dark web

Boeing top brass stand down amid safety turbulence

0laf
Flame

Aaand

Are they going with a doubly inapprpriate golden parachute?

Belgian ale legend Duvel's brewery borked as ransomware halts production

0laf
Mushroom

Too far

These bastards have hit hospitals, governments and airlines

But now they've gone too far, hitting a brewer. Risking an interruption in the flow of that sweet sweet nectar.

I think we need a peoples army of hackers to take them out. If it's beer today tomorrow it could be crisp (chips for the west-pondians) or pizza.

Capita says 2023 cyberattack costs a factor as it reports staggering £100M+ loss

0laf

Re: Magically surviving

No I don't think so, Crapita are right up there (down there?) in the crapola stakes. Northgate might top them tbh.

Capita have a few large monopoly products with no easy escape route. It's often less hassle to keep big shitty suppliers than the replace them with another.

0laf
Big Brother

Re: Take your pick

Then I'm afraid you don't really get 'security'.

If your users are incapable of using passwords then a password is not a suitable security control. You need to find another more suitable form of authentication or you need to implement other controls that provide the same level of risk reduction but are not authentication controls.

You might need to design a security system for users that are vulnerable or lack mental capacity (the very young and the very old) or who have additional needs (visual imparement, physical control issues). It still needs to be secure and their difficulties are your problems to work around.

Your security needs to suit the environment and the users. If you try to force users into using security controls that don't suit that's when you'll get post-its under desks, machines never locked, emails sent to personal addresses.

And if the managment aren't bought in you're screwed before you start.

Security is 90% psychology and 10% technology.

Updates are plenty but fans are few in Windows 11 land

0laf

Meh

There is nothing compelling about W11 at all for the home user.

It just seems like a reskin with added data theft (over and above W10).

Like some others here I've a slightly older machine with a decent Ryzen 7 processor (2017) which is working perfecty fine but it won't move to W11 because of some TPM issue on chip or mobo. Really I can't be bothered to fight to make it work.

The copilot thingy, I don't use it, why would I? It's search results are shit and slow and I don't need it to draft a report about things for me.

If I'm making effort I'll make Steam work on Linux on the old kit, at least that's free apart from my time

AI to fix UK Civil Service's bureaucratic bungling, deputy PM bets

0laf
Go

Fetch the popcorn

Government has a problem, decides to throw new expensive tech at it to see if it sticks. We've never seen this go wrong before have we?

All I can say is get in there quick boys! There will be a shit load of cash swilling around for a while but don't forget to jump ship before you actually have to deliver anything coz you know it'll be a complete clusterfuck with a public enquiry for icing on top. And keep lots of offline notes blaming whatever minister is support be steering this particular wreck.

Mamas, don't let your babies grow up to be coders, Jensen Huang warns

0laf

Re: That's not what he said

"AI is the new outsourcing"

I shall use that.

It's crazy but it's true: Apple rejected Bing for wrong answers about Annie Lennox

0laf
Big Brother

Re: Sums up the whole problem really

Google has removed, obsfucated or just ignores most of the basic functions you used to be able to use to get better results.

Clearly it's not to improve search for the end user but to prevent any avoidance of its list of paid for links.

But then the old rule applies, "if the service is free, you are the product". I'm not sure there even is a way to pay for search now to avoid this.

Are you ready to back up your AI chatbot's promises? You'd better be

0laf

Doesn't matter

It doesn't matter now if AI works or not. The board is sold on the idea already, they see the dream of having no staff other than themselves an are being told by the AI sales people that the dream is now possible.

In reality the enshittification of services will continue. AI might get controlled on the customer facing side if mistakes cost money but internal helpdesks, you are all screwed. It doesn't matter if the machine that replaces you is useless and makes mistakes, there are no personal damages to claim.

Got to wonder about the end game though, if everyone outside every boardroom is replaced by a machine so noone is employed then what value does the business have without customers?

It's enough to make you consider conspiracy theories, only my opinion of the majority of the human race is so low that I don't think we're capable of running a conspiracy. Idiocracy here we come

Work for you? Again? After you lied about the job and stole my stuff? No thanks

0laf

Re: Being polite is great

Never shit on the little people. The PA, the guy on reception, the security guy, the cleaner etc. One, why would you? they're working just as hard as you but in a different way. Two, often these are the people who will get you out of trouble when you fuck up. Grab the notebook you've forgotton, find a spot in the bosses diary etc.

As other have said it's worth being decent to everyone that doesn't deserve to be treated badly, if you are burning a bridge make sure you mean it.

0laf
Headmaster

If you want IT stories of stupid decisions, entitled people and mismanagement schools are the place to fish for them.

I have done the OPs job but without the big dramas. I still have many stories about petty teaching staff etc. i.e. being yelled at in front of a class of kids for a printer not working only to demonstrate it was out of paper.

If you can handle IT in a school you'll spend a few years underpaid and unappreciated but you'll develop a lovely thick hide and everything after will look easy.

Google sends Gemini AI back to engineering to adjust its White balance

0laf
Happy

Re: DIRECTIVE 254: Encourage awareness.

I had to activate some very cold storage to get that but it happened eventually

Europe's data protection laws cut data storage by making information-wrangling pricier

0laf

Not American. But have done US based training and indeed legal non-compliance and fines were simply to be considered a business risk and or expense. The ethics of actions leading to that situation were not even a consideration.

Staff say Dell's return to office mandate is a stealth layoff, especially for women

0laf

Re: It proves climate change is a hoax

I think it proves that governments are lying gobshites that will say anything and climb on any bandwagon that suits them at any moment.

The fact that WFO/WFH and climate targets could possible be linked in a positive or negative way is of absolutely bugger all interest to them.

Ensureing their own, their donors and their friends commercial property portfolios continue to hold value is of far more importance.

I don't think's it's got anything to do with the truth about climate change at all.

British businesses told: Compliance with EU AI law will satisfy UK guidance

0laf
Meh

The money will make the decision.

If you need to sell to EU or have data that has originated in EU then you'll end up complying with the EU regs anyway.

UK gov might want to flap around and make noises about being seperate from Europe and able to make our own rules (Brexit means Brexit and other such sweaty faced drivel) but business will make up its own mind and probably plump for the EU rules since it's likely to give them pretty much global scope through one compliance policy.

None of this will stop Big Tech from stealing data and doing what they like as usual.

OpenAI shuts down China, Russia, Iran, N Korea accounts caught doing naughty things

0laf
Alert

Re: "We disrupted five state-affiliated malicious actors"

Anything except admit that you've not done any updates for 5yr and the chief exec's password is "bigboy123".

Meta says risk of account theft after phone number recycling isn't its problem to solve

0laf

Re: Well if Meta are going to get roasted for this one

If you can authenticate using only one of two available factors then it's a single factor login in.

For access to personal information this should be considered abreach of the GDPR under article 32. And MFA is certainly not state of the art by any means

0laf

Worse than that SMS is less worthy as a 2FA factor since the SMS is not tied to a physical device tightly enough. SIM Swap fraud is relatively easy to do since you only need to social engineer the person in a retail phone shop which brings the entire retail arm of the supplier into your personal attack surface. And that is much easier to do than intercept the SMS or steal a phone.

SMS is a better than nothing additional factor. 10yr ago we were referring to it as a half factor because of this.

Banks etc use SMS as MFA because it's cheaper than signing up to use an app based system, your security is not the primary concern.

Europe's largest caravan club admits wide array of personal data potentially accessed

0laf

Well they've hit a good few squares on "cyber incident bingo" so far and see to be aiming for the full house.

I await for "victim of a sophisticated attack" to be announced before I'll shoute "house".

Rise of deepfake threats means biometric security measures won't be enough

0laf
Terminator

MFA

A biometric on it's own is still only one factor. A fancy factor maybe, a sci-fi factor possibly but still only one.

Possibly in the future facial recognition might be considered a bit like SMS tokens. That being better than nothing but not a proper factor since it's too easy to circumvent or has too broad an attack surface.

We'll be fitting actual physical key locks to doors again soon

Scientists don thinking caps in wearable tech breakthrough

0laf
Big Brother

Just think of the ads

"We've noticed you've scratched your crotch 15 times in the last hour, why not try this new ball cooling lotion from [insert Chinese chemical factory] and we've assumed your consent to share this data when you remvoed the price tag and have passed it to 127000 trusted partners and signed you up to 7 TikTok streams on crotch related fungal infections and you've been auto enroled with your local GUI support group"

Mozilla slams Microsoft for using dark patterns to drive Windows users toward Edge

0laf
Flame

Dark?

I'm not sure these are dark patterns. MS trying to get you to use Edge and give up your privacy in other areas is overt obvious, persistant and bloody annoying.

They are only a couple of steps away from that 90s 'funny' exe that used to make you chase the close window "X" around the screen.

I should be able to invoice MS for my time since I need to undo their privacy 'suggestions' after every fucking update.

Fujitsu finance chief says sorry for IT giant's role in Post Office Horizon scandal

0laf
Black Helicopters

Very sorry honestly

We're saying we're very sorry honest and it's not just to get this all behind us so we can get back to sucking that public sector money teat just as hard as we can.

OpenAI's GPT-4 finally meets its match: Scots Gaelic smashes safety guardrails

0laf
Mushroom

Re: Back in the day

I remember those days and was of the understanding that a British MI# deptarment had altered that particular book subtly so that the nastier recipes didn't work but left it in circulation since people are generally lazy and less likely to investigate doing things properly by learning chemistry etc.

0laf
Trollface

Re: But ... I thought computers didn't do Scottish

That depends where he was at Uni. If it was Aberdeen then "Down South" is everything south of Stonehaven.

AI is changing search, for better or for worse

0laf
FAIL

Search sucks, AI isn't supposed to improve it

Search doesn't need improving because search technology is/was bad. Search is bad because the results are bastardised to promote adverts and paid for listings ahead of the actual information you are looking for. Introducing AI into the mix isn't going to (and isn't intended to) improve search for anyone except the ad slingers and the data slurpers.

AI might be the shiny-shit du jour but it's just the fashionable glitter on the turd that is search at the moment.

0laf

It might be AI but it's crap

Having had the pleasure of MS AI foisted on me at home and at work I do occasionally try it to see if it works. Without fail it's a shit way to get information and much slower and less reliable than doing it myself.

Microsoft Edge ignores user wishes, slurps tabs from Chrome without permission

0laf

Re: GDPR breach here we come

Tab may imply personal or senstive personal informaiton. e.g. if a significant number of tabs feature cancer, or specific types of cancer then coupled with an IP address (which is personal information currently) then this may be seen to be correlating a health condition with an individual which equals special category data. MS will not have lawfully obtained consent to take this data in this way.

It doesn't matter if it would be impossible for you or I to correlate this information, MS has extensive records on users and the processing power to carry out that matching exercise.

Similary it can be enougn to have the tab for any employment union open, union membership being considered special category data.

A letter to any EU regulator should at least be enough to make MS consider if this might affect its share price in the short term at least.

UK lawmakers say live facial recognition lacks a legal basis

0laf
Big Brother

Old hat

Facial recognition is bad enough but it's biomechanical tracking that worries me more.

Facial recognician can be foiled by a hat or a scarf you can't do that if you are being tracked on how you walk.

It's already in use in lots of places.

The paranoid cynic in me wonders if facial recognition drama is bieng talked up to slip biomechanical tracking in through the side door.

It took Taylor Swift deepfake nudes to focus Uncle Sam, Microsoft on AI safety

0laf
Big Brother

Why now?

Just wondering why the trigger now?

There has been celebrity pr0n fakery going on since before the internet including other AI stuff more recently.

What's so different about the current ones to cause outrage where there was none (or little) before?

Is it just because Taylor Swift is a near diety in the US?

Cory Doctorow has a plan to wipe away the enshittification of tech

0laf
Black Helicopters

It's everywhere

You can see enshittification everywhere, not just tech. I just never had a word for it until now. In politics, in basic utility services (water/sewage in the England being a prime example), in cars, clothing everything. You can see the same trend, shittier service delivered by fewer more overworked underpaid staff for ever increasing prices. AI for many companies is just another way to push this further, a way to ditch underpaid staff completely, deliver even shittier levels of service and extract ever more money.

And it's all backed up by a government and right wring press that gaslights citizens to belive that they should only ever be paid less (real terms), should work harder and if they don't like it they are lazy bastards deserving of destitution.

Wait, hold on, everyone – Mozilla thinks Apple, Google, Microsoft should play fair

0laf
Alert

I still use it

I've used FF for a very long time and still use it as my primary browser and that is predominatly because of a few security plugins that block traking and ads better than I've been able to do on other browsers. To me the internet is unusable without these ad ons. Ok It might be possible to do on other browsers but I know how to do it on FF and it works for me, I'd have to relearn tools on a new browser. I rarely see any compatibility issues and if I do get any it is normally down to my use of script blockers and tracking blocks.

I've never seen the performance issues others complain of but I rarely have more than a couple of tabs open.

I distrust Google more than FF and Edge is appalling marketing nagware from MS endlessly reminding me to try 365 despite me having a family license for it.

Will AI take our jobs? That's what everyone is talking about at Davos right now

0laf
Childcatcher

From what I've read we may have worked physically harder in the past but we didn't work as long. you could only work when there was sufficient daylight and there was more time off at home, not extended holidays like not but longer evenings sitting round the village campfire.

UK government woefully unprepared for 'catastrophic' ransomware attack

0laf
Alert

Government Awareness Programme

I'm sure they've set up an extensive and targetted anti-phishing awareness programme.

Meaning they got the graduate trainee to print off some free phishing posters they found on line and blu-tak them above the gents urinals and back of the bog doors.

Job done, box ticked, get it off the risk register, 10p spent.