* Posts by SVD_NL

415 publicly visible posts • joined 15 May 2022

Page:

Hotel's rotary switchboard so retro it predates the concept of crashing

SVD_NL Silver badge

Hotels are retro telephony treasure troves

Hotels tend to have very dated telephony requirements for a bunch of reasons. This is a combination of analog phone cables that are very difficult (and expensive) to replace, large analog PBX's being expensive, and local legislation often mandating that guests should always have a phone available to dial the emergency number.

While modern telephony platforms won't have as much trouble with 100's of phones, the expense of replacing all of those cables in an old building and all of those new phones is often too much to bear. So much so that we once came across an old comms room with hundreds of ATAs to convert SIP to analog phone signals.

Work experience kids messed with manager's PC to send him to Ctrl-Alt-Del hell

SVD_NL Silver badge

Another classic background prank

The classic i remembered (i grew up with Windows XP+):

Screenshot, rotate image 180 degrees, set as background. Remove all icons, hide taskbar. ctrl+alt+down (this rotates the screen 180 degrees). Bonus points if you flip the screensaver too!

Classmates appreciated the pranks for the most part. Teachers didn't like me, i wonder why!

Desktop tech sent to prison for an education on strange places to put tattoos

SVD_NL Silver badge

"A little effort showed the issue was actually with a mainframe"

I imagine someone getting that job without knowing what they're doing, spending hours on troubleshooting a basic issue, all while the rest of the team waits for him to show up to the cooter corridor.

Ghost gun legislation casts shadow over 3D printing

SVD_NL Silver badge

Re: RE: 3D printers are actually dumb tools

Yes! Same for the Błyskawica submachine gun (Wikipedia), a Sten clone produced in occupied Poland, where each part was disguised as a part for something else. (I believe the buttstock was supposed to be a microwave door handle for example).

I highly recommend the Forgotten Weapons episode (YouTube) on that one.

SVD_NL Silver badge

RE: 3D printers are actually dumb tools

I got an old Ender 3 from a friend, i can attest to how dumb they are (especially older models). The most intelligence that it can show is that it stops moving when it reaches a stop (and even that doesn't work in some cases).

Working on the assumption that this would be an effective and sensible law (which it isn't), and privacy doesn't matter (it actually doesn't matter to the US government), it would make way more sense to move this restriction to the software side, right? More processing power available, network connectivity to check for a db of known firearm models, etc.

And i fully agree with you, the moment you start banning or restricting general-purpose tools, you might as well ban every tool known to man.

Microsoft actually does something useful, adds Sysmon to Windows

SVD_NL Silver badge

Re: Another thing MS should have done earlier...

Right!!

The last laptop with a SATA SSD I've bought was probably 15 years ago, everything after that has been NVMe. Desktops took a tiny bit longer to move, but it has been the default for at least a decade by now. How has it not been a priority to implement this? Especially with how many things Windows servers do generally being bottlenecked by IO (SQL, SMB, etc.).

Watchdog says US weather alerts are getting lost in translation

SVD_NL Silver badge

Excellent waste of money!

I'm so glad they spend so much time and effort into developing a custom AI translator for weather alerts. Similar products surely aren't available off-the-shelf, because they have such novel requirements. The use of AI is also absolutely required, weather alerts are going to be extremely dynamic and complicated to translate!

I'm genuinely wondering why they can't just create template warnings with <severity> <weather event> <timing info> <call to action> and have those available in a bunch of languages (basically string templates that are used for localization everywhere).

Keep it simple, stupid: Agentic AI tools choke on complexity

SVD_NL Silver badge

Re: Lovely.

Especially industrial equipment triggered me there. Imagine living close to a chemical plant, and finding out they use AI to control the equipment?? It's dangerous enough already when it's operated by humans with procedures written by experts. (Or maybe i just watch too many CSB videos)

Marketing 'genius' destroyed a printer by trying to fix a paper jam

SVD_NL Silver badge

Re: Users and printing devices...

Those partially used label sheets haunt me in my dreams... It works just fine until it doesn't, and when it goes bad, it goes very, very bad.

SVD_NL Silver badge

Ah, end users and basic printer maintenance...

I've got many, many stories of users messing up printers beyond repair while trying to solve basic tasks, here's some highlights:

1. A brave attempt at swapping out a toner cartridge. Unfortunately the user didn't realise a locking tab was in place, which also closed the opening in the cartridge. Their solution was to simply apply more force. Aftermath? The room was coated top to bottom in black carcinogenic dust! It genuinely looked like an explosion had taken place, the entire printer was coated, and a streak ran up the wall across the ceiling over to the other side! Bonus points for the brave soul who wanted to clean this up using a wet mop, at least they tried. I ended up printing a biohazard sticker (on a different printer) and sticking it on the door, and calling in a professional cleaner. I really wish i could've seen the perpetrator, this stuff is probably worse than the ink bombs they use for money.

2. Paper jam in a small simplex mono printer (i mention this because it's not some large MFP with a bunch of rolls and pulleys). They managed to solve the paper jam using their tool of choice: a knife! Unfortunately they also stabbed the drum to death. Of course none of this was mentioned in the service request, the printer just stopped working. We were shocked the first time, ended up replacing the printer (drum replacements weren't economically viable for those small printers). End of story? Nope! less than a week later the exact same story! The client followed our recommendation, and they implemented a new policy for that location, where only a few select users were "trained" at refilling paper, and any other task had to be performed by service techs...

3. Printer in a primary school, for some reason there weren't any rooms available that children couldn't reach. They called because of a really bad paper jam and a bunch of error codes. I have no clue how, but a child had managed to jam a colored pencil waaay into the innards of the printer. I was genuinely impressed! (I'm saying it was a child, but i have no way to be sure of that. It's a bit of a coping mechanism to assume it's a child, but realistically it could've been another improvised tool to "solve" a paper jam.)

Anthropic writes 23,000-word 'constitution' for Claude, suggests it may have feelings

SVD_NL Silver badge

Re: I don't understand what they're trying to do

I fully agree, just a small update: Should --> must.

My view of a constitution is a small set of (practically) immutable laws that establish clear boundaries and restrictions. I can't be arsed to read the whole thing, but the snippets highlighted here read more like vague guiding principles and broad instructions how to weigh certain values. I personally think that this is more of a policy or guiding principles document (mission/vision etc.).

Maybe this is just how you talk to LLMs, i can't get the bloody things to work with direct language and technical specifications, after all.

Rackspace tests customer loyalty with brutal email price hike

SVD_NL Silver badge

"Get world-class business email at a fraction of the cost of other platforms."

"25 GB mailboxes, 30 GB file storage"

Maybe true for the previous pricing, but at 10$ that's a plain old lie! Even MS365 Business Basic only costs $6, which has 50GB (soon 100GB) mailboxes, and 1TB of OneDrive storage, and web versions of Office apps. You have to do some serious mental gymnastics to make your own offer sound like a better deal.

Don't even get me started on a price increase of that magnitude at such short notice...

AI framework flaws put enterprise clouds at risk of takeover

SVD_NL Silver badge

I feel like a broken record...

...I've said this very recently on an article discussing the n8n RCE vulns, but i'll repeat the gist of it here:

Why would you ever deploy an AI service that accept user input with highly privileged access to a bunch of important internal systems? And even worse, expose it to the internet?

Akamai CEO wants help to defeat piracy, reckons he can handle edge AI alone

SVD_NL Silver badge
Joke

Re: Italy ? 30 minutes ?

Yes, the actual, undisclosed deadline is 3 months. It's just that by the time it has worked it's way through the Italian burocracy, there's only 30 minutes left!

Chinese spies used Maduro's capture as a lure to phish US govt agencies

SVD_NL Silver badge

Clickbaited!

Did the Chinese really just try to clickbait US Govt. officials? What's next? "Hot singles in the Washington D.C. area"?

Engineer used welding shop air hose to 'clean' PCs – hilarity did not ensue

SVD_NL Silver badge

Good lord

It takes an idiot to use a random welding shop air hose to clean out computers (maybe i'd even pass it off as an honest mistake), but it takes a special kind of idiot to keep going after visibly destroying the first PC!

Not even a quick check to see if it still worked...

Court tosses appeal by hacker who opened port to coke smugglers with malware

SVD_NL Silver badge
Coat

I think it was RS232, because he gained access to the terminal!

Maximum-severity n8n flaw lets randos run your automation server

SVD_NL Silver badge

Re: Nandos

RCE - Remote Chicken Enhancement

SVD_NL Silver badge

Good lord...

"Let's authenticate this one product running LLMs and accepting user input/commands to every single software product in our environment with highly privileged permissions!"

Am i the only one seeing the issue here?

OpenAI putting bandaids on bandaids as prompt injection problems keep festering

SVD_NL Silver badge

Idiots

The implementation of LLMs has always bothered me, especially the software architecture.

If you don't know by now that you shouldn't trust external input in any way, you shouldn't be near software development in any capacity. Why is it not possible to escape or sandbox external inputs? "Technical limitations"? I think that just means "I made a shitty insecure product".

What also bothers me is the lack of any kind of optimisation. I recall seeing a quote from Sam Cuntman that people were wasting X amount of money by saying goodbye/please/thank you to chatgpt, and asked people to stop doing it. WELL MAKE A GODDAMN FUNCTION THAT HANDLES GOODBYE MESSAGES WITHOUT SENDING IT TO THE LLM THEN YOU PLANET-DESTROYING CLANKERFUCKER!!

Same goes for prompts that don't need LLMs in any way. Why not parse calculations and send them to a calculator for example? Man, LLMs suck.

HSBC app takes a dim view of sideloaded Bitwarden installations

SVD_NL Silver badge

Re: Been happening for years

It's a safety control, apps can block other apps from "seeing" that app window, this includes accessibility apps. (You can easily tell this by trying to screenshot an app, it won't work for protected apps).

I do understand this to some degree, but at some point it's the users' responsibility IMO. Android warns you 10 times that you're giving access to everything that's on your screen when you enable accessibility perms, and regularly warns about apps that have accessibility perms enabled. There is a legitimate use cases for those, and users should be able to enable it if they want to.

I can definitely understand your frustration, modern tech seems to become less and less accessible despite technological advancements in that field. I don't have any disabilities, and even i am impacted by this. Example: "smart" appliances and their horrible touch screen interfaces. They're bloated, not logical, have a bunch of fancy animations and decorations i don't need, and the touch screen is hard to use, especially when i've got wet or dirty hands (while cooking for example). I can't imagine trying to use my oven if i had some sort of physical or visual impairment, and even without disabilities it's just better to have buttons and knobs.

What if Linux ran Windows… and meant it? Meet Loss32

SVD_NL Silver badge

Re: kernel has a stable ABI?

For anyone interested, here's a snippet of his opinion on the matter. (that whole repo is gold)

Lenovo shows off new laptops that twist and roll

SVD_NL Silver badge

Widescreen laptop?

It's a shame they went for the gamer branding on that one. I rarely feel like i need some additional vertical real estate on my 13"laptop (it's a 3:2, but a lot of new models are 16:10 already), but i can definitely imagine situations where having some additional room for side-by-side windows comes in handy.

Also, execs would absolutely eat that concept up. Imagine their boner when they show off this thing expanding to show that big spreadsheet they don't understand in it's entirety!

Researchers poison stolen data to make AI systems return wrong results

SVD_NL Silver badge

"Oh no, my LLM can't use this treasure trove of stolen data!"

So, this method basically adds a bunch of junk data to real data and makes the LLM more likely to choose junk data when it queries without an encryption key?

I don't see how this actually protects against IP theft, unless the only IP you're trying to protect is the knowledge graph itself, not the underlying data as you should be able to extract that using other means. I'm sure there's cases where this has some real-world applicability, but i feel like most companies wouldn't be happy about the plaintext data being stolen, even if it is slightly obfusciated.

Baby's got clack: HP pushes PC-in-a-keyboard for businesses with hot desks

SVD_NL Silver badge
SVD_NL Silver badge

I'm genuinely wondering what makes this better than carrying around a tiny PC (Dell Micro, Intel NUC, etc.). You need peripherals to use this either way, why does it matter the keyboard is integrated?

I can also already see how confused the average user is going to be about this product. From experience, a lot of them can barely grasp the concept of a USB-C dock with wireless peripherals...

The Roomba failed because it just kind of sucked

SVD_NL Silver badge

One of my mates had a Roomba...

...after the dog had diarrhea once, he no longer had a Roomba.

User found two reasons – both of them wrong – to dispute tech support's diagnosis

SVD_NL Silver badge

Related issues

Not really a wrong diagnosis, but for some reason we always get the blame for absolutely everything if we visited a site in the past week or so.

"Hello, one of your employees was here yesterday for our phone, and now our internet doesn't work" (a DECT handset was replaced).

My colleague had an encounter that took the cake: He was at a site to install an IP door intercom. The hole to the outside was already there, but inside the building he drilled a small hole through a piece of drywall to get the cable to the network cabinet. He was finishing up when the building's janitor approached him:

"Hi, were you drilling just now?"

"Yes i was installing the door intercom"

"Well the toilets are clogged now"

"....okay?"

Microsoft won't fix .NET RCE bug affecting slew of enterprise apps, researchers say

SVD_NL Silver badge
Joke

Ah right, stupid devs, they should know better!

Barracuda and Ivanti obviously are very small vendors who don't care about security, letting such an obvious bug slip by! I'm sure more mature products and platforms definitely didn;t overlook this very obvious and expected behavior and acted accordingly. /S

Researchers spot 700 percent increase in hypervisor ransomware attacks

SVD_NL Silver badge

Proprietary OS?

Threat actors realize that the host operating system is often proprietary or restricted

Just a friendly reminder Proxmox runs on plain ol' Debian. Not necessarily more secure out of the box, but at least you're in control!

Vendor's secret 'fix' made critical app unusable during business hours

SVD_NL Silver badge
WTF?

Lost for words

The production database stored medical data, personal information, and handled payments had no access controls," he told On Call. "It was configured 'ALL ALL ALL', so any user on any system could access any database as any user.

I had to stop and reflect on that one for a second.

But seeing how the vendor is behaving, it wouldn't surprise me if they suddenly scrambled and implemented access control, in the process of that they break the app, and silently patch their errors without having anyone know.

Micron ditches consumer memory brand Crucial to chase AI riches

SVD_NL Silver badge

Re: Damn.

From my experience, memory compatibility isn't as finicky as it used to be (especially compared to 25 years ago). I'd attribute that mainly to memory controllers becoming a lot more resilient and flexible.

I've been using Kingston ram for the past 10-15 years, and it hasn't failed me yet. The only one that was possibly a bit iffy was a set of early hyperx ddr4, but it's more likely my motherboard was bad (it had some issues booting and died after 2 years or so).

Also a lot of memory expansions (hundreds of corporate devices) where the existing memory was different than the Kingston one. Mainly their "regular" lineup (starts with KCP-), occasional hyperx modules.

I also appreciate their clear naming scheme, you can identify the exact type of memory based on part number, so if you care about single vs double rank and those sorts of things, you can check that too.

This is mainly regular use corporate devices and personal workstations, server memory is a whole different beast of course. And i haven't had a lot of experience with their ddr5 stuff yet, but the 10 or so devices with their ddr5 memory haven't had issues yet.

Whatever legitimate places AI has, inside an OS ain't one

SVD_NL Silver badge

Integral to the OS

What's worse is insisting that a user-level application or feature is so intrinsic to the OS that it cannot be removed.

What's even worse, like the IE situation mentioned in the article, is intentionally making an application intrinsic to the OS so you can later argue that it cannot be removed when people start asking questions about your abuse of market dominance.

Internet Explorer, Windows Defender (W10 onwards), Teams (at least early W11 versions), and now copilot. This shouldn't surprise anyone.

They also tried with the MS Store, which is nearly impossible to get rid of without breaking the OS (the latest 25H2 finally has a policy, but Enterprise only)

I notice my MS365 homepage having a bigger and bigger copilot textbox, and it's taking more and more clicks to get to the place i need.

My prediction? They'll make Copilot an integral part of the UI, argue they cannot remove it, and probably get away with it too.

Web dev's crawler took down major online bookstore by buying too many books

SVD_NL Silver badge

Whenever something silly happens with computers, i try to take the skeuomorphisms1 literally.

In this case it means watching some madman running across aisles, sweeping everything into a shopping cart, preventing anyone else from buying books.

1 Whenever computer terms and elements reflect their real-world counterpart, e.g. your desktop and recycle bin, or floppy disks for saving files.

Cryptology boffins’ association to re-run election after losing encryption key needed to count votes

SVD_NL Silver badge

Re: Important learning experience

Well, lesson not entirely learned, because they're still a bit stuck in their own cryptology bubble. They could've looked at the world around them and realised that if you're doing an election with possible conflicts of interest you could just get an independent party to conduct the election and verify the results.

AI nudification site fined £55K for skipping age checks

SVD_NL Silver badge

"technically accurate, robust, reliable and fair."

This list suspiciously doesn't include the words "secure" or "private".

70-hour work weeks no longer enough for Infosys founder, who praises China’s 996 culture

SVD_NL Silver badge

Work-life balance

Balance the amount of work just so your employees barely stay alive!

Cloudflare broke itself – and a big chunk of the Internet – with a bad database query

SVD_NL Silver badge

A lot of websites returned a message like "Please unblock challenges.cloudflare.com". I find it funny that when you're unable to connect to cloudflare, they just assume it's your fault. Cloudflare never goes down, right?

Developer made one wrong click and sent his AWS bill into the stratosphere

SVD_NL Silver badge

Re: $1-2K per month?

€0,25 per kWh, which amounts to approximately 600W constant usage to get to €100 a month. it's not quite there, my guess is that it's using 400-500W. with CPUs like that idle usage of 50-100W or so isn't unheard of, and it has quite a lot of spinning disks too. Add a bunch of RAM sticks and fans, and it's a pretty reasonable power consumption for a server like this.

SVD_NL Silver badge

Re: $1-2K per month?

Without knowing more about the situation, this sounds like a service that could potentially get a lot of spikes in activity. In those situations it might not be worth the investment to get servers to catch those spikes, while doing basically nothing most of the time.

Another consideration could be location, it may be beneficial that you're able to spin up an instance basically anywhere you want.

And don't forget power costs. I recently got two servers running proxmox (both dual-socket Xeon E5-2680 v3, not too old, somewhat beefy i guess), their average CPU usage is under 1% (one is running light workloads, the other is pretty spikey spinning up and shutting down windows VMs), and it's still adding almost €100 per month to the electricity bill!

SVD_NL Silver badge

WHAT?!?

Sponsor: "Wait, you don't have cost alerts and budget caps set up?!?!"

Chase: "I do now!

SVD_NL Silver badge

And make your customers aware of the insane costs your service is about to incur? No thanks, people might actually stop making these mistakes!

Developer battled to write his own documentation, but lost the boss fight

SVD_NL Silver badge

*HEV Suit charging sounds*

SVD_NL Silver badge

Re: Hmm

The biggest help with writing a "$SUBJECT for dummies" guide, is finding an actual dummy to help you out (either with writing, or as a guinea pig).

Even if it's just a guide for people who do have the required domain knowledge, the dummy test still applies and is still helpful.

To solve compatibility issues, Microsoft would quietly patch other people's code

SVD_NL Silver badge

Maybe updating OpenSSL included in various built-in apps and Office plugins would be a good start first, especially considering their own security solution detects the outdated binaries and tells me to do something about it!

I'd love to, but i don't think i can get the removal of the office suite through change management.

Apple knits up $230 sock for your iPhone in time for Christmas

SVD_NL Silver badge

Oh cool, my mum crotcheted one of those the other day. She should start selling them!

Networking students need an explanation of the internet that can fit in their heads

SVD_NL Silver badge

Hey, i know that book!

My university uses the Systems Approach book to teach networking! The specific study i was doing only did essentially a "networking 101" class, which wasn't much trouble for me as i'd been working as a network engineer for a few years at that point, but i really enjoyed being able to dig down into topics while bored during lectures.

For me personally, the high-level overview helps me more than anything else. Not just in networking, for any complex topic. This allows me to apply logic to new situations, slot it in to the mental model in my head, and work from there. This also helps slowly building up knowledge over time, it's all part of the model, it all makes sense, and it's all deductible. When misremembering something, it'll also set off alarms as it doesn't make sense in the mental model.

As humans our storage is limited and bit rot is a problem, we can't possibly expect to remember everything and also keep up with changes. We have to play to our strengths: Logic, reasoning, deduction.

Windows 11 26H1 is coming ... for new processors only

SVD_NL Silver badge

I'll say bitlocker, as every other update seems to send a bunch of devices into recovery mode (luckily a reboot often solves this for some reason, and i don't need to pass a recovery key through the phone...)

In addition to that, UAC prompts will be fucked, especially through teamviewer

AI slop hits new high as fake country artist goes to #1 on Billboard digital songs chart

SVD_NL Silver badge

The main problem with top 40 pop stations is the lack of variety. I generally don't mind most pop music, but it lacks the depth that makes me want to listen to the same song 4 times in a day.

I think metal isn't very niche these days? it can be a bit fragmented because of how many subgenres they come up with, but metal festivals and metal concerts are still very popular. I never really hear in on the radio though, i think a big part of that is that tracks are often too long for radio stations. It may be a bit "risky" to play metal, and they're scared of losing listeners (or not having anough time to blabber or run commercials). Recently Sleep Token was gaining some traction (progressive mix of metal/r&b with jazz and gospel influences, among other things), and BBC radio 1 was playing them... sort of. They butchered the song by making a radio edit and removing everything that made it special.

China warns Dutch away from Nexperia as it lets chip exports resume

SVD_NL Silver badge

Re: Wagging its finger?

The whole ASML exports situation hasn't brought China and The Netherlands any closer either.

Page: