@ComradeEevee I once had a doctor refuse to prescribe my usual painkillers, because of risk of addiction, and then when I objected prescribed the stronger form... because that's gonna help?
@Livingstone_S@Google@Microsoft What I'd really like to see is increased focus on the tools that are available, along with effort put into providing education on how best to utilise them. Age verification raises it's own issues, but the privacy issues outdo some of the privacy issues I mentioned in the thread
@Livingstone_S@Google@Microsoft We saw a trend with AV where certain established porn providers were very keen, because the cost of compliance locks entrants out of the market. We've also seem that with some other regs.
Part of me wonders if Google's token effort is actually because they'd gain from regulation
@Livingstone_S@Google@Microsoft On the Google/Youtube side, my real bugbear is they're best placed to help empower parents, but the tooling they've developed is crap and lacks granularity. If you want content control (I don't) you can choose: 8 yr, 13yr, everything. It's very much "trust us"
@Livingstone_S@Google@Microsoft I mentioned location tracking in the thread, I get that some parents will want it, but it shouldn't be mandatory even if you don't. The MSF lets littlun turn it off & on - I like that, because it helps confer some responsibility *and* the importance of privacy + care
@Livingstone_S@Google@Microsoft Difficult. We are where we are because Google seem to have gone the token effort route, on the other hand regulation is likely to be heavy handed and ill thought out. I think regulating the safety app industry to eliminate some of the dodgy processes might work in the interim
@neil_neilzone@brokenkey I learnt a lot of the basis of what I know as a teen, finding ways around controls. So, to a certain extent, I favour an evolutionary approach - every time littlun tries to circumvent, we *both* learn something. At least, as long as I can stay ahead in the arms race.
@neil_neilzone@brokenkey Yeah it should work. But, it depends on what domain's being blocked - blocking https://youtube.com/ will only prevent access via that method (so https://m.youtube.com/ will still work). Need to block the whole zone
Technically, you could still watch video, but raises the bar
@brokenkey@Google@Microsoft Yeah, there's an option to block Youtube in there, but it only works with edge. For now, I've gone with a warning that these are the rules/limits, but if they don't work, devices can be taken.
Realistically, I'd probably block Chrome in MSF for a bit to drive the point home
TL:DR
- Parenting skills remain important, but some level of technical enforcement is useful
- @google need to sort their shit out
- @Microsoft have a decent solution
- The Age verification lobby remain wrong, but I partly blame Google for them having got as far as they have
And my frustration at the Google "solution" to restricting access to a Google product involving letting Google do *more* tracking is hard to overstate.
Frustrating as the excess YT use is, @youtube is *designed* to be immersive. It's not entirely right to bollock a kid for losing track of time on something that's designed to make them lose track of time. @google's parental controls don't provide a good per-app solution to this
If rules are flaunted, I can outright block an app, and can set the times during which an app can be used.
It means I can apply light-touch technical backing to the conversations we're having around excess use.
I can't believe I'm about to say this, but kudos to @Microsoft who've actually created a viable child-safety product (Microsoft Family Safety).
It's got granular controls, so you can set limits without being overbearing, and location tracking is off in the app by default
@Google is capable of building decent products, so I'm a little befuddled at why the parent controls in Digital wellbeing are so limited and crap. Oh, and even if they're enough for you, only apply til the kid's 13.
The AVP lobby promises "easy" solutions to frustrated parents, who feel they simply can't enact local technical measures. As important as conversations with kids are, they only achieve so much, after all.
So, we end up with support being built for the worst possible "solution"
If you _can_ enable the tools, the Google reserves the right to track your kids location. Fucking fantastic.
The inevitable result of this crap-fest is that it drives support to insane solutions like those pushed by the age-verification lobby.
The tooling that @google provides also doesn't work with Workspace accounts *despite* Apps for Domains seeing quite a few families using it in the early days. So if you've not using https://gmail.com/ addresses, then you can't enable the tools.
I've said for years that parents need to enact local controls rather than expecting service providers to make every service kid-safe.
I stand by that, but I can also see why some parents struggle. It shouldn't be a binary choice between unrestricted YT access and no phone at all
I'm not going to be the only affected by this - when they went under, there were plenty of people in the Reddit thread complaining that UP seemed to have increased their DD amounts significantly.
I left my DD uncancelled in good faith, but this takes the piss
I wouldn't mind quite so much, if we weren't completely locked out of being able to raise this with them.
Either do the increases *and* have your support staff able to address issues, or get accounts set up and look at an increase in month 2/3.
@edfenergy increasing DDs would only make sense if UtilityPoint hadn't already done in with their dying breath.
For months we've been told "don't cancel your DD, it'll be transferred". Well you know what? Fuck paying £300/mo whilst they sort their shit out.
Because my account's not fully set up yet, their advisers can't do anything, and the "my account" stuff doesn't work.
@ofgem needs to look at how accounts are being handled. Screwing someone out of nearly £300 just before Xmas just isn't on
So, just before Utilitypoint went under, they hiked our direct debit to £250/month.
@edfenergy have decided that for initial DD setup they're going to "increase your monthly direct debit by 20% for electricity and 10% for gas". So the buggers want to take £160/mo for Gas alone
@digicert don't appear to be using DNSSEC
So, one DNS poisoning, and Apple users can't install updates/software.
Of course, people often make mistakes with DNSSEC - if they had it and messed up a key, then @apple users would get a similar denial of service.
People accuse Apple of creating a walled garden, sorry but with the state of the tooling it's really more of a play-pen.
I got less annoyed setting up a Windows laptop the other day. It wasn't supposed to be this way...
It's 2021, and if `https://oscp.digicert.com/` fails to resolve, you can't install software on a Mac.
Sorry, @apple users, I hadn't fully appreciated what a range of annoyances you've had to put up in your OS of choice. Modern Mac OS is an absolute heap...
@Dixie3Flatline It's part of the Heathrow experience, partners along with the rain and wandering Terminal 5 trying to find your luggage :)
Given the choice, Gatwick every time
Happened to try and check schedules on @pagerduty last night and found the app had signed me out.
Guys, at least push a notification if SSO funkiness happens? Had I not opened the app for other reasons I'd have missed pages
@franholmes86@edfenergy@ofgem Nothing that the rest of us also aren't. Odds are the administrators cut back on servers to reduce running costs, but then they've told 220k people to log in and give a reading
@BBCSuffolk The Army marked the start. The Apaches at Wattisham are flown by Army Air Corp pilots, not RAF personnel. Aside from Search and Rescue, there hasn't been a RAF presence there for a long time
@alexbloor There's a certain irony, though, that some of those who spread the CE rumour supported the project that led to us inventing our own "CE mark", just because
@SnipingFrom@PickardJE Most of them will probably see it as M&S somehow "sticking it to" the EU (we'll take away your shop), rather than realising that it actually means a British business is now less well off, having lost trade because it's unable to stock the shelves.
@TheMorganics@GMB@susannareid100 It's worse than that I'm afraid. She knows the challenges, she just doesn't care.
She's my MP, she runs surgeries quite regularly - she *knows* people are struggling round here, and yet we get clips like this.
But then, she was caught using shock collars on her dog, so yeah....
@VickerySec@AlecMuffett Anyone who tells you differently is spreading FUD, and as Alec put it "misrepresentative and harmful to the cause of adopting end-to-end encryption".
/thread
@VickerySec@AlecMuffett There are good (IMO) reasons not to use WhatsApp, that they have a mechanism to report abusive content is not one of them.
The day they start proactively scanning those messages (like Apple intended to with iCloud photos) that changes, but that's not what's happening here
@VickerySec@AlecMuffett You can have ethical problems with FaceBook/WhatsApp as a whole (I know I do), but that does not make what Chris has been claiming true *especially* in the context of the Propublica article, which is what this entire thread is about, despite his attempts to shift goalposts
@VickerySec@AlecMuffett Just some I'm not doing others the same disservice, the article that clearly undermines Chris' point
> The workers have access to only a subset of WhatsApp messages — those flagged by users
Unless he's sat on some news that's yet to break, he's misunderstood the research https://twitter.com/bentasker/status/1436014272677650433/photo/1
@VickerySec@AlecMuffett Oh well, I guess a join an exclusive list of people who've told him he's wrong and have been blocked.
If he was so right, he might've seen some value in leaving an explanation so that others can see it, even if he thought I, for some reason, wouldn't understand it. https://twitter.com/bentasker/status/1436013389482971139/photo/1
@NataliaAntonova Actually, that'd be one hell of a pen-test report... I in-person-catfished your sysadmin and gave him/her a QR to scan, they logged in with their Domain Admin creds.
I mean, if you're going to drop USB sticks in the employee car-park, why not try get a date/meal too 😀
@0xValkyrie Her: There's no acceptable excuse for obesity, you're just lazy and not putting the effort in
Also her: Attacking the way I look is an ad hom and proves you have no point
JFC
@NataliaAntonova You mean you've never been on a fake date where you show your them a QR code and ask them to scan it then enter their credentials and cc number?
@neil_neilzone > A human eventually replied to his emails – by accidentally copying Greig into an email that described his attempts to report the breach, under the email subject line "responsible security disclosure", as "suspicious"
That's just.... about right...
@GeorgeHotchki14@MarinaPurkiss I expect the next line they plan will be "we tried, you all paid the extra NI, but even that wasn't enough. We should replace the NHS"
Degrade the service so people get annoyed with it, then make them pay extra to make no improvement - people will probably believe them.
@VickerySec@AlecMuffett They may as well have written an article about how users can follow your example - copy/screenshot a message and then email it to abuse@. The end result is identical, the only thing that changes is the mechanism.
It's really, really hard to see the claimed privacy impact here
@VickerySec@AlecMuffett The question you should be asking is - can staff unilaterally read messages that haven't been reported?
If the answer is "no" then there's no difference between the two.
I agree with Alec, the claims the article makes is misrepresentative.
@VickerySec@AlecMuffett I'm not sure why you see an importance in the distinction between in-app and out of app? In effect the "Report" button is just automating the steps you'd be doing outside the app - it's taking the message and forwarding it into the abuse channel.
@_calmdowndear@troyhunt Quite. If they find some foreign talent gets through the interview process, their first task will be to deport themselves.
With most UK politicians you get the feeling they're actually just after soundbites. It's impossible to give Priti the benefit of that dubious bar though.
@neil_neilzone Of course, all that's completely meaningless, and part of a system that's working as designed. It's not even like WA tries to prevent forwarding, and even if it did it probably wouldn't enforce them when attempting to forward to support/abuse accounts
@neil_neilzone You're correct, but putting my cun.. devils advocate hat on:
It was E2EE, but by fwding it on you've moved the "end" destination of the message
If you fwd it on in the clear then it's no longer E2EE. But, if you encrypted then it was still E2EE and that user's head will explode
@d0rkph0enix "Let the market decide".... "no, not like that"
It's funny how quickly free-marketers will start calling for regulation (by any other name) if the market doesn't agree with them
@Adam_Rutland@MarinaPurkiss You need to factor in inflation in the cost of Avos too, but obviously, ignore it for house prices and everything else.
Otherwise how else are you to say "we managed to save for it when I was earning just £20/month"?
@MarkMcvitie@ChristabelCoops Seems likely - there's a non-neglibile proportion of people who still think "Road Tax" (VED) goes anywhere but into the general taxation pot
@PenfoldDavid@tamonten@cybergibbons Doesn't that depend on the state of the waste and how it's disposed of? If it's dried out then the water has returned to the air, and if it's burnt....
@JoolsTurrall@neil_neilzone Of course, if they retain that info then GDPR also applies to that - depending on the legal basis, you've a right to request deletion etc and they must only retain for a reasonable time.
@JoolsTurrall@neil_neilzone Which makes sense really. A business scraping all your social media and developing a detailed psych profile is no less invasive/sensitive than one doing it via other means. That anyone could scrape and develop it doesn't really change the impact of doing so as a business model
@JoolsTurrall@neil_neilzone Info being public does very little to change the requirements that GDPR implements. The main exception (AIUI) being that the extra requirements for Article 9 (extra sensitive - sexual orientation etc) data are lessened, because the info is "out there"
@JoolsTurrall@neil_neilzone No assumption needed. They've accessed your profile as part of their recruitment process. That is the collection and processing. Further, they've linked that to the recruitment info they hold on you, and presumably retain the outcome of their "research".
@JolyonMaugham The brass balls on them: "Government decision-making can proceed in the space needed to ensure that it is done well".
In a just world, there'd be a burden of proof on them to show that it actually has been done well rather than being a shambles we've all watched unfold
@neil_neilzone The references to malware (sorry, cryptovirology) are a bit odd too. Do they think that *any* legal action against E2EE is going to result in authors of illegitimate software going "oh, I need to send it in the clear"?
@neil_neilzone Yup, but it seems you need to think of the poor operator who you've now denied the status of your trust.
I've only skimmed it, but it's a weird paper. There's a concern in there about lowering trust in networks increasing use of E2EE. Which is a bit, well, yes.
@neil_neilzone > the impact of pervasive encryption into account the result is a partial denial of service to the
operator. In simple terms the expected trusted relationship of the operator is denied.
just... what? History has shown, repeatedly, that that trust gets abused.
@Thespis377@blackroomsec /r/sysadmin has some gems, but as soon as someone's struggling it seems to descend into "find another job/company" type advice quite quickly.
@alexbloor@hambsdorg@freetrade On the upside, generally your new provider will deal with the hassle of the transfer for you (once you've given them details). Downside, if freetrade are slow/shit, your ISA will be stuck in the ether for quite a while
@SeanWrightSec Yep, you want someone to be disabling access whilst the employee is in the termination meeting. People do stupid things under extreme stress, it's not always as considered/malicious as this.
They got an answer they didn't like and decided to have a re-run instead? Isn't that what they accused Remain of trying to do?
Incredible though, that they can't even rig an appointment... https://twitter.com/campbellclaret/status/1432963219837136900
@vickyjo@neil_neilzone Am I the only one who stocks up, only to have re-stock within a week because I think "oooh, Xmas pud in the cupboard"?
I'd had 5 before December last year, having managed not to buy any until after halloween. Local co-ops had mince pies in all year this year too...
@neil_neilzone@newsigns2 It's such a weird mindset. I've been in offices with some *amazing* techies, some of whom hold advanced degrees, but some don't have a degree at all. To me, the longer your career, the less significance it has an indicator, but many don't view it that way
@evacide Unfortunately, I think some of them just aren't aware that there are people around them that don't have those degrees. They seem unable to fathom that it's possible to both not have one, and be extremely good at what you do - it's almost self-reinforcing.
@newsigns2@neil_neilzone I had a fairly honest conversation with someone in a large Telco recently - he said he'd put my CV under some noses, but that some were still stuck in the outdated mindset of "he doesn't have a CS degree".
Ultimately it's their loss, I don't want to work for someone like that.
@PaulOckenden@alexbloor I keep coming to that conclusion when thinking about a Powerwall. I could add Solar + PW, but the break-even's a long way out, even with the amount of power we use.
Then I go off-track and wonder how many potatoes you'd need to make a tattery to meet your needs.
@toolazytofail1 I did yeah, it allows them to inspect/repair company equipment/property. Seemed reasonable tbh, and if I was the sort to deny them entry for that then odds are the contract term wouldn't affect behaviour much
@alanfleming@APAGunion@MylesJackman The performers don't have any kind of legal relationship with banks/mastercard/visa though, it's Onlyfan's that they've the relationship with.
@RWoody1995@bigratkiller@drkatedevlin@bobbyllew IIRC though, the car makers did say "you can't automate that", but Elon did. Then learned the lessons the car industry had learned years ago and went back to manually doing bits
But "ignoring advice and learning expensive lessons the hard way" doesn't have the same positive ring
@alexbloor I've seen someone kill their (aftermarket) head unit doing it.
Other than that, no - I've jumped a lot of stuff, including occasionally reversing the polarity, and nothing's died.
@taranis_pt@ashleygjovik@troed@jimmyselgen@JoshuaNozzi@gianmarcozecca Yup. I think what Jimmy's missed is that "it's just a joke" is quite commonly trotted out to trivialise stuff that leads/contributes to a hostile working environment.
(almost) No-one ever said "I did it because I'm a dick", it'll always be "it's just a joke"
@beezly@ManuelSanchezX@BlakeJarryd@xKaptainVenom@exiledpharo@VideoDeadGaming Hmm, I've seen both. But, tbf, "essence" is definitely more common. Spent less time in Italy, so I'll take your word (actually, Wikipedia supports that too).
But, the original point stands:
> The use of the word gasoline instead of petrol is uncommon outside North America
@reedmal@ThreeWomen_@jwahjwah > deleting the tweet seems to be a bit of a cop out
So screenshot it, delete it and then tweet out a screenshot saying "I deleted this cos I was wrong" or some such.
No cop out, but it helps stop misinformation from circling (and/or accusations of doing it)
@ManuelSanchezX@BlakeJarryd@xKaptainVenom@exiledpharo@VideoDeadGaming But, I really came here to add to your confusion just a little.
You call it "gas" we call it "petrol", but we might also convert our car to run LPG (Liquid Petroleum Gas) so might still stop at a petrol station to fill up with Gas.
@ManuelSanchezX@BlakeJarryd@xKaptainVenom@exiledpharo@VideoDeadGaming French: Petrole
Italian: Petrolio
Spanish: Petroleo (they do also say Gasolina though, you're right).
It's derived from the latin petroleum.
Gasoline comes from the UK though, there was a brand Gasolene in the 1800's. So more like calling a vacuum cleaner a hoover
@Random_Robbie@TheKenMunroShow@cybergibbons@tautology0 I looked at it, but hit the same thing as you - £50 per TRV is a bit steep. Put cheaper programmable ones in rooms I wanted to turn off, and then used zigbee temp sensors + homeassistant so that rooms could call for heat
@embedded_iot@DigitalStefan@cybergibbons@neil_neilzone Tangent, but as common as this complaint about sales is, it's not really a problem with Sales themselves, they're just working to the incentives they're given. Really, it's a failure of leadership who aren't setting incentives in a way that helps ensure they're beneficial
@DigitalStefan@embedded_iot@cybergibbons@neil_neilzone If you *need* (or are expected) to do it in your "spare" time, then time planning at the start of the project was probably poor. But, I've also done stuff in spare time, because it was playing over in my mind and was an itch I needed to scratch. The two aren't the same
@embedded_iot@cybergibbons@neil_neilzone Again, it feels like you've not read the top of the thread you're replying to. This entire thread is about the stereo type that to be a "real" engineer you have to do it in your free time.
In your haste to cast people as deeply average, you've forgotten to read
@embedded_iot@cybergibbons@neil_neilzone I'm not sure where you think millenialism comes into it. I'm not a real millenial though, because I don't grow avocados in my free time.
@embedded_iot@cybergibbons@neil_neilzone You may have misunderstood what this thread is about, maybe re-read it.
For convenience, here's a quote from the opening subtweet
> We need to retire ASAP this wrong stereotype that to be a “real” software engineer you have to code in your free time.
Note "have"
@embedded_iot@cybergibbons@neil_neilzone Also, I'd put money on there being some great bakers out there who fell into the job somehow and mostly only bake at work
@embedded_iot@cybergibbons@neil_neilzone Yes, but that's not coding after work, so fails the "real engineer" test laid out at the top of the thread you're responding to.
@embedded_iot@cybergibbons@neil_neilzone > Being good takes effort
You're right, it does. But arguably being *really good* also takes experience, and the broader that experience the better.
/thread
@embedded_iot@cybergibbons@neil_neilzone It absolutely is gatekeeping to set an expectation that you *have* to code/do projects in your free time. It excludes a whole set of people who would be excellent, but have other interests. As well as that loss of talent, you end up with eng's who can't see outside their box
@embedded_iot@cybergibbons@neil_neilzone I drift in a similar way, sometimes I'll spend a lot of time coding, sometimes it's photography, cooking, mechanics or (lately) woodworking.
When I was hiring, all I wanted to know is if you were good (and passionate). If you spend your free time baking cakes, so what?
@embedded_iot@cybergibbons@neil_neilzone > People who love their what they do generally do it in their own time too imho
I don't think that's true across the board tbh. I know an excellent (software) engineer who spends a lot of his free time welding.
Ultimately, he loves making things, it's not constrained to software
@LadyRed_6@tx_drewdad So that pair of glasses are now your second factor? It's an interesting thought, having to deal with specsavers rather than the support desk if you lose your 2nd factor...
@cybergibbons@neil_neilzone Depends on the level you need though. If they're a barrister, then their toaster better be running Doom, otherwise how can I trust their devotion?
@CabeyCabe@DomainSushi@EricOlsonTMF@Dixie3Flatline > our world doesn't have anything built into it to handle life without income
Worse, an increasing number of people are likely to have to experience life without income/suitable jobs available *before* society does anything to address the issue.
@benofldn@BabsSheKing@smallcapshorts@MoneyTelegraph It's going to be with help the majority of time. Your statement alone locks out two groups:
- Those without a (financially stable, average earning) partner
- Those who can't get help from family
Which is quite a cross-section. But there's no problem because *you* managed to buy
@benofldn@smallcapshorts@BabsSheKing@MoneyTelegraph You're the exception, not the rule.
You think the majority of an entire generation is having issues getting on the ladder because they're "scared to hussle [sic]?"
I was able to get on the ladder too, but I'm honest enough to recognise how much luck was involved.
@benofldn@smallcapshorts@BabsSheKing@MoneyTelegraph Saying you can get it if you pony up the difference in deposit, is a bit like saying you can buy a 350k house with a pay-day loan, as long as you also put down a deposit of 345k
@benofldn@smallcapshorts@BabsSheKing@MoneyTelegraph You're just gonna quite skip over that 73k deposit then?
Most people don't get onto the ladder with a 20% deposit, tends to be 90% or even 95% LTV, at which point the earnings multiplier kicks in.
At 60K, most people are looking at 285K tops
@m_adduci@vmlemon@9600 There's a balance that has to be struck though.
If the weight you've added (by bolting that generator on) means you need to use X additional power to move the car, and it returns <X then you've still achieved a loss in range.
Regen braking capability doesn't add much weight
Anyone know if @tplinkuk ever sorted this out? I've a couple of HS110s sat that I was going to use for metering. Won't bother unwrapping and will return if the firmware's still not been fixed to restore local control https://twitter.com/robbrad/status/1328619684837593088
My name is Ben, and today I managed to get a Bluetooth headset to work properly on Linux *without* uninstalling PulseAudio.
It's all downhill from here....
So the Govt spent 23 grand of our money advertising their fake information site to migrants.
Sadly, it's about what I expect from @ukhomeoffice who'd just as happily mail migrants turds in envelopes labelled "your new passport", but only if they could charge for the "service" https://twitter.com/peterjukes/status/1421420566708461569
@chrismckee@SeanWrightSec I'm not sure it's something Spiked would support, but most "issues" they raise in that article could quite simply be removed by increasing regulation...
@tigg@alexbloor@DC_Police Which is itself unnecessary, if you were going to use W3W and have the connectivity to download it.. you could just go to the website version...
@alexbloor@neil_neilzone Crypto's just the latest variation - if you're making investment decisions off the back of adverts, then you're wide open to losing whatever money they can convince you to put in.
@itsameowen@NataliaAntonova You can limit what goes out in future though, so that - with time - some of what's already there becomes less relevant/useful as it's outdated.
@jacquep@AnniHawk@goodclimate@StevePeers Depends if they know you. If they don't, then you are. If they do, then it's "not you Pascal, you're one of the good ones". It's always they mythical "other" that's the problem.
@rubendura@promofaux@monzo Thanks for your responsiveness on this. I'll be honest, from prior experience reporting stuff to financial institutions, I was fully expecting "please disable your ad-blocker" so to have it *fixed* in such a short-time is well appreciated
@promofaux@monzo Yup, that looks quite similar to my setup. I also have my own list which parses some other lists into DNS names (though they don't often hit, so I suspect you're right about it not being worth the effort).
I also have a kid-specific pihole with many, many more lists :D
@promofaux@monzo Yup, I wondered if Monzo might have introduced it recently.
I don't pull EasyPrivacy into Pihole anymore as I've had similar headaches with it in the past.
Ahhh, that was the tool I couldn't remember the name of to start typing :D
@promofaux@monzo Looks like it's previously been raised as an overblock - #p99380' target=_blank rel='nofollow noopener'>https://forums.lanik.us/viewtopic.php?f=64&t=31754&p=99380&hilit=sentry+cdn.com#p99380 / #p149006' target=_blank rel='nofollow noopener'>https://forums.lanik.us/viewtopic.php?f=64&t=43332&p=149006&hilit=sentry+cdn.com#p149006
Cloning the Easylist repo atm to see when it was re-added (I'm guessing recently)
@promofaux@monzo Hah, got it.
This
> I refreshed the page manually and it went through.
gave me an idea. Can't refresh the page, but the Monzo stuff is loaded in a frame, so right-click, Frame -> Reload and it went through.
Thanks!
@promofaux@monzo Yeah, the thing I've noticed it on was Vanguard - if you refresh you just go back to the beginning of the payment flow.
Does seem to be something timing out, I left Monzo on the white screen for a bit and eventually got a "declined, you didn't approve it in time"
Is @monzo's transaction approval flow having issues?
I get the notification to approve on my phone, hit it, approve txn, enter pin and then get a white screen. The vendors cart never moves on from "Open your monzo app to approve the payment" either
@cybergibbons@TCroydon I remember being really pleased I'd changed the rear shock on my own. I just don't get that sense of satisfaction anymore, even with bigger jobs. Nowadays it tends to be "thank fuck that's done, also ouch"
@cybergibbons@TCroydon Man I miss my bike. The axle stands I use I bought to support one of my first bikes so I could take the rear wheel off, it was somewhat haphazard but I couldn't get a bobbin stand
@JohnDav79548222@ScarletBertie@casualpaul1@ukiswitheu@antrad51@Warburtons It may not be more. If the margin on a loaf is 40p, but running multiple van runs costs 50p, then they're better off composting. It's that simple.
They don't need to worry about other brands because they're impacted the same way
@cybergibbons@TCroydon A couple probably have a short remaining timespan. I needed them slightly less frequently once I got the impact set.
I've still got my first impact driver too actually, it's basically a big spring that you twat with a lump hammer - assuming you manage to miss your thumb
@JohnDav79548222@ScarletBertie@casualpaul1@ukiswitheu@antrad51@Warburtons No, but I understand profit and loss as well as the driving principles of capitalism.
I never said I agreed with it, but you'd never get using lots of vans past a profit motivated business layer. Given Warburton's past statements, I can't imagine they're anything but.
@TCroydon@cybergibbons I've a set too, they're excellent. The only time I don't use them is when I'm using an impact gun - use proper impact sockets for that.
I also have a set of sealey bolt extractors I bought as a teen, they've been worth their purchase price several times over now
@JohnDav79548222@ScarletBertie@casualpaul1@ukiswitheu@antrad51@Warburtons Because more vans = more trips = more fuel and paid driver time. There's no point them getting it to the shop if they've no profit margin left, especially if the logistics costs put them well past that point - make a smaller loss binning it
@DrAndrewR@alexbloor Because the market will support that - during holidays, for every family that can't afford or won't pay it, there's another who will. Same goes for cottage bookings etc too, there's *always* someone willing to pay the inflated prices
@cybergibbons@blinkie True, it really isn't as simple as just removing meat. There are some good veg recipes out there, even as a meat eater I'm increasingly mixing them in
@blinkie@cybergibbons I think in their minds you're just eating carrots and lettuce. There's stuff they need that can be got from meat, but can also be got from other sources - aka a healthy balanced diet
@alexbloor@danroweuk I already use you, and if you told me you were carbon neutral I'd *probably* trust you. Most other companies, though, I'd be cynical and looking for the "except for", that cynicism then feeds into my assessment of their services.
@firefox Keeping everyone up to date is a good thing, but the pig-headed approach @mozilla have taken with @firefox is indefensible.
Just add a button that says "restart later" for crying out loud
FFS @firefox
Smack in the middle of a "do not leave this page or your progress will be lost" application, need a new tab to download forms but "we just need to do one thing: restart required"
https://app.update.auto/ is false.
@alexjbutcher@scriptmonkey_@cybergibbons Although it didn't, there was also the risk of that silver car panicking, stopping and being rear ended by the red audi whilst the cyclist is alongside. Not going to be a big smash, but doesn't need to be
@alexjbutcher@scriptmonkey_@cybergibbons Almost every accident is preceded by someone thinking there's not much risk. As you say, Road rage is also possibility. Cyclist was in the right on paper, but took a route that generated additional risk - being right is not worth your legs.
@Simonlee0403@mikegalsworthy@gary_killington If I was being really cynical, I'd say this is how they want you to react. They want herd immunity, so want you out there spreading it, but also want to be able to blame you/the public for it.
@alexjbutcher@scriptmonkey_@cybergibbons That's precisely the point tho. The red Audi demonstrably either wasn't paying proper attention, or was feckless - themselves a hazard. On a bike, your crumple zones are your limbs, why the hell would you proceed towards them? That's poor HP on the bike's part.
@SecurityJon@Iskuri1@cybergibbons I once had a van overtake me whilst I was overtaking a lorry - he drove part on the central reservation and part in my lane - pushing me over towards the trailer wheels.
I was on a 125 at the time and the wind had caught me, so progress past the lorry was slightly slower.
@alexjbutcher@scriptmonkey_@cybergibbons The problem is, potentially that's being read out at your funeral/inquest.
The cyclist was in the right, by the book, but put himself in harms way unnecessarily.
@attiegrande@rsmck@cybergibbons It's better to know you were in the right and be alive, than it is to have tried to demonstrate you were in the right and be dead.
Especially when traffic is involved
@family_martyn@AlecMuffett Periodically, I'll go in a shop, use their hand sanitiser and then end up with a strong alcohol smell inside my mask. It's amazing just how quickly it can absorb and spread
@cybergibbons@Rachel_Mantell@TrueFarnz@katzmandu For some drivers it doesn't matter how much warning you give them. The bridge-of-death in Needham has loads of "Lorry: low bridge, ignore sat nav" signs leading to it. You still get multiple confused lorry drivers trying to reverse their 40tonners back up the winding country road
@streathamalley@cybergibbons As a rule of thumb, if your advice is coming from facebook or, worse, memes it's worth double checking the validity of it. There are people who rigourously check things about things like mask safety, we call the scientists, and their peers tend to check their work
@streathamalley@cybergibbons bearing in mind that the pool on "info" your claim comes from is the same that claimed that the magna carta allowed people to keep their shops open in lockdown, despite most of it no longer being in force *and* it saying nothing of the sort in the first place
@loadingacchedin@cybergibbons They seem to have been working to drag the app down too tho, those new player changes being a good example of how not to.
I've switched to using boost
@cybergibbons I've been assuming that reddit's devs also use the old one.
I tend to click into a window to make sure it has focus, in new reddit tho that leaves the current post and goes back to the main sub.
@cybergibbons@streathamalley The cuntish thing is that there are people who are legitimately exempt, who end up being misjudged as one of these "muh face" dickwads.
@cybergibbons@streathamalley The US tho, does have legislation that can be (mis)interpreted to say its discrimination to ask why you're exempt. Almost like that pool of misinformation is just being regurgitated here.
@cybergibbons@streathamalley I mean, this thread starts with him invoking a law that doesn't exist in this country, so I'm going to go out on a limb and say reading isn't a strong point. I *assume* he means the equality act. New Zealand passed a "health and disabilities act" in 94 though
@neil_neilzone Unfortunately very common in this arena - see also the battle against e2e encryption with flimsy "nerd harder" arguments (I'm sure Google has the experts etc etc) made against any obstacle.
@streathamalley@cybergibbons And even if you aren't entirely convinced, it's not you that bears the consequences of you not masking, it's the poor sods you infect.
As @Cybergibbons so well put it - that makes you a dick
@streathamalley@cybergibbons Funnily enough, in another tweet you referred to it as a mask religion, yet it's you making assertations of faith based on spurious evidence, whilst conveniently ignoring evidence that contradicts you.
@streathamalley@cybergibbons Your "evidence" shows that in a pandemic, cases increase. It says no more about the efficacy of masks than it does about whether taking a frog anally might help. At best it says masks aren't a panacea, but noone claimed that they were
@The_AVPA@neil_neilzone Meanwhile, streaming sites already currently have the resources of media companies, FIFA and others after them, but continue to survive (just popping up in new places if a domain gets siezed). AV requirements aren't going to get looked at
@The_AVPA@neil_neilzone The goatse route, in particular, is likely to be entirely unaffected. Taking Alec's infinite newsagents a bit further, for the "look at this" route we actually care about individual pages. If goatse/lemonparty aren't available, they'll still, quite easily, find something else
@The_AVPA@neil_neilzone The remainder is people searching for it.
So, based purely on a skim read, there's limited benefit because the initial routes of exposure either won't be affected by AV, or face a much harder threat model (those searching for the content)
@The_AVPA@neil_neilzone Seems to suggest initial exposure is often either being goatseed or popups on illegal streaming sites
Those illegal streaming sites aren't going to suddenly implement AV, and kids aren't likely to stop sending/showing others.
@AlecMuffett@The_AVPA@zombywuf@alexbloor@neil_neilzone@euCONSENTeu I'm not convinced "it always was so" is actually a better answer anyway. That'd suggest this is a continuation of a battle that's already not being won - it's a fruitless endevour, so we'll suffer the harms for no benefit.
@edsaperia@andrewcb@AlecMuffett@neil_neilzone The other thing that hasn't been mentioned is that "free" is only the cost of implementation, not of compliance - implementation comes with liability, so you're gonna spend time/money assessing that.
@sugar_1978@MyrtleSnowfox@Marina_Sirtis Handegg doesn't have quite the same ring to it though, and tends to generate an angry response.
IIRC the name was because it was played on foot rather than horseback
@DamianCollins@TwitterUK They already can be held to account, or could, if the Tories hadn't underfunded the police and courts for a decade. Laws mean fuck all if you haven't the resources to prosecute anyone. Stop indulging gesture politics and fight for actual change
@theprescomm it definitely felt like it was getting worse/more common too, and more frequently targeted at individuals who disagreed or made a suggestion. The anger at Vice makes sense, and Signal/Moxie treated her like shit, but some of the other stuff is indefensible IMO
@theprescomm oh dear... I unfollowed a few weeks ago after she went into full attack mode on someone who asked her to consider not using NFTs. I get that she's had to deal with a *lot* of shit, but at a certain point my life just doesn't need me opening Twitter to find that level of hostility
@RetroGeoff@Forbes Screwing over Tesla investors by spending 2bn acquiring a failing company run by his cousins and that he had a stake in, and getting no real return out of it.
Brexiters: Brexit absolutely won't lead to a drop in standards.
Also Brexiters: lets relax safety rules and let tired people drive 40tonners for longer because we drove HGV drivers away https://twitter.com/grantshapps/status/1412745388730245120
@mike_hooz@alexbloor Yeah, I suspect the reason he hasn't walked is he probably feels that being able to at least tell the press is better than leaving the govt more or less unopposed.
@alexbloor The strongest argument against a Tesla IMO is the se as the one against Apple: I don't want to line their pockets.
I'm unlikely to go leccy for a while though, as I don't change car often
@OverSoftNL@cybergibbons Reduce your power bill by buying one of our new, more energy efficient* NASes
*we ship it without a plug, to deliver a market beating 0Kwh power consumption
@alexbloor@IO83MZero It's all quite ridiculous too - rather than just have (say) MySQL on there, you need "database", "RDBMS" etc because the reviewing software doesn't know they're linked.
All that said, the best jobs I looked at didn't use them (nor did the one I took)
@alexbloor@IO83MZero I was hunting recently, and there are a *lot* of automated systems, and there's an art involved in peppering your CV with keywords for those systems, without making it too uncomfortable for a human to read.
@Trelfar@BrianGress@briankrebs They also couldn't be arsed to put together a simple privacy policy for GDPR and have blocked users in the EU, containing their crappy advice further
@RanqueBenoit@IanColdwater What makes it doubly scary is the guy arguing it's ok - newbies aren't likely to read the whole thread, so will often assume that it's fine/safe on the basis someone else spoke up for it.
The whole thing's horrifying
@alexbloor You tweeted this hours ago, and noone's commented that the police have clearly been bamboo-zled once again? What's become of our fair isle? We should all just leaf
@alexbloor I think you're right, sadly. Priti should never have made it back into Govt after her sacking, yet here she is. We can only hope it only happens in opposition
@MickTroy@damocrat You see the same with alcohol free "spirits" too - the same price (or more) as their alcoholic bretheren, except they don't incur the duty.
Sadly, people pay it, so prices won't reduce much
@MattHancock@TheRegister But, odds are that he can't and he won't.
If nothing else, showing how "good" the data was will only raise more questions about how there were so many excess deaths (particularly in care homes).
@MattHancock@TheRegister Of course, if he really honestly believes that data saves lives, he'll
a) be able to provide data showing that
b) Be able to make such a case for it that it'll work opt-in rather than opt-out
c) Be able to make such a case for it, that Parliament will pass primary legislation
@z3r0burn@IanColdwater One guy I knew was particularly blind to this, with some truly inappropriate stuff slipping out.
At the lower/tamer end of the scale, trying to strike up a conversation with a woman he'd just met by saying "do you like to cook?" wasn't exactly a winning strategy either
@z3r0burn@IanColdwater Based on previous conversations, they seem to have reasons/justifications for their behaviour that make it "not creepy", but agree it's creepy if someone else is doing it. That sense of exceptionalism seems to enable them to justify almost anything.
@elwell2000@alexbloor I know of a few open resolvers that simply forward onto Quad9. If Quad9 were to serve a single "infringing" response to one of those, and it were cached and served n times - is that 1 penalty or n?
As Bloor said - Fuck this. Also, fuck the system that allows it to be a thing
Christ, I thought I hated my smart thermostat, but this takes the biscuit.
Shout out to @ecobee for being particularly crap:
"Eco+ cannot be disabled entirely once you have enrolled in a program."
Who thought that was a good idea?
https://arstechnica.com/?post_type=post&p=1775142
It's rarely the cause of the outage that customers remember. It's almost always how frustrated/pissed off they felt, and how long for.
You need someone named as the bod to communicate - it's no good expecting engineers to do it, because they're (rightly) focused on fixing things
Shit happens, and stuff breaks - it's part and parcel of operating at scale. The thing that can really break a customer relationship is *how* you handle it when shit heads toward the fan.
Good clear communication is key, otherwise customers get frustrated
For all the technical expertise they have, I think the thing @BunnyCDN are lacking is probably someone skilled in incident response.
Communication this morning has been extremely lacklustre, and the issue was closed as "resolved" over an hour ago, despite ongoing disruption
@washu@alexbloor That kind of jealousy only ever increases too - and it's clearly already linked with a loss of control, walking around smashing tech isn't exactly a rational action.
@LeftyJS@MoneyTelegraph@RishiSunak No, we don't currently pay on the way in - that's what these change are about. ATM, you get tax back into your pension, but are taxed drawing it out.
Now, they want to tax both ends...
This is such a bad idea. It'll discourage people from paying into pensions, building an increase in future pension poverty & drain on the public purse.
It'll sell well with the 40% tax rate == rich crowd, but they'll get caught up in the eventual mess
https://twitter.com/MoneyTelegraph/status/1406918602129805313
@PhilipJCollins1@DavidHenigUK@MarinaHyde > or whatever the correct collective term is.
For Geese, it's a Gaggle.
For Crows, it's a Murder
For trade yachts, it's an Expensive-Mistake
@Hairyloon@WilRockall@JJHTweets When deciding to do (or not) something, you should factor in possible extraneous factors. So, considering the "folly of parliament" is something a reasoned voter should be doing, even if you accept it's parliament and not the Government that took the "golden goose" and fucked it
@Andrew_Adonis After her TalkTalk tenure, she shouldn't have been considered for a leadership position elsewhere. Yet, inexplicably she was gifte... sorry, given a post that she wasn't qualified for.
This, sadly, will just be another step that we all pay the price for
@alexbloor Not sure it is confusing - you're not allowed to take your own lions into the lion pen at the zoo, they've got enough & the other lions won't like it. Might just mean that enclosure was fully stocked with stupid people.
@TrueFarnz@alexbloor I mean, it's always possible - before the GE, the red wall were all considered safe too. But, I suspect mine won't shift for a while - there's a significant elderly population who don't necessarily keep track of things, but have always voted Tory.
Another forced restart by @firefox, now can't remember what it was I needed to do (i.e. why I was opening a new tab).
The result is that I've turned off automatic updates, which is a win for no-one.
@mozilla please add a "no, restart later" option
https://twitter.com/bentasker/status/1400362579151687681
@TrueFarnz@alexbloor I live in one of those seats, it's immensely frustrating. Our MP has had various scandals/bad headlines but will continue to be elected for the forseeable because Tory.
@carlheaton@publicbenefituk They're really determined to play the crooks and piss away any good will aren't they? It was their policy to suspend, the delay was down to availability of tgeur resources and it would cost them nothing to extend the registration by the time they cost.
@IanBarwise I only actually noticed confidential mode the other day, I *probably* won't use it, purely based on the feeling it's probably a false sense of security - either I'm ok sending them to the person at the other end, or I'm not, confidential mode doesn't change that.
@theAliceRoberts I particularly like that it was tweeted from his Twitter account carrying his academic title. If there's anything that doesn't "need" titles, it's a social media account
@alexbloor Mind, you, I don't shop with Argos and haven't for years - ever since they screwed up my order, promised a gift card and then never delivered.
They staunchly refuse to go bust as a result of my boycott tho. Plus, I can't remember what the original order was.
@alexbloor You'd think they'd view it as a good thing: they don't want to shop with companies who don't hold their views, those companies no longer advertise on Gbeebies making room for those who do - win/win surely?
Unless it is, in fact, manufactured outrage in pursuit of culture wars...
@NexusUKOrg@alexbloor@kit_chrisr Yep, or question the fact that, yes it's an EU thing, but who suggested and fought for it? Oh, look our Politicians. Like the upset about us losing access to Galileo - which country insisted on the non-MS limitations? That'd be us.
@NexusUKOrg@alexbloor@kit_chrisr Yup, exactly my view. And even if somehow they can't scapegoat the EU, they'll find someone else (just look at last year, when "the public" were to blame despite No.10's muddled COVID messaging)
@kit_chrisr@alexbloor The reason I use safety net is the thing that always sticks in my mind is BT's secret Phorm trials (back in what, 2008?). Our Govt signed off on something that was blatantly wrong, and it took the EU going "Oi" to get any movement at all
@awright18@CathyReisenwitz@sinclairinat0r ^ this
The way I phrased it to someone recently was: they're not just adults, they're highly skilled experienced professionals - if you don't treat them as such, you won't retain them for long
@alexbloor@kit_chrisr Someone I worked with previously felt the EU prevented us holding our politicians to account (because scapegoating), whilst my position was that the EU was a safety net, and even if he was right we'd fail to hold politicians to account.
I really wish I'd been wrong
@joepie91@TychoTithonus@AaronToponce Yeah that's true - Hanlon's razor probably answers it for us too.
I suspect Andrew's simply got caught up in his own hubris.
@HannahAlOthman It's really bad this year. This is the first year _ever_ that I've had issues, now I've got the full lot.
I can only imagine what it's like for someone who'd normally be affected
@AaronToponce How do we stop users leaving us for Libera? I know, lets force them onto a new service where they'll need to re-register nicks and channels....
@AndrewYee2 I've heard 2 main names criticising him for that - Clarkson and now "leave your neighbours to beat each other up" Madeley.
Neither is a particularly good example of the "benefits" of bottling it up IMO
@GazTheJourno I'm sorry, are you expecting competence (and/or consistency) from the Home Office? As in the UK one, previously known for disposing of immigration related papers because they couldn't be arsed to store them?
They'd publish the address as a Wingdings screenshot or something
@ArmanTweets@carolecadwalla There's an implicit assumption there that she was acting in good conscience in the first place - I'm not really convinced that that's actually the case.
@NexusUKOrg@rossng_@cybergibbons I'd imagine so, with "marketplace" stuff, you're buying from the supplier not Amazon. Supplier might then be able to sue Amazon for negligence though.
It's not the only issue with Amazon's setup either - allegedly, the way they handle payments mean you don't get s.75 protection
@rossng_@cybergibbons Amazon's practice of using shared bins for products has a *lot* to answer for here though - it means that even though the supplier you hit on Amazon is legit, you're getting product from a bin supplied by anyone who sent "that" item to Amazon for fulfilment.
@Sportydoodle@PleaseMakeItSt6@DavidHenigUK I think you're underestimating the ability of the UK Govt and it's private partners to screw things up.
The comment isn't that we were better than EU at rollout because of the NHS, so much as the NHS is the reason it wasn't ballsed up like other UK Covid projects
@cybergibbons@joeldering > load bearing capacity is around 500kg.
Not done work loads for ropes in a while, but isn't the safe work load of 8mm fibre rope more like 64KG (diam x diam IIRC)
Would it not be better to mark the anniversary by doing something about all the dangerous cladding that's still out there - including that on schools.
It'd mean the govt growing a backbone with it's developer chums though. https://twitter.com/CommonsSpeaker/status/1404434280013512704
@_noid_@FalconDarkstar@Infosec_Taylor Although earlier in the year I did start a phone interview with "sorry, the phone rang just after I put a whole creme egg in my gob" so maybe I have let standards slip a little
@_noid_@FalconDarkstar@Infosec_Taylor Those same people who told you that are probably now telling others that they need to wear a suit on zoom interviews or how will they ever get hired?
@ledbydonkeys Doesn't Patel have links with Murdoch? So she intervenes on something affecting a contact, and the messages in that intervention are lost as the result of a "glitch". Nothing to see here.... honest
@bexxhs@PlanetBaggins@spectator But don't worry, he wouldn't dabble - much - below year 10...
What's almost as shocking as him writing it is that they actually published it.
@SQLAllFather@hacks4pancakes I once told a VP something and he didn't believe me and googled it. My site was the first hit, took him a second to realise and then he said "you're still wrong, I'm sure of it".
@GazTheJourno@neil_neilzone W* is just a greedy grab of W. You want W.F for a working regex
WTT could be What The Twat though - I'm sure I've used that before
The problem with these devices isn't the frequencies they're listening on, it's that they're listening & sending stuff off-site (accidentally/otherwise)
The idea that a smart speaker that can tell when you flush the bog is less privacy invasive than one that can't is also odd
This article really doesn't deliver on the promises made by the title.
It's still listening - just to ultrasonic frequencies. So a human can't tell from the recordings what's been recorded - but you better believe a computer can...
https://www.theregister.com/2021/06/09/privacymic_smart_home/ via @theregister
@AlecMuffett Was it better for public health? Almost certainly. But the Govt didn't put any effort/resource into the change - they did the easy bit: changing the law, and left everyone else to deal with the predictable consequences
If they do raise the age, I hope they do better (they won't)
@AlecMuffett I was running an offy when they raised the smoking age in 2007, still haven't forgiven them from that.
It was shop-workers who had to deal with the pissed off, (& now craving) 17yr olds who yesterday could buy fags, but today cannot.
@kentindell@cybergibbons Ultimately, I think people just don't like the idea of a company monetizing a link that they're paying (often through the nose) for.
If I was paying US ISP prices, I think I'd probably resent even the sidewalk 80Kbps a bit too.
@kentindell@cybergibbons Sidewalk's not happening here though is it? I thought it was US only?
In which case, the example would be Comcast's Xfinity - which IIRC they turned on without (properly) telling anyone, poisoning the well for any other piggybacking service, no matter how well designed
@alexbloor MTU ones can be particularly fun though.
$this HTTPS site doesn't work (times out), other https sites on that server do. HTTP works.
Change the cert, suddenly it works - cert chain on original certificate was longer and something on the return path is using a smaller MTU
@alexbloor I once sent a state ISP a screenshot of a SSH login banner with their name in, for an IP I'd identified as being their transparent (yeah they fucked that up) cache and were censoring (badly) with
They weren't very happy with me
@alexbloor From the CDN side, it also sucks being on the other end of ISPs that do use proxies.
"Customer complained that you're returning 403s for their content". Yeah, it's not us - that's your ISP, who of course will deny they're censoring the content.
@ninkosan@alexbloor Did they ever get around to fixing the issue with the superhub resetting users settings whenever they did a firmware update? IIRC, port fowards were lost amongst other things.
Not a massive issue for most users, but annoying
@imdsm@TrueFarnz@alexbloor@aaisp@joelycett Here too.
I *did* have an intermitted issue with connections over IPv6, but they were nice enough to not call me any rude names when I eventually found it was, in fact, my router failing to keep up.
And most ISPs wouldn't have even helped troubleshoot it to that depth.
I'm glad the article (and ICO's guidance) makes a point about psuedonymised data being PII - it's a no brainer really, if it can't be linked back then at some point it will be.
@ra6bit It took me weeks to come to terms with the charges being legit (and they were serious...), years later it still bothers me how out of the blue it was, despite spending 12hr shifts side by side, there was 0 clue
@ra6bit Fwiw a while back a close colleague of mine was convicted of similar. In the run up to the actual prosecution, I found it very hard to process & come to terms with - there was an enduring doubt, partly because of the way he communicated it. Don't beat yourself up for a few hours
@FrankleyMan@MatthewStadlen@MarinaHyde@ShelaghFogarty Either way it's confidential data, but the source from which it's drawn is different (at least in effect).
Best bet, really, is to do both opt-outs. Without the Type-1, NHS Digital will be sitting on your data (even if they can't use it) leaving the risk of screw ups leaking it
@JohnMas73850126@PippaCrerar i.e. if you do just the online optout, they'll still share your data, but in a slightly different manner. If you send the T1 to your GP the NHS digital can't get your data in the first place
@JohnMas73850126@PippaCrerar That's only 1 part of the optout.
The t1 form has to go to your GP - that prevents NHS digital from siphoning your data out of the surgery.
The digital optout prevents them sharing "identifiable" data with 3rd parties, so your data can be used in a (poorly) anonymised dataset
@SeanWrightSec IME a good number of those stem from "just this once" shortcuts in a rush to make a sale/deadline etc - "I had to do it in a hurry". Even, to some extent, crap passwords. So many can be resolved by addressing the underlying management issues.
@GazTheJourno Oh no, you haven't had the cheek to point out they're a haven for phishers have you? Makes it very hard for them to claim it's hard to spot phishing domains when people give examples
I don't ever want to have to write on a RCA "the outage was prolonged by 30 minutes, because an engineer's firefox forced an update and he lost track of his thoughtflow whilst dealing with it"
@firefox can we at least have a feature where the Restart Required tab has a "no, sod off for 2 hours" button?
Luckily I wasn't dealing with a 🔥 this morning, but that willingness to forcibly insert yourself into a thoughtflow makes Firefox not suitable for work.
Now, do I spend 30 minutes getting my brain back to where it was *before* Firefox decided to refuse to open new tabs, instead giving "Restart required" or do I go into about:config to try and fix the interface?
First impressions of new @firefox are very poor.
- Forced restart after background upgrade interrupted my chain of thought when working
- Windows restored but the "intro" froze the window it was on, so had to kill the window
- Lack of definition around tabs looks yuk
@RealSexyCyborg@Gadgetoid I've ended up with 2 because I briefly lost the first. *How* I lost something bright yellow is something I can't really explain...
@Ann8588@BBCNews That's a problem with the app then, given that they created it because they felt communicating GPS coords was too error prone.
It's fundamentally flawed, because they weren't sufficiently careful when choosing their dictionary or when reviewing the impact of their "improvements"
@alexbloor@PaulOckenden@synx508 The result being that the only choice is the nuclear option: accept/reject smart metering. I'll be sticking with the latter, when meter replacement comes up then at best, it'll be a meter in dumb mode.
We did have smart meters at the last place, and the gas one didn't work
@PaulOckenden@alexbloor@synx508 The thing is, there *is* a choice - it's just that in the UK, the suppliers have decided not to offer that choice. AIUI the contactor is there, because they insisted it be included - the choice was artificially removed.
@alexbloor@PaulOckenden@synx508 Yep, exactly this.
Me too. Instead, I get some of the "benefits" attributed to smart meters (seeing how much money you're burning) by using a clamp meter, but sadly, no access to the associated tariffs.
@PaulOckenden@alexbloor@synx508 But it's the contactor that Bloor's objecting to, not the smart meter itself.
What advantage is the consumer gaining they wouldn't get if they had a smart-meter without a contactor in?
@spazef0rze@SwiftOnSecurity That day was a lot of grief - she went as far up the chain as she could, so I had various senior people asking if I *had*, before explaining to her that that level of access is comes as a necessary part of my job.
God knows what she had in there....
@spazef0rze@SwiftOnSecurity Early in my career, I remember a colleague being very put out when she realised I had the ability to read user's mails (I wasn't doing so and had no interest in). From her PoV, we were the same grade, so that was wrong.
As a result, I've never once made that joke to a user
@IanColdwater@elchefe Had both, can absolutely confirm.
Having the pain relief wear off driving home from the extraction was really, really unpleasant tho
The acquisition seems to have run into rocky ground quite quickly, between the previous telemetry stuff and this.
The Audacity: Audio tool finds new and exciting ways to annoy contributors with a Contributor License Agreement https://www.theregister.com/2021/05/27/audacity_cla/ via @theregister
@MarinaNigrelli@dominiccampbell Even if you wanted to give him the benefit of the doubt & believe it, at some point during the last year, the answer "resign and make way for someone competent" should've surfaced.
It's like saying you though abt how to reduce glass breakage, whilst continuing to throw bricks
@BABrownsFan@hackerfantastic I think that feeling of "innocence" led to a bit more tolerance too - I got caught (and was effectively let off the hook for) doing things that I'm not sure kids of the same age would get away with today.
@alexbloor@telltaleatheist Meh, I guess my local J.W. decided to save some time. I do appreciate the new less disruptive (to my day) approach they're taking to outreach. Annoyed me less than the Nextdoor mailings that come through
@alexbloor@telltaleatheist Was yours actually handwritten? The one I received was a photocopy of a handwritten letter, which rather lessened the "personal touch" effect.
Same leaflet though
Not sure who's trying to bruteforce https://bentasker.co.uk/ domains on one of my exim servers, but I'll help you out - that mailserver isn't in my MX's because it doesn't handle mail for that domain.
@cybergibbons@zrnd So, I bounced it through Charles, it's def Google, but there's something weird going on that I haven't quite fingered yet. Placing the exact same request with curl gives a different location (but, the same as received with the wifi adapter disabled) https://twitter.com/bentasker/status/1397570112023105539/photo/1
@cybergibbons@zrnd I guess it's *probably* Google location services providing incorrect info -#w_how-does-it-work' target=_blank rel='nofollow noopener'>https://support.mozilla.org/en-US/kb/does-firefox-share-my-location-websites#w_how-does-it-work
@its_linzinha This. Also, reddit's app gets me regularly - hold down on text to select it for quoting... except, instead it collapses that comment chain and you lose your place.
Probably saves the internet some dumb replies, but still, as a workflow it's insane
@RealSexyCyborg Do they tend to re-title movies over there? e.g. I know in Poland they changed the title of "Die Hard" to The Glass Trap because the anglosphere understanding of "Die Hard" doesn't really translate very well
@alexbloor Question is, when the alarm went off this morning, did you leap out of bed screaming "BBBREEEADDD"?
There's no shame, I probably would've too
@EvieSnuggle That's one of the things I really miss from doing shifts in a 4-on/4-off pattern. Those 4 days off give you chance to get stuff done whilst stuff's open, whilst still giving chance to rest/relax.
Would totally go back to that pattern given chance
@MichaelLammer@MalwareJake GDPR takes a similar view - if the data gets deleted, that's still a breach because you lost control of it.
Which, tbh, is perfectly sane, if a bit inconvenient for whoever has to report it
@TheRegister I give it a month (less if they give it to Dido) of operation before they find they've an off-by-one somewhere that means that a significant number of records are lost whilst faked records pass muster
I say a month, it'll take years for the HO to notice, and even longer to admit
@ComradeEevee I like the "not happy with your city? start a new one" like it's as easy as clicking "Fork" on Github.
The last experimental city I heard about, was Bitcointopia which was... oh yeah, fraud.
@NHSDigital@TheRegister I'm sure, somewhere at the surgery, there's someone who can process the opt-out for me, but it shouldn't be necessary for me to tie up their time to opt-out of something that could and should wait (and arguably, should be opt-in)
@NHSDigital@TheRegister You need to opt-out before 23/6 via your surgery, which is a shit: my surgery isn't operating at the moment, having been dedicated to vaccinations.
@NHSDigital should stop until after the pandemic fog has lifted, but a cynic might suggest that fog is the only way they'll do it
@disappoptimism@GazTheJourno So even that improvement left people vulnerable if they'd left defaults as they were (pretty sure they've moved to a new schema now, I've not been a BT customer in quite a while).
@disappoptimism@GazTheJourno People used to be bothered about how easily WEP could be broken, but history's shown even that was more effort than needed - people just don't change defaults.
The BT HH (IIRC) moved to using it's serial as WPA a password, except it turned out it disclosed it's serial in beacons
@ConradLongmore@troyhunt Yeah, I had a nightmare time replacing mine for similar reasons. Single transformer, 6 bulbs, not enough load. It was either pull floor above, or put a single halogen back in to generate some load - so for now went with option 2.
@quentynblog@cybergibbons Artisanal Pen Tests could be a market no-one's properly exploited yet...
Agree though, a mix of automation and manual is best
@GazTheJourno > replace references to a car hitting something with the driver doing so
These are very different things... if the driver hits a wall, it's usually by exiting involuntary via a windscreen.
but I guess "an inattentive moron mounted the pavement" prob is better than "a black bmw"
@OldeNaturalist@Clew_less@AlecMuffett@allengwinn Experts are still needed of course - they research new ideas etc and provide resources for your generalists to learn from. But, if you can only staff with one or the other, then generalists are likely to be your better bet
@OldeNaturalist@Clew_less@AlecMuffett@allengwinn Yep, that's where a lot of the friction comes from. A policy gets suggested with no understanding of impact, and (in the worst cases) no willingness to work to understand those impacts.
The best, in practice, are often the multi-disciplined as they take a more holistic view
@alexbloor@Link2076 That's about the point I'm at. The wife's corsa is in for MOT this week, and I've noticed a blown headlight bulb. I could do it myself, but as it's a bumper off job, I really can't be arsed. I'd rather pay some labour and spend the time doing something else nowadays
Presumably the people behind this decision missed the UK scandal recently where the Post Office prosecuted & convicted post masters of fraud based on software they knew was faulty.
Are they that confident their eye-tracking is infallible? or is it "computer said so"? https://twitter.com/DGlaucomflecken/status/1394718189792108550
@VModifiedMind@alexbloor@Nominet By constantly milking .uk with wholesale price rises, they've helped smaller registrars with high %age revenue increases (because the impact won't be as noticeable in the big ones books).
Actually, I should keep my dry sense of humour to myself, that'll be in their next mail-out
@alexbloor > JUST A DOMAIN; WHAT NOMINET SHOULD BE PROMOTING
But Alex, they're also in cybersecurity dont-cha-know.
Except, they've failed to even include that in their completely extraneous requirements
@ukhomeoffice I believe the local vernacular for this is "git tae fuck yer racist fookin bastards".
Had their legal avenues been exhausted before you tried to snatch them in the middle of a religous festival? Did you even consider it might be a bad idea? https://twitter.com/lewis_goodall/status/1392864990445592579
@vanhoefm > be abused to bypass the NAT/firewall
The link here is wrong, you've missed an "r" from the url fragment.
Fantastic write-up and chunk of work though, congrats
@donaldlittle16@RealSexyCyborg > People that don’t have children shouldn’t have to pay school taxes.
Those kids will (hopefully) be part of the workforce that ultimately helps pay your pension. It's in your interest for them to be well educated and earning well.
Society doesn't work well on "got mine"
@DianeCharlton11@JolyonMaugham@HughJaeger The other thing is choice - you chose to use Amazon/Twitter (even if it's not necessarily an informed choice). You have basically 0 choice in whether to enroll in a national identity scheme.
@DianeCharlton11@JolyonMaugham@HughJaeger There's a massive difference between a corporation sucking up your data and a government doing so.
For example: as distasteful as Amazon's data collection is, it's unlikely that a future Amazon board might send troopers round to the house of anyone identified as an "other"
@TruthJupiter@alexbloor@cybergibbons@cheddarized33@the_chipmunk@SECAmbulance The important (and hard) question is: was it instrumental, or incidental in those cases? W3W being used in an emergency case doesn't mean it's better unless it's performed where an alternative would have failed.
Otherwise latex gloves have saved lives where other systems haven't
No @Nextdoor_UK I don't want you to spam my neighbours, I only signed in out of passing interest.
Why isn't there a "no don't fucking send these" button?
@AlecMuffett What platforms did they actually look at? They seem to be saying that only crims are currently using them, suggesting they've not looked at Whatsapp/Signal, presumably in order to reach the conclusion they reached.
@HelenBarbaraSmi@steveoncue@uk_sf_writer More likely? They're both true.
Even if it as you suggest, Johnson's still inept for not recognising the possibility/risk and promising everyone sunlit uplands
@LadyRed_6@Coleens_IS@Greg_Sideyr That's at least more honest than some agents who'll say you need to fix it before leaving, but then whether you get a pro in or not will charge to "re-do" it
@TrueFarnz@cybergibbons@AusterfieldM@what3words Is it a failure to recognise though, or is it a more cynical view: if you can get sufficient uptake/revenue before anyone notices then by the time it's found, it's too late and you've gained all there is to gain.
@SecFightClub@medus4_cdc Yup, it's mental, you think of them as a well-embedded bit of the car, yet really it takes no time to remove. I do remember the guy going "first one of those that's come off whole" tho
@SecFightClub@medus4_cdc Yup, keeping the water out is essential.
The worst one I ever had though, I never got chance to try and repair. Some idiot threw a tennis ball out of their window on the dual carriageway, by the time I reached a junction, the (big) bullseye had run into a screenwide crack
@blurbfly@richardxday@cybergibbons In fact, I suppose you could go further and better target using sensors in the car. If there's a crush around footwells - target for walking aids etc.
@blurbfly@richardxday@cybergibbons No, I don't think we are far from it sadly. IIRC the EU has mandated that new cars be able to automatically call the emergency services after a crash, so by extension it may get built in. "I've called for help, now to fill the time, please listen to a word from our sponsors"
@Link2076@cybergibbons FYI though, the correct response to "your wife's been in a bike accident, she's ok and chatting away with colleague, but we're going to take her to hospital just as a precaution" absolutely is not "ok, I guess she'll be wanting a lift home then".
@Link2076@cybergibbons I was called by a paramedic once, and apparently reacted too calmly and rationally - she asked my wife if there was someone else she could call (I just don't panic easily). So it can happen, but they do pick up on it
@Link2076@cybergibbons I thought the same,particularly when he says "I've been in a road traffic accident". Most would say crash, accident, fuck up, not a phrase that even the old bill tend to abbreviate
@annaturley@jessphillips I'm sure they can shuffle things around to free up some of their own funds to pay for childcare, a bag of porridge is 50p etc etc
@KathRella@alexbloor I guess we need to hope then that a market develops for bluetooth speakers with independent amplification to work around it - the cookie consent banner blocker of the shower
@davidareader As a cynic, I'd be inclined to think it means they skimped on the cost of the thermostat so its badly calibrated an ends up turning off a few degrees before it should - saving energy vs a good one
@Fifino9@BettinaSRoss1 There was a study recently that showed people prefer simple sounding solutions to problems. So the politician who says "it's the EUs fault, getting rid of them fixes it" does better than the honest one who says "it's a very nuanced complex problem that needs some care"
@LunarRoot@IanColdwater > ever think it’s time to just be quiet?
Honestly, I'm of the view that silence is complicity. I disagreed w/ you above, but there's a good chance we're both looking for the same future.
My disagreement was purely on not alienating people based on something they can't control
@LunarRoot@IanColdwater I really wasn't trying to "talk down", sorry if it came across that way.
> queen who was scared to have a daughter-in-law who looks like me
FWIW, the way Meghan & Harry have been treated is beyond appalling, not just by the RF but by the media too. Not entirely surprising sadly
This really does take @what3words from being a "their product has issues" company to a "do not do business with, actively recommend against, do not embed" organisation.
Just another ethic less "progress by litigation" company pretending to be innovative. https://twitter.com/alexbloor/status/1388181784958017539
@neil_neilzone@rsmck@alexbloor@cybergibbons Is it though? GDPR applies to EU citizens wherever they are (least that was my understanding).
GDPR's still in effect here, so if he shared my contact details (say) wouldn't that trigger it. W3W is registered in London, so is within legal reach
@LunarRoot@IanColdwater Although, there's obviously a big difference between not being able to go right now and not planning an exit at all.
Some of those who are left behind in this first wave may well go in the immediate future (i.e. once they've found somewhere to go to)
@LunarRoot@IanColdwater It's not realistic to think that everyone can do that - some will have to prioritise the needs of their family (or medical bills if they have sick kids etc). It's a _real_ leap of faith and we shouldn't judge anyone who feels they can't make family take it with them
@crayzeigh@editingemily He was obviously really impressed by her work, but then found out she knows the word "fuck".
Honestly, if language were that big an issue, there are entire countries that would never be able to have a service economy, mine included.
@AmazonUK when you email out a return QR code, you embed a tokenised link to S3 rather than embedding the file.
Which means if an elderly relative forwards the mail on to you (because the item was shipped to your address) the mail arrives without QR code
@coreypsc@abbyfuller "manly drinks that taste good" says it all really - there's a word at the beginning of that that really, really doesn't need to be there.
@kurowdotski@jonty@cybergibbons Even if it _were_ uniform, "Don't worry, you've only a 1 in 2.5m chance of being impacted by something we could have picked up on with testing and designed out" isn't exactly a great position.
@ifelsefi@glompix@sarlalian You invoked the UK as an example, and then try to back that up with "evidence" from the US? Even before we mention you ignoring that a few cherry-picked examples don't represent wider experiences
Feel free to carry on, but I'm muting.
@ifelsefi@glompix@sarlalian You mean arguments you made in another thread? Yeah, I didn't reply to stuff not directly in the chain I was replying to, weird how that works innit.
@glompix@ifelsefi@sarlalian but even if you were right, that's still not thoughtcrime.
UB training encourages you to identify and respond to those biases to improve the resulting actions. That's something we should all be doing, anyway.
In no way is it "you're prejudiced, lock him up"
@GazTheJourno Depends on what it is. If it's a git repo, then yes - because you're likely going to need to clone it down to explore properly & assess impact.
If it was (say) an unsecured MongoDB, then not so much. You *might* check if you've sufficient access to do so though
@InfosecSapper@cybergibbons Anyone taking bets that when that post surfaces, it'll have a "just use jQuery" response on it? Or perhaps an each-way on that or "why would you do that, use Rust instead"
@0DDJ0BB You *can* use training to help identify those who lack humanity and remove them from the force.
But that'd need an amount of self-awareness within the service that can't be present for us to have reached this point
@nemesis09@geo_walters@pentestscraps@GossiTheDog 1 month is most common. Anything >3 months I've tended to negotiate down before signing (or used it to negotiate salary up considerably).
Some chancers do try for 6mo, but only the worst don't accept pushback on it
@nemesis09@geo_walters@pentestscraps@GossiTheDog Depends entirely on your contract. 3 months isn't a particularly standard clause for most non-senior people. But, the more senior (or indispensable) you are, the more likely it is to be.
@alexbloor I like the other side of the letter "Registering as a fee payer shows your customers you're aware of your obligations".
"We paid fees we didn't need to" doesn't instil quite the confidence they seem to think it does
@louis_simoneau@DataRenee@keystonelemur@kennwhite@IanColdwater Yup, just this year. Plus, the amount they give you may not enable to replace your membership if they were able to buy at a discounted price because of their size (which is hardly uncommon with employer benefits, they pay much less per-head than individuals)
@alexbloor But, the question we all want answered is: does the W3W of any broken one collide with the W3W of a working one?
Just in case @cybergibbons was looking for a new tangent overnight
@alexbloor It's amazing the places that people are willing to assume are backwaters. People this end of the globe seem to think most of Asia is widely spaced mud-huts that noone ever travels between.
@cybergibbons i.e. the later work did some kind of word analysis and shuffled things around, but never actually re-ran the "are variations nearby".
Whatever the cause tho, it should have been picked up on - this clearly isn't some "occasional" event, and they've made contradicting claims.
@cybergibbons IIRC they said something about having adjusted allocations so that memorable words were in urban centres and more esoteric ones were in the ocean.
I guess this is probably partly the result of them fucking up that process - they perhaps did their distancing work before this
Really, there should be a few changes
- Add an "ignore" or "silently decline" button
- Groups you haven't accepted shouldn't bubble up to the top of the app
- Invitations should perhaps "time out". If you don't do anything with it, the group should disappear out of the app
The problem is, if you _don't_ act on the invitation, the app still insists on showing updates for the group, so an active group is constantly there (you just can't see *what* has been posted).
So, they get a constant reminder of whatever it is that means they don't want to join
You should at least have an "Ignore" or "Decline silently" button. Even telling the person who sent the invite is (IMO) potentially problematic (as it's confirming that person is *actively* using Signal rather than just having installed it previously and forgotten about it)
@notorious_J_O_Z@thetrudz I started taking a copy with me for another reason.
"It says here that you worked with xyz... tell me about that", err wut?
Recruiter had edited my CV before sending and had added some stuff that just wasn't true. Not been that unlucky since though
@major_clanger@SwiftOnSecurity There's a vulnerability underlies it all - you get those who sell these ideas, targeting the truly desperate (and fleecing them before leaving them to face the music). But you also get those who are just desperate to make it someone else who's wrong.
@major_clanger@SwiftOnSecurity I've had some weird conversations with that kind of mindset over the years, including one who insisted his driving ban should be annulled because the court sent papers to his old address (which he hadn't updated with them) and "broke his data protection"
As the (excellent) article notes, @NSPCC are entitled to hold an opposing point of view. What they're not entitled to do is to present a fundamentally biased report as a "balanced" review.
So, to put it another way @NSPCC have wasted charitable donations creating what, in reality, amounts to a propaganda leaflet in support of something that will *harm* the very children they claim to want protect.
Clearly, donations are better sent to @UNICEFhttps://twitter.com/bazzacollins/status/1385138496059449346
@alexbloor The word occasionally is being stretched there a bit I think.
None of those "checks" helps the recipient either - might avoid the user giving a wrong phrase, but does nothing for transcription errors
@cowboycoder@robinvwb@cybergibbons Our intuitive* app
* please see the reams of documentation we've generated to avoid confusion and help you interpret the clear interface correctly
Oh god no.
Buying a house is enough of a pain as a process, without adding a need to burn energy to it it too.
NFTs are a solution without a problem that they're actually the right answer to. https://twitter.com/BBCClick/status/1384468185643163648
@IanDunt The same people were also horrified that security teams let anyone near enough to Farage to milkshake him.
I think their position is: You should treat people as a potential threat, except for the times when you shouldn't
Only a proposal, but good.
It's also the first time I've seen it noted that sites can disable FLoC (not been looking yet, to be fair). I'll be adding appropriate headers to everything under my control soon https://twitter.com/BleepinComputer/status/1383861038076993539
@CatButtes@cybergibbons@what3words Yep, exactly. And things like "should we include plurals?" seem like an obvious early stage discussion. There's a suggestion they've tried to keep similar w3w's separate, so it looks like they failed to properly consider and scope it, let alone test the outcome
@CatButtes@cybergibbons@what3words It feels like they've taken a potentially good idea and handed it to a marketing dept rather than looking at how they can improve. IMO they should _easily_ have found (and removed) most of the issues @cybergibbons has highlighted, which suggests a certain lack of care
@CatButtes@cybergibbons@what3words I'm really disappointing in the level of evidence they give for their product being an improvement. Their "case studies" section is just links to news stories rather than actual research. I'd hope to see a white paper on why 3 words are better than 2 or 4, identified issues etc
@scriptmonkey_@TruthJupiter@cybergibbons@alexbloor@halifaxbeard@RealIvanSanchez In reality you'd probably want to factor in adjacent squares etc, so that a little bit of drift is OK, but more dramatic changes aren't, but you get the underlying idea.
In these situations, an app that reports incorrectly is worse than an app that refuses to work
@scriptmonkey_@TruthJupiter@cybergibbons@alexbloor@halifaxbeard@RealIvanSanchez I'd look for signs of location drift - if multiple samples give a different result, I would refuse to give 3 words and instead give "can't get a fix".
At least that way you don't end up with emergency services being dispatched to the wrong place.
@scriptmonkey_@TruthJupiter@cybergibbons@alexbloor@halifaxbeard@RealIvanSanchez This one was me, not friends :)
No embellishing, an accurate report of my experience trying to use it during an emergency call. I wasn't exactly trying to troubleshoot it at the time though, given I was standing by an unidentified metal object and waiting for EOD.
@scriptmonkey_@TruthJupiter@cybergibbons@alexbloor@halifaxbeard@RealIvanSanchez Not 0 signal, marginal signal.
The map did not display (as you'd expect - it can't reliably fetch it), and the target button led to multiple different results being returned - without a map, it was impossible to say where it was deciding we actually were
@mal3aby@David3141593@path_braenaru@cybergibbons@alexbloor@what3words Honestly, my expectation would have been that they'd done *and published* a bunch of research around it showing how rare issues would be. Yet, there appears to be nothing, just claims that appear easily debunked
@TruthJupiter@alexbloor@cybergibbons@halifaxbeard@RealIvanSanchez@scriptmonkey_ I've used it & we ultimately had to settle on "meet me in this carpark and I'll take you the rest of the way". The people I was speaking to sounded a little too familiar with w3w being a pain too. People I know in community healthcare aren't fans either.
So not "everyone" agrees
@cybergibbons@what3words Please re-do the list, it doesn't start at 0.
I suspect, ultimately W3W will be supplanted by a better system that addresses most of these issues.
Which is _probably_ why they're trying so damn hard to push it at the moment
@IanDunt It's the same underlying need to "fit the mold" they have in their head. People are more open about emotions now, so they expect everyone else to be - even those who have no desire to be laid bare in that way.
@IanDunt Any introvert will tell you that it's not just grief either - people seem to have no understanding for how others work. Lockdown saw lots of extroverts yearning to be out and expressing exhaustion, but how many recognised that's how *we* feel when pushed into social situations?
@cybergibbons Oh also, as it's unfair of me to dangle "bomb squad" and "EOD" without finishing the story.
They checked it, went "really not sure guv", let the tide cover it and got the Navy boys out to check it the next day. It was in fact the base of an upturned metal bucket
@cybergibbons Not the end of the world when you're trying to get EOD out to something you're supervising. But had I been calling an ambulance for someone, those minutes wasted may have made a real difference. So as a concept, great, but the implementation is so very, very poor
@cybergibbons and the map didn't really load properly.
So I had to give them 4 "3-words" and get them to check the location their end to see if it was the correct one.
Ultimately I told them to go to a car park that was nearby and I'd meet them. W3W was a complete waste of time
@cybergibbons I used it reasonably recently - stood on a beach, trying to alert the bomb squad to something that was being uncovered by the tide. Had to install the app, in a very low signal location - that worked fine, but the interface was unintuitive
@cybergibbons They could rebrand as "Whats The Four" & ride Twitter trends on the back of #WTF?
The reason they claim to have used 3 on their about page is because 2 wasn't enough. You'd hope the thinking went a deeper than that, but they don't appear to have published whitepapers on it
@SeanWrightSec You're interviewing people at the moment... is this a general tip or have you just spotted a CV from a, err, past acquaintance?
It is a wise tip though
@embedded_iot@cybergibbons It almost always turns into a sort of evasiveness because the conversation becomes more uncomfortable for them and they try to push it in a different direction (consciously or not)
@embedded_iot@cybergibbons Yes, in some ways it's not that different to the interactions @cybergibbons tweeted out with Mac fans earlier. People buy into something, and because they're invested in it, criticism of the thing is like criticism of them/their choice and they push back rather than listening
@raerhi@ShappiKhorsandi The police just down the road from me (I'm in England) also routinely carry guns because of the role they do. But, it's still very much an exception to the rule.
@hacks4pancakes It's weird, I worked with the army for years & never once did it occur to me that it was odd for them to wear uniform indoors. The uniform is/was camo (outside of no 1's etc), so that's what they wore.
@gennyble@hacks4pancakes A premium service would be that they advertise themselves as a cleaning professional, but then arrive and walk round talking about what a _fantastic_ job you've done, and they've never seen anything quite so clean.
@Spheron1@alexbloor@what3words > why they send two slightly different emails
It's their new product "What 100 Words" allowing you to uniquely identify an unsolicited email sent by anyone in their business.
The base list of words used is almost dictionary complete, but omits "Unsubscribe", "stop" & "consent"
@IanColdwater Doesn't matter how many videos I watch, the impression I always get is of an armed incursion rather than police holding the thin blue line.
They act like an invading force, not a service.
@Nominet@lukehebb@chaz_6@publicbenefituk > and via the causes we can support
Which have reduced considerably because funds were redirected to fund entry into markets Nominet had no business entering, and significant pay increases at the top.
Which is not unlike the previous decision to ignore the report written by the same person they've just rejected on some extremely spurious grounds despite widespread member support
@SafeSchools_UK@AFertileHeart@Miss_Snuffy An abuser desensitising with porn is doing so specifically for their own gain (or that of a contact). That very definitely *is* grooming. I don't think we should mischaracterise ill-advised teaching as grooming - you can easily explain the issues without use of emotive terms
@SafeSchools_UK@AFertileHeart@Miss_Snuffy I wouldn't use the term "grooming" in relation to only teaching kids that porn is fun. Reckless, even dangerous, yes - but grooming is a specific set of actions and we need kids to be able to identify grooming in order to keep them safe. So I do object to the terminology
@SafeSchools_UK@AFertileHeart@Miss_Snuffy I think you're mischaracterising me entirely there.
We absolutely should educate kids about the dangers of porn.
That's not what VFJUK's documents refer to, at all though. Those documents present a "teach abstinence only" type of approach, which history shows to be harmful
@AFertileHeart@SafeSchools_UK@Miss_Snuffy Based on the topics covered & your site, I'd suggest that actually your objection seems to stem more from a perception of what the bible says around some of the topics being suggested, but presented in a more authoritative form. This is then dressed up in emotive terms for impact
@AFertileHeart@SafeSchools_UK@Miss_Snuffy Because that's what grooming is - a process used by an abuser to desensitise the victim. Who, in your mind is the abuser here? i.e. who's doing the grooming, and for the "benefit" of who?
@AFertileHeart@SafeSchools_UK@Miss_Snuffy I think you've really got to stretch stuff to extremes to be able to actually apply that. also, you're using emotive words rather than substantive argument - grooming has a specific meaning in this area, are you suggesting the DoE is trying to make kids available to themselves?
@SafeSchools_UK@AFertileHeart@Miss_Snuffy Yes - altho there'll always be some polarisation in debate, especially around kids, there are some serious extremes. The links earlier feel _very_ much like part of a campaign against meaningful RSE - they just about avoid the words "missionary only, with lights off".
@SafeSchools_UK@AFertileHeart@Miss_Snuffy It's a hard balance to strike, because you need to ensure that watching porn isn't stigmatised - it's a perfectly normal habit, and you don't want kids feeling bad for wanting them to watch - whilst helping them understand the effect it can potentially have
@SafeSchools_UK@AFertileHeart@Miss_Snuffy What it has done is ensured that harms are perpetuated down the years - people, and particularly teenagers are going to experiment. Better to help them understand how to reduce the dangers a bit than "it's bad, never do it".
@SafeSchools_UK@AFertileHeart@Miss_Snuffy The documents linked, as I read them, veers more into the 1st than the 2nd: "The only “safe” message about anal sex is for it to be avoided in all
circumstances"
That position is entirely unhelpful - years of failing to discuss things like that haven't prevented them happening
@AFertileHeart@Miss_Snuffy@SafeSchools_UK In the context you've presented it, well-meaning Christians (your target audience) are going to assume that Brooks are somehow making an attack on religion.
Of course, that may be what you were aiming for here.
@AFertileHeart@Miss_Snuffy@SafeSchools_UK Actually, reading a bit more, the comments in your documents are almost a case-study in exactly why Sex Ed standards need to be improved, with more open discussion about real world activities/proclivities rather than being shaded in "no, we don't talk about that"
@AFertileHeart@Miss_Snuffy@SafeSchools_UK I've only scan read the links there, but they all seem to suggest that the only "safe" route would be not to discuss issues - the status quo shows that that's invalid.
Similarly, it suggests pushing prohibition on anal. Again, the status quo shows that approach doesn't work.
@Nominet@cipnt@publicbenefituk Respectfully, at this point, I'd suggest that what Nominet actually needs is a new *board* to steer it through the next few months, let alone the next 3 years.
@Nominet@cipnt@publicbenefituk Wasn't an earlier excuse that Sir Michael and Axel were a bad fit because you wanted a more ethnically diverse board?
Is there a list of forthcoming excuses for you continuing to do what you want in spite of the expressed wishes of a majority of the membership? It'd save time
@Nominet@cipnt@publicbenefituk You understand the membership wants change, but you seem to disagree quite heavily on what that change should be, otherwise you wouldn't have appointed 2 staffers back onto the board and moved a deposed board member into the role of interim CEO.
@nemesis09@hacks4pancakes FWIW, I had similar with the AA (roadside recovery) quite a long time back, and was able to use consumer protection laws to show their terms were unfair and overturn the charges. If Adobe tried that here, I expect you could probably do the same.
@nemesis09@hacks4pancakes Yup. Arguably utilities and (stretching a bit) mortgage providers have sunk costs you're offsetting with ERCs that they'd otherwise lose if you didn't complete, so you cld probably defend the charges a bit.
SAAS providers though? It's entirely predatory
@nemesis09@hacks4pancakes It's a thing here in the UK too. Not all mortgages have Early Repayment Charges, but most fixed rates do - you can normally overpay by up to 10% of outstanding balance/year. Sometimes it's best to wait the term out, go onto their SVR and then do your big overpayment
@baljemmett@FishermansEnemy@cybergibbons That's definitely the most pragmatic solution, the bulbs were about £20 each IIRC. Place that had them was built late 2017, so sadly they're still being inflicted on people
@IanColdwater@fsf But Ian, they missed his wisdom.
Never mind what he's said & done or how standing behind that might look to anyone theyre hoping to attract to the free software movement - he said some wise stuff & they miss it enough to ignore that he's also been extremely unwise in his actions
@FishermansEnemy@cybergibbons We had them (BC-3's) in a rental. Annoying as fuck, because the bulbs cost a good chunk more.
The other annoying one is the energy saving bulbs with the square connectors (G24d or something like that). Again, bulbs expensive and rare as hens teeth.
@lockdownurlife@Infosec_Taylor I got a rejection because a company's recruiter cold-called me in relation to an application whilst I was on another call. I answered and politely asked them to call back in 30 mins. Instead they emailed to decide they'd decided not to proceed.
Bullet dodged I reckon
@madnyc@kimvhyatt There's something really fucking dumb about Police thinking it's OK to use lethal force against someone who's retreating. He's not posing a clear and immediate danger to you/someone else, he's legging it.
Not to mention, they fired into a moving vehicle with another person in it
@djingonthenet@MarinaNigrelli We treat people when they exhibit drug seeking behaviour, so maybe we should send him and others like him to rehab for money-seeking behaviour? Given they feel trapped by their addiction, it must be a cry for support. Oh, and we'd need to confiscate their drug to prevent relapse
Honestly, the news story covered it quite well and would have been better without the opinion attached at the bottom.
It's a factual story, and the opinion doesn't add anything of value, even before we get onto the questionable framing.
When the Govt can't follow it's own procurement & transparency rules, whilst handling *our* data it seems more than a bit odd to be complaining about the unelected corps that are preventing them from collecting more of that data, despite knowing upfront the terms prevented it
In fact, not just unaccountable, but currently wrapped up in scandal for having given data away to private interests such as Palantir, under cover of an "emergency" contract that they then tried to quietly convert to a much broader long-standing agreement.
The opinion at the bottom by @BBCRoryCJ starts well and then descends into commentary about how Governments are being restrained by giant unelected corps.
Which rather ignores that the alternative is having your data sucked up unnecessarily by a giant & *unaccountable* govt
Their first, failed attempt, at an app tried to use the "push everything to a central DB" approach. It was widely rejected, on very good grounds.
What they've done here, is try to push that back in through the backdoor - replacing actual privacy with a "promise"
@N_A_Barnes@alexbloor@what3words@openstreetmap You know what's worse than giving a vague address? Sending the bomb squad to the entirely wrong location because you've given them the wrong W3W as a result of the app not behaving well in low coverage areas.
Nice idea, needed someone else to do it to really work tho
@N_A_Barnes@alexbloor@what3words@openstreetmap I was asked to use it on an emergency call recently. It was absolutely fucking useless.
The idea's nice, but the app implementation is horrific and unintuitive - are the 3 words I'm giving you *here* or are they where the little blip is showing?
@OracleCloud@Oracle In fact, finding an abuse contact for @OracleCloud is so hard, even their support can't do it. I'm getting bouncebacks from the (invalid) email they gave me.
Left playing mailbox name bingo to try and get a report in.
@0xDEADBEEFCAFE As FUD goes, though, it's not faring too well.
I'll admit, I almost didn't bother voting on something so obviously written with an agenda, but then I decided I also didn't want them trumpeting a "yes" because of selection bias in those who voted https://twitter.com/bentasker/status/1380804846031400961/photo/1
@0xDEADBEEFCAFE Calling someone with the profile of RMS out for being toxic caused division? Go figure.
I _think_ the majority of people who signed understood there would be some division.
Also, despite it saying "some of us" the Poll admin's name doesn't appear in the signature list. https://twitter.com/bentasker/status/1380804248548601856/photo/1
@0xDEADBEEFCAFE I received that email too, the positioning of it & the linked article is awful.
"People have been receiving hate for signing, therefore the letter backfired and shows RMS was right."
Sure, the fact that his support will send out a stream of hate in his name really speaks well.
@peterlewis@alexbloor@cybergibbons To avoid half empty cans of beans, we used to use the approach that I'd finish up whatever littlun couldn't eat. But, now littlun's not so little there are no half empty cans *and* I don't get any.
@BrandRev1984@torproject You can flash some devices though, so wifi is still an option if you're ok with doing soldering in order to flash Tasmota onto them (and obvs check they're supported before you buy)
@BrandRev1984@torproject I've been using it a while now with no real complaints, but privacywise it'll depend on the kit you use with it - if you link up Ring/Nest etc then the same problem exists because the kits going to them first. You want Zigbee or Zwave rather than wifi devices
@ManishEarth The same's also true at a smaller level - round here "tractor" is pronounced more like tracker (there's a very soft T hiding towards the end). In fact "t" in a lot of words gets softened out of existence, and "light" becomes loit.
go 1 county to the west, there's none of it
@sgbett_614@neil_neilzone@alexbloor@NexusUKOrg@KingDaveRa Taking the grain of sand a bit further though - it used to be common to hear people say "why would anyone target me, I'm not that important?". Both assume some level of deliberate targeting rather than being caught up in a dragnet
@sgbett_614@neil_neilzone@alexbloor@NexusUKOrg@KingDaveRa The problem with the analogy is uptime is a point in time thing - any given moment you're up or you're not. "secure" stuff gets stored and attacked at later points in time, until either the attacker's lost interest or the security has been breached.
@NexusUKOrg@alexbloor@neil_neilzone@KingDaveRa Even if there were some magic maths that could reach a compromise on E2EE, there's always going to be an underlying distrust of how that system could be (mis)used in the future. The "protection" it gives is likely to be short-lived, but the harm it can do might last much longer
@NexusUKOrg@alexbloor@neil_neilzone@KingDaveRa That was the thin end of the wedge though, and at the next strike of the hammer the compromise was broken.
Worse still, the original well-intentioned goals of it were severely undermined, because a much, much wider audience was sharing knowledge on how to bypass
@NexusUKOrg@alexbloor@neil_neilzone@KingDaveRa The original compromise was that the very worst content on the net would be filtered, not just to prevent people from stumbling onto it, but to make it harder for those who wanted to to access it.
All very laudible
@NexusUKOrg@alexbloor@neil_neilzone@KingDaveRa (well, fuck ups aside).
But then, the copyright lobby decided that it was improper that ISPs have this infra and *not* use it to block sites they were complaining about (Pirate Bay being one of them).
The courts sided with them, and Newzbin was blocked.
@NexusUKOrg@alexbloor@neil_neilzone@KingDaveRa As with all things, it was possible to bypass, BUT the only reason you'd be seeking information on how to do so would be because you were looking for child abuse material - so knowledge of how to bypass was reasonably well contained, and the system reasonably effective
@NexusUKOrg@alexbloor@neil_neilzone@KingDaveRa Actually, there are historic examples of compromise/middle-ground in this area as well as how it panned out.
Back in the day, "most" child abuse sites were blocked by devices on the network - known as Cleanfeed.
@sgbett_614@neil_neilzone@alexbloor@NexusUKOrg@KingDaveRa The problem with doing anything through obscurity is the relative security you had tends to just disappear when someone makes a tool to make the sift easier.
Someone almost always will, too, even if just out of boredom.
@sgbett_614@neil_neilzone@alexbloor@NexusUKOrg@KingDaveRa In practice it's a bit more complex than that though, as you have to factor in the value of reuse.
It'll cost us X to trace txn Y back to someone. X is much more than the perceived value
But, we'll then have the tooling to do the same (or most of the job) on Z.
@AlecMuffett FWIW, as a parent I agree that it's absolutely impossible to keep an eye on what they do online 100% of the time.
Just as I've no idea who they might speak to through the bars of the school fence.
The solution to both is the same - I communicate with $offspring
@AlecMuffett Also, although a shop-keeper is supposed to make sure kids can't buy porn
a) he doesn't record *everyone* ID just in case - there is no record of "Mr Jones, Razzle, Monday"
b) it patently doesn't happen in the real world - kids get hold of porn just as readily as alcohol
@AlecMuffett This insistence that it's an easy problem to solve if you could just $something is at the root of every failed attempt to protect us/kids against $evil.
Complex issues need well thought out solutions, and societal issues always need education not flawed attempts at enforcement
@AlecMuffett The exact same thing is being done here, putting all of the responsibility onto the supplier. Should you take some responsibility? yes. Is there any hope of "reforms" working if only one part of the chain is responsible? hell no.
@AlecMuffett The problem, of course, was that all the effort was focused on the vendor. There was no attempt to educate kids, nor was anything done to dissuade adults from proxy purchasing - all they did was to "other" the supplier and hope the problem would go away.
@AlecMuffett - Kids still lay hands on booze
- Proxy purchases still happen (adult buying for kid, but shopkeeper's still potentially liable)
- If you look under 25 and forgot your ID, sorry pal
- Shop assistants get abused by <25s because "I'm obviously over 18 tho"
@AlecMuffett All in the name of protecting kids - so must be good right?
But, what was the actual outcome?
- Various (low paid) shop staff got stung with stupid level fines for making a simple mistake
- Some lost their livelihoods as the result of those mistakes
@AlecMuffett Trading standards also maintained a campaign of test-shops - sending minors in to try and buy alcohol.
Although their test subjects were <18 some of them undeniably looked significantly older.
The argument was that we must protect kids from alcohol so what's a bit of trickery?
@AlecMuffett so they increased the punishments for being caught selling to <18s. The person on the till was looking at a large fine and the *threat* of 6 months inside.
The license holder could be looking at a multi-thousand fine, forfeiture of license and potentially time inside
@AlecMuffett The shopkeepers comment prompts a memory.
I used to run an off-licence, so it's alcohol licensing laws that I'm thinking of here rather than selling smut. But, the underlying impact is the same.
They wanted to do better at keeping alcohol out of kids hands (obvs)
@SeanWrightSec Also "not a hack", yet
> using software to imitate our app
If that functionality was supposed to be restricted to their app, then surely that's a broken access control?
What definition of hack are facebook _actually_ using?
@SeanWrightSec They didn't hack us, we *gave* them a feature that gave access to that data protected by some text that said "don't be naughty".
In terms of PR, they'd have been better off not writing the post.
@KingDaveRa@alexbloor@NSPCC Exactly this. We all want what they're aiming for, but the way they're suggesting it be done is completely and entirely wrong.
@PCOwen_a@RogerHelmerMEP It's quite generous of you to give him the benefit of the doubt and suggesting he believes any of this, rather than being a sociopath who knew exactly the harm he was doing.
@RealSexyCyborg@davemjohnson A cynic might suggest that that distinct lack of care had the "benefit" of also giving them an exclusive to report on.
That's not to say that it's deliberate, just that the outcome may not exactly serve to deter some of the more money/career minded hacks.
@rotate26chars I quite often get the other way:
T: Need it tomorrow, sorry for last min, but very urgent
M: Here you go
T: I'll let you know what the customer says when they test it late next week.
@jackisnotinabox@alexbloor@SmartEnergyGB In a previous rental, British Gas accepted a reading from the letting agent that wrapped the numbers round (he read the wrong meter) without batting an eye. Would come as no surprise if the approach to handling numbers in IHDs was similarly unsafe.
@jackisnotinabox@alexbloor@SmartEnergyGB My assumption at the time is that it had a simple usage counter, and a bit of logic that said the counter could only go up - so one malformed reading sets the counter/usage high, and subsequent are just ignored.
Doesn't explain the reset though, it was $100s out
@agile_phil@octopus_energy@NexusUKOrg@aaylett@SteveM_1960@SmartEnergyGB@alexbloor Yup, HAss is standalone - you can just run it on a Pi or similar.
> I think staying offline is v hard
It is, but every bit of breakage I get is tied to external services. Not a mainstream use-case though I know.
I think it'll be a v long while before I get another smart meter
@alexbloor@SmartEnergyGB The leccy meter at our old place did this to me too. Phoned the supplier up and they had me take readings - "oh, they match ours".
It was only reporting the increased amount to the IHD, which corrected itself about a week later.
Undermines the "benefit" of IHDs tbh
@agile_phil@octopus_energy@NexusUKOrg@aaylett@SteveM_1960@SmartEnergyGB@alexbloor So, to make it useful, what you really need is a IHD that speaks to set of Zigbee - one compatible with the meter, the other so it can talk to Homeassistant (or whatever) to control devices/shift load about?
Assuming you want to keep everything this side of your broadband
@SmartEnergyGB@alexbloor That's a no then, isn't it.
A technical or billing fault at the supplier's end can accidentally disconnect people's supply remotely. Sure, it'll technically be illegal, but that's no comfort to the people potentially freezing to death.
There's less protection with a smart meter
@IanColdwater Frankly, I'm surprised you at least got the benefit of a number on that rather than a much vaguer "16-20% spoiled their returns so weren't counted"
@vxcamiloxv@FOSSfirefighter@defcon201nj@starsprout@EFF Much like @FOSSfirefighter I'm done - you've either drawn a decision based on your own biases (and not bothering to read up) or you're not arguing in good faith.
This isn't some smear campaign against RMS just because he holds some opinions
@vxcamiloxv@FOSSfirefighter@defcon201nj@starsprout@EFF So yeah, if that's all you've read you've missed a significant chunk of the issue because that post doesn't bother to mention the issues people *around him* have reported.
@FOSSfirefighter@vxcamiloxv@defcon201nj@starsprout@EFF Either way, there isn't really any "cancel culture" in lots of people taking a position of "I won't contribute to FSF, any of their projects or events in anyway while he's there"
@FOSSfirefighter@vxcamiloxv@defcon201nj@starsprout@EFF I suspect they've not actually read the letter and are labouring under the misapprehension that this is "just" about the Epstein related comments, rather than also being about a pattern of making women feel uncomfortable and contributors alienated.
@NataliaAntonova She's recently had a shot, and NYC Health says theirs a immunization clinic nearby, so almost certainly taken on the east side of the park
@NataliaAntonova Lot of luck involved if that was right - I tried London first and NYC second as they seemed like obvious starting points.
Building on the right helps suggest where in the park it was - it's not visible from the other points that streetview has, but you can't walk paths to chk
@NataliaAntonova Exit sign is in English - US or UK?. Monument on skyline, "UK green tower monument London" gets 0, "US green tower monument NYC" gets Prison Ship Martys monument.
Google Maps says that's in Fort Greene Park. Streetviews a bit limited, but I'd guess near the playarea(or that dir)
@alexbloor I did find a picture the other day of me waving a big union jack as a kid though, so they can sod-off: I was waving the flag years before they decided to fill their zoom calls with them
@alexbloor The insistence on flags everywhere just comes across as insecurity to me.
But then, I could never understand the US habit of making kids declare allegiance to the flag either. It's not patriotism in practice, just performative theatre.
@alexbloor@markrocks6@SmartEnergyGB Particularly given the risk they may choose to forgo hot food only for their "smart" meter to be used to remotely cut them off following a billing error and leave them with no heating either.
@Tucker5law Even if we accept that storyline as a representative one to tell, I guarantee that story doesn't include the word "Windrush". Some came over and, ahem, "transformed themselves" but then the Home Office binned the paperwork and decided to deport them.
@RumenaN@emmabeaumont003@ArdentSlacker@its_natclayton@tha_rami > to pass a test.
If you want localised proof of this - our Foreign Secretary Dominic "hadn't quite understood the importance of the channel tunnel" Raab passed the bar - he's a lawyer by trade.
As Brexit secretary, he didn't even read the Good Friday Agreement in full
@si88@HannahAlOthman Even worse now they're doing "pre-April fools" stuff. Bad enough Xmas starts in September, now we'll all be pranking daily from 1st Jan...
@juliecuriousity@LawyerLiz@lockdownurlife@zsk Yes, and for much the same reason. The idyllic world where we all remember 100s of strong unique passwords doesn't exist. The harms of pwd reuse are very real, and *securely* recording passwords helps address that despite it being against the "don't write it down" rule of old
@juliecuriousity@LawyerLiz@lockdownurlife@zsk I don't disagree that some will be keeping it by the computer. It was *you* though who implied NCSC recommended against writing them down.
And keeping a book by the PC is still better than using 1 password for everything, as it at least requires physical access
Tech measures help prevent and detect intrusions, but you still need working business processes to deal with stuff that gets through
The bigger you are, the more likely it is someone will put the effort in (and the more staff you have to argue if responsibilites are ill-defined)
Things like DB access logging are all good technical defences and shouldn't be overlooked, but they're worth absolutely squat if the business layer stops you operating in the way that's needed.
*Why* were legal empowered to override these basic precautions? Why didn't the corporate structure intervene and override legal?
If @Ubiquiti ever want to regain trust, that's the underlying rot they need to address - their incident response seems to have been crippled by this
> Legal overrode the repeated requests to force rotation of all customer credentials, and to revert any device access permission changes within the relevant period
It's easy to blame legal here, but actually this is an issue with the corporate structure/their Incident Response
To me, that invalidates @Ubiquiti as a potential vendor in future. A breach is defensible, but lying about a breach and leaving your customers exposed is absolutely indefensible.
@juliecuriousity@LawyerLiz@lockdownurlife@zsk It's been a very long time since the advice was "never write it down", because it's now well understood that the outcome is worse than providing a means for stronger passwords to be used.
Password mgrs were controversial when they first launched too
@SeanWrightSec Google's approach to paid accounts in general is weird
I'm on a legacy free AfD account. If I want to pay for more storage I can't - they literally won't let me spend money with them unless I also move to the pay-per-user AfDs.
So Microsoft get my storage money instead
Excellent news.
Trust in health services (and their providers) is essential, the Govt can't just go around undermining that by trying to sneak major deals through under-cover of darkness. https://twitter.com/openDemocracy/status/1376822006549741569
I've intermittently followed this across mailing lists and reddit.
Seems I missed a bit, good write up
Buffer overruns, license violations, and bad code: FreeBSD 13’s close call https://arstechnica.com/?post_type=post&p=1751073
@The_AVPA Ultimately, this is just another way in which the measures are completely ill-thought out and ineffective. Last time they left out social media, this time they've managed to leave out porn sites.
The underlying problem is that what they want doesn't translate to reality
@The_AVPA@eliomen@AlecMuffett@family_martyn I think you're confusing two meanings of possible - claimed & effective.
They claim (and even try) to block VPN, they seldom manage to do so effectively. The result is often that you inconvenience/block legit users whilst doing nothing about the 1s you actually wanted to block
It's a Creme Egg... I've literally eaten them battered, and would again.
Anyone who thought they were having a healthy snack probably hasn't given any of their other snacks any thought either. https://twitter.com/Ryanintheus/status/1376321731778932739
@alexbloor@rbairwell@ninkosan@MatthewHarrold The meter would also have visibly changed, so if they'd somehow got access (shared area in flats etc), when he went around checking things he'd have noticed and gone "huh...."
@alexbloor@MatthewHarrold Yep, or cutting the wrong person off by accident - companies still manage to bill the wrong house for the wrong meter despite things being serialised and "well recorded" - it'll be just as easy to cut the wrong house off.
A physical visit being required mitigates that a bit
@MatthewHarrold@alexbloor They do, but that assumes they'll be followed. Regulations about billing are fairly tight, and yet here we are, once again, where energy companies are being forced to refund due to overcharging.
@alexbloor@SmartEnergyGB My last place had smart leccy and gas meters. The Gas meter had to be manually read, because they couldn't get it to connect.
The leccy meter could be remotely read, but for whatever reason had weird comms issues with the little display - leading the display to report £100s/day
@alexbloor@SmartEnergyGB I would say also, that the money saving "benefits" of a smart-meter are often short-lived and can just as easily be achieved with a clamp meter.
You only save if you're watching usage on the display, and that phase doesn't last all that long for most people
@IainCorby@AlecMuffett@SafeToNet_FDN@The_AVPA@DCMS Not sure that's a good parallel - the playground represents a small amount of activities, and a relatively small amount of time per day. Online platforms represent much much wider use-cases, including trying to actively stimulate art etc
@astroboysoup@Twitter Never recognises Ive read them because I tend to right click and open in new tab.
Still a good idea, but means Ive literally never seen the "thanks"
@IainCorby@AlecMuffett@SafeToNet_FDN@The_AVPA@DCMS All the suggestions I've seen so far for Age Assurance seem to involve scooping up loads of data (whether PII or analytics based), but end up leaving the exact same underlying problems - just with the risk of leakage added on top
@IainCorby@AlecMuffett@SafeToNet_FDN@The_AVPA@DCMS I chose Feder precisely because I recently became aware of him and had to have a conversation with mini-me about the need to look closer at content, as it's not always what it seems. YT was promoting this stuff to my kid, because animals.
@IainCorby@AlecMuffett@SafeToNet_FDN@The_AVPA@DCMS The scary bit, is that's probably the least-worst outcome.
In between "launch" and failure, we might have sucked up a huge amount of personal data, and then lost control of it, condemning an entire generation to live with the consequences of our attempt to protect them
@IainCorby@AlecMuffett@SafeToNet_FDN@The_AVPA@DCMS This seems to be headed down much the same path as the ill-fated DEA P3 implementation: DCMS will try and shirk responsibility for actual requirements/protections, instead pushing it onto industry. Much lamentation will follow when it turns out to be unworkable
@IainCorby@AlecMuffett@SafeToNet_FDN@The_AVPA@DCMS And this is the problem - it's been literal years since the DEA was passed, and these are really basic questions. But there's no answer for them, or how the age assurance implementations will actually work beyond handwaving
@IainCorby@AlecMuffett@SafeToNet_FDN@The_AVPA@DCMS Depending on the age, +/- 2 presents vastly different risks of exposure to the stuff we want to protect them from. An 11yr old mixing with 13yr olds is very different to a 17->19
How do we decide what's proportionate? Isn't it just moving the goal?
@IainCorby@AlecMuffett@SafeToNet_FDN@The_AVPA@DCMS > Just like them not coming with you into a bar
Taking the analogy - the result is presumably them hanging out down the back of the skatepark instead so they can stay in contact. Moving from a "safe" youthclub to a much more exposed area for fear of losing contact with friends
@AlecMuffett@SafeToNet_FDN@The_AVPA But then, if it's hard to prove someone is definitely <18 it's even harder to prove they're <14 (say) unless you're going to start collecting data on parents and requiring their consent. That consent may not be given over concerns of data security rather than platform safety
@AlecMuffett@SafeToNet_FDN@The_AVPA You only have to look at something like Reddit, where there are 12-13yr olds "trolling" to see why this might be an issue that undermines the entire house of cards. Can't get access to the "adults", but can post their necro-porn in a kids safe area to get that hit of attention?
@AlecMuffett@SafeToNet_FDN@The_AVPA It also occurred to me that we talk about >18 (and >16) but reality might be different. Do you actually want your 9 year old talking with hormonal teenagers (who are just as likely to share problematic content amongst their peers)? So there might also be pre-teen age enforcement.
@SafeToNet_FDN@AlecMuffett@The_AVPA Connections are the other thing - kids are unlikely to want to just lose their online friends who got older, so may just start congregating somewhere where they can have access to their >18 mates. Then we're back at square 1.
And as you say, siblings are also another problem
@SafeToNet_FDN@AlecMuffett@The_AVPA If you've created that content in a "gated" community (i.e. <18 only) then when you cross the age threshold, what happens to your account (and by extension the content linked to it)?
The refund policy is shady as hell. Purchase price is pegged to USD, but buybacks/refunds are tied to the original BTC pice.
Tesla can choose to refund either USD or the BTC you paid - if BTC crashes you might get lots of BTC worth $3.50 back
https://arstechnica.com/?post_type=post&p=1751905
I still can't get my head around what the hell the board were thinking allowing him back.
There's no way it was going to fly, and certainly no way to make it sounds like it was a good idea in the first place
https://arstechnica.com/?post_type=post&p=1751815
@AlecMuffett@SafeToNet_FDN@The_AVPA@DCMS If you recall during the original DEA p3 attempt there was a quiet ack that kids would use Tor/VPN whatever.
There's similar here
>there is absolutely an unintended risk potentially that children go to less safe sites because they can’t access the sites that they want to access
@AlecMuffett@SafeToNet_FDN@The_AVPA@DCMS I definitely got a sense of that - there were questions where the answer raised more questions, there were others where the "answer" wasn't really one all.
It makes it feel like the Govt wants to be seen to "do something", but quietly push the onus onto others to solve problems
@SafeToNet_FDN@AlecMuffett@The_AVPA@DCMS Education about online safety is important, part of that is about not over-sharing - it's unwise to undermine that message by dropping in a bunch of inavoidable "except" statements
@SafeToNet_FDN@AlecMuffett@The_AVPA@DCMS True, it's a badly worded note on my part.
But, the underlying concern is the same - the idea that we'd use biometrics at all in the context of trying to enforce a < 18 bar is potentially quite concerning.
@AlecMuffett I was reading about this last week, it's absolutley nuts,
Seems I'd also missed out on the Opnsense stuff (https://opnsense.org/opnsense-com/)
That's just not a good way to conduct yourself
@SafeToNet_FDN@AlecMuffett@The_AVPA@DCMS The DEA passed in 2017 - that the government still don't seem to have answers to these questions says quite a bit about the underlying feasibility - even before we get onto how compliance is ever actually going to be enforced.
@SafeToNet_FDN@AlecMuffett@The_AVPA@DCMS There's talk of liability around false negatives, but what about the fallout of a data leak? We should already be teaching kids that what you put on the net stays on the net, but instead we're going to encourage them to provide *more* data into a new silo of unknown quality?
@SafeToNet_FDN@AlecMuffett@The_AVPA@DCMS Worth noting that DCMS suggestion biometric data could be combined to strengthen confidence in this.
So, part of the solution is that we're going to encourage minors to provide biometric data?
@AlecMuffett@SafeToNet_FDN@The_AVPA Not to mention the challenge in proving that someone is underage. You can expect an adult to have ID, a credit record etc. The absence of these doesn't make them <18 though - they might simply have entered false details
@AlecMuffett@SafeToNet_FDN@The_AVPA Also, what's going to happen when the photo based Age Assurance AI that the AV lot have been crowing about has a high false negative rate & lets a bunch of adults in?
If we need this stuff to protect kids from adult content, surely any slipup would be completely unacceptable
@ArjanKleene@codykonior@tnewmstweet@pierce@carolinesinders I guess, at a point, your own: Dear Finance, our employees are getting harassed on Slack, and they won't fix it, please cancel the account, we'll have to use Teams or something instead, HR.
Really is a dumb move by Slack, imagine adding harrassment + spam as a feature
@DavidinKent@alexbloor Scotland seems to manage just fine with a system where you're tied in (subject to survey etc) once an offer has been accepted.
It does make moving from Scotland -> England (or vice versa) risky though as you can be screwed over by the English part of the chain collapsing
@genehack@snipeyhead@hacks4pancakes To be fair to her, most of the (non-delayed) diners were in suits/shirts/trousers whereas I was there in my hoodie.
Goes to show though, you should never judge based on looks - I worked hard to get where I am, if I want a meal I'm having it dressed comfortably
@genehack@snipeyhead@hacks4pancakes That's my approach nowadays. I remember walking into a Hilton's restaurant for a meal with my wife and us being asked if we were on the delayed flight (the free buffet is over there). The waitress looked a little uncomfortable when I said "no, table for 2 please"
There's an active phishing site sat on @Netlify, pulls the user's domain from their email in the URL fragment, then requests the domain's favicon via google to make it look more legitimate.
When submitted, it'll redirect to the mailbox domain https://twitter.com/bentasker/status/1374396994194575368/photo/1
@GazTheJourno That's definitely not a bad thing to add
It's more the "you *must* blah blah, strictly forbidden" type of legal disclaimers.
Much like an OTR chat with a journo, need to get positive confirmation from the other side *first* because you can't bind someone with unsolicited mail
@GazTheJourno Button's labelled "proceed" might just be the new "if you've received this in error" email footer - about as legally binding as putting a post-it on it
@Nominet Very "you can't fire me, I quit!"
Hard to read as falling on sword (the time for that was weeks ago), its more making a promise, any promise as you're escorted out.
@shiftygeek@PrivacyKai This is underrated advice IMHO.
I'm the same, I generally keep a very calm/cool head. It's helpful when everything's on 🔥and people are fanning the flames.
But, in interview, it can seem like you're not engaged/interested and so you get passed over for someone more enthused.
@KathRella@The_AVPA@TheRealRevK@rachel_norfolk@neil_neilzone@alexbloor My wording was a bit more generous that yours, but, yep I think we're pretty much in alignment.
Youtube can't manage to keep inappropriate content out of the Kids section on a service they have full control over. How these guys think they will manage on the open net I don't know
@wolfniya@The_AVPA@FloellaBenjamin@BBFC An organisation who only exists because of an illiberal and untenable overreach in law, who (to be fair to them) have been royally screwed over by the Govt delaying implementation because they realised it's a) unpopular and b) won't work
@KathRella@The_AVPA@TheRealRevK@rachel_norfolk@neil_neilzone@alexbloor I wonder if they've considered that kids might just use virtual webcams in order to playback a video of an adult and fool the AI.
Which is exactly what I'd do if this came into effect - there's no way I'd feed real data into that privacy bonfire
@alexbloor@VModifiedMind > were acting with bad grace, and malintent.
It's one of those cases where Hanlon's Razor doesn't really do them any favours either. Either side of the dichotomy leads to the same conclusion: they need to be removed.
@davidareader@dbhabuta@whois_search@Nominet That was my first thought too - banking on it being close enough that they can reweight a bit to make it through. Either way, if they do somehow win, it'll now feel suspect
@charlesrandall@aaisp Heh, I'm in the UK.
To be fair @aaisp are something of a shining star amongst a much gloomier background of UK ISPs that aren't great (though, admittedly better than some of the CA ISPs - least those I've had dealings with)
@charlesrandall My ISP (@aaisp) does things properly, monitors that stuff and actually acts on it. In their control panel I can see graphing for the connection
While back I had IPv6 issues - they helped narrow it back to my router's CPU failing to keep up.
Decent ISPs are definitely possible https://twitter.com/bentasker/status/1372206560999575561/photo/1
How do energy companies manage to get their "estimated consumption" so far out at renewal time? They've estimated my annual gas usage at nearly 3x actual, and under-egged leccy by about 50%
Means you're comparing unrealistic figures against the rest of the market.
One might speculate that a CEO receiving >£700k/yr should have a good handle on that fairly basic premise.
So either Haworth doesn't, and isn't worth the pay, or he and @Nominet's senior team are well aware what it is they're shovelling.
As the incumbent if you're having to argue against the other side, rather than highlight the benefit/ROI you've brought, you're almost certainly the problem.
"Oh but it might all go wrong" isn't a good reason to keep you, especially at a cost of >£700k/yr.
@Nominet's management should, in fact, be trying to tell everyone how much benefit and value they've brought/added not how "bad" not having them would be.
Except, as shown here - https://twitter.com/Spheron1/status/1371504733287026697 - they can't actually back such claims/
It really is just more desperate FUD by @Nominet. The playbook they're following has been clear from the start - try and declare part of @publicbenefituk's plan "illegal" and then try and sow doubt over stability as a result of that.
The UK registry shouldn't be stooping to this
@Nominet Isn't it part of your job to develop continuity plans so the org can't be destabilised no matter who's hit by a bus/meteor/EGM?
If that's in place, there's no issue. If it isn't then leadership has failed
Got an email from @nominet earlier "your domain will be cancelled".
Crapped myself, just as I did when LetsEncrypt started failing for it weeks back.
Then, I read it again and saw its not the domain I care about, but the .uk I didn't want but was "gifted" in the hope I'd renew
@Tucker5law@TheDaliMale Unfortunately the media (and lets be honest, people) love to stick a name on it.
We had the Suffolk Strangler/Ipswich Ripper here a while back. It's just giving a place in infamy to someone who deserves to be forgotten - it's his victims who should be remembered
@SoftDvil@alexbloor Fair point, though it still sounds like it has a slightly better chance than Chicken Tikka Lasagne. Though I've never had pizza and thought "this needs gravy"
@alexbloor It's not even got the saving grace of being something lasagne like that they've stretched and named it. They've basically just changed the meat and it's sauce.
That cannot have tasted good
@alexbloor I put yorkshire puddings on a pizza once, but there's a big difference between trying something (excellent) drunk, and businesses encouraging this kind of weird mix
@CPetersen_CS@MerrittBaer That, sadly, turned into a TCP vs UDP joke in my head and felt really out of place/context. Then a few seconds later I actually got it.
@guy_herbert@neil_neilzone@cyberleagle@decodedlegal Which is the other problem with trying to do comparisons in the first place. It was incredibly lazy of the ICO to try to do so, even before you consider Neil's many good examples
@guy_herbert@neil_neilzone@cyberleagle@decodedlegal I guess the answer you'd need to find is whether there are psychological harms that can happen online that can't (or are staggeringly unlikely) offline. i.e. are the online harms the same as offline - physical, or are there others, and what are their severity.
An excellent post, including the often-overlooked point that if we're trying to make the internet "safer" there are are vulnerable people other than kids that get ignored by schemes like age verification. https://twitter.com/decodedlegal/status/1368884494883766274
@elwell2000@neil_neilzone@alexbloor@EdSciFest Which is only made more unacceptable by the fact their plan entails collecting vast amounts of PII relating to ordinary net users (parents or otherwise). History has shown, time & time again that anonymised information can be de-anonymised.
@elwell2000@neil_neilzone@alexbloor@EdSciFest The AVPA approach is much more to shut that kind of stuff away behind a lightly frosted screen. Then, he either grows up never having learned (so we get a generation of extremely gullible net users) or he's that much worse affected by stuff that gets by the screen
@elwell2000@neil_neilzone@alexbloor@EdSciFest My littlun's got a thing for wildlife shows atm. Unfortunately, he stumbled across Jacob Feder on youtube... But, it led to a conversation about how you can identify fake content, as well as unethical content online and shouldn't just trust what they claim to be saying
@CoachPalmer3@Yorkshireman75@AndryPresh@Marina_Sirtis The reason she was able to leave the country is:
The US Government asserted diplomatic immunity on behalf of 43-year-old Sacoolas following the road crash which killed Mr Dunn outside RAF Croughton in Northamptonshire in August 2019.
This is, unfortunately, one of the nasty side-effects of too much focus on "cookies".
Cookies are the mechanism used to track users, but it's the tracking/profiling that' the issue
FLOC is just more of the same, by alternative means
https://www.theregister.com/2021/03/05/eff_google_floc/ via @theregister
@MarinaHyde Can't escape the feeling that it their redecoration ever makes Grand Designs, it'll include the sentence "Boris has overshot the budget, but has managed to raise additional funds by dipping into the NHS pay fund"
@fwrnr@hackerfantastic@supersat We went to very different schools😀I had a teacher tell me he ought to beat the shit out of me. But then, when someone (cough) figured out how to take control of other desktops, they called me in & asked me to find all the ways and close them
@Barclays you might want to talk to your web-team & have them make changes so that your IB login page doesn't lock up the main JS thread when your telemetry is blocked
Just sits trying to repeatedly send to https://we-stats.com/ for a bit, blocking further input into fields
@AlecMuffett So they've written a directive so broad it picks up hobbyists, and ordinary businesses and then said "you must have a representative based in the EU".
So either they'll get a bunch of new companies acting as front's for pay, or no compliance
@AlecMuffett > In cases in which a DNS service provider not established in the EU offers services within the EU, it must designate a representative under NIS2. This representative shall be established in one of those EU Member States that offer these services.
Erm.....
@0DDJ0BB@philosophene > if someone is getting a vaccine in their state, their state prioritizes a condition or situation they align with.
Or they just got lucky, which is also absolutely fine.
If you're running your own authoritatives, it looks like you'll fall into this too:
#pdfviewer' target=_blank rel='nofollow noopener'>https://surfdrive.surf.nl/files/index.php/s/aqDquHZMO2SgHWY#pdfviewer
Prediction: this will be enforced unevenly between member states, leading to outright confusion on what's required, with important stuff slipping through cracks
Chalk up another victim of the law of unintended consequences.
So many "bad" laws are the fruit of good intentions that have been implemented with too little thought/scrutiny leading to an ill-defined output. https://twitter.com/AlecMuffett/status/1367505409297305603
@Dragon2611@gilesdavis@alexbloor@publicbenefituk@portfast@aaisp Yup, but various ISPs are Nominet members (including @bt_uk).
Others (like Virgin) have Nominet membership within their group (Virgin Media Business) rather than the consumer focused ISP being a member, but to me at least, that'd still count enough to threaten to move
PublicBenefit have a credible plan to maintain stability. It's @Nominet who tried to call the 2nd resolution illegal.
The .uk registry has a job to do, that it's more concerned with spreading FUD highlights exactly why this needs to happen.
If you're a member, Vote Yes
If you scream about how something will destabilise the org, of course people will ask what your business continuity plans are. Either you have one (so it won't be that destabilising), or you don't and shouldn't be in the job.
It's not even like they need the ads, because they've got their staff borderline harassing members to try and convince them to vote No. Meanwhile, their cack-handed attempts to derail continue to backfire
Just like the "concessions" they offered as a result of @publicbenefituk gaining traction, all this does is highlight the issues. They've spent money on ads to try and sway a members-only election, rather than giving it to the charitable causes that they reduced funding too
@hacks4pancakes I've had similar feelings in the past, the stuff that I've felt was taking the piss most has all been voluntary or token-billed. I think there's a tendency for ppl at those orgs/charities to get caught up in their mission & forget about everything else, so they drag you with them
Err @FedEx
> Password cannot contain spaces, ~, single quotes, double quotes, < or >.
You *are* hashing passwords rather than putting them into SQL queries in plaintext right?? That ruleset looks a lot like someone (badly) trying to avoid SQLi
@GreenBlueC@ZemkesWolfpack@LukeParcherShow@GoodPoliticGuy Just be glad that you didn't scrap steam catapults on your new carriers to save a few quid - requiring VTOL capabilities on the airframes - and then scrap your Harriers on the promise of F-35Bs that didn't fully exist yet
That would be embarrassing... hello from the UK btw
@hackerfantastic@Rot13E Kinda my feeling on it too, my feed already suffers in terms of signal-to-noise ratio (OK, sometimes I contribute to that too).
If stuff start disappearing behind pay-tweets, then it'll just be noise, so I won't bother anymore
Sorry.... what???
That's an insane system to use.
A paid renewal was made on the 25th, on the 27th do-not-renew was set and you took that as instruction to cancel the renewal?
@NRoolz is 100% right here, no reasonable user would expect that. https://twitter.com/ionos_help_uk/status/1365268407810203648
@MartinB65585282@FredBikeLondon@ShappiKhorsandi@mrjamesob Her appeal has been paused until such a time as she can pursue it "safely". Which basically means indefinitely, because there's no way to know when/how it becomes safe.
So she can either pursue with reduced access to justice, or continue with the status quo. Neither is justice
They could just have easily said "we require users to comply with laws & regs. Whilst we don't actively look for issues like these, these listing have been removed, any others reported will also be removed to"
Instead, they've said "nah, not us, it's just our platform"
> "Our commerce policies require buyers and sellers to comply with laws and regulations," the Californian tech firm added.
This is a cop-out and an utter failure of responsibility by @Facebook
That this is happening isn't really @facebook's fault
But, this bit
> Facebook said it was "ready to work with local authorities", but indicated it would not take independent action of its own to halt the trade.
is
https://www.bbc.co.uk/news/technology-56168844
@SallyHi30516610@zarahsultana Given one of their responsibilities is looking after mental health, I could quite see an argument that this is a good use of their resources (depending what actual resources went into it).
Or do you think the NHS shouldn't try and encourage awareness of the the MH side of this?
@joeyalison@XioNYC You'd think the Qanon congresswoman would be at least a little aware of what the internet does to people holding up signs/paper saying dumb things...
@pkell7@Programazing@gabsmashh You're the one who decided you wanted to rate my tweet based against a subjective standard _shrug_
We've probably better things to be doing, and yet here we are
@pkell7@Programazing@gabsmashh Whoever said that a joke had to be good - an entirely subjective definition?
It didn't make you laugh, ignore it and move along with your life
Oh, also - a lot of those Glassdoor's have replies from someone with the title "Head of Talent, Culture and Space". As a job title, that sounds very much like a new-age "Recruitment, HR and Facilities" (which are horrible things to roll into one role at scale).
All things a *good* HR dept would take feedback on and advocate for improvements on.
HR, like IT, done well is a vehicle for improvement within the company. Whether you have a dept for it or not, there are various HR tasks that can't be avoided
This seems to be borne out, to some extent, by their Glassdoor. Lots of glowing reviews, but the less positive ones don't read well: salaries being paid late, training poorly organised, concerns not being acted upon.
Basically, it sounds like there's a lack of accountability
It's only a light touch article, so maybe I'm attaching too much to it, but it puts me off using Octopus as a provider.
I suspect, whilst well intentioned, the HR stuff means that employee experience might vary quite dramatically too
I can't disagree with the reasoning given at the beginning of the article, both IT policy and HR, when badly done absolutely can drown employees in bureaucracy.
But, for me, not having some form of them risks putting employee welfare *and* customer data at risk
There are similar questions you could ask on the HR front too, of course - whilst there may not be a department there's presumably a proscribed disciplinary procedure, as well as some form of minimum acceptable standard.
Even if there isn't a dedicated IT Dept as such, there presumably *is* someone empowered to set policy/make decisions/carry the can for mistakes - even if that's the CEO himself. Which means teams may still get the "drawbacks" (i.e. the bits they moan about) without the benefits
For example, if the retentions lead decides their team will use Dropbox, who ensures that it can be used in a GDPR compliant manner? Is it the same lead? What if they make a mistake?
Their privacy policy - https://octopus.energy/policies/privacy-policy/ - notes they collect vulnerability data, some of which is given extra protection by GDPR.
If each manager is responsible for making decisions for their team, how is oversight of inter-team communication of this data achieved?
@octopus_energy's approach to HR is interesting, but I can _sort_ of see the logic.
Not having an IT dept though, does raise the question of how they handle implementing *and enforcing* policies relating to the flow of customer data within the business
https://www.bbc.co.uk/news/business-56130187
What can we do to avoid this? Not a lot. But, if you're running ad campaigns (or a publisher with ads on your content), refuse to work with any advertiser who uses these techniques. It's a drop in the ocean to them, but if over time their market shrinks, behaviours will change
The tracking will continue to get more and more granular (there's an example in the article where they're tying back to an email addy already) and the complete disregard for both security and privacy will roll on unabated.
Until then, all that happens is the arms war will accelerate. As well as techniques like this, the ad companies will continue to encourage people to structure sites so that they *need* javascript (to reduce NoScript effectiveness) to the cost of accessibility for everyone
It's never going to happen, what really needs to happen is for regulators like @ICOnews and @DPCIreland to investigate these companies and utterly gut/dismantle their operations until all that's left is explicit consent.
Now they're providing the means to force ads and tracking onto users who's browser config clearly indicates that neither are wanted.
If you're having to use a "clever trick" to get your ads seen/collect data then you must *know* you don't have the appropriate consent.
Advertisers though, over time, have continued to up the stakes. They used to serve contextual ads - stuff related to the page you were viewing, but then they discovered the gold mine that is behavioural tracking. They can charge more (though ads seem to perform worse...)
Advertising has (had?) it's place on the internet, the small amount of income it provides helps towards the cost of keeping content available. That's why I have ads on my sites.
But, consent is everything. If you hit my sites with an adblocker you won't see a "unblock me" prompt
Everytime you see an anti-adblock prompt, just remember that the people begging you to "trust us" are willing to sink to this level.
This technique exists only to track those who've shown they don't consent via their browser controls
https://www.theregister.com/2021/02/24/dns_cname_tracking/@theregister
Someone found a use for blockchain!*
The bitcoin blockchain is helping keep a botnet from being taken down https://arstechnica.com/?post_type=post&p=1744391
*OK, could still have been done other ways
@cybergibbons You shouldn't *need* to have to go to this level of transparency.
Frankly, that you do says more about the trustworthiness of their offering than the presence of almost any flaw
@cybergibbons You missed one IMO.
It's not just ex-parents (i.e. kid's left), but a parent who's been barred from contact (abusive etc) and similar. There's no way this system could comply with an order in that direction, access can be used for recon to arrange unauthorised contact
Excellent thread following on from another excellent thread.
I agree with much of it, the noise in Australia about Facebook is because FB tried to deliberately engineer it and use it to their benefit. They weren't expecting that it'd backfire... https://twitter.com/jason_kint/status/1364045661981847552
I suspect the truth is that the technical staff are perfectly capable of keeping the org stable/operational, and this is just desperate FUD by leadership.
As for the claim "We would lose our most experienced leaders."
Experienced they might be, but they're quite clearly not beneficial. They're experienced in the _wrong_ areas.
Besides... Nominet claims technical expertise,
@TherionWare@cstross Copyright laws don't care too much how the copy was made, just that it was. The output would probably be viewed as a copy (given what matters in a novel is the arrangement of words/prose) and distributing the result would be problematic. Distributing the script though? Who knows
@RealSexyCyborg *to be clear - the call was in English, they were in CN and not used to dealing with the hints of local dialect I have.
My Mandarin is awful, and my Cantonese entirely non-existent. I've tried, but even where I know the words, my pronunciation is that of a Brit: wrong.
@RealSexyCyborg I spend every day working with colleagues for whom English is a 2nd (sometimes even 3rd/4th) language. As much as I might sometimes go "what?", they're doing something I simply can't even begin to. I did get a "we're not used to your accent yet" from a CN call recently tho
@XioNYC Frankly, I'd have more respect for both if it was dildos in the background - that'd scream inappropriate but comfortable in who I am. That many (and range of) guns just screams insecurity.
@iansparrow2@BBCNews And then presumably another 2 weeks a little after that because he'll miss the opportunity for a circuit-breaker if/when numbers spike because he doesn't understand what caution means
I think @BorisJohnson might need to buy a dictionary (perhaps @No10Cat chewed his) so that he can look up the word "cautious" in it.
Perhaps they meant "bold", "idiotic" or "feckless", but there's nothing "cautious" about sending millions of kids back all at once. https://twitter.com/BBCNews/status/1363812295793590272
@DrGroftehauge@cybergibbons I mean, to be fair, they've grown up with the idea that privacy is a public toilet door 1ft high set 2ft off the ground.
They're going to have a pretty stunted idea of the importance of privacy
@cybergibbons I gave up on HN ages ago. Given I still frequent the comment section of El Reg, that's really saying something about the quality of comment on HN
@Jogenfors@alexbloor That was my thought, only takes someone to archive a dox. Not just GDPR though, if someone were to tag their bot on some revenge porn things could get nasty for them too
@brianmoreau@RealSexyCyborg Does dressing comfortably still come with some risk of discrimination? Sure. There are still people (yourself included, apparently) who care about form over substance. Is it _ok_ that it results in discrimination? Absolutely not.
@brianmoreau@RealSexyCyborg As for business environments, outside of a certain age-group and certain professions, it _really_ hasn't mattered in a long time. Turns out people are more productive when they're comfortable in what they're wearing rather than dressing to some arbitrary standard
@brianmoreau@RealSexyCyborg I think there's a distinction to be drawn between him wearing a mankini elsewhere, and wearing one in a school. Taking @RealSexyCyborg, you can see plenty of issues where she's in kid-friendly environments, and is dressed appropriately for the venue.
Everyone: Because of the pandemic, I need good broadband access
Republicans: No, that's the wrong type of broadband, we should ban it.
House Republicans introduce legislation for outright ban on municipal broadband in the US https://www.theregister.com/2021/02/19/us_connect_act/ via @theregister
There's no way to overstate just how unacceptable this is, even before you start to consider how wrong the guy is in the first place - yet claims to have been working on defence contracts....
https://daniel.haxx.se/blog/2021/02/19/i-will-slaughter-you/
@b_t_walsh@SwiftOnSecurity Yup, agreed, although if you're going to offer SMS 2FA you also have to treat it as a weaker indicator if you get an account recovery request (I can't remember my password, if you send me a code, I'll tell you it and you can reset the pwd).
@b_t_walsh@SwiftOnSecurity In the context of a bank, I'd be happy for them to offer TOTP or U2F in the first place, rather than relying solely on SMS or making you lug one of their dongles/card-readers around
@BrianBarilla@BBCTech Miners won't generally buy mining cards because the costs don't add up. Part of the "value" of using a graphics card, is you recoup some costs by selling the card on.
Noone's going to buy a mining card that's 2yrs out-of-date.
But Nvidia are gonna make them anyway
@alexbloor@AlecMuffett To be fair, we're talking about a guy who's attempts at making an argument tend to be quite flawed.
Including posting some bollocks, getting a reply, and countering with "This is twitter, not onlyfans, put your tits away" because the user was wearing a cami in their avatar
@cybergibbons Herman's comfortable with being observed by anyone/everyone, but seems to be uncomfortable with being commented on (via downvotes).
Wonder if he realises that privacy exists, in part, to shield us from unsolicited feedback from others.
@MarmiteJunction@cybergibbons That was exactly my thought. Sounds too much like a "yes, I was watching the feed of that nursery, but who did I harm really?" defence
@fragger911@newscientist > or insane safety & health risks
Honestly, these only seem to be a major concern for people not living near a nuclear power station.
I live close to one (well, 2, but one site is decommed), noone round here expresses the _slightest_ concern.
@Ty_Foxface@Tumaloops@SoatokDhole There is potentially some value to it, in that it's an immutable transaction log.
No-one yet (to my knowledge), seems to have found much where it's benefits outweigh the drawbacks over the long term.
One part of the nurserycam thing I quite like.
For months @cybergibbons has been distracting us with polls on which size lego-piece best fits up a snoz and similar.
If we believe nurserycam* he's just fallen for a clever distraction set up over a period of years
*we don't https://twitter.com/bentasker/status/1362420277720862722/photo/1
@Tumaloops@Ty_Foxface@SoatokDhole Yup, using a proof-of-work system is inherently flawed for exactly that reason. Proof of stake has it's own issues too.
Lots of people have got very rich by using the word blockchain in their sales pitches though, which is where the real "value" lies (at everyone elses expense)
@Ty_Foxface@SoatokDhole Exactly this, there's also sometimes a fair bit of cognitive dissonance around it. BTC solves $this issue with fiat, ah but it's slow, so we'll introduce lighting (which reintroduces $this issue that fiat had, but that's fine, buy BTC everyone).
@brianmoreau@RealSexyCyborg So you think we should focus on aesthetics and not on qualifications?
That's going to be a *hard* sell to make if we also want to get more women into STEM.
If tits are distracting, that's definitely a you problem and not a them one.
@BrianDrought@bibbleco@hacks4pancakes That extension, btw, has an uninsulated loft (well, crawlspace really - tiny) and no heating within the room.
What it does have, is hot pipes passing through it between the heating in the main house, and the boiler in the back, which seems to have been enough to cause the issue
@BrianDrought@bibbleco@hacks4pancakes You say that, but in our recent cold snap (UK) I had a (small) ice-dam build up on our extension (we bought around this time last year, so first winter in this house - I'll correct once the weather's a bit better).
Not nearly as impressive as the picture linked to above though.
@MarieAnnUK Initially it was "we won't block them/brexit, but will hold them to account for their mistakes". Which is, sort of understandable, but the time's come to hold them to account and he's gone AWOL.
@junkfoodchef@ChortlingPanda@eyes_of_od@TheQuartering The fact that Google learned from it, should show you the holes in your original argument about these services being a net positive to news publishers.
Really, though, there are much better/stronger arguments to #deletefacebook anyway
@junkfoodchef@ChortlingPanda@eyes_of_od@TheQuartering France's approach (seen that?) is (on the face of it) even more stupid, but it's come about because Google learned from the experiences in Spain and hasn't threatened to shut down Google News instead.
Instead, they threatened to stop listing french publishers only.
@junkfoodchef@ChortlingPanda@eyes_of_od@TheQuartering Australia's approach is stupid. But so is saying "but they make more money because of FB & Google" because that's clearly not true.
A single publisher dropping out of FB/GoogNews is disadvantaged, true, but if they're all out (as in Spain) they're better off. ergo, FB is a drain
@junkfoodchef@ChortlingPanda@eyes_of_od@TheQuartering There's a lot of work goes into writing a (good) news story, including formatting it in a rev Pyramid - Headline, 1st Para (gives you the drift), Rest (provides evidence/context)
FB etc show the drift, which is enough for most readers, but wouldn't exist without the work
@junkfoodchef@ChortlingPanda@eyes_of_od@TheQuartering You've missed the point again.
FB (and Google) show a snippet along with the link, so most users read that and move on, never hitting the news site (who then never get ad impressions).
When Google killed Google News in Spain, the news publishers ended up better off that with it
@Teiman@garyfleming Whenever I see a self-hosted instance, it's always a long way out of date: "Oh, we firewalled it off, rolled back the update and stopped updating because Atlassian kept wrecking it"
Old JIRA wasn't for everyone, but I'm convinced "modern" JIRA is for nobody
@OVHcloud_UK I've got services (admittedly not domains) with you too. Are you going to support @publicbenefituk at EGM?
Whilst I don't use you as a registrar, I feel strongly enough about this that I'll look at moving my services/hosting elsewhere if not.
IP ownership provisions in employment contracts are nasty, but this clearly isn't one of them.
He told the company about his new technique, was hired to write software to automate the process & signed off on some licensing text.
Software's theirs
https://www.theregister.com/2021/02/17/md5_software_lawsuit/
@Scott_Helme@dpisa007@m_stoer The earth is uninsulated within the main sheathing so that if you accidentally put a nail through, it should also hit the earth (whereas if that was double insulated, you _could_ end up only hitting live).
But, Scott - what's in your walls isn't Flex, it's wire.
Old man grumble coming:
When we were kids, our parents complained that we were sat silently on the gameboy not interacting with anyone.
Littlun's been watching some streamers though, so now won't shut the fuck up when playing. Constant incessant narration
Kids these days... https://twitter.com/bentasker/status/1360882182676447232/photo/1
@TheLongshot2112@da_667 What SM lets you do, that Rush era couldn't is to *quickly* see how things were landing & refine them, running multiple different approaches amongst other groups to see which gain the best traction/engagement.
The msgs haven't changed much, but the targeting/effectiveness has.
@an3ssen@RealSexyCyborg Similar - used my Github profile pic. But, a lot of the images it pulled out had a chaturbate watermark, along with some bathroom pics none of which are me. OTOH, I am fairly careful about what pics of me go online, so I didn't expect much to begin with
@cybergibbons When littlun was a nursery, a system like this (was not this though) was offered. Just couldn't understand the need for it - if you don't trust the nursery with your kids, why are you leaving them in their care in the first place?
@cybergibbons I particularly like the "it's one of the engineers" on the socks... You've got a director who seems to show a consistent pattern of behaviour, but in this case it's one of the engineers claiming extortion
@alexkehr@wongmjane Although rarer, you also have to factor in the risk of your own Govt going mad.
The requirements for .it and .eu haven't changed, but we've left the EU so I now no longer meet the eligibility criteria.
@InfosecHolic@cpnielsen@hacks4pancakes Over the years, I've come to *really* appreciate good recruiters, and keep a list of ones that I'm happy to work with when looking for myself or recruiting.
We're fortunate to have 2 extremely good agencies nearby too
@cpnielsen@hacks4pancakes The other one I'm seeing a *lot* of at the moment is
I've got this [clearly unsuitable job]. If you feel it isn't for you, but know someone who could do it, you could get £150 if they get the job.
Build your own network, stop bothering me trying to get me to use mine
@cpnielsen@hacks4pancakes If you're outside of my trusted pool of recruiters, you better believe I'm going to expect some detail before I'll make time in my calendar for you.
@cpnielsen@hacks4pancakes At times, even when there's a bit more detail provided, I've rebuffed the "let's have a call" with a "please email some details first". Recruiters get quite put out by it, and don't seem to understand just *how* many recruiters will contact me asking for "just 10 mins".
This is nice, and exactly the sort of tear apart that I enjoy most: the ones where the energy/interest has only been found because the other person has been *such* a dick - in this case with some insanely arbitrary gatekeeping requirements. https://twitter.com/SoatokDhole/status/1359869098486882305
@WJD2001@BiscuitFlowery@tnewtondunn Weird, given he's - again - on the record defending it, saying that clients of the firm requested domiciled access.
What is it with you types, you hear something you don't like and yell LIE or PROJECT FEAR?
Bored of this conversation now
@WJD2001@BiscuitFlowery@tnewtondunn Is he wrong to blame victims of fire, caused by negligence & cost cutting, for their own deaths? Yes.
Even if he were right, is he still a dick for blaming them? Yes.
Was he within his rights to move financial ops into RoI despite supporting Brexit? Yes. Still hypocritical
@WJD2001@BiscuitFlowery@tnewtondunn as for whether the church trip happened - it *is* known, given that his office commented on it and said it was because it was the only church in the area giving Mass in Latin.
@WJD2001@BiscuitFlowery@tnewtondunn You misunderstand what I meant there. The list of examples of JRM and other Tories being general dicks is never-ending. Breaking the lockdown rules was meant purely as an example.
For JRM see comments on Grenfell, rape, conduct in the house, general hypocrisy around Brexit etc
@WJD2001@BiscuitFlowery@tnewtondunn I mean, as a start point, perhaps they could follow their own lockdown rules? At xmas JRM crossed into another tier 4 because it contained a church that gives mass in latin rather than english.
Old news? yes. But that's the problem, it's a never ending list with them
@cybergibbons Part of the reason, btw, is because their names don't translate very well if you try a direct translation
I don't know of any specific Malay examples, but a girl called 诗婷 (meaning: Poetic & Graceful) will be called "ShiTing" if you translate that direct from Mandarin to eng
@cybergibbons This is fairly common in Asia, there's often not a western counterpart to their given name. In Korea sometimes their primary school teachers assign one, other times it's chosen.
They'll often switch between them fluidly - I tend to know 2 different names for various colleagues
Maybe we should have been doing what other countries did, and doing wide-scale testing rather than waiting for symptoms to appear (allowing 2 weeks of unknowing spread). https://twitter.com/WiredUK/status/1359486640155164674
Fish is in deeper hot water, it was revealed that six letters he sent to the judge in his case attributed to his mother, grandparents, a woman he dated, his priest & a top aide to Congresswoman Elise Stefanik had all been faked
Fuck Me
https://www.theregister.com/2021/02/11/hacker_suny_pictures/ via @theregister
@10DowningStreet You're delivering woefully underspec (and sometimes virus-laden) laptops, a year late, and now want private donations to boot?
Those are some grade-A balls
I think @Peston meant to say "predicted" or "an entirely expected outcome" rather than astonishing.
There's a lot of stuff that leavers claimed wasn't plausible that's starting to happen. People like @Peston should be holding them to account rather than trying to minimise it https://twitter.com/Peston/status/1359653603972104194
Really shows a significant lack of forethought by the law firm. Whatever the rights or wrongs, suing your own customer is never a good look, especially as it'll always get reduced to "because he wasn't happy with the service and left a bad review"
https://www.bbc.co.uk/news/technology-55981600
There's definitely a discussion that has to be had about who's liable when things go wrong. If staff at a company is negligent and causes injury, how's it different if the "staff" was in fact AI?
https://www.theregister.com/2021/02/09/legal_fines_ai/ via @theregister
@dayko_uk@TheRegister Sounds like it.
"We've got a backup" - it's 15,000 reams of fanfold print outs that need to be manually reinput.
In a few years the typo's will start to be noticed
@hackerfantastic I just don't get why he makes these rods for his own back. There was similar recently when it was suggested Signal should warn users that using a 3rd party IME could lead to keystrokes being collected by that IME. A simple warning msg, yet massive pushback.
@moxie@ewust@joaomcsantos@signalapp Users in censorious countries know that bypassing restrictions carries risk, but it's still important to ensure that that risk isn't being increased by oversights/corner-cutting.
The simplest technical solutions aren't always the safest
@moxie@ewust@joaomcsantos That's not to say that what @signalapp is trying to do isn't a good thing, but *safely* circumventing state censorship is much less trivial than unsafely doing so - it's important to take feedback from the community rather than rebuffing suggestions
@moxie@ewust@joaomcsantos Take a look at how things like Tor's meek handle things for ideas of how to reduce the risk of correlation, as well as making the handshake less unique.
It's not perfect, but it's a step in the right direction
@moxie@ewust@joaomcsantos Sorry @moxie but that's bull, and you must know it.
The issue is that the proxy can trivially be discovered and identified, and traffic correlated, because of issues that are actually relatively easy to fix on your end.
@zamboughnuts@cybergibbons The *only* real use-case I've been able to come up with (other than can't be arsed) is when your hands are full - which for most people must be the minority of the time.
I've built some home automation stuff, but there's no voice control because noone in the house sees a need
@GlennPegden@Scott_Helme@cybergibbons@Splodey_Goat@LarsAndreasen5@casualavalanche@hanno See, when it first launched, I thought Coinbase (browser based monero mining) was potentially a reasonable alternative (with appropriate caps set to prevent melting devices) - no need for tracking/profiling users etc.
But, dead in the water before it even really started
@moxie@signalapp is there an option to change the colour of your own messages in the android app? Black text on grey background is bad for people with eyesight issues - there's an option to change font size, but not colour from what I can see
@whatsapp replied to my GDPR objection, Unsurprisingly the reply amounted to "accept it or sod off".
Tomorrow was planned as delete account day anyway, so looks like thats going ahead.
Reachable on @signalapp
@CyberOutsider@hacks4pancakes Actually, one thing I hope the pandemic will make people think more about (spoiler: it won't) is the "why are they off/wfh with a cold? *I* always make it in when I've one"
Yeah, and give it to everyone else as a result...
@AmazonUK just emailed my 9 year old to invite them to upgrade to a business account...
One of the (not entirely) unexpected downsides of wanting to give access to things like Kindle.
@InfoSecondBreak@IanColdwater One of my mates was attacked by the aforementioned chavs in an alley way after school. They hit him in the head, repeatedly, with hammers they'd nicked from their afternoon DT lesson.
School: It was off school grounds, there's nothing for us to do about this
@InfoSecondBreak@IanColdwater We mostly ignored the uniform rules, but then had a teacher claim that maybe not wearing a hoodie would mean we wouldn't stand out so much and get targeted by the gangs of nike wearing chavs they were unwilling to do anything about.
Because, you know, it was just the hoody...
@AlecMuffett It's an interesting approach really, historically they screwed up the sharing panels in Android. Having now finally got them a bit more sensible, they've decided to compound it by putting a stupid one in Chrome.
The phrase "ask not if you can, but if you should" comes to mind
@ramsey@g_schlossnagle That's when you start looking at using different colour switches. It's also when you start to discover almost vi vs emacs levels of discord between people who swear red or blue are the only true switches you should consider
@suziechan286@PARLYapp This clap isn't for the NHS. It's for Captain Tom: the bloke who had to walk back and forth to raise money for the NHS because the Govt failed to fund it.
It's about the only way I can think of that they could have made the clap more cynical than it had already become.
@cybergibbons Not American, but I tend to greet with either "Whats up?" or "awrite?". I don't actually expect an answer more than "Hi", but sometimes people do answer "I'm doing alright, how about you?" and throw me off a bit.
@blackroomsec Much like people forget that when you interview, it's as much about you checking out the company and it's culture as it is them assessing if you're a good fit.
If you've got skills and aren't in desperate need, it's absolutely OK to go in expecting to turn them down.
"Although controversial HR startup HireVue canned a facial analysis feature in its software that assesses the potential performance of job candidates"
JFC... Sometimes you need to ask not if you technically can, but whether you should
https://www.theregister.com/2021/02/01/ai_in_brief/ via @theregister
@Scott_Helme Other option is that the traffic's hitting some on-net CDN nodes (BT has it's own CDN based on OpenCaching), so it'd be trivial for them to zero-rate - assuming they've got BBC as a customer (which is something BBC would almost certainly want).
@PippaMusgrave1@mrjamesob I read quite a long post a little while back (I forget who by) who explained how Dacre would find it really frustrating if he got the job - it's not like being a paper editor, throwing toys out of prams and getting what you want - he'll have very little power to actually change
@IanColdwater I'm fairly fortunate in that a lot of my time involves working around language barriers, so "does that make sense?" is something I'll often ask, to make sure I've not dressed it in Britishisms and not realised.
A recent highlight was "we've not got used to your accent yet"
@KathRella@neil_neilzone@RisuToInu Even if the parents intentions are harmless, the other issue around kids is you're then bringing them up to consider this kind of tracking OK/normal. Which becomes an issue if someone less harmless, like an abusive partner, wants to do this "normal" tracking when they're older
@Forequick9@DKThomp Easy to say with the benefit of hindsight though.
If you'd put that $500 into Palm (or Iomega, or Napster, or Compaq, or https://pets.com/, or ...) instead, then today you'd have nothing.
If you'd put it into BTC early on, you'd be minted.
When GDPR went live & forced Google to offer the option, I turned off Behavioural ads on my stuff.
My revenue *increased*. Who'd have thought showing ads relevant to the page content rather than based on stalking users might work eh?
https://www.theregister.com/2021/01/28/google_ios_att/@theregister
@jonlis1 Although not the context they meant, there's something depressingly "right" about Johnson being described as "Third World Leader" though. Feels like that's where he's taking us...
@DeepblueBoy65@donaldjmontgome@mikegalsworthy Because a "benefit" that doesn't observably benefit the people affected by brexit is nothing but hot air and of no comfort to anyone who'll suffer under the economic consequences of Brexit. Can't pay rent or feed the kids with sovereignty, after all
@donaldjmontgome@DeepblueBoy65@mikegalsworthy So, you've nothing except exceptionalism?
Are you *sure* you don't want to change your answer about it not being about trade? Might make it easier for you to give some answers.
You're right though, it's done, and people are going to have to live with the consequences. Well done
@donaldjmontgome@DeepblueBoy65@mikegalsworthy So the only gain you can currently think on is based on something that might come to pass, but has shown no concrete signs of actually doing so?
Have you any others? How are the British people better off now/in the next 6 months?
@donaldjmontgome@DeepblueBoy65@mikegalsworthy Again, I think you're making assumptions. Trade is an important part of an economy. Do I think Brexit was all about trade? No.
So, sell me on an actual non-trade gain that's materialised (we'll ignore the Leavers screaming about trade with the rest of the world, thats trade)
@DeepblueBoy65@donaldjmontgome@mikegalsworthy Eventually, things will find an equilibrium, yes - they almost always do. The challenge for Leavers, though, is to ensure that equilibrium is *better* than the one we've just left. Given the current crop in power, you're currently playing with something of a handicap
@DeepblueBoy65@donaldjmontgome@mikegalsworthy Sure, it's just remainer pearl clutching.
Time will tell, some things will improve (and the current Govt's incompetence *does* have an impact on our position ofc) others will grow worse.
I really want to be proven wrong, and for Brexit to go well. Seems unlikely unfortunately
@donaldjmontgome@DeepblueBoy65@mikegalsworthy Yes. Restaurants being shut has absolutely fuck all to do with fishing (and food in the wider sense) exports being stuck rottting at ports because of paperwork the whole world could see was coming, but Leave and the Govt promised wouldn't.
@DeepblueBoy65@donaldjmontgome@mikegalsworthy I think that's projection. Leave is the project that put fishing at the front. People are just pointing to that, and that "Project Fear" seems to be becoming reality.
Whether or not Brexit was the right choice, Fishermen have been hung out to dry by people live Gove
@DeepblueBoy65@donaldjmontgome@mikegalsworthy I think you've missed the point. There's no real demand for it, nice or otherwise.
Fishing *is* a small part of GDP, but it was Leave who put Fishing at the forefront of the argument, and have now hung them out to dry.
As for buy British, unfortunate that we don't make stuff...
@donaldjmontgome@DeepblueBoy65@mikegalsworthy Because fishermen were exporting the types of fish they do *despite* there being overwhelming domestic demand?
Oh wait... that's not right is it.
Monkfish and Hake get/got exported because British consumers don't want them.
Brexit: Just change what you eat, not quite so catchy
On the upside, at least Pai and his lies are finally gone. Even if it'll likely take years to fix things
With depressing predictability, FCC boss leaves office with a list of his deeds... and a giant middle finger to America https://www.theregister.com/2021/01/20/pai_us_telecoms/ via @theregister
@HeartInternet You're welcome to take this feedback with a pinch of salt, but rather than having to rememorise a new secure, and infrequently used password annually, I'm more likely to just move my domain to another registrar who doesn't require that *and* has 2FA.
@HeartInternet Forcing a password change, even if once yearly, screws with that, for little perceived benefit.
Honestly, if you want to protect accounts, you'd do better to implement 2FA on your portal (or maybe you have and I missed the announcement, it's not like I log in frequently).
@HeartInternet that I do not record anywhere - it's not in my password manager, it exists only in my head. The risk of losing control of it, is just too great and that much harder to recover from than almost any other account.
It's therefore important that it's strong *and* that I recall it
@HeartInternet As for how this affects me - HeartInternet is the registrar for my main domain name. Getting access to that is (indirectly) game over for my email (via fucking with DNS), yielding access to everything linked to my email.
Because of it's importance, it's one of the few passwords
@spotfoss I realise I'm a minority voice in this - but not having Google Sync ability at all (for me) is a selling point for Chromium.
Of course, it's also likely to be the thin end of quite a thick wedge...
Just had to SSH onto a box via SSHing to a Windows jump box.
It seems where lines would normally wrap, Windows inserts a newline, which rather screws your ability to get (and use) output from the terminal.
I hope I never have to do this again.
@SteveHofstetter I'd be wary of that assessment. Over here, we said the same about Farage's Brexit party.
Except they used the threat of that to help nudge the Conservative's policy down more extreme paths, and then struck last minute deals not to contest marginal Conservative seats.
@SeanWrightSec There's no good argument for any of it, even if you managed to somehow fix the privacy issues.
The only people who can actually make a positive case for it seem to be the people selling the software (or those justifying their expensive purchase).
@SeanWrightSec Also
> automate decisions about ... who to let go
This is the same mindset that makes decisions on crap metrics like "tickets closed per day" and leads to staff rushing to close tickets rather than actually resolve them. Service/productivity suffers while metrics soar
It's the year 2021, do we still need to have an extension to stop @googlechrome from auto-discarding tabs, or have they finally added a setting somewhere?
@Scott_Helme@Stephan13360@The_Pi_Hole You say that now....
I had a lot of users in a small authoritarian country suddenly start using my service a little while back. You quickly notice the load/disruption that brings (though - PiHole can be tuned to cope with it)
@hoofnagle > people have misinterpreted changes
Strange that an incredibly poorly described change, made to send data to a company famous for adding privacy invasive functionality pre-opted in would lead to people assuming the worst of intentions.
Given that masks aren't going away in the near future, I'm surprised there isn't also an augmented reality version (paired with glasses) - having a mask available to put (some) components in would solve some of the space issues you have in glasses only
https://www.theregister.com/2021/01/13/smart_masks/
You gotta love that Parler's own lawyers dumped them, and yet it's a "conspiracy". When your own lawyers won't work with you, it should normally trigger serious alarm bells https://twitter.com/SRuhle/status/1348371244220092417
Got an email from @Nominet - I'll paraphrase.
The domain we gifted to you under the TLD we created that nobody wanted or thought was anything but a cash grab has expired, why haven't you renewed it yet?
> The make-up of the council is set to raise suspicion that it will be used to justify whatever the government wants to do while doing little to assure the public or professional trust.
A Government stitch-up? Never!
https://www.theregister.com/2021/01/08/uk_ai_council_roadmap/ via @theregister
Indeed, this is also the guy who was interrupted by Siri on his own phone whilst he was giving a speech in Parliament.
Even @BorisJohnson can find a better candidate for the role. So why's he in it? Because he was loyal over Brexit.
But then, this is the Minister who threatened to sue schools for closing 2 days early, in the midst of a COVID spike, and who was still saying schools were safe and there'd be no lockdown the *day* before a nationwide lockdown.
@educationgovuk's response is in the news story
> decided on schemes that ensured pupils who needed it were provided a reliable and consistent internet connection
Yet, clearly those pupils haven't been provided, because MPs are having to ask for it.
So the Dept failed?
@RealSexyCyborg@moxie But, if you look at the context, it's not the NSA people are concerned about getting access to their messages here. It's Facebook.
So moving to Signal is an acceptable solution to suggest. If Signal is compromised by the NSA it's 10:1 that WA is too, so no change in that threat
@GreinerParis@SteveBakerHW On the other hand, you'd have to fail to recoup 480,000 25k loans to lose the 12bn we seem to have splurged into a Test and Trace system that never actually worked.
Bit like HMRC going after minor tax dodgers whilst ignoring massive ones really.
@cybergibbons@kentindell Hi SO,
I need some help dealing with a pathogen, and preventing it's spread, but Scotl... our competitor moved first, so the deadline is later today.
Is there an incantation or something we can use to get people to stay 2m away?
@kentindell@cybergibbons You do kinda get the impression, sometimes, that the Govt has just been copying and pasting it's COVID procedures off Stack Overflow without first understanding the problem...
@FedeWeninger@bobbyllew The problem IMO is new builds.
They should already have mandated that a min %age of new builds should have solar installed at build time - adding batteries would be a simple extension of that.
Instead, there's no mandate even for EV charge points.
Retrofitting is expensive
@jessphillips@yarnlemon What do we do if our MP is a Tory loyalist? 😉
There's a certain large retailer that seems to have taken the approach they're "essential" because they have drop-off points for a courier company in their shops that don't have post-office, so T4 or not, still open.
It's easy to dismiss stuff like this as being funny, but it does have a nasty habit of coming back & biting.
Incel culture is another good example - so easy to mock, but increasingly presenting a real world threat because people who feel marginalised are easy to exploit https://twitter.com/guardiantech/status/1345314901619720192