biscuitswalrus
@biscuitswalrus@aussie.zone
- Comment on Row as Starmer suggests landlords and shareholders are not ‘working people’ 3 weeks ago:
By your definition I should be called a footballer because I play football once a week casually. Ignore the 50 plus hour weeks of my actual job. I got $50 from football as season champions (it’s a gift card, for the bar, at the place I play). I better go update my linkedin!
You’re funny, good one.
- Comment on Headlamp tech that doesn’t blind oncoming drivers—where is it? 1 month ago:
My brothers overpriced merc uses lighting zones and detection to turn off areas to not blind incoming traffic. Cool, but I’m sure within 5 years these extremely complex lighting arrays will fail and not be user serviceable, other than full headlight cluster replacement for $4k.
More complexity, shorter life. You’ll get what you want but only because it suits the makers.
- Comment on please help me with some arguments for my wife 2 months ago:
theverge.com/…/google-photos-csam-scanning-accoun…
Google looks. Google reports. Even if you did nothing wrong you’re guilty until you prove innocent and even then you’ll never get your account back.
- Comment on South Australia is proposing a law to ban kids under 14 from social media. How would it work? 2 months ago:
They seem like fully conflicting ideals. Sometimes technology is not the answer. Sometimes non technical controls are.
Besides, by the time the control for instagram is in, nobody will be using it under 30. My partner just told me “instagram really is our parents platform” while showing my mum’s friend started following her. My mum and her friend are both 70.
Applying it further gives all kinds of bad vibes where platforms need to check your ID like a Brisbane night club, except these aren’t Australian businesses. Tiktok forced to comply, if they did, validating that you’re 18 via a digital license that the governnent authenticates Tiktok requested your details and now knows you went via link ‘clickforabortioncontrol.track.tiktok.com’ since they’ll need to reply back to that url ‘yeah they are 14+ bro’ before you get in.
What a distopia.
BTW I’ve got a link for you for how ID got complicated that I configure: stack-auth.com/blog/oauth-from-first-principles this explains how to securely without leaking or impersonation, authenticate a user from a central federated identity management (like an online ID would need).
There are smart people, sure. But I’ll tell you it won’t be the first try, or the second that’s correct.
Security is so complex that the smartest people often fail. Odds are stacked, privacy needs security. Failure in security results in privacy being lost.
Anyway I’m in agreement that it’s a horrible world out there with real harm. But mandating less privacy is unlikely to result in a better place, in fact it’s almost guaranteed to be worse and create more harm.
- Comment on South Australia is proposing a law to ban kids under 14 from social media. How would it work? 2 months ago:
Today’s justification for digital identity and state tracking of your browser history: “Think of the children!”.
- Comment on CrowdStrike’s faulty update crashed 8.5 million Windows devices, says Microsoft 3 months ago:
Yeah we do a lot around frameworks at my current place, and previously we worked directly with customers with iso and acsc essential 8 frameworks. For us, non-compliance = revenue opportunity. That means we are financially rewarded for aligning them and encouraged to do so. On that same note I wrote up a checklist for “sysadmin best practices” aimed for driving reviews and checks and Remedial opportunities for small businesses, useful in that space. I got such an overwhelming amount of response in the msp reddit from people asking in DMs about it (not hundreds, just dozens, too many for me though). It’s quiet here in lemmy. Happy to share my updated version of course, just I think if you’re dealing in your sector it’ll look like childs play lol. But I kind of want to encourage a bit of community within professionals here. I just don’t want do spend time on it…
I feel you about the lowly experienced officer bit though. An account manager or business development manager, or even CTO won’t listen to me. I have a business degree, most of them don’t. I try to apply critical decision making in my solutions and risk advisory. But the words fall on deaf ears. I take a small but very guilty pleasure watching the very thing I warn against, happening both to clients and my employers. Especially when the prevention was trivial but all it needed was any amount of attention.
After nearly 20 years of IT and about 15 in MSP I’m so tired. I’m very much resonating with that “lowly engineer” comment.
- Comment on CrowdStrike’s faulty update crashed 8.5 million Windows devices, says Microsoft 3 months ago:
Hmm, yeah. Thanks for sharing. Because of 15 odd years of IT Managed Services, I only have non-technical companies on the brain and in my world view I hadn’t considered technology provider companies at all. They typically don’t need managed service providers (right or wrong :p).
- Comment on CrowdStrike’s faulty update crashed 8.5 million Windows devices, says Microsoft 3 months ago:
It’s impossible to tell and you’re probably more close to the truth than not.
One fact alone, bcdr isn’t an IT responsibility. Business continuity should be inclusive of things like: when your CNC machine no longer has power, what do you do? Cause 1: power loss. Process: Get the diesel generator backup running following that SOP. Cause 2:broken. Process: Get the mechanic over, or get the warranty action item list. Rely on the SLA for maintenance. Cause 3: network connectivity. Process: use USB following SOP.
I’ve been a part of a half dozen or more of these over time, which is not that many for over 200 companies I’ve supported.
I’ve even done simulations, round table “Dungeons and dragons” style with a person running the simulation. Where different people have to follow the responsibilities in their documented process. Be it calling clients and customers and vendors, or alerting their insurance, or positing to social media, all the way through to the warehouse manager using a Biro, ruler, and creating stock incoming and outgoing by hand until systems are operational again.
So I only mention this because you talk about IT redundancy, but business continuity is not an IT responsibility, although it has a role. It’s a business responsibility.
Further kind of proving your point since anyone who’s worked a decade without being part of a simulation or contribute to their improvement at least, probably proves they’ve worked at companies who don’t do them. Which isn’t their fault but it’s an indicator of how fragile business is and how little they are accountable for it.
- Comment on CrowdStrike’s faulty update crashed 8.5 million Windows devices, says Microsoft 3 months ago:
That’s how supply chains work. A link in the chain is broken, the whole thing doesn’t work. Also 10% of major companies being affected, is still giant. But you’re here using online services, probably still buying bread probably got fuel, probably playing video games. It’s huge in the media, and it saw massive affects but there’s heaps of things that just weren’t even touched that information spread on. Like TV news networks seemingly kept going enough to report on it non stop unaffected. Tbh though any good continuity and disaster recovery plan should handle this with impact but continuity.
- Comment on High ceilings are correlated with a lower exam score 4 months ago:
We looked at the results from 15,400 psychology undergraduates at one Australian university over eight years (2011–19), and across three campuses.
It’s the same course. It’s there in the article.
- Comment on Are there any games you're planning to pick up during the Steam and GOG sales? 4 months ago:
Is that the one where you start with a stealth mission that never appears again in the game? It acts as a mandatory tutorial and makes the whole thing unreplayable because of its heavy handed enforcement? If I’m right, this game is a really good minor evolution of the original for exactly one play through. However I wanted to enjoy it a second time a few times but never got through the intro. Hmm exactly how I’d describe metal gear solid 5. I’ve got great memories just can’t revisit it.
- Comment on [deleted] 4 months ago:
Back in my day, and to this day, Microsoft offers such huge discounts in academia on licensing, and recruit so many students from university, I never saw anything but MS.
I’m glad we are at least in an age that there’s alternative to Microsoft in the free and open source space for individuals even when school goes down their path.
- Comment on Steam Game Recording Beta announced - works on Linux and Steam Deck too 4 months ago:
Hmm interesting. Not for me but the communities tab on steam will probably benefit from good easier made clips. Always enjoying the pictures from yakuza games there. I peek around the communities tab a lot while being undecided about what I want to play.
- Comment on ‘The cheap option’?: why the Gold Coast may be on track to build the most expensive light rail in the world 6 months ago:
I don’t know man, I’d prefer light rail than a banananana bus, you know Brisbane style 3 segment bus…
- Comment on Giant 11x11 Ball [Matt Bahner] 6 months ago:
Thanks for sharing!
- Comment on We compared the finances of 30-year-olds now, to 30-year-olds 30 years ago 7 months ago:
Poetic
- Comment on 23andMe Blames Users for Recent Data Breach as It's Hit With Dozens of Lawsuits 10 months ago:
The guy said brute force but meant credential stuffing.
Basically using an army of remote compromised devices to use known user name password combinations. If they used the same email and password that was found on another compromise, then their account would successfully be logged in first try.
- Comment on Windows 10 end of life could prompt torrent of e-waste as 240 million devices set for scrapheap 10 months ago:
Not to boast MS, but its service life is longer than Linux at 10 years. Lts on Linux is generally at best 8. Ltsc on Windows is much longer. Windows 10 released on 2015 and the ltsc ends at 2027 on the enterprise channel, or 2025 for the consumer general availability.
I’m only commenting because I dislike misinformation more than I dislike MS.
- Comment on The NSA advises move to memory-safe languages 11 months ago:
Yes, they’ve been saying it for a year, at this point they’re repeating themselves: www.malwarebytes.com/blog/news/2022/11/…/amp
- Comment on Ifixit gives fairphone 5 a 10/10 on repairability and maintanence 11 months ago:
Yes but also no, but also yes. Here’s why:
- yes: most people don’t use cabled headphones
- no: high quality headphones require a jack
- yes: those high quality headphones need amplifiers beyond what the phones inbuilt dac can handle
So I’d probably overall argue that those who really care about audio probably have a separate DAC like www.techradar.com/audio/…/ifi-hip-dac-3-review
Which is probably an unpopular opinion.
- Comment on Hiring Someone to setup servers 11 months ago:
bleepingcomputer.com/…/critical-bug-in-owncloud-f…
Just remember to patch. Owncloud has some of the worst possible cves right now.
- Comment on Hiring Someone to setup servers 11 months ago:
I’m just going to give you props. I have worked in Managed IT Services for a dozen years and some of the worst clients are construction, engineering and architects who use solidworks, autodesk and archicad products.
You’ve eaten humble pie and admitted that using computers as a tool, and systems design are different and though you might understand a lot, just like I can build a 3d model, the devil is in the detail.
Building robust solutions that meet your business continuity plans, disaster recovery plans, secure your data for cyber risk and to meet ISO and yet are still somehow usable in a workflow for end users is not something you just pick up as a hobby and implement.
The way I handle technology Lifecycle is in 5 steps: strategy, plan, implement, support, maintain. Each part has distinct requirements and considerations. It’s all well and good to implement something but you need to get support when it goes wrong or misbehaves. You need to monitor and report for backups, patching, system alerts. Lots of people might do the implement, but consider the Lifecycle of the solution.
People do these things at home but they’re home labbing, they’re labs. Production requires more.
Anyway a bunch of people closer to your part of the world will probably help you out here.
I just want to again recognise and compliment you on realising and openly saying you want help rather than just do the usual “oh I know best” that I hear over and over usually just before someone gets ransomed on their never patched log4j using openssl heartbleed publicly exposed server infrastructure.
- Comment on Hiring Someone to setup servers 11 months ago:
Lol, a thousand hours would be 6 months of full time work (40 hour week). I’m not sure I’d employ someone who has 6 months of IT experience into a systems administrator job and task them to build a an erp/dms/unified coms solution for a client.
But this guy should be able to do it as a hobby?
- Comment on YouTube uses lower quality options on browsers running on Arm-based systems — misreporting as an x86 CPU appears to be a widespread browser fix 11 months ago:
Seems like my Samsung TV app is being hit by stuff too, I had 5 unskippable ads and can’t seem to get stable 1080p at 6fps any more despite gigabit fibre and cat6. Meanwhile getting 4k on my YouTube app on Android on WiFi.
Go figure.
YouTube is so desperate to fight this war that they’re harming legitimate watchers meanwhile my rockpi running Android TV seems to keep running sTube just fine.
- Comment on High Court unanimous in deeming indefinite immigration detention unlawful 11 months ago:
Well I mean, due to the separation of powers, the high court are separate from the parliament and the politicians. Just for the exact case of being able to decide against what a parliament had chosen. In this case you’re still disagreeing with the governnent decision to indefinitely hold illegal immigrants, who in this case are legitimate asylum seekers, even while agreeing with the judicial process applying the constitution to that parliamentry decision.
Hope that helps reconcile your feelings since you can rest assured your still disagreeing with part of the government.
- Comment on Discussion on Concerns over Auto tl;dr bot 11 months ago:
I like it more than hate it and if it’s wrong I just close its comment. Tbh if there’s no pay wall or some kind of soft wall it should be encouraged for people to read the article rather than assume a bot or OP has represented the news issue in an unbiased way.
- Comment on ChatGPT, how do I use OCR in Word? 11 months ago:
Yep, sure, it’s a wild world we live in and this topic is changing fast. Missing this memo won’t matter when the next one will be the next generation but generations are only 6 months apart.
- Comment on ChatGPT, how do I use OCR in Word? 11 months ago: