How much data is actually on "the phone?" My phone is a thin client device that connects to "the cloud." If I forget my password I simply reset it.
Mind you I'm not a criminal. But is there really secret data exclusively on the phone? Or is it simply that they need to figure out what the accounts are so that they can call the Help Desk to get the passwords changed?
My cell phone provider keeps track of all the data and hostnames that the cell phone connects to. I can see it as part of my "how much data was used this month" report.
I too have had a similar experience. My alarm clock is a bit more modern - it even came from the factory with the current time plugged in somehow (I choose my region or something). But it quickly gained 5 minutes over the course of a month or two. For several years I'd just remember the clock was fast.
Then I moved to another town - and it hasn't drifted even a minute since. Here's the strange part - same power company. I'm sure a very different path.
I have Windows 10 and I don't have (or at least see) the FB "app" installed. When I use FB on my laptop it is through a browser.
But I specifically disabled and left-uninstalled the FB "charm" / "app" / "live tile" or whatever they call it. I don't see FB installed - how would I know?
On my iPhone there is definitely a direct FB integration (and twitter) - so that Siri can post messages and makes it easier to upload phones/videos. And this integration too can be disabled.
I see more and more of this coming up in the industry and it opens a question for me - who owns the car?
It may make a difference if the car is leased. But thinking about how Tesla batteries software limited capacity/range - if I buy the car with a giant battery in it cannot I not defeat that?
Or is it like Sat radio - where I have to have a subscription to continue using it? Is the "fuel" in my car available only through subscription? What prevents me from strapping a bigger battery to my roof and plugging it in through the charge-port (ala battery packs for cell phones).
So the car manufacture is going to install advertising software in my car? And may I defeat it or otherwise alter the vehicle as I see fit. And perform repairs on it too!!!
Well yes. I think this is the change that they have to think through. I used to build software for medical devices and this was one of the places we had to put a lot of thought. We had to the Test the system we were shipping - but it wasn't integrated into the target env yet. Think "mock" objects.
But the big question that kept coming up... Are we testing the same thing we're going to ship ? We couldn't have the QA test step differ from actual use of the product because...the device wouldn't be used during testing the same way the end-user was going to operate it. And we didn't want to have "two scripts" because of the fear that we'd forget to update the copy - and the Test steps would diverge from actual intended use (or even the reverse sometimes).
Via proper design we could meet both concerns. The test had, in some cases, had to be part of the design.
My point is that the official script must contain the words "this is not a drill" And the drill tests the official script. They can't have two "official" script, one missing "this is not a drill" because they could become out-of-date by accident.
Had this been a real emergency then only the official script would have been read (which contains "this is not a drill"). That makes sense - the official emergency script to be read, possibly under operator duress, would contain "this is not a drill" It would contain every single word the person is supposed to speak so that they don't miss one. You can't be making it up on the fly or rely on training. I've done stuff like this and believe me, under pressure a lot of training is forgotten. Having a checklist to follow removes error.
The change in script for a Drill must (currently) be to wrap it with.
"This is a Drill"
Read Official Script (which contains "this is not a drill")
Repeat "This is a Drill" (yeah I know that "this is not a drill" contradicts "this is a drill" but trust me okay?!")
Under pressure one can't be reading the official script and get to an "IF" condition. Read the damn script. Go to the next step on your checklist ("Call operator, read script, pull fire alarm, run screaming from building")
Completely normal. I'm choking as I laugh. My son ran naked into a room once and pointed at his, uh, appendage -- shrieking in laughter "Look what I have, Look what I have."
Yes and. The drill was to read the published scripts. Which must contain "this is not a drill"
You can't have a drill that contains two sets of scripts - because then you aren't testing the actual Plan. And who is responsible for keeping two scripts to up date? and what's the risk of getting it wrong. Apparently the "this is a drill" script says Step 1 "Say This is a Drill, This is a Drill" Step 2 - "Read actual Script" Step 3- "Repeat This IS A DRILL"
Hopefully they'll look at the script and decide whether the wording is appropriate. Or have the Drill person confirm with the receiver "hey - you understand this is [not] a drill right?!"
I thought it strange that the HR dept would air so much laundry on this employee's job history. Suggesting he was so very incompetent.
I also thought it was laughable that Plan-B was the governor logging in to Twitter to set the record straight. Seriously? Oh -- and he couldn't remember his password !!!!! The whole state monitors Twitter?
Why not send out a second broadcast saying "just kidding" -- or apparently they didn't have a button for that.
Yes - this one person is not at fault - or at least there's blame to share. There were lots of mistakes along the way and apparently no backup plan. I believe the sharing of his HR history was rather egregious.
And by brittle I will also include product functionality. One team treating conceptual stuff differently. The two features don't work together - both technically and/or functionally.
Agile would say you test continuously. But I've found in practice that as an org grows in size and teams work (more) independently - that the integration areas become brittle when the teams don't work together. Usually due to competing priorities. As an iOS user I have noted the high rate of new bugs - and seemingly orphaned technologies that just don't work together (yeah - and what's up with Siri -- "she" is still only good for scheduling meetings, unless you live in Derry and then every meeting has a bovine twist to it)
My serious point though is that for an organization to take a step back must mean there's a pretty big problem going on under the covers. Sure this isn't Bill Gates and Security at MS. It's one thing to tune the organization and prioritize areas that need help - but to declare a dedicated focus on quality of features suggests something bigger.
I can agree with sentiment. The battery in an iPhone is replaceable. On my iPhone you just remove 2 screws and then pry the glass front off. The battery is right there to be unplugged and replaced. Maybe not something that everyone would feel confident doing -- but the "phone repair guy" in the Mall can do it "cheap."
In reference to a screen grab (in another news article) of the command center in which behind the dept head is clearly a yellow stick with a password on it. The stick note clearly states "password."
The person in charge of media rep later replied "that's to some old non-essential system - nothing important" Keeping it for a friend.
Apparently - it might be the govn'rs missing Twitter password.:-P
My SSD isn't getting along either. Since applying all of the Windows 10 (and Dell firmware) patches - my disk I/O occasionally jumps to 100% with no process (in perfmon) attributed to the activity. All apps attempting IO along with Windows appears to freeze for several minutes before returning to normal- the OS issues an IO reset (GUI only apps continue to paint and work during this time). BUT -- once in awhile I get a BSOD HW failure to go along with it.
Okay - could be failing SSD on a 8mo old laptop - virus software incompatible or... (insert something else). However, the timing is suspicious.
As a person who used to build software under the different global health regulations (think the FDA in the USA) - I totally understand this. Sounds situation normal.
First - 99% had to be proven during pre-market. Actual - 37 women out of how many using the app?
All hospitals are supposed to report back to the vendor and FDA any issues. Later on "actual vs expected" is compared and the 99% claim will be reevaluated. In the USA the vendor is responsible for deciding when to change this (although the FDA can force the issue during inspection).
1% is a big number when there's a million people using the app. Chip makers like 5 nines for this reason - failure is not an option. Geez - failure is a baby?
I noticed the same thing. I still have a perfectly viable i7 quad-core (gaming) laptop from c.2010. No CPU patch for me?!
Since there currently aren't processors (from Intel) that correctly handle BOTH issues - why should I upgrade my old PC? I'd be paying money to buy a defective product - and waiting years for a better one to come along. If anything I'll wait for "next year" and CPUs that have circuitry to better handle the work-around. Video cards have the same problem!
On the other hand - I'll realistically take a risk based approach and wait for the first real exploit. Since the Browser is the most likely surface area on my PC - I want to see this Javascript that can perform the attack. If somebody makes it onto my PC through other means - I already have bigger issues. The point is - making sure the browser isn't the Easy vector.
I know! I'm with you. My 2 year old still needs diapers. As for my i7 quad-core from 2010 I might need to rethink upgrading... or putting that Registry key and preventing the update from downloading. It already is slow because it has a spinning HD.
But now I'm mad because "I have to" upgrade and pay them money for their mistake. However, proper CPUs don't exist yet. So I want to wait. And suffer in the meantime?
MS probably patched the issue by upping the resolution required. That's the super-enhanced security feature.
You probably don't even need a photo - rather just need one that triggers the geometry math. I'll bet a b&w photo with some edges on it would work - if you understood the underlying algorithm. Think of those "masks" (or makeup) intended to hide you from facial recognition in a crowd, it's the anti-geometry.
This has been the fear of bio-metrics. Cut off a hand or pop out an eyeball. 3D printers. But - the hand & eyeball scanners can (now) tell if you're dead, I think by measuring blood flow or lack of something in the iris. Will facial scanning have to go deeper? Seems good enough for security "that might be the person" - but not "that IS the person"
I thought that different sized glasses were to help with the bouquet and make the experience better! Not that you should Fill the glass to the top.
But it is difficult to understand where a "single serving" of wine should be filled to.
Super size everything. 20oz beer, 24oz soda, 32oz big gulp.
I looked into this awhile ago because I became concerned around drinking & driving. When I was young the limit was 0.10 the rule of thumb was "one drink per hour" Nice and simple to remember (of course now it's 0.08 and the new math isn't easy to remember). But -- it doesn't matter because the friggen wine glasses are 40 Oz. Even if you fill it to the widest part of the glass - a seemingly obvious measuring line - you still have 2 servings of wine. So "2" glasses of wine is really 4 servings.
From both a health perspective and safety - people can easily consume too much.
I work next door and overlook the roof of the major natural gas supplier in my state- they own pretty much all the pipes in the state. Do you remember those "NG fuel cells" that were all the rage and would aid large energy consumers in states like CA? You'd think they would install those to reduce their electric bill.
Well the gas company just installed solar panels on the roof of their building last month. Corner to corner.
Everyone gets it. It's cheaper. Yes, the state does have incentives to turn solar power into a financially rewarding endeavor.
Of course they are coated with 4 inches of snow right now. But hey.
thank you. I meant localhost - my network admin read the papers and implemented it. I just knew not to use un-used domains because - someday they'll get used - so he figured it out. Plus the lab was off the grid - but we still allowed a select few sub-domains or specific servers to resolve (like our upstream WSUS server) via forward references on the private DNS server and get out through the firewall..local appears to be the mDNS https://tools.ietf.org/html/rf...
This seems totally okay with me. Give the user a choice: pay, view ads, or mine crypto. Seems above board.
The drain on the economy in the sucking of power will be interesting. But if users plugin at free charging stations - then it seems like a good deal.
Of course does the Mac suffer from the software controlled iOS battery life issues?
How much data is actually on "the phone?" My phone is a thin client device that connects to "the cloud." If I forget my password I simply reset it.
Mind you I'm not a criminal. But is there really secret data exclusively on the phone? Or is it simply that they need to figure out what the accounts are so that they can call the Help Desk to get the passwords changed?
My cell phone provider keeps track of all the data and hostnames that the cell phone connects to. I can see it as part of my "how much data was used this month" report.
I too have had a similar experience. My alarm clock is a bit more modern - it even came from the factory with the current time plugged in somehow (I choose my region or something). But it quickly gained 5 minutes over the course of a month or two. For several years I'd just remember the clock was fast.
Then I moved to another town - and it hasn't drifted even a minute since. Here's the strange part - same power company. I'm sure a very different path.
But I always wondered why.
I have Windows 10 and I don't have (or at least see) the FB "app" installed. When I use FB on my laptop it is through a browser.
But I specifically disabled and left-uninstalled the FB "charm" / "app" / "live tile" or whatever they call it. I don't see FB installed - how would I know?
On my iPhone there is definitely a direct FB integration (and twitter) - so that Siri can post messages and makes it easier to upload phones/videos. And this integration too can be disabled.
-Mike.
I see more and more of this coming up in the industry and it opens a question for me - who owns the car?
It may make a difference if the car is leased. But thinking about how Tesla batteries software limited capacity/range - if I buy the car with a giant battery in it cannot I not defeat that?
Or is it like Sat radio - where I have to have a subscription to continue using it? Is the "fuel" in my car available only through subscription? What prevents me from strapping a bigger battery to my roof and plugging it in through the charge-port (ala battery packs for cell phones).
So the car manufacture is going to install advertising software in my car? And may I defeat it or otherwise alter the vehicle as I see fit. And perform repairs on it too!!!
The irony here. The FBI would love to have a backdoor to encryption on Apple devices - and keeps pressuring them to do it.
But watch out for those Chinese guys. We can't trust them.
Well yes. I think this is the change that they have to think through. I used to build software for medical devices and this was one of the places we had to put a lot of thought. We had to the Test the system we were shipping - but it wasn't integrated into the target env yet. Think "mock" objects.
But the big question that kept coming up... Are we testing the same thing we're going to ship ? We couldn't have the QA test step differ from actual use of the product because...the device wouldn't be used during testing the same way the end-user was going to operate it. And we didn't want to have "two scripts" because of the fear that we'd forget to update the copy - and the Test steps would diverge from actual intended use (or even the reverse sometimes).
Via proper design we could meet both concerns. The test had, in some cases, had to be part of the design.
My point is that the official script must contain the words "this is not a drill" And the drill tests the official script. They can't have two "official" script, one missing "this is not a drill" because they could become out-of-date by accident.
Had this been a real emergency then only the official script would have been read (which contains "this is not a drill"). That makes sense - the official emergency script to be read, possibly under operator duress, would contain "this is not a drill" It would contain every single word the person is supposed to speak so that they don't miss one. You can't be making it up on the fly or rely on training. I've done stuff like this and believe me, under pressure a lot of training is forgotten. Having a checklist to follow removes error.
The change in script for a Drill must (currently) be to wrap it with.
"This is a Drill"
Read Official Script (which contains "this is not a drill")
Repeat "This is a Drill" (yeah I know that "this is not a drill" contradicts "this is a drill" but trust me okay?!")
Under pressure one can't be reading the official script and get to an "IF" condition. Read the damn script. Go to the next step on your checklist ("Call operator, read script, pull fire alarm, run screaming from building")
Completely normal. I'm choking as I laugh. My son ran naked into a room once and pointed at his, uh, appendage -- shrieking in laughter "Look what I have, Look what I have."
Yeah - completely normal.
Yes and. The drill was to read the published scripts. Which must contain "this is not a drill"
You can't have a drill that contains two sets of scripts - because then you aren't testing the actual Plan. And who is responsible for keeping two scripts to up date? and what's the risk of getting it wrong. Apparently the "this is a drill" script says Step 1 "Say This is a Drill, This is a Drill" Step 2 - "Read actual Script" Step 3- "Repeat This IS A DRILL"
Hopefully they'll look at the script and decide whether the wording is appropriate. Or have the Drill person confirm with the receiver "hey - you understand this is [not] a drill right?!"
I thought it strange that the HR dept would air so much laundry on this employee's job history. Suggesting he was so very incompetent.
I also thought it was laughable that Plan-B was the governor logging in to Twitter to set the record straight. Seriously? Oh -- and he couldn't remember his password !!!!! The whole state monitors Twitter?
Why not send out a second broadcast saying "just kidding" -- or apparently they didn't have a button for that.
Yes - this one person is not at fault - or at least there's blame to share. There were lots of mistakes along the way and apparently no backup plan. I believe the sharing of his HR history was rather egregious.
And by brittle I will also include product functionality. One team treating conceptual stuff differently. The two features don't work together - both technically and/or functionally.
Agile would say you test continuously. But I've found in practice that as an org grows in size and teams work (more) independently - that the integration areas become brittle when the teams don't work together. Usually due to competing priorities. As an iOS user I have noted the high rate of new bugs - and seemingly orphaned technologies that just don't work together (yeah - and what's up with Siri -- "she" is still only good for scheduling meetings, unless you live in Derry and then every meeting has a bovine twist to it)
My serious point though is that for an organization to take a step back must mean there's a pretty big problem going on under the covers. Sure this isn't Bill Gates and Security at MS. It's one thing to tune the organization and prioritize areas that need help - but to declare a dedicated focus on quality of features suggests something bigger.
I can agree with sentiment. The battery in an iPhone is replaceable. On my iPhone you just remove 2 screws and then pry the glass front off. The battery is right there to be unplugged and replaced. Maybe not something that everyone would feel confident doing -- but the "phone repair guy" in the Mall can do it "cheap."
That sounds reasonable to me.
I'll second that. My waterproof Camera has a replaceable Battery AND SD card !!! And a bunch of cable access ports (USB etc).
It's simply equipped with a Waterproof Door !! I carry several batteries with me to swap during the day and charge them at night.
Same with my waterproof Watch -- the back screws off and has a gasket. Which I have to open every 8 years to replace the battery.
In reference to a screen grab (in another news article) of the command center in which behind the dept head is clearly a yellow stick with a password on it. The stick note clearly states "password."
The person in charge of media rep later replied "that's to some old non-essential system - nothing important" Keeping it for a friend.
Apparently - it might be the govn'rs missing Twitter password. :-P
My SSD isn't getting along either. Since applying all of the Windows 10 (and Dell firmware) patches - my disk I/O occasionally jumps to 100% with no process (in perfmon) attributed to the activity. All apps attempting IO along with Windows appears to freeze for several minutes before returning to normal- the OS issues an IO reset (GUI only apps continue to paint and work during this time). BUT -- once in awhile I get a BSOD HW failure to go along with it.
Okay - could be failing SSD on a 8mo old laptop - virus software incompatible or... (insert something else). However, the timing is suspicious.
As a person who used to build software under the different global health regulations (think the FDA in the USA) - I totally understand this. Sounds situation normal.
First - 99% had to be proven during pre-market. Actual - 37 women out of how many using the app?
All hospitals are supposed to report back to the vendor and FDA any issues. Later on "actual vs expected" is compared and the 99% claim will be reevaluated. In the USA the vendor is responsible for deciding when to change this (although the FDA can force the issue during inspection).
1% is a big number when there's a million people using the app. Chip makers like 5 nines for this reason - failure is not an option. Geez - failure is a baby?
I noticed the same thing. I still have a perfectly viable i7 quad-core (gaming) laptop from c.2010. No CPU patch for me?!
Since there currently aren't processors (from Intel) that correctly handle BOTH issues - why should I upgrade my old PC? I'd be paying money to buy a defective product - and waiting years for a better one to come along. If anything I'll wait for "next year" and CPUs that have circuitry to better handle the work-around. Video cards have the same problem!
On the other hand - I'll realistically take a risk based approach and wait for the first real exploit. Since the Browser is the most likely surface area on my PC - I want to see this Javascript that can perform the attack. If somebody makes it onto my PC through other means - I already have bigger issues. The point is - making sure the browser isn't the Easy vector.
I know! I'm with you. My 2 year old still needs diapers. As for my i7 quad-core from 2010 I might need to rethink upgrading... or putting that Registry key and preventing the update from downloading. It already is slow because it has a spinning HD.
But now I'm mad because "I have to" upgrade and pay them money for their mistake. However, proper CPUs don't exist yet. So I want to wait. And suffer in the meantime?
Grumble grumble.
MS probably patched the issue by upping the resolution required. That's the super-enhanced security feature.
You probably don't even need a photo - rather just need one that triggers the geometry math. I'll bet a b&w photo with some edges on it would work - if you understood the underlying algorithm. Think of those "masks" (or makeup) intended to hide you from facial recognition in a crowd, it's the anti-geometry.
This has been the fear of bio-metrics. Cut off a hand or pop out an eyeball. 3D printers. But - the hand & eyeball scanners can (now) tell if you're dead, I think by measuring blood flow or lack of something in the iris. Will facial scanning have to go deeper? Seems good enough for security "that might be the person" - but not "that IS the person"
I thought that different sized glasses were to help with the bouquet and make the experience better! Not that you should Fill the glass to the top.
But it is difficult to understand where a "single serving" of wine should be filled to.
Super size everything. 20oz beer, 24oz soda, 32oz big gulp.
I looked into this awhile ago because I became concerned around drinking & driving. When I was young the limit was 0.10 the rule of thumb was "one drink per hour" Nice and simple to remember (of course now it's 0.08 and the new math isn't easy to remember). But -- it doesn't matter because the friggen wine glasses are 40 Oz. Even if you fill it to the widest part of the glass - a seemingly obvious measuring line - you still have 2 servings of wine. So "2" glasses of wine is really 4 servings.
From both a health perspective and safety - people can easily consume too much.
I work next door and overlook the roof of the major natural gas supplier in my state- they own pretty much all the pipes in the state. Do you remember those "NG fuel cells" that were all the rage and would aid large energy consumers in states like CA? You'd think they would install those to reduce their electric bill.
Well the gas company just installed solar panels on the roof of their building last month. Corner to corner.
Everyone gets it. It's cheaper. Yes, the state does have incentives to turn solar power into a financially rewarding endeavor.
Of course they are coated with 4 inches of snow right now. But hey.
...or alternate plot: somebody goes around shooting giant metal pins into the heads of Red Shirts when they open the door. "(shweeep) -- (pop)"
Spock then comes up with methodical solution involving an alternate reality and determines that Kirk is the father of Uma.
This all takes place on a silent planet with terrific big sky views.
Whatever it is -- I predict it'll be violent. Not thoughtful "Star Trek"
thank you. I meant localhost - my network admin read the papers and implemented it. I just knew not to use un-used domains because - someday they'll get used - so he figured it out. Plus the lab was off the grid - but we still allowed a select few sub-domains or specific servers to resolve (like our upstream WSUS server) via forward references on the private DNS server and get out through the firewall. .local appears to be the mDNS https://tools.ietf.org/html/rf...