2 days ago: In Defence of Physical Tickets

any people actually think or genuinely believe that “going paperless” (i.e. no more paper receipts, bills etc.) makes them look smart. In reality, they typically surrender to brainwash from greedy companies that try to avoid manual labour, shipping costs, and materials. There’s a good reason to have (both get and keep) a paper trail. It’s not surveillance, it is for you to control, even shred if so you wish.

Last week I was almost completely away from the computer for three days and I didn’t miss the computer, the Internet, my inbox etc. Not at all. I didn’t check E-mail for half a week and didn’t miss anything critical. I did not use a phone either. In some sense, I guess that I became anti-computers in many contexts; I’ve noticed that some of the more senior judges seem to be like that as well, as some work 100% on paper (markers, sticky notes, handwritten notes, bookmarks and so on). It is a case of “the right tool for the job” and all that, a friend has explained to me, as “computers make sense in a lot of places but should not be shoehorned into workflows where they do not belong.”

In modern times the idea of “disconnecting” (from computers, not just the Net) became known as “Detox”, recognising the fact that digital things can be “Toxic”.

here are cyber attacks against our Web sites this week. These attacks take several different forms. These are clearly censorship attempts. We have paper trail to prove that.

Any attacks – no matter their form – tend to indicate fear. In this case, the fear is that information that we published will be available and remain available for many years to come.

Sustaining attacks is one thing; reporting them is another. What’s happening is illegal. It will be treated as such.

We’ll carry on publishing as usual. Curtailing access to information is never a winning strategy for all sorts of reasons.

AM not sure who is doing this and why, but the server of Tux Machines is under DDoS attack. It impacts Techrights as well. I wrote about this back in April when it began, then again ~3 weeks later.

The Web is so chaotic on so many levels.

CDNs are not the solution. Access gatekeeping with JS is not the solution either, it’s another new problem.

Does/did this happen in your company too? If so, read on…

Summary: Sirius ‘Open Source’ has not been keeping up with skills required to self-host, instead demonising/denouncing them as “hobbyist” (actual quote from the CEO) and eventually relaying almost everything to proprietary vendors that put gates and walls on Free software

TODAY we continue a couple of parts that deal with security and privacy issues at Sirius Open Source [sic] — a company that still says “Open Source” although it often recommends to clients that they adopt proprietary things.

Enough has been said already about the nature of the hypocrisy, the double standards, the dishonest marketing, lack of principles, and even some truly unethical clients. Below is part of the report deposited before my wife and I left the company¹.

Outsourcing Concerns

Colleagues at Sirius have long worked weekends (unlike client’s staff, which is typically off work on holidays and weekends; there’s no 24/7/365 cover). Some of them finished or started working but could not access an essential gateway machine. When the client does something like an update or makes a release the IP addresses will change, so whenever there is an incident Sirius staff can’t restart, forcibly reboot or investigate the machines, that is unless — or otherwise — Sirius staff are informed (or wiki/documentation becomes up to date again). From what is known, this is more of this particular client’s choice, but Sirius lacks a loophole and that is why Sirius may seem sloppy or slow to update/notify their workers/employees.

This is a typical example of a lack of top-down coordination. How are staff expected to carry out duties if managers don’t do their part or fail to understand how these systems work? In fact, when outsourcing to any third party, this may be inevitable; the people who ‘manage’ the machines have almost no control over them. They merely rent some server space and the hypervisor may change over time, introducing unforeseen but unavoidable complication. This means server can become unavailable, with no resort at all (like accessing the datacentre/s). Back in 2011 and for several years after that Sirius had its own server racks and managed its own instances.

Sirius keeps recommending the outsourcing to proprietary software like AWS and Cloudflare, resulting (sometimes) in a lot of problems. Sirius itself pays in AWS bills almost as much as a small salary. Becoming an AWS ‘reseller’ makes Sirius far less competitive and vastly less unique; companies like these, including Rackspace, have their own support. They have their own ambitions of controlling everything themselves. Companies like Sirius should not become transient migrators. Sirius used to offer its own hosting.

This is one of many issues with “cloud computing”, including AWS, which also caused significant downtimes for that client (hours-long outages) — a client that used to have far more control over the hosting. When it comes to certification, the company actively encourages learning “cloud computing” stuff instead of “Open Source” stuff.
______
¹ Many more details will be given, along with further analysis, when the whole report is published. Probably in January.

AST year I wrote a rant about how I could not withdraw/retrieve my own money from the bank. It was new to me that banks can simply deny withdrawal of one’s deposited money. I actually had to spend many hours and make many visits to the bank to eventually get my own money. A lot of that was to do with limited supply. There was also a surveillance element to it (the bank looking for ‘proof’ of how I would use the withdrawn money as if it’s any of their business).

These things seem to be getting worse over time.

I had a chat with a friend of mine today. He noticed something which, as far as I’m aware, nobody in the media is writing about.

Britain recently changed its coinage and banknotes. It changed these very fast. I was surprised if not shocked. Within just a couple of months they claimed that the old physical currency would no longer be accepted, except perhaps in unusual circumstances. Machines stopped accepting the old coins. What does that mean for Brits living abroad or people keeping their own money (physically)? Not on some computer in some bank or a virtual/digital account…

Either way, the push towards full surveillance of financial transactions is in full swing. And it’s getting harder to ‘opt out’ so to speak…

“I’m not sure if it is significant,” my friend told me, but there is a major cash shortage in Sweden since they replaced all the coins and bills last year.” There is this report about it (automated translation from Swedish).

“This second link shows that there are more than 3 orders of magnitude fewer medium-sized bills in circulation,” my friend continued.

So they may be making wrong assumptions about demand for cash, or rather making a self-fulfilling prophecy about it.

“It looks like they have aimed at forcing the cashless issue through deliberate hardship,” my friend bemoaned/ranted over this. “And, yes, there are obvious privacy implications among many other problems.”

“Has someone out there written an article about this in English,” I asked him. “If not, maybe we should.”

And hence the point of this post. I read a lot of articles every day, almost all day long. Rarely if ever is the subject of payment privacy brought up. The only site that habitually covers it belongs to Rick Falkvinge or his business (VPN). He is Swedish and he is familiar with this subject.

“Rick Falkvinge has mentioned it in passing during his many posts about Bitcoin,” my friend told me. “His main site is not really available and has only a placeholder left, it appears.”

My friend wants to read the site, but JavaScript has rendered Falkvinge’s obsolete. I told Falkvinge about it quite a few times in the past; he said he would look into it, but he never tackled the issue. But I digress…

“There were some articles about an old lady who tried to cash in her savings but was denied by the banks,” my friend recalls, “losing her life savings as a result. She died a short time after that, family claim that the economic blow hastened her death. As it costs a lot of money to keep anything in the bank and more to get anything back out of the bank the economically wise thing to do in Sweden for about two decades has been to keep it in the mattress.”

I did read several articles about that debacle (at the time). It showed that the old practice of keeping one’s own money is becoming too risky. There is a hidden cost (inflation/interest rates) and a high risk (not just of someone breaking into one’s house to steal the cash). See what Modi did some months ago in India. It was incredible. I was shocked that many Indians fell for the propaganda (as if only criminals keep a lot of cash) and tolerated what Modi had done. This reminded me of that time Cyprus denied bank withdrawals and simply grabbed a large portion of people’s personal savings, demonstrating in that particular case the very high risk of keeping money in the bank, not outside it (see what people in Argentina do nowadays). That goes back to the point made at the start — my point about things getting worse over time. Money was always a man-made concept if not an illusion, but over time we see more visible indicators of this. Some cash machines too have been letting me down lately. Years ago I surveyed shops around here to see which ones make it possible to purchase a mobile phone with cash and also top it up with cash (to maintain anonymity).

With few exceptions (sites like Zero Hedge), the subject is grossly unexplored and corporate press rarely touches it.

“I digress,” my friend told me, as “the short answer is that I have not run across any such articles. Do you think that Rick Falkvinge would have interest in collaborating on such an article? It’s kind of his area subject-wise.”

My friend too recalled what happened in India: “India has been having problems like that too and might be included. And don’t forget what China is doing in that area either. Of course, Microsoft, Facebook, Apple, and the others all want to be the sole gateway for payments. Failing that, they want a large piece of the pie.

“One of the official lines that gets repeated every time though is that it will inhibit tax dodging (small fish only, somehow they are not concerned by large fish) and illegal transactions. It occurred to me a few minutes ago that Sweden has a growing yet already massive black market economy in and adjacent to their 61 no-go zones. So maybe this is a low-key attempt to get society back.”

ike most people^*, over the years my online posting habits change and sites I was once active in I no longer access (some no longer exist at all). This differs from person to person. I used to be very active in newsgroups and in mailing lists (that was about a decade ago), but I no longer use these much. I try to use self-hosted blogs where possible, but sometimes, due to social dynamics, I also reluctantly send copies to larger networks with more people in them. It makes my messages more widely accessible to a broader audience.

I had a great time chatting with someone this weekend, whereupon I realised that some people don’t know where to follow me, or how to limit what they follow from me, based on preferences like Linux only, no politics, patents only, personal matters and so on. Here are the links to where I can be followed online in real time, so to speak.

For Linux news I use (along with my wife):

• Tux Machines
• Tux Machines at Twitter
• Real Linux at Tumblr

For a mix of everything (politics included):

• Diaspora*
• Twitter
• WordPress
• Someone also mirrors me in GNU Social

News and focus on patents:

• Techrights (over 20,000 articles there)

Personal site:

• Schestowitz.com

Blog:

• Schestowitz.com Web Log
• A few others which are barely active these days

______
^* Even those whose online activity mostly revolves around posting (uploading) selfies and pressing “like” on other people’s selfies, FWIW.

ACEBOOK, the surveillance giant, is reaching new levels of creepiness. A friend of mine, who was apparently conformist enough to have ‘joined’ Facebook, sent me the screenshot above, translating it as follows:

“If you’re unable to verify your account using a mobile phone number, you can submit a request to verify your account using your government-issued ID.”

Q: “What happens to my ID after I upload it?” A: Your ID will be stored securely while we resolve your issue.”

“I’m sick of this spyware masquerading as social networking,” he wrote to me, so I asked him to show what happens if he clicks the option below.

Either way, notice just how much data Facebook is collecting and even demanding.