Recently I have been taking the 99 bus from Erith to Bexleyheath of a late afternoon, when it is already dark. What has struck me as the bus makes its' way through Slade Green and Barnehurst, is that even though it is dark outside, quite a considerable number of people leave their living room curtains open with the room in bright light. This means that passers by can easily see into the householders private space like they were living in a fish tank. Personally I dislike this kind of exhibitionism, but each to their own. This got me thinking; Slade Green especially is an area where a significant portion of the residents don't have a huge level of disposable income, yet from my observations from the 99 bus into people's living rooms, many of them seem to have absolutely huge televisions - 65" or even larger. This leads me to the whole vexed subject of people on a low income who have a very large flat screen television. Some academic studies have been carried out on the subject, and the results have been actually quite surprising. It has been noted for some years that wealthier, middle class people tend to have fewer televisions in their houses, and they tend to be older models with smaller screens. The reason for this is thought to be that middle class people generally spend less time watching the television, as they are likely to attend theatre, cinema, sports and the arts, as well as eating out and socialising on a regular basis. The television is regarded as an incidental item. Researchers found that people with lower incomes tend to be more home – centric; their social lives are more likely to revolve around their living rooms and the television; they tend not to go out much, and when they do, it is more likely to be local to them – to a friend or neighbour living nearby. Thus they place a far higher value on items for the home like a large television or games console, which is their principal source of leisure and entertainment. This certainly seems to make sense – and would no doubt drive the Daily Mail into a frenzy should it come across the story. I suppose that there are exceptions to this though; the world has changed greatly in the last decade or so; fast broadband connections mean that all sorts of media content can be streamed to the home; you no longer need to go to the inconvenience of a cinema visit, when you can see the movie in full HD / 4K quality in the comfort of your own home. I personally have little time for the theatre, and all of the hassle that it entails. I do like a live gig every so often, but nowadays it has to be something really special to entice me out of Pewty Acres on a cold and wintery evening. What do you think? Email me at hugh.neal@gmail.com.
A sports figure who is now sadly mostly forgotten, but who was a national champion in the early 2000's lived and worked locally - and someone I saw on several occasions shopping in Erith Morrison's supermarket back in the day. Born in Erith on February 2, 1962, Andy Fordham was the eldest of a brother and two sisters. He grew up in Charlton and attended Charlton Manor Primary School and Eaglesfield Secondary School. He was a keen track-and-field athlete in his younger days and was nicknamed 'The Whippet' at school. He displayed an early aptitude for darts, taking up the game at the age of 16. Initially, he played in local pubs and clubs, honing his skills and building a reputation for his powerful throws and unpredictable style. Fordham's love for darts blossomed early, honing his skills in local pubs and working men's clubs. His raw talent and natural ability soon caught the attention of the darts world, and by the late 1980s, he had established himself as a formidable force on the professional circuit. Outside of darts, Andy Fordham was for many years the landlord of The Rose pub in Overy Street, Dartford. In 1994, Fordham made his professional debut, joining the British Darts Organisation (BDO). His rise was meteoric, reaching the semi-finals of the BDO World Darts Championship in both 1995 and 1996. However, it was in 1999 that he truly captured the hearts of darts fans worldwide, triumphing at the Winmau World Masters, the prestigious non-ranking tournament. Andy Fordham's crowning achievement came in 2004 when he entered the BDO World Championship as a firm underdog. However, his powerful throwing and unwavering self-belief propelled him to the final, where he faced the formidable Mervyn King. In a thrilling match, Fordham demonstrated his unwavering spirit, coming from behind to defeat King and claim the coveted title of BDO World Champion. The victory cemented his position as one of the greatest darts players of all time and earned him the nickname 'The Viking' due to his imposing stature and powerful throwing style. Fordham's victory in 2004 was a watershed moment, not only for himself but also for darts as a whole. His infectious enthusiasm and larger-than-life personality resonated with fans worldwide, attracting new audiences to the sport. He became a true ambassador for darts, promoting the sport with his unique blend of skill, humour, and charisma. On 21 November 2004, Fordham, as reigning BDO world champion, faced off against Phil Taylor, the reigning PDC world champion, in a best-of-13-sets match at Purfleet's Circus Tavern. The special pay-per-view event was billed as "The Showdown" and was promoted and broadcast by Sky Sports. During the match, Fordham became unwell and complained of shortness of breath. He took a break after the seventh set and was advised not to continue by medical staff at the venue. Taylor was leading the match 5–2 at the time and declared the winner by default. After the incident Fordham visited a doctor, and following medical tests he was informed that, as a result of long term alcohol damage, his liver was operating at only 25% capacity. He was advised to stop drinking alcohol immediately. Fordham's health had long been a concern; at one point he weighed 31 stone (200 kg; 430 lb) and was in the habit of regularly consuming 24 bottles of lager and half a bottle of brandy before going on stage to play darts. He admitted to the media that he had felt more comfortable playing when not fully sober. The doctors' advice led Fordham to seek help and assistance via the television programme Celebrity Fit Club, where he became friends with the journalist and TV presenter Paul Ross. Beyond his competitive achievements, Fordham was known for his charitable work. He established the Andy Fordham Foundation to raise funds for various causes, including the Teenage Cancer Trust and the Darts4Kids charity. His generosity and compassion extended beyond the dartboard, earning him widespread respect and admiration. In 2013, Fordham underwent bariatric surgery, successfully losing over 11 stone in weight. This transformation, coupled with his ongoing, mostly unsuccessful efforts to maintain sobriety, marked a new chapter in his life. On 15 July 2021, Fordham died in hospital from organ failure after a long battle with health problems. Fordham had been a very heavy drinker and was diagnosed with cirrhosis, with reportedly more than 70 per cent of his liver had been destroyed. He was only 59.
I took the photo above recently in Bexleyheath; there is a small space between the EweMove estate agents shop and the Natwest Bank branch in Townley Road. Until a few months ago the space was used by a rough sleeper, as it offered some shelter from the weather. The person built up a small but what looked quite cosy space - under the circumstances. The next time I passed a metal barrier and gate installed to block use of the space, as you can see in the photograph above - click on it to see a larger version. The UK's homelessness crisis is a stark reality, with thousands forced to sleep rough on the streets. Shop doorways, offering some semblance of shelter, often become their unwelcome haven. While shop owners understand the gravity of homelessness, they also face concerns about safety, hygiene, and customer perception. This creates a complex ethical dilemma: how to deter rough sleepers without crossing the line into cruelty or criminalisation. Many businesses resort to "defensive architecture" - installing spikes, benches with uncomfortable contours, or even water sprinklers – to make their doorways unappealing for sleeping. These tactics, while seemingly effective, raise eyebrows. Critics argue they are inhumane, denying vulnerable people even a semblance of shelter, and create a hostile atmosphere for everyone. Additionally, their effectiveness is questionable, as rough sleepers simply move elsewhere, often into even less safe or visible locations. Increased security patrols and CCTV cameras are another common approach. While understandable for safety concerns, they can create an intimidating atmosphere, further isolating already vulnerable individuals. Additionally, their effectiveness in deterring sleep specifically is debatable. A growing number of shop owners are recognising the limitations of these reactive measures. Some are partnering with local charities and outreach groups to offer resources and support to rough sleepers, directing them to shelters or offering temporary storage for belongings. Others are engaging in collaborative projects to tackle the root causes of homelessness, advocating for increased government funding for housing and support services. Legally, the situation is nuanced. While trespassing laws exist, applying them to rough sleepers can be seen as harsh and counterproductive. The issue of doorway sleeping raises important ethical questions. Should businesses have the right to deter rough sleepers, even if it means denying them a basic need? Should the onus for addressing homelessness fall on individual shop owners? These questions are complex and require ongoing dialogue. The UK government's "Rough Sleeping Strategy" encourages a more compassionate approach, emphasising assistance over enforcement. However, some businesses feel their concerns about safety and hygiene are not adequately addressed under current policies. Ultimately, the responsibility for tackling homelessness lies beyond individual shop owners. Systemic changes, including increased affordable housing, mental health support, and job opportunities, are crucial. Until then, shop owners are left navigating a difficult terrain, balancing their business needs with the human reality of those sleeping on their doorsteps. Comments to me at hugh.neal@gmail.com.
The National Grid is reportedly the latest organisation in the UK to begin removing China-manufactured equipment from its network over cyber security fears. The contract with the UK subsidiary of China's state-owned Nari Technology, NR Electric UK, was terminated after seeking advice from the National Cyber Security Centre (NCSC), according to sources who spoke to the Financial Times. The components being removed from the UK's electricity transmission network are those tasked with managing the communication between energy projects and the grid, the newspaper's sources said. They are also involved in balancing the grid to minimize the risk of blackouts. It's understood that NR Electric UK wasn't given a reason for the termination of the contract, the decision for which was made in April, and its staff can no longer access the sites where the components are installed. Nari Technology, with annual revenues exceeding $6 billion, is owned by Nari Group Corporation – the biggest power infrastructure group in the world. National Grid was its largest customer. This is the latest example of a Chinese company being removed from the UK's critical infrastructure network over cyber security concerns. In Huawei's case, the decision to remove its kit was made largely out of fears that Beijing can legally compel companies to share data with it, which could in theory include data collected from operations in other countries, including the UK. The UK's decision to outlaw Huawei equipment from its 5G network was made in 2020, with telecom companies formally ordered to remove its technology by 2027. Pressures from the US are thought to have kick started the movement to oust Huawei from the UK's 5G network, and these have now spread to the EU, which earlier this year branded it a "high-risk supplier." While an EU-wide ban is being considered, Germany, which initially refused to rip Huawei's kit out of its 5G networks, has now said it will remove Huawei equipment regardless of the cost involved, and that "the risks have been known for a long time." Last year, the UK also took steps to remove China's involvement in the Sizewell nuclear project, taking a joint stake in the project that essentially bought out China General Nuclear. Prime Minister Rishi Sunak said at the time that Britain's "golden era" of China relations is over. Whilst the large power infrastructure is having Chinese designed and manufactured equipment being removed by law, the Smart Meters installed in UK homes will not be affected by this - if you have a Chinese manufactured Smart Meter, you will not be having it swapped out for one of alternative design and manufacture. The much vaunted, but actually quite apathetic roll - out of Smart energy meters in the UK has hit yet another problem; Consumers who have a smart meter fitted, and then change energy supplier quite frequently find that their meter then stops working, as the communication protocols used by different energy supplier vary considerably. Smart Meters send real – time power usage data back to the supplier via a 3G mobile phone signal. The trouble is many network operators are retiring 3G technology over the next few years, as I have previously written. A worrying number of UK authorities are still unaware of the impending switch-off of 2G and 3G mobile networks, according to Local Government Association (LGA) figures. While 38 percent of respondents were fully aware, 27 percent were only partially aware, and 7 percent had no idea at all that the axe would be falling by 2033 at the latest. The numbers worsened when the researchers spoke to respondents in senior management. Almost half (48 percent) were "partially aware" the UK's 2G and 3G mobile networks were due to be switched off and 14 percent were not at all aware. The actual switch-off will happen over the next few years. UK mobile operators have told government they do not intend to offer 2G and 3G mobile networks past 2033 at the latest, and there is a high likelihood that some networks will be shut down earlier. The UK government said it welcomes plans to end services ahead of time. Vodafone, for example, intends to pull the plug on 3G once and for all from January 2024 - next month. Although most consumers, with their 4G and 5G devices, will likely be unaware of the end when it comes, the same cannot be said of local authorities. According to the survey, almost two-thirds of respondents (63 percent) reported that their authority was still using devices or services reliant on 2G and 3G networks. Almost a third of respondents reckoned there would be costs involved and didn't have a handle on them, and nearly a quarter (23 percent) didn't know if there would be costs incurred. It is worrying considering the sheer number of devices out there, from alarm systems, traffic lights and parking meters to telecare kit, all of which will need to be upgraded or replaced before networks are turned off. And then there are those areas where 4G, let alone 5G, has yet to reach. According to the LGA, more than half of councils that responded to its survey said their transport services – including parking – relied on the older networks. Almost half warned that environment, water supply, power and waste services would be hit. With operators starting to turn off their legacy networks, the survey demonstrates the need to raise awareness of the shutdown's implications and what needs to be budgeted for. This could potentially be a far more serious issue than the Y2K bug from the start of the century.
A report was published recently that highlighted the security loopholes and outright failures that can be found in the cash till machines used by most high street banks. The cash machines, more correctly termed Automated Teller Machines, or ATM's can be hacked in many ingenious ways. In order to understand this, a basic understanding of how an ATM works is required. An ATM consists of two main parts: cabinet and safe. The cabinet (main body) contains the ATM computer, which is connected to all the other devices: network equipment, bank card reader, keyboard (PIN pad), and cash dispenser (the dispenser itself is in the safe, but the connector is not). The cabinet is practically unprotected, with only a plastic door secured by a trivial lock. What's more, manufacturers usually use the same lock for all ATMs of the same series. Keys for these locks can be purchased easily online, although attackers can also pick them or drill through the flimsy plastic. The safe is more robust, being made of steel and concrete, and contains only the cash dispenser and cash acceptance module. The computer usually runs on Windows, in a special embedded version designed specifically for ATM use. Only administrators should have access to Windows; other users should not have such access. This is why user-facing applications run in kiosk mode. These applications provide all necessary functionality to the user: this is the interface that we see during normal ATM use. To do its job, the application must communicate with ATM peripherals: get card information from the card reader, obtain user input from the keyboard, and send commands to the cash dispenser. This communication takes place using XFS (eXtensions for Financial Services), a standard for simplifying and centralising banking equipment control. With XFS, a hardware manager makes an API (Application Programming Interface) available to all Windows applications and forwards requests to devices. Commands to each XFS-connected device are sent via the corresponding service provider (device driver). An ATM never decides to dispense cash all by itself. When processing a transaction, it contacts the bank's processing centre. This connection is either wired or wireless (for example, via a mobile data network). It is important to secure the connection against data interception. In most cases, software or hardware Virtual Private Network (VPN) clients perform this task. So that is the basics of the ATM operation; now what of the exploit that have been found by crooks? Well the security report found that when their team of ethical hackers were let loose on some typical high street ATM units, they found that 15 were found to be still running the long unsupported Windows XP. 22 were vulnerable to a "network spoofing" attack where an attacker connects locally to the machine's LAN port and conduct fraudulent transactions. Such an attack takes around 15 minutes to complete. 18 were vulnerable to 'black box' attacks where an attacker physically connects a device to the machine and tricks it into spitting out cash. Positive notes these attacks can be carried out in about ten minutes with aftermarket computer boards (such as a Raspberry Pi). 20 could be forced to exit out of kiosk mode via a USB or PS/2 connection. From there, an attacker could access the underlying Operating System of the machine and execute additional commands. 24 had no data encryption in place on the hard drive, allowing an attacker who had access to the drive to pull any stored data and configuration info from the machine. In general, the research found that, for the most part, the protections used by ATMs to prevent theft and tampering were more or less superficial, and anyone who really wanted to get into a machine could often do so in under an hour. "More often than not, security mechanisms are a mere nuisance for attackers: our testers found ways to bypass protection in almost every case," the researchers said. Since banks tend to use the same configuration on large numbers of ATMs, a successful attack on a single ATM can be easily replicated at greater scale. One of the top recommendations the report made to banks is to harden up the physical security of the machines themselves. By physically securing the cabinets to lock away access to the inputs and compute hardware of the machines, many of the techniques used in the study could be thwarted. Additionally, the researchers recommend banks keep on top of logging and monitoring security events on their networks. At this year's DEF CON hacking conference one researcher explained how he'd approached banks about flaws in their ATMs, only to be told such things weren't possible. It was only when he told them he was going public with the research that the flaws were fixed by the banks.
The end video this week is a bit of fun. It depicts the officers and crew of the Royal Navy warship HMS Ocean performing Mariah Carey's song "All I want for Christmas is you". It is a few years old now, but very much worth a watch. Comments and feedback to me at hugh.neal@gmail.com.
No comments:
Post a Comment