Trading Securely

Careless couriers cause extensive damage

2025-10-19T06:36:00.001+01:00

In August 2025 we ordered a new PC to replace our existing graphics PC now obsoleted by Microsoft. The existing one works fine, but will not upgrade to Windows 11. As we have to keep secure company records we have to upgrade to have access to the security patches. Whilst we could have purchased extended support from Microsoft, it would only have been a short term fix and other application software would become outdated on Windows 10.

The new PC is about four times faster than our current PC, and should last for a few years. It was delivered by the Drop Parcels Daily courier, who lived up to their name and dropped the PC parcel over a garden gate. It fell about 1.4 metres on to a flagstone path. We have a CCTV record of the event. The courier company "apologised" about not matching their normal standards, but we had to return the new PC to the vendor for repair. We spent several mandays prior to the return, identifying the faults. The PC would run for hours, but suddenly crash with a black screen during editing. The PC vendor company has had to replace the motherboard, the power supply unit, and also the PC tower case, as those were damaged during delivery.

Hopefully we can collect the repaired PC tomorrow, it's a four hour round trip. but is worth it to avoid the "normal standards" of that courier company.

Annoying SPAM source - Instiller.

2025-08-21T09:35:00.003+01:00

Most days we get annoying SPAM email via https://instiller.co.uk/ Despite their statement otherwise, they do not honour unsubscribe requests. Their clients, using the Instiller services, are automatically and permanently blacklisted by our system. We usually file a bad IP address report with the on-line monitoring agencies too.

It is an absolute zero-tolerance policy. Unless we have previously done business with the organisation, and if we continue to receive unsolicited email after one "unsubscribe" message, we then blacklist the sender, their originating IP Address, their company, quoted phone numbers, and the person signing the letter.

Why Companies House Director Identity Verification is not reliable

2025-08-15T17:36:00.001+01:00

The current approach by Companies House to Id Verification is to have the Director's email address cross checked by GOV.UK One Login System. If that process checks out with the supporting identity documentation, the Director is issued with a personal identity code. It is sent to the Director's registered email address. The Director is then supposed to tell Companies House the detail of the personal code tied to the director's registered email address.

Here's the problem; the email address is not proof of identity. It can be hijacked, and the "Personal Code" can be learned by social engineering over the phone. The Companies House system should use a physical token, such as a Yubikey to store an encrypted digital certificate to identify individual people. The token should be plugged into the PC/Phone and verified when the Director is filing documents on the Companies House website.

Here's a story:

The Day the CEO’s Email Wasn’t the CEO’s Email

It started with a routine request.
Our client needed to verify the identity of a company director. Nothing unusual — just send a secure link to the director’s official address, ceo@bigco.com, and wait for the confirmation click.

A few minutes later, the “CEO” replied. The system marked the verification as complete. The paperwork moved forward.
Everything looked fine.

Except it wasn’t.

The Silent Switch

What no one realised was that, a week earlier, the company’s domain name — bigco.com — had been quietly hijacked.
The attacker had gained access to the registrar account where the domain was registered. With just a few clicks, they redirected the company’s email hosting to their own server.

Now, when someone sent a message to ceo@bigco.com, it didn’t go to the real CEO. It went to the attacker’s freshly created inbox.
From the outside, nothing looked suspicious. The address matched. The email arrived. The link was clicked.

The attacker had just passed identity verification with flying colours.

Why Email Alone Isn’t Enough

Email verification checks one thing:

Can this person receive a message at this address right now?

It doesn’t check:

Whether they’ve always owned that address
Whether the domain has been compromised
Whether someone inside the company created a fake account

If the domain itself is taken over, email verification becomes a rubber stamp for the attacker.

How to Stay Ahead of the Trick

Here’s how to make sure you’re not fooled by the same move:

Don’t rely on email alone — Combine it with phone verification, government ID checks, or live video confirmation.
Monitor domain history — Flag sudden changes in registration, transfers, or name servers.
Use domain security — DNSSEC, SPF, DKIM, and DMARC make some attacks harder.
Bind identity to a digital certificate — Once verified, use cryptographic keys instead of just email for ongoing trust.

The Lesson

In this case, we caught the problem — but only because another system noticed the domain had been altered days earlier. Without that extra layer, the attacker could have slipped right through.

When it comes to verifying someone’s identity, email is a useful tool — but it’s like a lock on a screen door.
If the whole doorframe can be lifted off, the lock isn’t doing much.

Tuning a local NAS network adaptor on your PC.

2025-08-07T20:24:00.001+01:00

🖥️ Lessons Learned: Optimizing Network Performance Between Windows and Synology NAS

If you've ever found yourself wondering why your lightning-fast Synology NAS isn’t delivering the speeds you expected to your Windows PC, you’re not alone. I recently went down the rabbit hole of **multi-NIC networking**, **Windows routing quirks**, and **Synology access issues** — and came out the other side with a surprisingly lean and fast setup.

Here’s a breakdown of the lessons learned — and what actually worked.

🚧 The Problem: Speed Bottlenecks & Wrong Interface Routing

Even with a high-performance Synology NAS equipped with a 10GbE card, and a PC connected via a 2.5GbE LAN port, I was seeing inconsistent performance — and even security alerts from the Synology when accessing the NAS web interface.

Turns out, the culprit was simple: **Windows was routing NAS traffic over the wrong network adapter** — often defaulting to Wi-Fi or a secondary Ethernet port on a different subnet.

🔧 Lesson 1: Understand the Windows Routing Table

Windows doesn’t always choose the fastest interface — it chooses based on **metrics** (priority numbers), and these can change on reboot or reconnection.

To view your routing table:

```bash

route print

This shows which interface Windows will use for a given destination. If the wrong adapter is prioritized, even local NAS access can go through Wi-Fi, causing unnecessary latency or even subnet mismatches.

### 🛣️ Lesson 2: Add a Static Route to the NAS

To ensure that all traffic to the NAS uses the correct (fast) adapter, add a **persistent static route** targeting just the NAS IP address:

```bash

route -p ADD [NAS IP] MASK 255.255.255.255 [NAS IP] IF [Interface Index] METRIC 5

```

* Replace `[NAS IP]` with the actual NAS IP.

* Use `route print` to find the `[Interface Index]` of your fast LAN adapter.

* The gateway and destination IP can be the same when the NAS is directly connected (e.g., via a dumb switch).

This route forces Windows to send all traffic to that NAS through the correct interface — no guesswork.

📉 Lesson 3: Stop Letting Windows Auto-Assign Metrics

Windows uses **"Automatic Metric"**, which attempts to prioritize interfaces based on link speed and other factors. It's often wrong — especially with mixed wired/Wi-Fi environments.

Manually set the interface metric:

```bash

netsh interface ipv4 set interface "[Interface Name]" metric=50

* Use a **lower metric** (e.g., 5) for your fast LAN adapter.

* Use **higher metrics** (e.g., 50–100) for Wi-Fi and fallback links.

* You can check existing metrics with:

```bash

netsh interface ipv4 show interfaces

This ensures Windows consistently prefers your high-speed link.

⚠️ Lesson 4: Subnet Mismatches Can Trigger NAS Security

If traffic to the NAS web interface comes from an unexpected subnet (e.g., your Wi-Fi network), Synology’s security features may block or flag it as a potential intrusion.

Routing all NAS traffic through the correct interface **eliminates false positives**, avoids login delays, and keeps the experience seamless.

⚡ The Result: Instant File Access, Stable Connections

After applying these fixes:

* JPG previews and media access became noticeably faster

* File transfers reached expected speeds over 2.5Gbps

* Synology no longer flagged normal access as suspicious

* The setup stayed stable even after rebooting

And no extra hardware was needed — just a better understanding of how Windows routes traffic.

🧠 Final Thoughts

You don't need to upgrade everything to 10GbE immediately. By tuning your **network routes** and **interface priorities**, you can unlock the full potential of your existing hardware — especially in mixed environments with multiple adapters or subnets.

If you’re running Windows and a Synology NAS, take an hour to review your routing table and metrics — it might save you hours of unexplained slowdowns or weird security behavior.

MagNex : Magnets without Rare-Earth

2025-07-20T08:34:00.004+01:00

MagNex: The AI-Discovered Magnet That Could Change Clean Energy

A UK startup called Materials Nexus has created a new magnet called MagNex — and it might be a big deal for electric cars, wind turbines, drones, and robots. What makes it special? It was designed with artificial intelligence (AI), and it doesn’t use rare-earth metals, which are usually expensive, hard to get, and bad for the environment.

Even better — it only took three months to create, which is about 200 times faster than normal.

Why This Is Important

1. No Rare-Earth Metals

Most strong magnets use rare elements like neodymium and dysprosium. These are mostly mined in China, and the mining process is harmful to the environment. MagNex doesn’t use any of them.

2. Cheaper and Cleaner

Making MagNex costs about 80% less than traditional rare-earth magnets, and it produces 70% less carbon pollution.

3. Fast Discovery

Using AI, the Materials Nexus team tested over 100 million combinations of metals on a computer to find the best one. Then they made and tested it in a lab — all in just a few months.

How They Did It

Materials Nexus worked with scientists from the University of Sheffield and the Henry Royce Institute in the UK. The AI system looked for materials that were:

Strong magnets
Cheap to make
Easy to find
Environmentally friendly

Once the AI found a few good options, the scientists made them and tested them to find the best one: MagNex.

Why It Matters

Fixing Supply Chain Problems

With the rise of electric vehicles and renewable energy, the world needs more magnets than ever. MagNex could help solve the problem of relying too much on rare, expensive metals.

Helping the Environment

Because MagNex uses more common materials and produces less carbon, it’s better for the planet.

A New Way to Make Materials

This is just the beginning. Materials Nexus plans to use the same AI technology to discover better semiconductors, superconductors, batteries, and more.

Their CEO, Dr. Jonathan Bean, said:

> "This is just one example of how AI can help us create materials that support climate goals."

What’s Next?

MagNex is promising, but it’s still new. It needs to prove that it can work as well as (or better than) current magnets in real-world products. It also needs to be made at a large scale.

But if it succeeds, it could help make green technology cheaper, faster, and more sustainable — and change how we invent materials in the future.

Silly supplier mistake, Costs them an order

2025-07-18T16:41:00.007+01:00

We're in the process of upgrading our Network Attached Storage (NAS) to protect our data. We've had to buy some NAS hardware, disks and network upgrades.

We placed two orders with BroadBandBuyer, about 1 hour apart on the same day, for a 10 GB LAN card, some network patch cables, and LAN Switch. They fulfilled one of the orders promptly, but appeared to have overlooked the second order. Its status was stuck at "awaiting stock allocation" even though the items were marked as "in stock" at the time of order.

When we queried the order status a couple of days later, we were given the line that despatch would be timed in line with the despatch method specified at the time of order, i.e. it's going to sit untouched for a couple of days even though the stock is available.Essentially arrant nonsense when the first order had the same method of despatch as as the delayed one.

We subsequently decided we wanted to increase the capability of the NAS units with extra (ECC RAM) memory. BroadBandBuyer had the memory modules in stock, but they didn't get the order from us. We chose instead to order directly from the NAS manufacturer. They've now been moved down the pecking order when it comes to selecting suppliers. We don't appreciate lies from their helpdesk. It also caused us to check their rating on Trustpilot. They were preferred suppliers.

GDPR Red Flags in the Companies House

2025-07-18T12:39:00.002+01:00

Blog Update: GDPR Red Flags in the Companies House Identity Verification System

In my ongoing efforts to comply with Companies House's new director identity verification requirement, a recent development raises serious concerns under UK GDPR.

Following a Subject Access Request (SAR) to Companies House, I have now received written confirmation that they hold no records relating to my identity verification attempts via the GOV.UK One Login system. Specifically, they state they cannot see:

Any verification outcome or status,
Any login identifiers linked to me,
Any audit trail or escalation records,
Any way to associate a One Login attempt with a named director.

In short: the government department mandating legal compliance through a digital system is unable to access or confirm whether the process it enforces has even been attempted.

This raises three fundamental GDPR issues:

Lack of data traceability – If no record links a login ID to a director, how can Companies House enforce or prove compliance?

Opaque automated decision-making – GOV.UK One Login is effectively a black box. Users are not informed why they fail verification. No explanation is given, and no human review appears available — potentially breaching Article 22 of UK GDPR.

Shared controller confusion – Companies House refers all identity processing responsibility to GDS/Cabinet Office. Yet it is Companies House that imposes consequences based on that process. This blurred boundary undermines accountability.

With SARs now also submitted to GDS and DSIT, I intend to escalate to the Information Commissioner’s Office if these concerns are not addressed. Legal obligations should never be built on systems that are opaque, untraceable, and immune to oversight.

Edit 8th Aug 2025 - relevant to the issue:

A UK court has ordered HM Revenue & Customs (HMRC) to disclose whether it used artificial intelligence in deciding to reject research and development (R&D) tax credit claims. The ruling came after tax expert Tom Elsbury filed a Freedom of Information request in December 2023, suspecting AI involvement based on rejection letters. HMRC initially refused, citing concerns about aiding fraudulent claims—a stance later upheld by the Information Commissioner’s Office.

However, the first-tier tribunal ruled that the public interest outweighed those concerns, giving HMRC until 18 September to respond. Judge Alexandra Marks found Elsbury’s arguments “compelling,” noting that HMRC’s refusal to confirm or deny AI use risked undermining public trust. Elsbury warned of potential dangers if public large language models like ChatGPT had been used for tax assessments, particularly where sensitive defence-related innovations might be exposed.

The case comes amid heightened scrutiny of R&D tax credits due to fraud concerns, though critics argue HMRC’s approach has unfairly penalised legitimate businesses. HMRC said it is reviewing the decision and considering next steps.

Attribution:
Based on reporting by Emma Agyemang, Financial Times (© The Financial Times Limited 2025).

Edit 22nd Oct 2025

One Login is fundamental insecure: https://www.youtube.com/watch?v=fufnzxyv2Ps

Is the GOV.IT One Login programme failing?

2025-07-14T07:33:00.004+01:00

The Trouble with GOV.UK One Login: What You Should Know

The UK government’s new digital identity system, GOV.UK One Login, aims to make it easier for people to access public services online. It’s designed to replace older systems like Government Gateway and Verify. But while the idea is promising, the rollout has been far from smooth.

Here are the key problems that have come to light:

1. Serious Security Risks

Independent testing revealed that hackers could gain high-level access to the system without triggering any alerts. That means someone could break in—and no one would know.

This isn’t the first warning. Since 2022, multiple government bodies have flagged issues with how secure One Login really is. While the government claims it’s fixed most of these, trust is still shaky.

2. Not Meeting Cybersecurity Standards

The system still doesn’t fully meet the government’s own cyber security standards.

As of April 2025, One Login passed only 21 out of 39 security checks set by the National Cyber Security Centre. That’s an improvement over last year, but still not good enough, especially for something so critical.

3. Lost Trusted Identity Status

In May 2025, One Login lost its official certification under the UK’s Digital Identity and Attributes Trust Framework (DIATF). This happened when one of its main suppliers failed to renew their approval.

This means One Login is no longer on the list of trusted digital ID providers, a major credibility blow.

4. Hard for Some People to Use

A government study found that up to 9% of people can’t verify their identity using One Login. That includes people without passports, driving licenses, or a strong financial history.

Young people face even more problems:

Only 4% have a big enough financial “footprint”
Nearly half don’t have a mobile phone
1 in 5 don’t have an email address
Many need help using online services at all

This raises questions about how “universal” the system really is.

5. Concerns Over Development and Oversight

There are also red flags about how the system is being built and managed:

A whistleblower claimed that large parts of the work were offshored to Romania, without proper oversight or cybersecurity checks.
Key security flaws took months to be addressed.
Internal governance has been criticised for being too slow to act on known risks.

6. Industry and Political Pushback

Industry groups say the system should only be used for public services and not expand into the private sector. They fear it could harm private digital ID providers and distort the market.

Meanwhile, MPs and peers continue to question the government about security weaknesses, insider risks, and lack of transparency.
Government Response

The Government Digital Service (GDS) says it is fixing the issues. Measures include:

Stronger monitoring
Tighter access controls
Independent risk assessments

Ministers also say that some of the security concerns are “outdated,” and that full compliance is on the way.

Final Thoughts

GOV.UK One Login was supposed to be the future of digital identity in the UK. But with ongoing security issues, adoption challenges, and lost certification, it’s facing real questions about its readiness.

Until the government proves it can make the system secure, inclusive, and fully trusted, many people, rightfully, remain cautious.

Update 6th Aug 2025:

Issue: Despite the voluntary IDV period starting April 8, 2025, only about 200,000 out of 7 million individuals (less than 3%) have verified their identities so far, suggesting low awareness or reluctance.

Impact: The low uptake could lead to a last-minute rush as the November 18, 2025, mandatory deadline approaches, potentially causing delays in filings, rejections of incorporations, or penalties for non-compliance. Non-compliance is a criminal offense, with risks including fines, disqualification, or public annotations on the register that could harm a company’s reputation and access to finance or insurance.

Desktop PC archive and backup

2025-07-11T11:15:00.004+01:00

From Cloud to Control: Why We Switched to NAS for Our Business Backups

Like many small businesses, our IT setup has evolved organically over time. We currently manage a mix of three Windows PCs, four Linux boxes, a couple of Chromebooks, and three laptops. all interconnected via a LAN secured behind firewalls and segmented subnets. While much of the work involves standard business documents, we also rely on a variety of software tools tailored to our consulting work.

With so many devices in play, a hard disk failure would be more than just inconvenient, it could be both costly and disruptive. That’s why we’ve always maintained regular, daily backups. These are stored separately and air-gapped from the rest of our network, ensuring we could recover even in the event of a complete loss of access to our office, something that’s critical given that our work often takes us off-site or even overseas.

When the Cloud Got Expensive

Our data needs have grown significantly over the past year. The introduction of GoPro cameras and drones for fieldwork caused a spike in storage usage — particularly with large video files. Until recently, we were backing everything up to AWS S3. It worked reliably, but the monthly costs began to creep up, around £45 per month just to store 2 TB. And while uploading was painless, the Amazon interface wasn’t exactly user-friendly for quick restores.

We experimented with a more budget-friendly solution: USB-attached hard drives paired with EaseUS backup software. Unfortunately, during test recoveries, we found it lacking in reliability and speed. Cheap, yes but not something we could count on during a real crisis.

Moving to NAS: Why Synology Was Worth It

Eventually, we decided it was time to bring storage back under our own roof. After some research, we opted for a Synology NAS system. While the hardware cost was a bit higher than other options, the added value in terms of built-in software, usability, and long-term savings made it an easy choice.

The benefits were immediate:

RAID support for drive redundancy
Hot-swappable enterprise-grade drives
Integrated UPS backup control
FTTP-enabled remote backups to a secondary off-site location
Seamless local and remote file sharing across all our devices
Disk capacity upgrades are easy.

Best of all, we now have four times the storage capacity we had with AWS, and we own the infrastructure. Based on our current and projected usage, the system will pay for itself in under three years.

Setup was surprisingly quick, under two hours, and required no special tools (not even a screwdriver). We also appreciated being free from proprietary cloud ecosystems like Microsoft OneDrive, while still maintaining the flexibility to access data globally. We've also given the Synology box its own APC UPS to provide at least 30 minutes backup power.

Final Thoughts

For our business, this move was about regaining control. AWS S3 served us well, but it became increasingly expensive and a bit opaque to manage. Our new NAS setup gives us performance, scalability, and peace of mind — all with the simplicity we need and the flexibility to grow.

If you’re a small business grappling with rising cloud storage costs and complex recovery procedures, investing in a NAS might be the best IT decision you’ll make this year.

Variable memory pricing - NAS

2025-07-08T13:20:00.005+01:00

For the Synology 723+ NAS

Prices include VAT All ECC modules. ECC memory can help correct some memory errors.

https://www.comms-express.com/products/synology-d4es02-4g-ddr4-sodimm-4gb-memory-module/ listed price £186.48 per module I think this is a pricing error.

On the Synology (UK) shop: £73.20 per module https://www.synology.com/en-uk/products/DDR4 D4ES02-4G

Broadbandbuyer £80.60 per module. https://www.broadbandbuyer.com/products/49908-synology-d4es02-4g/

Insight £82.79 per module. https://uk.insight.com/en_GB/shop/product/D4ES02-4G/synology/D4ES02-4G/Synology-DDR4-module-4-GB-SODIMM-260pin-unbuffered/

2025-07-06T20:19:00.000+01:00

🧾 When the Machines Were Louder Than the Mistakes

A personal journey through the early days of national computing

Part 1: From Cardboard to Code — Joining the Machine

In the early 1970s, I joined the fledgling Driver and Vehicle Licensing Centre (DVLC) as a fresh-faced 19-year-old with a two A-levels and absolutely no interest in working with computers. I’d tried FORTRAN in school using graphite-sensed punched cards and had a miserable time of it — so when the Civil Service interview panel in London asked if I’d be interested in computing, I said “No.”

A few years later, I found myself standing in the middle of a massive, under construction, data centre in Swansea, surrounded by tape drives, gas turbines, and hammer printers — and helping to build one of the UK’s largest early national IT systems.

The DVLC system was designed around tape-based batch processing. At its heart were magnetic tapes running at 1600 BPI (later 6250 BPI), each one a file in its own right. The system tracked millions of vehicle and driver records, with 340 tapes for vehicle data and 240 for drivers, processed in overnight cycles. If a single tape broke, the system could skip that segment and continue, avoiding full re-runs. Resilience by necessity.

Each update was a delicate orchestration of variable-length, variable-format records, which had to be unpacked into fixed-layout structures for COBOL processing, and then repacked before writing back out. Every byte counted. Adding one byte to the average record length added 11 minutes to processing time, multiplied across hundreds of reels, that was days of extra work.

Part 2: Paper, People, and Punch Cards

The real story wasn’t just in the hardware it was in the people. Data didn’t come from the cloud or online forms. It came from 220 local offices, each with handwritten records and local staff who understood their regions better than any machine ever would. Those clerks were asked to transcribe thousands of records onto new data entry forms, while still keeping the old system running.

They did this knowing full well they were working themselves out of a job.

The process wasn’t frictionless. Forms came in with errors, public queries arrived by post, and the clerks handling those enquiries? They had no online access to the masterfiles. Every lookup required a paper form, a tape-based query job, and a printed response returned days later. A time and motion study showed that while a transaction took three weeks to complete, only about 30 seconds of it was actual manual handling. After cutover, the local office records were stored in an aircraft hanger on shelving, a retrieval and filing nightmare.

The system was built for throughput, not responsiveness and that distinction shaped the experience for staff and the public for years.

Part 3: Print Like You Mean It

At the end of every batch cycle came the thunder: sixteen 160-column barrel hammer printers, shaking the floor with mechanical fury as they fired off vehicle tax discs, licence confirmations, and system reports on fanfold paper.

And these weren’t just pieces of paper.

The vehicle tax discs were printed on, photogravure paper, circularly perforated, each one serial-numbered and audited like currency. Changing the layout or security features required coordination between IT, print operations, suppliers, and civil service policy. Some print jobs ran from offline spool tapes, meaning the spooling system was literally a physical spool.

Every misprint had to be accounted for. Every wrecked disc recorded. At that stage, we weren’t just handling data , we were manufacturing trust.

☕ The Epilogue

I often joke that I just made the coffee. But in truth, I had a front-row seat to the birth of modern digital government, in an age where the systems we built had weight, heat, noise and impact.

The Synology NAS sitting on my shelf today, silently syncing terabytes of data across two sites, is exponentially more powerful than the entire DVLC setup we built with tapes and turbines.

But it owes everything to what we learned back then: how to build systems that don’t just process data — they handle people, policy, and pressure.

Companies House GDS Saga continues

2025-06-28T07:18:00.004+01:00

You really couldn't make this up!

Companies House "system" to check the on-line identity of Directors and persons of significant control relies on Gov.uk to perform that validation. When you attempt to use this system you end up with web pages marked as "Beta" version. In the systems development world Beta version software is that which you think mostly works, but you might find bugs where we haven't tested/fixed fully. It is not production quality software.

When you send an email to the GDS (GOV.UK) support team you get a response within a day, but it says you may have to wait up to 15 days* to get a response from them! 15 Days when all they'll say is "try again". It sounds like an IT system in serious trouble.

The Minister responsible for the GOV.UK should get his sleeves rolled up and get things fixed. The UK Government Minister responsible for GOV.UK is the Minister for the Cabinet Office, as GOV.UK is managed by the Government Digital Service (GDS), which sits within the Cabinet Office. The current Minister for the Cabinet Office, as of the latest available information, is Pat McFadden MP (Chancellor of the Duchy of Lancaster).

For Companies House the ultimate responsible Minister is the current Parliamentary Under Secretary of State (Minister for Business, Energy and Corporate Responsibility) at the Department for Business and Trade, with responsibility for Companies House, is Justin Madders. He was appointed to this role on 9 July 2024.

31st July 2025 Edit:

After the Companies House "Escalations" Team refused to escalate the case, we've submited a detailed complaint dossier (35 Pages) to the Chief Executive (Ms Smyth) at Companies House with the request to pass it on to their independent adjudicators. We've emphasised that this problem may affect many company directors when the process becomes mandatory in Sept 2025.

We're compiling a similar dossier for the responses from GDS.

*Edit: 6th Aug 2025

The projected 15 days wait, turned out to be 57 days wait for a response. The usual unhelpful nonsense:

We are unable to tell you why your validation failed;
Our system doesn't always work, go and pay an Account/Solicitor to validate your Identity.

We sent a response rejecting their tardy reply. Reminding them of the tsunami of potential complaints when other directors try to use their system. We've asked them to furnish us with details of their complaints process.

Could it be that GDS are using AI to decide the validity of passport details, selfie scans? It would explain why they are unable to explain why my application was rejected without giving a reason. Parhaps this is why they are reticent in responding to my Subject Access Request.

Companies House Woes - Gov.UK One Login - Continued

2025-06-25T13:00:00.000+01:00

I've reached the point where I'm making no progress with Companies House Customer Support. on the lockout of my Digital Id Verification. I've asked Companies House to escalate my complaint to the Head of Operational Delivery for a final internal review.

If that does not resolve the issue, the next step will be escalation to independent adjudicators. If that fails it is then referral to the Ombudsman via my MP.

It appears that this problem is not unique to me, and other people have similar problems.

Source: perplexity.ai 25^th June 2025

Reported Problems with Companies House Login and ID Verification

There have been multiple reports of issues with the Companies House login and identity verification process, particularly since the introduction of the new GOV.UK One Login system.

Commonly Reported Issues

Password Reset and Login Failures: Users have experienced difficulties resetting their passwords, even when following the specified criteria (e.g., password length, use of symbols, uppercase and lowercase letters). Some users repeatedly encounter error messages such as "there is a problem" despite meeting all requirements1 2 3.
Technical Errors: Frequent technical issues are reported, including error messages like “An error occurred on client” during login attempts. These errors can persist across multiple browsers and devices2 3.
Browser Compatibility: The Companies House website sometimes fails to function correctly on certain browsers, with Chrome being specifically mentioned as problematic. Users have found that switching browsers or devices can sometimes resolve the issue, though this is not always reliable1 2 3.
Account Activation and ID Verification Confusion: New requirements for identity verification and the need to create additional logins (on top of previous Companies House and Government Gateway accounts) have caused confusion. Some users are unsure how to proceed and have reported a lack of clear guidance from Companies House4.
Third-Party Charges and Workarounds: Due to technical difficulties and unclear instructions, some users have resorted to paying third parties to complete the ID verification process, with fees ranging from £75 to £250. Others have been given unofficial workarounds by Companies House support, such as accessing older login screens to bypass current issues4 3.
Delayed or Non-Functional Password Reset Links: Users have reported that password reset links either arrive late or do not work, leading to further frustration and inability to access their accounts3.
Access and Filing Delays: These login and verification issues have led to delays in accessing important documents and completing required filings, which can have significant business implications3.

Official Guidance and Support

Companies House provides online guidance and suggests:

Using different browsers and ensuring they are up to date.
Clearing browser cache and cookies.
Contacting Companies House support if problems persist.
For those unable to verify online, in-person verification at a Post Office is available2 5.

Summary Table of Issues

Issue Type	Description	Reported Solutions
Password/Reset Failures	Passwords meeting criteria still rejected; reset links not working	Try different browsers/devices; contact support1 2 3
Technical Errors	Error messages during login or verification	Clear cache/cookies; report to support2 3
Browser Compatibility	Chrome and others sometimes fail; device-dependent issues	Switch browsers or devices1 2 3
ID Verification Confusion	Multiple logins required; unclear instructions	Refer to official guidance; seek support4 5
Third-Party Fees	Some pay accountants/third parties due to confusion or technical issues	N/A
Filing Delays	Login issues cause delays in document access and submissions	Workarounds; contact support3

Conclusion

There are widespread, documented problems with the Companies House login and ID verification process. These include technical glitches, browser compatibility issues, confusing instructions, and difficulties with password resets and account activation. While Companies House offers some guidance and support, many users find the process frustrating and, in some cases, are forced to seek paid assistance or use unofficial workarounds1 2 4 3.

Companies House Woes - Gov.UK One Login

2025-06-20T12:11:00.003+01:00

Blocked by Bureaucracy: A Cautionary Tale of Digital Identity Verification Gone Wrong

In early June 2025, I attempted to complete a new legal requirement: verifying my identity with Companies House under their recently introduced rules for company directors. As a British citizen with a valid UK passport and a longstanding directorship record, I expected this to be straightforward.

Instead, I found myself locked out of the process due to flawed system design, zero accountability, and a rigid reliance on automation that offers no escape hatch when it fails.

A System That Denies Access

Companies House now mandates that directors verify their identity through GOV.UK One Login, managed by the Government Digital Service (GDS). There are three free verification routes:

The ID Check app (passport + facial recognition),
The Post Office route, and
Security questions (offered only in some cases).

I attempted the ID Check app. It failed without explanation. When I logged back into GOV.UK One Login, I was told the Post Office route was not available. I retained a screenshot of this notice. I was not given the option to proceed at a local branch, and the “security questions” route was also never offered.

In effect, I was blocked from all free options — by the system itself — with no clarity, no workaround, and no appeal.

No Help, No Override, No Responsibility

Companies House confirmed to me in writing that:

They are not told why a verification attempt fails,
They cannot reset or enable other routes,
They suggest using an Authorised Corporate Service Provider (ACSP) — a paid agent — as the only remaining option.

In other words: "We required you to verify, we outsourced it to a third-party system, and now we can't help you."

The Cost of Bad Design

My accountant, a registered ACSP, offered to complete the verification for £70 + VAT — a fair professional rate. But the issue is bigger than cost. The government has created a legal obligation, delivered through a system that can quietly fail legitimate users, and offers no backup plan.

This is not a technical hiccup — it's a governance failure. Companies House implemented a rigid, automated process without defining how to support valid users when the system fails. No manual override. No human review. No accountability.

What I’ve Done So Far

Submitted formal complaints to Companies House and GDS,
Sent Subject Access Requests (SARs) to both under UK GDPR, requesting all data and logic used in the identity decision,
Maintained a detailed timeline of interactions and failures.

What Comes Next

If the matter isn’t resolved, I will escalate to:

The Information Commissioner’s Office (ICO) for possible data rights violations,
The Parliamentary and Health Service Ombudsman, for systemic maladministration,
And my MP, to raise questions about public accountability.

🧭 Lessons for Others

If you're a UK director and your verification fails or is blocked:

Keep evidence (screenshots, emails, dates),
Submit a SAR — you have a right to know how your data was processed,
Challenge the process — don’t accept silence from a system that was designed without safeguards.

Important Update 6th Aug 2025

Impact: The low uptake could lead to a last-minute rush as the November 18, 2025, mandatory deadline approaches, potentially causing delays in filings, rejections of incorporations, or penalties for non-compliance. Non-compliance is a criminal offence, with risks including fines, disqualification, or public annotations on the register that could harm a company’s reputation and access to finance or insurance.

Update:29th Sept 25

My local MP has told me that he'll investigate.

How will AI affect your job?

2025-01-15T13:35:00.003+00:00

The Impact of AI on Lives in the UK: Opportunity or Challenge?

Artificial intelligence (AI) is rapidly transforming industries, reshaping economies, and altering the way we work. In the UK, as in many other countries, the rise of AI brings significant opportunities but also raises pressing concerns, particularly around the potential displacement of white-collar jobs. This article explores how AI might affect lives in the UK and what steps can be taken to ensure these changes result in better outcomes for all.

The Opportunities AI Presents

AI offers considerable potential to improve the quality of life for UK citizens, with applications spanning various sectors:

Enhanced Services:
- Healthcare: AI systems can assist in diagnosing diseases, streamlining patient care, and reducing waiting times, contributing to a more efficient National Health Service (NHS).
- Public Services: AI can optimize transportation, urban planning, and resource distribution, making everyday life more convenient and sustainable.
Increased Productivity:
- Businesses can use AI to automate repetitive tasks, lower operational costs, and increase overall efficiency, potentially leading to economic growth and reduced prices for consumers.
- By handling mundane tasks, AI enables individuals to focus on creative, strategic, or higher-value work.
Job Creation:
- While AI may eliminate some jobs, it also creates demand for new roles in AI development, maintenance, and regulation. Fields like data security, human-AI interaction, and ethical AI oversight are expected to grow significantly.
Personalized Benefits:
- AI tools enhance daily life by streamlining mundane tasks, personalizing education, and improving access to entertainment and learning resources.

The Challenges of AI Adoption

Despite its potential, the adoption of AI brings significant challenges that must be addressed to avoid negative societal impacts:

Job Displacement:
- White-collar roles in sectors like finance, law, and administration are at high risk of automation, potentially leading to unemployment or underemployment for many workers.
Economic Inequality:
- Without careful intervention, the wealth generated by AI could become concentrated in the hands of a few, exacerbating existing economic disparities.
Ethical and Social Concerns:
- AI systems can inadvertently reinforce biases or invade privacy, raising ethical concerns that could undermine trust in technology.
- Increasing reliance on AI-mediated services may lead to a loss of human connection in critical areas like healthcare and customer support.
Skills Gap:
- Workers displaced by AI may lack the skills needed to transition into emerging fields, creating a mismatch between the jobs available and the skills of the workforce.

Ensuring Positive Outcomes

To maximize the benefits of AI while mitigating its risks, several strategies should be considered:

Education and Reskilling:
- Comprehensive education and training programs are essential to equip workers with the skills needed for roles in fields resilient to AI disruption. This includes technical training as well as fostering creativity and human-centered skills.
Inclusive Economic Policies:
- Policies such as universal basic income (UBI) or enhanced social safety nets can help protect individuals during the transition.
- Investments should focus on regions and communities most affected by job losses, ensuring that the benefits of AI are widely distributed.
Ethical AI Governance:
- Strong regulations are needed to ensure that AI systems are fair, unbiased, and used responsibly. Transparency and accountability should be core principles in AI deployment.
Fostering Innovation:
- Support for startups and small businesses leveraging AI can create new markets and job opportunities, fostering a culture of innovation.

Looking Ahead

AI holds immense potential to improve lives in the UK, from advancing healthcare to enhancing everyday conveniences. However, the risks associated with job displacement and economic inequality cannot be ignored. With thoughtful policies, robust education systems, and a focus on ethical AI development, it is possible to harness the power of AI to create a more equitable and prosperous society.

The path forward requires collaboration between governments, businesses, and individuals to ensure that the transition to an AI-driven economy leaves no one behind. By addressing challenges proactively, the UK can position itself as a leader in the responsible adoption of AI, securing a better future for all its citizens.

A handy, but pricey label printer for small businesses

2025-01-12T19:23:00.004+00:00

Review: Brother QL-1110NWBc Label Printer – The Small Business Powerhouse

Running a small business often means juggling multiple tasks, and shipping logistics can easily consume a big chunk of time. Enter the Brother QL-1110NWBc, a label printer designed to make the process seamless, efficient, and customizable. With its versatility, robust connectivity options, and programmability, this printer could be a game-changer for small businesses looking to optimize their shipping workflows. Here’s an in-depth review of what makes the QL-1110NWBc a standout option for printing shipping labels.

We already possess the smaller Brother QL-810W for general label printing. This has been very reliable, but it can't produce the 4 x 5 inch label format in common usage by shipping/courier companies. We decided to buy QL-1110NWBc to handle the larger label format for our shipping needs. Upto now we have had to cut out the label from an A4 sheet and then find a way to adhere the label to the outgoing parcel.

Key Features

1. Exceptional Connectivity Options

The Brother QL-1110NWBc supports a variety of connectivity options, making it incredibly adaptable to different business setups. Whether you work from a desktop, tablet, or smartphone, this printer has you covered. It features:

USB: A straightforward plug-and-play option for those who prefer wired setups.
Wi-Fi and Wi-Fi Direct: Wireless printing ensures flexibility, allowing you to print from multiple devices without being tethered to the printer.
Ethernet: Perfect for shared office environments, letting multiple users access the printer without needing a direct connection.
Bluetooth: An excellent option for mobile printing, particularly when paired with the Brother iPrint&Label app for quick and easy label creation.

This broad range of connectivity ensures that no matter your tech ecosystem, integrating the QL-1110NWBc into your workflow is hassle-free.

2. Programmability for Specialist Applications

One of the standout features of the QL-1110NWBc is its programmability. This makes it a fantastic choice for businesses that require specialized or automated labeling tasks. The printer supports:

SDK Integration: Brother provides Software Development Kits (SDKs) for Windows, iOS, and Android, allowing developers to create tailored label-printing solutions. This is ideal for businesses using custom inventory or logistics management systems.
Custom Templates: Using Brother's P-touch Editor software, you can design and save templates directly to the printer. This ensures consistency in branding and label layouts while saving time during high-volume printing tasks.
ZPL II Compatibility: The printer can emulate Zebra Programming Language, making it easier to integrate with existing systems that rely on Zebra label printers.

These programmability options make the QL-1110NWBc suitable not only for standard shipping labels but also for niche applications like barcode printing, product labeling, and warehouse inventory management.

Performance

The QL-1110NWBc boasts excellent print quality and speed, critical factors for any label printer. It supports labels up to 4 inches wide—perfect for large shipping labels required by major couriers like UPS, FedEx, and USPS. The printing speed, rated at 69 standard address labels per minute, ensures you can process orders efficiently, even during peak times.

The thermal printing technology eliminates the need for ink or toner, reducing maintenance costs and ensuring crisp, smudge-free prints. Additionally, the automatic cutter provides a professional finish and minimizes label waste.

Ease of Use

Despite its advanced features, the QL-1110NWBc remains user-friendly. The setup process is straightforward, and the iPrint&Label app provides intuitive options for creating and printing labels directly from your smartphone. The ability to integrate with platforms like Microsoft Office and popular e-commerce tools further simplifies label creation for small businesses.

For those with more complex needs, the Brother P-touch Editor software offers a wealth of customization options. You can easily add logos, barcodes, and QR codes, ensuring your labels meet both branding and regulatory requirements.

Brother provide a free software package (P-Touch Editor) to aid the design of labels for its range of label machines. This is easy to use, and has powerful capabilities.

Pros and Cons

Pros:

Wide range of connectivity options (USB, Wi-Fi, Ethernet, Bluetooth)
High-quality, fast printing
Supports labels up to 4 inches wide
Programmability for custom and automated solutions
Ink-free thermal printing reduces costs
Easy integration with e-commerce platforms and custom systems

Cons:

Premium price point compared to basic label printers
Advanced features may have a learning curve for non-technical users
The Brother labels are good, but expensive. There are cheaper compatible labels, but they may not be as good as the genuine article.

Verdict

The Brother QL-1110NWBc is more than just a label printer—it's a productivity tool for small businesses aiming to streamline shipping and labeling processes. Its robust connectivity, speed, and programmability set it apart as a top-tier solution for businesses with both standard and specialized needs.

While its advanced features may feel overwhelming initially, the time saved and efficiency gained make it a worthwhile investment for growing businesses. If you’re looking for a versatile, reliable, and customizable label printer, the Brother QL-1110NWBc is hard to beat.

Who is it for?
Small to medium-sized businesses that require high-quality, customizable label printing with extensive connectivity and integration options.

Final Rating: 9/10
A feature-rich and reliable choice that justifies its cost for businesses serious about optimizing their shipping operations.

SD Card ratings explained

2025-01-05T17:22:00.002+00:00

I came across this useful YouTube video which explains the various SD Card ratings. Well worth a look.

Fake memory Cards on Amazon

2025-01-01T12:44:00.001+00:00

Not all products on Amazon are genuine, and the reviews may be fake. Here's an example of fake MicroSD cards.

First the listing, taken from Amazon today:

Notice the obvious spelling mistake of Extreme. The colour scheme is similar to a well known brand, and the price is too good. There's 47 reviews, but they are sponsored with the reviewers receiving free memory cards from Amazon. Those reviews actually refer to a different capacity of memory card (64GB). Not a single review actually tested the claimed 512GB f capacity.

Here's a YouTube video (a year old) that gives further details of these types of Scam.

In the following text, I've ask ChatGPT to write a good review for a memory card, the results are very similar to those for the card.:

Review Title: Exceptional Storage Performance in a Compact Package!

I recently purchased the 512 GB SDXC U3 Micro SD card, and I couldn't be happier with my choice. It arrived quickly and was very well-packaged, ensuring the card was protected during transit. This attention to detail was reassuring and set the tone for a great experience.

In terms of performance, this memory card is an absolute gem. The U3 speed rating delivers as promised – lightning-fast read and write speeds, which are perfect for my needs. I use it in my 4K action camera and smartphone, and it handles high-definition video recording and playback flawlessly. No lag, no buffering – just seamless performance.

The 512 GB capacity provides ample storage for all my videos, photos, apps, and files, making it a versatile and reliable choice for both professional and personal use. It formatted easily and was instantly recognized by all my devices, including my laptop and gaming console.

Overall, this SD card offers incredible value for its price. Whether you're a content creator, gamer, or someone who simply needs reliable storage, I highly recommend this product. It's a must-have for anyone seeking high-speed, high-capacity storage in a tiny, durable package!

⭐ Rating: 5/5
✅ Pros: Fast, reliable, large capacity, well-packaged.
❌ Cons: None so far!

Will definitely purchase this brand again in the future. Thank you for delivering such a fantastic product!

Here's one of those reviews:

Is your PC data stored in the cloud?

2024-12-26T18:31:00.001+00:00

Cryptomator: Your Personal Cloud Security Guardian

In today's digital landscape, protecting personal data has become more critical than ever. Enter Cryptomator - the unsung hero of cloud storage security that's changing how we think about digital privacy.

What Makes Cryptomator Special?

Imagine having an invisible security guard for your digital files, working silently in the background to protect your most sensitive information. That's exactly what Cryptomator does, and it does it brilliantly.

The Magic of Encryption

At its core, Cryptomator is a free, open-source encryption tool that transforms your cloud storage into a fortress. Whether you're storing personal photos, work documents, or sensitive financial information, this software ensures that your data remains completely private.

How Does It Actually Work?

Think of Cryptomator like a high-tech safe deposit box for your digital life:

1. Create a "vault" on your computer

2. Drag and drop files into this vault

3. Cryptomator automatically encrypts everything

4. Sync seamlessly with your favorite cloud service

Cross-Platform Flexibility

One of Cryptomator's most impressive features is its universal compatibility. Whether you're using Windows, macOS, Linux, Android, or iOS, this tool has got you covered.

Why Should You Care?

Total Privacy Protection

- Military-grade AES-256 encryption

- Zero-knowledge architecture

- Protects both file contents and file names

User-Friendly Experience

Unlike many security tools that feel complicated, Cryptomator is refreshingly simple. No technical expertise required - just install, set up, and protect your data.

Real-World Benefits

- Secure personal documents

- Protect sensitive work files

- Keep family photos private

- Comply with data protection regulations

The Open-Source Advantage

By being open-source, Cryptomator offers complete transparency. Security experts worldwide can review its code, ensuring the highest possible standards of protection.

Who Should Use Cryptomator?

- Remote workers

- Freelancers

- Privacy-conscious individuals

- Small business owners

- Anyone who stores sensitive information in the cloud

Final Thoughts

In an era where data breaches are increasingly common, Cryptomator offers a beacon of hope. It's not just a tool; it's peace of mind in digital form.

Ready to Protect Your Digital Life?

Download Cryptomator today and take the first step towards comprehensive cloud security. Your data deserves nothing less than the best protection available.

Stay secure, stay smart!

TOMLOV TM4K-AF Max Autofocus summary of reviews

2024-12-23T17:18:00.008+00:00

I've just purchased one of these digital microscopes. The TOMLOV TM4K-AF Max Autofocus Digital Microscope has received positive reviews from users and tech enthusiasts, I'll do a proper review in a couple of months, but so far I agree with the summary below.

Here's a summary of the key points

Image Quality and Display

The microscope offers impressive image quality with its 4K UHD (3840x2160p) resolution and 52MP camera. Users praise the crystal-clear imaging and stunning detail, making it ideal for tasks like circuit repairs, watch inspections, and coin observations. The 10.1-inch IPS screen provides a wide 178-degree viewing angle, enhancing the overall user experience.

Autofocus and Technology

One of the standout features is the autofocus capability:

- Reviewers note that the autofocus works "absolutely" well, describing it as "awesome" and "amazing"

- The microscope uses advanced TOF (Time of Flight) distance sensing and AI technology for precise, hands-free focusing

- Users appreciate the time saved with automatic focus adjustments

Magnification and Zoom

The TM4K-AF Max offers:

- Up to 2000x magnification with 4x digital zoom. [Query 2000x mag; but is aided by the 50 Mpixel images from the photo feature]

- The ability to easily zoom from 2x to 2000x while maintaining full lighting.

Illumination

The microscope features a built-in ring light, which reviewers find helpful for illuminating even the smallest details. This ensures uniform brightness for detailed observations and repairs.

Connectivity and Storage

- The microscope supports both HDMI and USB output.

- It comes with a 64GB SD card for easy recording and storage of images and videos.

- Some users mention the ability to connect it to a TV via HDMI for even greater magnification.

[You can connect with a USB-C cable to access the image files on the microscope, or use it as a PC camera via the same cable.]

Ease of Use

Reviewers find the microscope user-friendly:

- The flexible arm design allows for easy positioning and movement.

- The upgraded smart control enables photo capture, video recording, and zooming without touching the display.

- Additional features like thumbnail function, locate feature, and DIY grid lines enhance usability.

Value for Money

While some reviewers mention that the price point is relatively high, they generally feel that the features and performance justify the cost. The microscope is often on sale, making it more accessible to hobbyists and professionals alike.

Overall, the TOMLOV TM4K-AF Max Autofocus Digital Microscope receives high marks for its image quality, autofocus capability, and versatility across various applications, from electronics repair to coin inspection and educational use.

Is your Home Office LAN fast enough? Does it need bonding?

2024-12-17T11:00:00.001+00:00

Do S/FTP Cables Require Separate Bonding, or Does Network Equipment Handle It?

When installing S/FTP (Shielded Foiled Twisted Pair) cables, one of the key questions that arises is whether these cables require separate bonding and grounding or if the network equipment itself takes care of it. In this blog post, we’ll explore how S/FTP cabling works, when additional bonding might be necessary, and best practices for proper grounding.

If you wish to take full advantage of a modern broadband internet connection fibre to the home (FTTP/FTTH) you may wish to upgrade your LAN cabling to CAT6A to transmit more than 100 mbps around the home. ISPs tend to rely on WiFi connections to do this, but there are situations where a hard wired connection is a much better choice. CAT6A cable is usually S/FTP, but note you’ll need larger holes as it is about 9mm in diameter. Any patch cords along the network should also be S/FTP and rated at CAT6A. Lower grade patch cords will work, but compromise the shielding and lead to lower speeds.

What Is S/FTP Cabling?

S/FTP cables are a type of shielded twisted pair cable designed to reduce electromagnetic interference (EMI) and improve signal integrity in environments where electrical noise is a concern. These cables have two layers of shielding:

Overall Shielding: A foil shield wraps around the entire cable.
Individual Pair Shielding: Each twisted pair inside the cable has its own foil shielding.

This dual-layer shielding makes S/FTP cables ideal for high-performance networks, particularly in electrically noisy or industrial environments.

However, for the shielding to function effectively, it must be properly grounded.

Does Network Equipment Handle Grounding?

Modern network devices such as switches, routers, and patch panels often provide grounding for the shields in S/FTP cables. Here’s how it works:

Shielded Connectors: S/FTP cables typically use shielded RJ45 connectors that make contact with the network equipment’s metal chassis.
Equipment Grounding: If the switch, patch panel, or other network device is properly grounded (usually through its power connection or a direct earth connection), it can handle the grounding for the cable shields.

This built-in grounding ensures the shield does its job of mitigating EMI without requiring additional steps in most small-scale or standard installations.

When Is Separate Bonding Required?

While modern network equipment can often handle grounding, there are scenarios where separate bonding becomes necessary:

Unreliable Equipment Grounding: If the network equipment does not provide sufficient grounding (e.g., the metal chassis is isolated or improperly grounded), the shield will not function correctly. In this case, a separate bond to the building’s electrical ground system is needed.
Large Installations: In large-scale structured cabling systems, proper bonding is crucial. Shielded patch panels, racks, and earth bars must be grounded to meet industry standards like TIA/EIA or ISO/IEC 11801.
High-EMI Environments: Industrial facilities, power plants, or data centers often have high levels of EMI. In these cases, additional grounding ensures the shielding remains effective.
Cross-Building Installations: When running S/FTP cables between buildings or across different grounding zones, you must bond the cable shields at each end while carefully avoiding ground loops.
Long Cable Runs: For long cable runs, improper grounding can introduce noise or signal issues, requiring a dedicated bonding solution.

Best Practices for Bonding and Grounding S/FTP Cables

To ensure the shielding in S/FTP cables functions effectively, follow these best practices:

Use Shielded Components: Ensure all parts of your network—including patch panels, switches, and connectors—are shielded and compatible with S/FTP cables.
Verify Equipment Grounding: Check that network devices and racks are properly grounded to the building’s electrical ground system.
Avoid Ground Loops: When bonding cable shields at both ends, ensure there are no conflicting ground connections that could create a ground loop.
Follow Standards: Adhere to industry standards like ISO/IEC 11801 and ANSI/TIA-568 for grounding and bonding structured cabling systems.
Ground the Patch Panel: Use shielded patch panels and bond them to a common earth point in the rack or cabinet.

Common Scenarios Explained

Let’s break it down further with two common scenarios:

Scenario 1: Small Office Network

In a small office with modern, properly grounded switches and patch panels, the network equipment typically handles shield grounding. No separate bonding is required as long as the devices are installed correctly.

Scenario 2: Industrial Facility or Data Center

In environments with significant EMI or long cable runs, additional grounding and bonding are necessary. Shielded patch panels, racks, and dedicated earth bars should be used to provide a reliable ground for the cable shields.

Is Network Equipment Without a Grounded Power Cord an Issue

If network equipment uses a two-wire power cord, it is likely not grounded. Here’s why:

Two-Wire Power Cords: These cords only include a live and neutral wire, without an earth/ground wire. Devices using such power cords are typically double insulated, meaning they have extra insulation to protect against electrical faults. While this is safe for basic operation, it means the device chassis is not connected to earth ground.

Impact on Shielded Cables: Without a grounded chassis, the device cannot ground the shield of S/FTP cables. This can result in the shielding becoming ineffective, allowing EMI to interfere with network performance.

What to Do if Your Equipment Is Not Grounded

If your network equipment has a two-wire power cord:

Use Grounded Patch Panels: Ensure your patch panels or racks are properly grounded to provide a path for the cable shields.

Separate Bonding: Bond the shields of your S/FTP cables to the building’s electrical ground system at an appropriate location.

Verify Installation: Use a multimeter to confirm that shields are grounded where needed and that no stray voltages are present.

If you are operating in an environment with significant EMI or long cable runs, consider replacing ungrounded equipment with grounded alternatives.

Conclusion

In most cases, modern network equipment will handle the grounding of S/FTP cables if it is properly grounded itself. However, for larger installations, industrial environments, or when running cables across different grounding zones, separate bonding may be required to ensure the shielding performs effectively.

By following best practices and adhering to industry standards, you can ensure your S/FTP cabling system delivers optimal performance and avoids potential grounding issues.

Key Takeaway: Always verify your network equipment’s grounding capabilities, and when in doubt, bond your S/FTP cabling to a dedicated ground to maintain signal integrity and reduce EMI.

NAS for Home Office Video Editing

2024-12-13T10:15:00.001+00:00

Establishing a robust Network-Attached Storage (NAS) system is essential for video editors working from a home office.A well-designed NAS architecture not only centralizes your media assets but also ensures efficient, high-speed access during editing sessions.This article outlines key considerations for setting up a NAS suitable for video editing, including recommended models, approximate costs in the UK, and optimal Local Area Network (LAN) configurations.

All too often you hear YouTube presenters saying that they've lost all their uploaded videoes and they don't have their own back up copies.

1. Selecting the Right NAS for Video Editing

When choosing a NAS for video editing, consider factors such as storage capacity, processing power, scalability, and network connectivity. Here are some top recommendations:

QNAP TVS-h874: Equipped with an Intel Core i5-12400 processor, 32GB DDR4 RAM, and eight drive bays, this high-end NAS delivers exceptional performance, with transfer speeds up to 10GB/s.It's ideal for handling large video projects and collaborative editing environments. Approximate cost: £2,500.
Synology DS723+: This budget-friendly option features a Celeron J4125 Quad-Core CPU, 2GB DDR4 RAM, and two drive bays. It supports 10GbE connectivity, allowing real-time editing of substantial video files. Approximate cost: £400 (Disks extra)
Asustor Lockerstor 2 Gen2 (AS6702T): Offering dual multi-gig LAN ports and four M.2 NVMe SSD slots, this two-bay NAS provides high-speed connectivity and flexibility for video editing tasks.Approximate cost: £500. (Disks extra)

2. Optimizing Your LAN for Video Editing

A well-structured LAN is crucial for maximizing NAS performance in video editing workflows. Consider the following recommendations:

Implement 10 Gigabit Ethernet (10GbE): Upgrading to a 10GbE network significantly enhances data transfer speeds, facilitating smooth editing of high-resolution video files directly from the NAS. This setup is particularly beneficial for 4K and 6K video editing.
Utilize Quality Network Switches: Invest in reliable 10GbE switches to manage network traffic effectively. For instance, the QNAP QSW-2104-2T is a cost-effective option that supports 10GbE connectivity, ensuring efficient data flow between your NAS and editing workstation.
Ensure Proper Cabling: Use Cat6a or Cat7 Ethernet cables to support 10GbE speeds, minimizing latency and maintaining stable connections throughout your network.
Configure Network Settings: Set up Quality of Service (QoS) protocols to prioritize video editing traffic, reducing potential bottlenecks and ensuring consistent performance during intensive editing sessions.

3. Additional Considerations

Storage Drives: Equip your NAS with high-performance hard drives or SSDs designed for NAS environments, such as Western Digital Red or Seagate IronWolf series, to ensure reliability and speed.
Backup Solutions: Implement regular backup routines to safeguard your projects. Utilizing cloud services or additional external drives can provide an extra layer of data protection.
Remote Access: Configure secure remote access to your NAS, enabling collaboration with team members and access to your projects from different locations.

By carefully selecting a NAS that aligns with your video editing requirements and optimizing your LAN infrastructure, you can create an efficient and reliable home office setup.This approach not only streamlines your workflow but also enhances productivity, allowing you to focus on creating high-quality content.

Network Attached Storage in a Home Office

2024-12-13T09:35:00.000+00:00

The Pros and Cons of Using a NAS in a Home Office to Protect Sensitive Data

In today's increasingly digital world, safeguarding sensitive data is paramount. Many home office setups rely on laptops for convenience and mobility, but this can sometimes come at the cost of data security and storage limitations. A Network-Attached Storage (NAS) system offers a compelling alternative for managing and protecting sensitive data. Here, we explore the pros and cons of using a NAS in your home office to help you decide if it’s the right solution for you.

What is a NAS?

A NAS is a dedicated storage device connected to your home or office network. It allows multiple users and devices to access files from a central location. Unlike external hard drives, NAS systems are designed to be always on, accessible from anywhere (if configured for remote access), and offer advanced features like data redundancy and user permissions.

---

Pros of Using a NAS in a Home Office

1. Centralized Data Storage

A NAS acts as a central hub for all your files, enabling you to organize and store sensitive data in one secure location. This is especially useful if you use multiple devices or share data with colleagues.

2. Enhanced Data Security

Most NAS systems offer advanced security features, including encryption, two-factor authentication, and user access controls. By storing sensitive data on a NAS, you can reduce the risk of unauthorized access if your laptop is lost or stolen.

3. Data Redundancy

Many NAS systems support RAID (Redundant Array of Independent Disks), which duplicates your data across multiple drives. This protects against data loss due to hardware failure, offering peace of mind for storing critical information.

4. Remote Access

With proper configuration, a NAS allows you to access your files remotely. This makes it easy to retrieve or share files without carrying sensitive data on your laptop, reducing the risk of exposure.

5. Expandable Storage

Unlike your laptop’s fixed storage, NAS systems are scalable. As your data grows, you can add more drives to accommodate increased storage needs.

6. Backup Capabilities

NAS systems often come with built-in backup solutions, allowing you to schedule regular backups from your laptop or other devices. This ensures that your data remains secure even if your primary device fails.

---

Cons of Using a NAS in a Home Office

1. Initial Cost

Setting up a NAS requires an upfront investment. The device itself, additional hard drives, and any necessary network upgrades can add up quickly, making it a more expensive solution compared to external hard drives.

2. Technical Complexity

Configuring a NAS can be challenging for those unfamiliar with networking and storage technologies. Tasks like setting up RAID, enabling remote access, or managing user permissions may require a learning curve.

3. Power Consumption

NAS devices are designed to be always on, which can increase your electricity bill. While modern NAS systems are energy-efficient, they still consume more power than external drives that are only plugged in when needed.

4. Maintenance

Regular updates, monitoring, and potential hardware replacements (e.g., failing hard drives) require ongoing maintenance. Without proper care, the NAS could become a liability rather than an asset

5. Potential Security Risks

If not properly configured, a NAS can introduce vulnerabilities, especially if remote access is enabled. Hackers could exploit these vulnerabilities to gain unauthorized access to your sensitive data.

6. Limited Mobility

While remote access is a benefit, it relies on a stable internet connection. If you’re in an area with poor connectivity, accessing your files can be inconvenient.

---

Is a NAS Right for You?

Choosing a NAS for your home office depends on your specific needs and technical comfort level. If you frequently work with sensitive data, require centralized storage, and are prepared to invest time and money into setup and maintenance, a NAS can be an excellent addition to your home office. However, if you prioritize simplicity and portability, other storage solutions like cloud services or encrypted external drives might be more suitable.

By weighing these pros and cons, you can make an informed decision that balances security, cost, and convenience. With the right setup, a NAS can transform your home office into a secure and efficient data management hub.

Have they paid to read your document?

2024-12-11T16:31:00.003+00:00

How to Control Access to Your PDF Documents for Paid Subscribers

If you're selling digital products or offering exclusive content, controlling access to your PDF documents is essential. You want to make sure that only paid subscribers or authorized users can access and read your PDFs, protecting your work from unauthorized sharing or theft. Fortunately, there are several tools and strategies available to help you achieve this level of security.

In this blog post, we’ll explore the best tools and methods to control access to your PDF documents and ensure that only your paying customers can access them.

1. Digital Rights Management (DRM) Tools

One of the most powerful ways to control access to PDF documents is through Digital Rights Management (DRM) software. DRM helps you protect your digital content from unauthorized distribution and access. With DRM tools, you can encrypt your PDFs and apply access controls based on the user’s identity or subscription level.

Key Features of DRM for PDFs:

Watermarking: Adds a personalized watermark to each document, making it easier to track if a document is leaked or shared without permission.
Access Restrictions: You can control who can view the PDF, where they can view it, and whether they can copy or print the content.
Device or User Authentication: Some DRM solutions allow you to restrict access to specific devices or users, ensuring that only authorized people can open the document.

Popular DRM Tools:

Adobe Digital Editions: A well-known DRM solution that allows you to encrypt and protect PDFs. It ensures only users with valid credentials can access the content.
LockLizard: LockLizard offers a comprehensive DRM solution that includes PDF encryption, watermarking, and strict user-based access control. This is perfect for businesses that need to ensure their PDFs remain secure.
Vitrium Security: Vitrium provides a robust DRM platform for PDFs, with features like encryption, watermarking, and secure user access management.

2. Password Protection and Authentication

While DRM tools offer advanced security features, you can also secure PDFs using password protection and user authentication. By applying a password to your PDFs, you can ensure that only those with the correct password can open the document. You can also implement token-based authentication, where each subscriber gets a unique code or token to access the file.

How Password Protection Works:

Password-Only Access: You can set a password that restricts access to the document, so only those who know the password can open it.
Token-Based Access: A more secure approach is token-based authentication, where a unique access token is generated for each subscriber. This method is commonly used for paid content delivery and ensures that only paying users can download or view the PDF.

Tools for Authentication:

SendOwl: SendOwl helps you sell digital products securely. It integrates with payment systems to automatically send a secure PDF download link to subscribers, with additional features for managing access.
E-junkie: This platform allows you to securely deliver digital products (including PDFs) after a user makes a purchase. You can limit the number of downloads or set expiration dates on download links.

3. Subscription-Based PDF Access

For businesses and content creators who offer paid subscriptions, it’s important to manage access to your PDFs automatically based on the user’s subscription level. There are several platforms that allow you to restrict access to specific content based on a user’s subscription or membership status.

How Subscription-Based Access Works:

You can set up a membership site or use a payment platform that controls who has access to your PDFs. Once a user subscribes or makes a payment, they are granted access to download or view the PDF document.

Popular Platforms for Subscription-Based Access:

MemberPress (WordPress Plugin): MemberPress is a powerful WordPress plugin that lets you create subscription-based sites. You can easily restrict access to PDF documents based on the user’s subscription plan, ensuring only paid members can access exclusive content.
Gumroad: If you're selling digital products like PDFs, Gumroad offers a simple solution. You can set up paywalls for your PDFs, ensuring that only customers who’ve paid can download the content.

4. Watermarking for Tracking and Protection

While watermarking doesn’t prevent access to the PDF, it’s an effective way to protect your content from unauthorized sharing. Watermarks can help track the source of a document if it gets leaked or shared without permission. Adding personalized watermarks—like a user’s name or email address—can deter unauthorized distribution.

Popular Watermarking Tools:

PDF Watermark: This tool allows you to add text or image watermarks to your PDFs. You can personalize the watermark with the user’s information, making it easier to trace any leaks.
Adobe Acrobat Pro: With Adobe Acrobat Pro, you can add custom watermarks and set permissions for editing and printing. This helps protect your content while allowing authorized users to access the document.

5. Secure File Delivery Platforms

For those who sell digital products, secure file delivery platforms can help manage PDF access and ensure that only paying subscribers can access the documents. These platforms typically integrate with payment systems to automatically send the right file to the right user.

Popular Secure File Delivery Platforms:

Paddle: Paddle is a payment platform that offers secure digital product delivery, including encrypted PDFs. You can set up access control to ensure only paid users can download or view your content.
FetchApp: FetchApp integrates with e-commerce platforms and automatically delivers digital products to customers after payment. It provides secure links with restrictions, ensuring only the purchaser has access to the file.

Conclusion: Protecting Your PDFs and Controlling Access

When it comes to securing your PDF documents and ensuring that only paid subscribers can access them, you have a variety of tools at your disposal. Whether you choose DRM software like LockLizard and Vitrium, implement password protection, or set up a subscription-based access system using platforms like MemberPress or Gumroad, each method has its own advantages.

By combining these tools with watermarking and secure file delivery platforms, you can create a comprehensive security strategy that protects your valuable content from unauthorized access and sharing.

No matter which method you choose, it’s important to consider the level of protection you need for your PDFs and the type of content you're offering. With the right tools, you can ensure that your digital content is safe, accessible only to those who’ve paid, and protected from unauthorized distribution.

Keep your PDF documents secure

2024-12-11T16:27:00.005+00:00

Is PDF Encryption Secure? Understanding the Risks and Benefits

PDF encryption is often used to protect sensitive documents, ensuring that only authorized users can view or modify them. It’s a handy tool for businesses, professionals, and anyone who needs to keep their documents secure. But how secure is PDF encryption, really? Is it easy to defeat with third-party software? In this post, we’ll explore the strengths and weaknesses of PDF encryption and help you understand when it’s appropriate to use it.

The Strengths of PDF Encryption

PDF encryption can be an effective way to keep your documents secure, especially when combined with strong passwords and modern encryption standards.

Password Protection: One of the primary benefits of PDF encryption is that it allows you to password-protect your documents. This means that only people with the correct password can open or view the file. This adds a simple, yet effective layer of security for sensitive data.
Strong Encryption Algorithms: Many PDFs use AES (Advanced Encryption Standard), a highly secure encryption method, with 128-bit or 256-bit keys. These are considered safe from most attacks when implemented correctly. This means that with a strong password and the right encryption method, your PDF can remain secure from unauthorized access.
Restrictions on File Operations: In addition to password protection, you can also set restrictions on a PDF to control what users can do with the file. For example, you can prevent printing, copying, or editing the content. Even if someone gains access to the file, these restrictions make it harder for them to misuse it.

The Weaknesses and Risks of PDF Encryption

Despite these strengths, PDF encryption is not perfect. There are several factors that can make your encrypted PDF more vulnerable than you might think.

Weak Passwords: The most significant weakness of PDF encryption is the reliance on the password’s strength. A weak password—such as "123456" or "password"—can be cracked easily through brute-force or dictionary-based attacks. The stronger the password, the harder it is to crack, so it’s essential to choose a complex, unique password to protect your document.
Outdated Encryption Methods: Some older versions of the PDF format used weaker encryption algorithms, like 40-bit RC4. These encryption methods are now considered insecure and can be easily bypassed with modern decryption tools. If your PDF was created using an older encryption method, it may be more vulnerable to attacks.
Decryption Tools: There is a wide range of third-party tools available that can bypass PDF encryption, especially if the password is weak or the encryption method is outdated. Programs like PDFCrack or PDF Unlocker can remove passwords or unlock encrypted files, making it easier for attackers to gain access to your documents.
Software Implementation Flaws: The security of PDF encryption also depends on how it is implemented by the software. If there are vulnerabilities in the PDF creation or reading software, hackers may exploit those weaknesses to defeat encryption or bypass restrictions.
"Security through Obscurity": Just because a PDF is encrypted doesn’t mean it’s unbreakable. PDF encryption is not foolproof. A determined attacker with the right tools and technical knowledge can often crack weak encryption methods or bypass password protection, especially if there are flaws in the encryption or password.

How to Improve PDF Encryption Security

If you’re serious about securing your PDFs, there are several ways to strengthen the encryption and make it more difficult for attackers to bypass:

Use Strong, Unique Passwords: A strong password is essential. Avoid simple passwords and use a combination of uppercase and lowercase letters, numbers, and special characters. The more complex the password, the harder it will be for an attacker to crack.
Choose Strong Encryption (AES-256): Always opt for the strongest encryption available when creating your PDF. AES-256 is a top-tier encryption standard and is currently considered one of the most secure encryption methods.
Add Extra Layers of Protection: If the document is extremely sensitive, consider adding extra layers of protection. For example, use file-level encryption tools like VeraCrypt or SecureZip in addition to PDF encryption. These tools can add an additional level of security to ensure your files are kept safe.
Be Cautious with File Sharing: Even if your PDF is encrypted, sharing it over insecure channels can expose it to risk. Always use secure file transfer methods and consider sharing passwords through secure communication channels, like encrypted email or messaging services.

Conclusion: Is PDF Encryption Secure?

PDF encryption can be secure, but it’s only as strong as the encryption method and password you use. When implemented correctly—using strong passwords and modern encryption algorithms like AES-256—PDF encryption can protect your sensitive documents from unauthorized access. However, weak passwords, outdated encryption methods, and readily available decryption tools can compromise its security.

If you're dealing with highly sensitive information, it's important to go beyond PDF encryption alone. Consider using additional encryption tools to further secure your documents. By understanding the strengths and weaknesses of PDF encryption, you can make informed decisions about how to protect your files and ensure they stay secure.

Trading Securely

Careless couriers cause extensive damage

Annoying SPAM source - Instiller.

Why Companies House Director Identity Verification is not reliable

The Day the CEO’s Email Wasn’t the CEO’s Email

The Silent Switch

Why Email Alone Isn’t Enough

How to Stay Ahead of the Trick

The Lesson

Tuning a local NAS network adaptor on your PC.

🖥️ Lessons Learned: Optimizing Network Performance Between Windows and Synology NAS

🚧 The Problem: Speed Bottlenecks & Wrong Interface Routing

🔧 Lesson 1: Understand the Windows Routing Table

### 🛣️ Lesson 2: Add a Static Route to the NAS

📉 Lesson 3: Stop Letting Windows Auto-Assign Metrics

⚠️ Lesson 4: Subnet Mismatches Can Trigger NAS Security

⚡ The Result: Instant File Access, Stable Connections

🧠 Final Thoughts

MagNex : Magnets without Rare-Earth

MagNex: The AI-Discovered Magnet That Could Change Clean Energy

Why This Is Important

1. No Rare-Earth Metals

2. Cheaper and Cleaner

3. Fast Discovery

How They Did It

Why It Matters

Fixing Supply Chain Problems

Helping the Environment

A New Way to Make Materials

What’s Next?

Silly supplier mistake, Costs them an order

GDPR Red Flags in the Companies House

Is the GOV.IT One Login programme failing?

The Trouble with GOV.UK One Login: What You Should Know

1. Serious Security Risks

2. Not Meeting Cybersecurity Standards

3. Lost Trusted Identity Status

4. Hard for Some People to Use

5. Concerns Over Development and Oversight

6. Industry and Political Pushback

Final Thoughts

Desktop PC archive and backup

From Cloud to Control: Why We Switched to NAS for Our Business Backups

When the Cloud Got Expensive

Moving to NAS: Why Synology Was Worth It

Final Thoughts

Variable memory pricing - NAS

🧾 When the Machines Were Louder Than the Mistakes

Part 1: From Cardboard to Code — Joining the Machine

Part 2: Paper, People, and Punch Cards

Part 3: Print Like You Mean It

☕ The Epilogue

Companies House GDS Saga continues

You really couldn't make this up!

Companies House Woes - Gov.UK One Login - Continued

Source: perplexity.ai 25th June 2025

Reported Problems with Companies House Login and ID Verification

Conclusion

Companies House Woes - Gov.UK One Login

Blocked by Bureaucracy: A Cautionary Tale of Digital Identity Verification Gone Wrong

A System That Denies Access

No Help, No Override, No Responsibility

The Cost of Bad Design

What I’ve Done So Far

What Comes Next

🧭 Lessons for Others

How will AI affect your job?

The Impact of AI on Lives in the UK: Opportunity or Challenge?

The Opportunities AI Presents

The Challenges of AI Adoption

Ensuring Positive Outcomes

Looking Ahead

A handy, but pricey label printer for small businesses

Review: Brother QL-1110NWBc Label Printer – The Small Business Powerhouse

Key Features

1. Exceptional Connectivity Options

2. Programmability for Specialist Applications

Performance

Ease of Use

Pros and Cons

Source: perplexity.ai 25^th June 2025