The Register Columnists

Dave Cartwright

Contact Mail Follow Twitter RSS feed
Dave Cartwright has worked in most aspects of IT in his 20-year-or-so career, though the things he claims to be quite good at are strategy, architecture, integration and making broken stuff become unbroken. His main pastime is shouting at people who try to install technology without considering whether it actually fits the business or the requirement. Dave is a Chartered Engineer, Chartered IT Professional and Fellow of the BCS, and lives with his family on a small rock in the English Channel.

Data integrity and failover in the hybrid cloud

Discussions of information security tend to revolve around keeping confidential information confidential: preventing intruders from compromising the protection of the systems and gaining access to data they're not entitled to see. But there's more to security than just keeping information secret: it's a three-pronged concept. …
Dave Cartwright, 19 Oct 2016

Adding trendy tech SIEM to a hybrid computing setup

As I write this, Security Information and Event Monitoring is considered rather hip and cool. Everyone's talking about it, and the vendors of SIEM software are promoting the life out of it. The thought process that prompts consideration of SIEM is: “No matter what I do to protect myself, an attack is possible so I need to pre- …
Dave Cartwright, 14 Oct 2016
Office 365, photo by dennizn via Shutterstock

Securing Office 365? There's always more you can do

Wherever you look there's yet another SME or enterprise migrating to Office 365. This says a lot for the attractiveness of cloud-based office suites, and perhaps it also says something about the attractiveness of letting someone else look after one's SharePoint and Exchange servers rather than having to fight with their …
Dave Cartwright, 06 Oct 2016

How does a hybrid infrastructure fit my accreditations?

Security-related certifications such as ISO 27001 and, more particularly, the Payment Card Industry Data Security Standard (PCI-DSS), have stringent requirements regarding the controls on infrastructure, how data is routed and stored around it, and so on. Particularly in the cloud components of a hybrid setup, the control you …
Dave Cartwright, 06 Oct 2016
Businessman makes A-OK sign. Photo by Shutterstock

Avoid the dreaded auditor's smirk: Smart policies and procedures for the hybrid cloud

When you get to a certain age, and you've been in the IT industry for enough years, you start to get an idea of what auditors are looking for when they descend on you and ask you pointed questions about your systems. And I don't just mean security auditors: if your company has an annual financial audit the team which comes to …
Dave Cartwright, 04 Oct 2016
Man sloppily eats a hamburger... chips and pickle fall out. Photo by Shutterstock

WAN, bam, thank you... oh @£$%. We've gone dead. Drop the burger. RUUUUUN!

This Damn War This Damn War image via Shutterstock Big, global WAN roll-outs have their hazards. Size is one of them, but you can deal with this with effective project planning and management. Complexity is another, but combining design and a team of highly effective and competent engineers can address that one too. And of course there …
Dave Cartwright, 28 Sep 2016

Reg Programming Compo: 22 countries, 137 entries and... wow – loads of Python

Roundup Our latest programming competition was our most popular yet in terms of the number of entries – 137 in all once we'd de-duplicated them. The judges were intrigued to see just how popular Python is these days: nearly half (a smidge over 48 per cent) of the entries used this as the language of choice, with Java the next most …
Dave Cartwright, 21 Sep 2016

Hybrid infrastructure: You did it. You switched over. Now lock it down. Yes, really

Hybrid infrastructures – where you combine on-premise equipment with systems that sit in a public cloud installation – have their own particular foibles when it comes to management. It's really not so hard, though – here are 10 things to think about when you're looking at the security aspects of managing your hybrid world. …
Dave Cartwright, 19 Sep 2016
A US police officer smiles while standing in front of her patrol car. Photo by Shutterstock

Your colleagues will lie to you: An enterprise architect's life

Enterprise Architects … well, among other things they design and build corporate infrastructures. It's very easy, though, for these highly technical masters of electronic wizardry to concentrate on making the technology work at the expense of the more tedious corporate governance stuff. Here are my favourite five things that …
Dave Cartwright, 10 Aug 2016
People fight in cartoon cloud. photo by Shutterstock

Hybrid cloud: Deciding the right mix for your workloads

Blog Anyone who's read much of what I write for The Reg will know that I'm a believer in hybrid cloud – using the cloud for some elements of your world whilst retaining components on-premises too. But precisely which elements? We'll look at how you might decide what belongs where: on-premises, in the private cloud, or in the public …
Dave Cartwright, 09 Aug 2016
Two execs in a server room. Has to have happened some time heh. Photo by Shutterstock

No supercomputer cash? Time for a systems squeeze

Many companies have, understandably, a burning desire to learn things from their data. There's a cost and this manifests itself in one – or, frequently both – of two forms: money and time. Big data equals big storage and big processing power, and both of those equate to a financial cost. (And yes, we could go into the idea of …
Dave Cartwright, 08 Aug 2016
Hand holds green tea and sweetpotato soft serve ice cream cone. Looks delicious if you didn't know about the flavours though. Photo by Shutterstock

Bimodal IT: Let the backlash begin

Gartner defines Bimodal IT as: “the practice of managing two separate, coherent modes of IT delivery, one focused on stability and the other on agility. Mode 1 is traditional and sequential, emphasizing safety and accuracy. Mode 2 is exploratory and nonlinear, emphasizing agility and speed”. I find myself more than a little …
Dave Cartwright, 05 Aug 2016
Angry man on laptop. Illustration via Shutterstock

Sealed with an XSS: Popular vulnerabilities probed

If we have internet-facing web servers (and other types of server, for that matter) we care about how vulnerable they are to attack. There are loads of services out there that you can use to probe your public-facing systems, and they'll tell you loads of useful stuff about why they might be vulnerable. But of course they're only …
Dave Cartwright, 03 Aug 2016
An eraser

OK, we've got your data. But we really want to delete it ASAP

Storage is a big deal for IT people and beancounters alike. For the IT team the story is pretty consistent: there's never quite enough, and the users seem to eat it up and an amazing rate. For the finance team it's a seemingly endless queue of IT people asking for funds for yet more storage because the rate of growth in stored …
Dave Cartwright, 02 Aug 2016
Colleague high fives in the office. Photo by Shutterstock

Why Big Business is usually last to the party

Big businesses tend to be exceptionally risk averse. There's a general reluctance to adopt new, bleeding-edge technology because the priority – understandably – is to be able to maintain productivity. Small companies can live with the occasional glitch in systems – a couple of dozen people without email for a couple of hours …
Dave Cartwright, 29 Jul 2016

Hybrid Cloud: The new IT service platform?

So. Hybrid cloud. Let's start with a quick definition, courtesy in this case of TechTarget which describes it as: “a cloud computing environment which uses a mixture of on-premises, private cloud and third-party, public cloud services with orchestration between the two platforms”. I like this particular definition as it sums it …
Dave Cartwright, 28 Jul 2016
wrecked cargo ship abandoned on sea bay. pHOTO BY shUTTERSTOCK

Hyperconvergence: Designing for failure

Hyperconvergence is one of those relatively new names for something that many of us having been doing for years: consolidating sprawling infrastructures into tight, largely virtualized setups that vastly reduce the number of devices one has to manage (not to mention the number of things to spend maintenance fees on, and the …
Dave Cartwright, 28 Jul 2016

How to make the move from ISDN to SIP

ISDN is fast becoming a technology of the past. Today's telcos have networks that bypass traditional telephony signalling technologies for IP networks: the hardest thing they do is present a “legacy” connection such as an analogue line or an ISDN connection to a customer, as layering a non-IP service on an IP network is non- …
Dave Cartwright, 25 Jul 2016
Vibrant Evening Sunset At Twistleton Scar In North Yorkshire, UK. Photo by Shutterstock

Crashed and alone in a remote location: When paid help is no help

This Damn War This Damn War image via Shutterstock I took the plunge and became a freelance IT consultant in 2001. Through an unlikely series of coincidences (former colleague from London goes to travel show in France and bumps into two guys from Yorkshire who are looking for a software and database architect) I ended up in North Yorkshire …
Dave Cartwright, 25 Jul 2016
Woman holds up PBX phone in office. Pic by Shutterstock

Really Scary Telecoms Stuff? Nah – telephony's just an app

In 2009, I moved to Jersey to become the network and telecoms manager for a multinational company. It was tremendous fun, as I had a variety of kit to play with. I tended to favour the Mitel 3300 ICP range (still do, actually) that supported about half of our offices, and I did the various engineer courses and exams for the …
Dave Cartwright, 20 Jul 2016

DevOps: The spotty faced yoof waiting to blossom

DevOps is a concept that we've all started coming across more and more in the last few months. Critically it's taken a bit of a leap just lately because people have started to: (a) define it formally and (b) actually agree to a decent extent on what the definition is. So, for what its worth, Wikipedia talks of DevOps as: “A …
Dave Cartwright, 07 Jul 2016
Ireland map, photo via Shutterstock

Over Ireland? Bothered by Brexit? Find that new home for your cloud

As we all know, the cloud isn't an amorphous, non-geographical blob of computing. Which is a good thing, because there are plenty of legal implications around where your data lives and where it moves both to and from. The point is, of course, that as the cloud isn't just a cloud, your choice of provider is largely dependent on …
Dave Cartwright, 13 Jun 2016
US boxing glove, photo via Shutterstock

Life after Safe Harbour: Avoiding Uncle Sam's data rules gotchas

Back in the day I used to work for a multi-national company with a big presence in the US. I learned a lot there, from the usefulness of a BA silver card to how to run the tendering process for a big global WAN. I also learned what a big deal our US cousins make of their data export regulations. This doesn't mean, of course, …
Dave Cartwright, 01 Jun 2016
This Damn War image via Shutterstock

Label your cables: A cautionary tale from the server room

This damn war Friends of friends can be a pain in the nuts when you're in IT: you find yourself invited to someone's house “for a beer” and then somehow end up kneeling in a dark, dusty under-stair cupboard trying to coax a six-year-old router back into life. The only thing potentially more daunting is former employees of suppliers of …
Dave Cartwright, 11 May 2016

There's more to life than Windows

When you run a corporate IT infrastructure, the chances are you run Active Directory underpinning a predominantly Windows-based array of servers, desktops and laptops. And that's fine: it probably serves 90 per cent of the kit you have and is a secure, easy-to-use way of authenticating user logins. But it's very unusual to …
Dave Cartwright, 28 Apr 2016