19 October, 2025

Careless couriers cause extensive damage

 In August 2025 we ordered a new PC to replace our existing graphics PC now obsoleted by Microsoft. The existing one works fine, but will not upgrade to Windows 11. As we have to keep secure company records we have to upgrade to have access to the security patches.  Whilst we could have purchased extended support from Microsoft, it would only have been a short term fix and other application software would become outdated on Windows 10.



The new PC is about four times faster than our current PC, and should last for a few years. It was delivered by the Drop Parcels Daily courier, who lived up to their name and dropped the PC parcel over a garden gate. It fell about 1.4 metres on to a flagstone path. We have a CCTV record of the event. The courier company "apologised" about not matching their normal standards, but we had to return the new PC to the vendor for repair. We spent several mandays prior to the return,  identifying the faults. The PC would run for hours, but suddenly crash with a black screen during editing. The PC vendor company has had to replace the motherboard, the power supply unit, and also the PC tower case, as those were damaged during delivery.

Hopefully we can collect the repaired PC tomorrow, it's a four hour round trip. but is worth it to avoid the "normal standards" of that courier company.

21 August, 2025

Annoying SPAM source - Instiller.

 Most days we get annoying SPAM email via https://instiller.co.uk/  Despite their statement otherwise, they do not honour unsubscribe requests. Their clients, using the Instiller services, are automatically and permanently blacklisted by our system. We usually file a bad IP address report with the on-line monitoring agencies too.

It is an absolute zero-tolerance policy. Unless we have previously done business with the organisation, and if we continue to receive unsolicited email after one "unsubscribe" message, we then blacklist the sender, their originating IP Address, their company, quoted phone numbers, and the person signing the letter. 

15 August, 2025

Why Companies House Director Identity Verification is not reliable

 The current approach by Companies House to Id Verification is to have the Director's email address cross checked by GOV.UK One Login System. If that process checks out with the supporting identity documentation, the Director is issued with a personal identity code. It is sent to the Director's registered email address. The Director is then supposed to tell Companies House the detail of the personal code  tied to the director's registered email address.

Here's the problem; the email address is not proof of identity. It can be hijacked, and the "Personal Code" can be learned by social engineering over the phone. The Companies House system should use a physical token, such as a Yubikey to store an encrypted digital certificate to identify individual people. The token should be plugged into the PC/Phone and verified when the Director is filing documents on the Companies House website.


Here's a story:

The Day the CEO’s Email Wasn’t the CEO’s Email

It started with a routine request.
Our client needed to verify the identity of a company director. Nothing unusual — just send a secure link to the director’s official address, ceo@bigco.com, and wait for the confirmation click.

A few minutes later, the “CEO” replied. The system marked the verification as complete. The paperwork moved forward.
Everything looked fine.

Except it wasn’t.


The Silent Switch

What no one realised was that, a week earlier, the company’s domain name — bigco.com — had been quietly hijacked.
The attacker had gained access to the registrar account where the domain was registered. With just a few clicks, they redirected the company’s email hosting to their own server.

Now, when someone sent a message to ceo@bigco.com, it didn’t go to the real CEO. It went to the attacker’s freshly created inbox.
From the outside, nothing looked suspicious. The address matched. The email arrived. The link was clicked.

The attacker had just passed identity verification with flying colours.


Why Email Alone Isn’t Enough

Email verification checks one thing:

Can this person receive a message at this address right now?

It doesn’t check:

  • Whether they’ve always owned that address

  • Whether the domain has been compromised

  • Whether someone inside the company created a fake account

If the domain itself is taken over, email verification becomes a rubber stamp for the attacker.


How to Stay Ahead of the Trick

Here’s how to make sure you’re not fooled by the same move:

  1. Don’t rely on email alone — Combine it with phone verification, government ID checks, or live video confirmation.

  2. Monitor domain history — Flag sudden changes in registration, transfers, or name servers.

  3. Use domain security — DNSSEC, SPF, DKIM, and DMARC make some attacks harder.

  4. Bind identity to a digital certificate — Once verified, use cryptographic keys instead of just email for ongoing trust.


The Lesson

In this case, we caught the problem — but only because another system noticed the domain had been altered days earlier. Without that extra layer, the attacker could have slipped right through.

When it comes to verifying someone’s identity, email is a useful tool — but it’s like a lock on a screen door.
If the whole doorframe can be lifted off, the lock isn’t doing much.


.

07 August, 2025

Tuning a local NAS network adaptor on your PC.


🖥️ Lessons Learned: Optimizing Network Performance Between Windows and Synology NAS

If you've ever found yourself wondering why your lightning-fast Synology NAS isn’t delivering the speeds you expected to your Windows PC, you’re not alone. I recently went down the rabbit hole of **multi-NIC networking**, **Windows routing quirks**, and **Synology access issues** — and came out the other side with a surprisingly lean and fast setup.

Here’s a breakdown of the lessons learned — and what actually worked.

🚧 The Problem: Speed Bottlenecks & Wrong Interface Routing

Even with a high-performance Synology NAS equipped with a 10GbE card, and a PC connected via a 2.5GbE LAN port, I was seeing inconsistent performance — and even security alerts from the Synology when accessing the NAS web interface.

Turns out, the culprit was simple: **Windows was routing NAS traffic over the wrong network adapter** — often defaulting to Wi-Fi or a secondary Ethernet port on a different subnet.

🔧 Lesson 1: Understand the Windows Routing Table

Windows doesn’t always choose the fastest interface — it chooses based on **metrics** (priority numbers), and these can change on reboot or reconnection.

To view your routing table:

```bash

route print

This shows which interface Windows will use for a given destination. If the wrong adapter is prioritized, even local NAS access can go through Wi-Fi, causing unnecessary latency or even subnet mismatches.

### 🛣️ Lesson 2: Add a Static Route to the NAS

To ensure that all traffic to the NAS uses the correct (fast) adapter, add a **persistent static route** targeting just the NAS IP address:

```bash

route -p ADD [NAS IP] MASK 255.255.255.255 [NAS IP] IF [Interface Index] METRIC 5

```

* Replace `[NAS IP]` with the actual NAS IP.

* Use `route print` to find the `[Interface Index]` of your fast LAN adapter.

* The gateway and destination IP can be the same when the NAS is directly connected (e.g., via a dumb switch).

This route forces Windows to send all traffic to that NAS through the correct interface — no guesswork.

📉 Lesson 3: Stop Letting Windows Auto-Assign Metrics

Windows uses **"Automatic Metric"**, which attempts to prioritize interfaces based on link speed and other factors. It's often wrong — especially with mixed wired/Wi-Fi environments.

Manually set the interface metric:

```bash

netsh interface ipv4 set interface "[Interface Name]" metric=50

* Use a **lower metric** (e.g., 5) for your fast LAN adapter.

* Use **higher metrics** (e.g., 50–100) for Wi-Fi and fallback links.

* You can check existing metrics with:

```bash

netsh interface ipv4 show interfaces


This ensures Windows consistently prefers your high-speed link.

⚠️ Lesson 4: Subnet Mismatches Can Trigger NAS Security

If traffic to the NAS web interface comes from an unexpected subnet (e.g., your Wi-Fi network), Synology’s security features may block or flag it as a potential intrusion.

Routing all NAS traffic through the correct interface **eliminates false positives**, avoids login delays, and keeps the experience seamless.

⚡ The Result: Instant File Access, Stable Connections

After applying these fixes:

* JPG previews and media access became noticeably faster

* File transfers reached expected speeds over 2.5Gbps

* Synology no longer flagged normal access as suspicious

* The setup stayed stable even after rebooting

And no extra hardware was needed — just a better understanding of how Windows routes traffic.

🧠 Final Thoughts

You don't need to upgrade everything to 10GbE immediately. By tuning your **network routes** and **interface priorities**, you can unlock the full potential of your existing hardware — especially in mixed environments with multiple adapters or subnets.

If you’re running Windows and a Synology NAS, take an hour to review your routing table and metrics — it might save you hours of unexplained slowdowns or weird security behavior.


20 July, 2025

MagNex : Magnets without Rare-Earth

MagNex: The AI-Discovered Magnet That Could Change Clean Energy


A UK startup called Materials Nexus has created a new magnet called MagNex — and it might be a big deal for electric cars, wind turbines, drones, and robots. What makes it special? It was designed with artificial intelligence (AI), and it doesn’t use rare-earth metals, which are usually expensive, hard to get, and bad for the environment.

Even better — it only took three months to create, which is about 200 times faster than normal.


Why This Is Important

1. No Rare-Earth Metals

Most strong magnets use rare elements like neodymium and dysprosium. These are mostly mined in China, and the mining process is harmful to the environment. MagNex doesn’t use any of them.

2. Cheaper and Cleaner

Making MagNex costs about 80% less than traditional rare-earth magnets, and it produces 70% less carbon pollution.

3. Fast Discovery

Using AI, the Materials Nexus team tested over 100 million combinations of metals on a computer to find the best one. Then they made and tested it in a lab — all in just a few months.


How They Did It

Materials Nexus worked with scientists from the University of Sheffield and the Henry Royce Institute in the UK. The AI system looked for materials that were:

  • Strong magnets
  • Cheap to make
  • Easy to find
  • Environmentally friendly

Once the AI found a few good options, the scientists made them and tested them to find the best one: MagNex.


Why It Matters

Fixing Supply Chain Problems

With the rise of electric vehicles and renewable energy, the world needs more magnets than ever. MagNex could help solve the problem of relying too much on rare, expensive metals.

Helping the Environment

Because MagNex uses more common materials and produces less carbon, it’s better for the planet.

A New Way to Make Materials

This is just the beginning. Materials Nexus plans to use the same AI technology to discover better semiconductors, superconductors, batteries, and more.

Their CEO, Dr. Jonathan Bean, said:

> "This is just one example of how AI can help us create materials that support climate goals."


What’s Next?

MagNex is promising, but it’s still new. It needs to prove that it can work as well as (or better than) current magnets in real-world products. It also needs to be made at a large scale.

But if it succeeds, it could help make green technology cheaper, faster, and more sustainable — and change how we invent materials in the future.




18 July, 2025

Silly supplier mistake, Costs them an order

 We're in the process of upgrading our Network Attached Storage (NAS) to protect our data. We've had to buy some NAS hardware, disks and network upgrades. 

We placed two orders with BroadBandBuyer, about 1 hour apart on the same day, for a 10 GB LAN card, some network patch cables, and LAN Switch. They fulfilled one of the orders promptly, but appeared to have overlooked the second order. Its status was stuck at "awaiting stock allocation" even though the items were marked as "in stock" at the time of order.

When we queried the order status a couple of days later, we were given the line that despatch would be timed in line with the despatch method specified at the time of order, i.e. it's going to sit untouched for a couple of days even though the stock is available.Essentially arrant nonsense when the first order had the same method of despatch as as the delayed one. 

We subsequently decided we wanted to increase the capability of the NAS units with extra (ECC RAM) memory. BroadBandBuyer had the memory modules in stock, but they didn't get the order from us. We chose instead to order directly from the NAS manufacturer.  They've now been moved down the pecking order when it comes to selecting suppliers. We don't appreciate lies from their helpdesk. It also caused us to check their rating on Trustpilot.  They were preferred suppliers.

GDPR Red Flags in the Companies House

 Blog Update: GDPR Red Flags in the Companies House Identity Verification System


In my ongoing efforts to comply with Companies House's new director identity verification requirement, a recent development raises serious concerns under UK GDPR.

Following a Subject Access Request (SAR) to Companies House, I have now received written confirmation that they hold no records relating to my identity verification attempts via the GOV.UK One Login system. Specifically, they state they cannot see:

  • Any verification outcome or status,
  • Any login identifiers linked to me,
  • Any audit trail or escalation records,
  • Any way to associate a One Login attempt with a named director.

In short: the government department mandating legal compliance through a digital system is unable to access or confirm whether the process it enforces has even been attempted.

This raises three fundamental GDPR issues:

Lack of data traceability – If no record links a login ID to a director, how can Companies House enforce or prove compliance?

Opaque automated decision-making – GOV.UK One Login is effectively a black box. Users are not informed why they fail verification. No explanation is given, and no human review appears available — potentially breaching Article 22 of UK GDPR.

Shared controller confusion – Companies House refers all identity processing responsibility to GDS/Cabinet Office. Yet it is Companies House that imposes consequences based on that process. This blurred boundary undermines accountability.

With SARs now also submitted to GDS and DSIT, I intend to escalate to the Information Commissioner’s Office if these concerns are not addressed. Legal obligations should never be built on systems that are opaque, untraceable, and immune to oversight.


Edit 8th Aug 2025 - relevant to the issue:

A UK court has ordered HM Revenue & Customs (HMRC) to disclose whether it used artificial intelligence in deciding to reject research and development (R&D) tax credit claims. The ruling came after tax expert Tom Elsbury filed a Freedom of Information request in December 2023, suspecting AI involvement based on rejection letters. HMRC initially refused, citing concerns about aiding fraudulent claims—a stance later upheld by the Information Commissioner’s Office.

However, the first-tier tribunal ruled that the public interest outweighed those concerns, giving HMRC until 18 September to respond. Judge Alexandra Marks found Elsbury’s arguments “compelling,” noting that HMRC’s refusal to confirm or deny AI use risked undermining public trust. Elsbury warned of potential dangers if public large language models like ChatGPT had been used for tax assessments, particularly where sensitive defence-related innovations might be exposed.

The case comes amid heightened scrutiny of R&D tax credits due to fraud concerns, though critics argue HMRC’s approach has unfairly penalised legitimate businesses. HMRC said it is reviewing the decision and considering next steps.

Attribution:
Based on reporting by Emma Agyemang, Financial Times (© The Financial Times Limited 2025).

Edit 22nd Oct 2025

One Login is fundamental insecure: https://www.youtube.com/watch?v=fufnzxyv2Ps

14 July, 2025

Is the GOV.IT One Login programme failing?




The Trouble with GOV.UK One Login: What You Should Know


The UK government’s new digital identity system, GOV.UK One Login, aims to make it easier for people to access public services online. It’s designed to replace older systems like Government Gateway and Verify. But while the idea is promising, the rollout has been far from smooth.

Here are the key problems that have come to light:
 

1. Serious Security Risks

Independent testing revealed that hackers could gain high-level access to the system without triggering any alerts. That means someone could break in—and no one would know.

This isn’t the first warning. Since 2022, multiple government bodies have flagged issues with how secure One Login really is. While the government claims it’s fixed most of these, trust is still shaky.
 

2. Not Meeting Cybersecurity Standards

The system still doesn’t fully meet the government’s own cyber security standards.

As of April 2025, One Login passed only 21 out of 39 security checks set by the National Cyber Security Centre. That’s an improvement over last year, but still not good enough, especially for something so critical.
 

3. Lost Trusted Identity Status

In May 2025, One Login lost its official certification under the UK’s Digital Identity and Attributes Trust Framework (DIATF). This happened when one of its main suppliers failed to renew their approval.

This means One Login is no longer on the list of trusted digital ID providers, a major credibility blow.
 

4. Hard for Some People to Use

A government study found that up to 9% of people can’t verify their identity using One Login. That includes people without passports, driving licenses, or a strong financial history.

Young people face even more problems:
  • Only 4% have a big enough financial “footprint”
  • Nearly half don’t have a mobile phone
  • 1 in 5 don’t have an email address
  • Many need help using online services at all
This raises questions about how “universal” the system really is.
 

5. Concerns Over Development and Oversight


There are also red flags about how the system is being built and managed:
  • A whistleblower claimed that large parts of the work were offshored to Romania, without proper oversight or cybersecurity checks.
  • Key security flaws took months to be addressed.
  • Internal governance has been criticised for being too slow to act on known risks.

6. Industry and Political Pushback


Industry groups say the system should only be used for public services and not expand into the private sector. They fear it could harm private digital ID providers and distort the market.

Meanwhile, MPs and peers continue to question the government about security weaknesses, insider risks, and lack of transparency.
Government Response

The Government Digital Service (GDS) says it is fixing the issues. Measures include:
  • Stronger monitoring
  • Tighter access controls
  • Independent risk assessments
Ministers also say that some of the security concerns are “outdated,” and that full compliance is on the way.
 

Final Thoughts


GOV.UK One Login was supposed to be the future of digital identity in the UK. But with ongoing security issues, adoption challenges, and lost certification, it’s facing real questions about its readiness.

Until the government proves it can make the system secure, inclusive, and fully trusted, many people, rightfully, remain cautious.


Update 6th Aug 2025:

Issue: Despite the voluntary IDV period starting April 8, 2025, only about 200,000 out of 7 million individuals (less than 3%) have verified their identities so far, suggesting low awareness or reluctance.

Impact: The low uptake could lead to a last-minute rush as the November 18, 2025, mandatory deadline approaches, potentially causing delays in filings, rejections of incorporations, or penalties for non-compliance. Non-compliance is a criminal offense, with risks including fines, disqualification, or public annotations on the register that could harm a company’s reputation and access to finance or insurance.

11 July, 2025

Desktop PC archive and backup

From Cloud to Control: Why We Switched to NAS for Our Business Backups

Like many small businesses, our IT setup has evolved organically over time. We currently manage a mix of three Windows PCs, four Linux boxes, a couple of Chromebooks, and three laptops. all interconnected via a LAN secured behind firewalls and segmented subnets. While much of the work involves standard business documents, we also rely on a variety of software tools tailored to our consulting work.

With so many devices in play, a hard disk failure would be more than just inconvenient, it could be both costly and disruptive. That’s why we’ve always maintained regular, daily backups. These are stored separately and air-gapped from the rest of our network, ensuring we could recover even in the event of a complete loss of access to our office, something that’s critical given that our work often takes us off-site or even overseas.

When the Cloud Got Expensive

Our data needs have grown significantly over the past year. The introduction of GoPro cameras and drones for fieldwork caused a spike in storage usage — particularly with large video files. Until recently, we were backing everything up to AWS S3. It worked reliably, but the monthly costs began to creep up, around £45 per month just to store 2 TB. And while uploading was painless, the Amazon interface wasn’t exactly user-friendly for quick restores.

We experimented with a more budget-friendly solution: USB-attached hard drives paired with EaseUS backup software. Unfortunately, during test recoveries, we found it lacking in reliability and speed. Cheap, yes but not something we could count on during a real crisis.

Moving to NAS: Why Synology Was Worth It

Eventually, we decided it was time to bring storage back under our own roof. After some research, we opted for a Synology NAS system. While the hardware cost was a bit higher than other options, the added value in terms of built-in software, usability, and long-term savings made it an easy choice.

The benefits were immediate:

  • RAID support for drive redundancy
  • Hot-swappable enterprise-grade drives
  • Integrated UPS backup control
  • FTTP-enabled remote backups to a secondary off-site location
  • Seamless local and remote file sharing across all our devices
  • Disk capacity upgrades are easy.

Best of all, we now have four times the storage capacity we had with AWS, and we own the infrastructure. Based on our current and projected usage, the system will pay for itself in under three years.

Setup was surprisingly quick, under two hours, and required no special tools (not even a screwdriver). We also appreciated being free from proprietary cloud ecosystems like Microsoft OneDrive, while still maintaining the flexibility to access data globally. We've also given the Synology box its own APC UPS to provide at least 30 minutes backup power.

Final Thoughts

For our business, this move was about regaining control. AWS S3 served us well, but it became increasingly expensive and a bit opaque to manage. Our new NAS setup gives us performance, scalability, and peace of mind — all with the simplicity we need and the flexibility to grow.

If you’re a small business grappling with rising cloud storage costs and complex recovery procedures, investing in a NAS might be the best IT decision you’ll make this year.



08 July, 2025

Variable memory pricing - NAS

 For the Synology 723+ NAS

Prices include VAT All ECC modules. ECC memory can help correct some memory errors.

https://www.comms-express.com/products/synology-d4es02-4g-ddr4-sodimm-4gb-memory-module/ listed price £186.48 per module I think this is a pricing error.

On the Synology (UK) shop: £73.20  per module https://www.synology.com/en-uk/products/DDR4  D4ES02-4G

Broadbandbuyer £80.60 per module. https://www.broadbandbuyer.com/products/49908-synology-d4es02-4g/

Insight £82.79 per module. https://uk.insight.com/en_GB/shop/product/D4ES02-4G/synology/D4ES02-4G/Synology-DDR4-module-4-GB-SODIMM-260pin-unbuffered/ 

06 July, 2025

 ðŸ§¾ When the Machines Were Louder Than the Mistakes


A personal journey through the early days of national computing


Part 1: From Cardboard to Code — Joining the Machine


In the early 1970s, I joined the fledgling Driver and Vehicle Licensing Centre (DVLC) as a fresh-faced 19-year-old with a two A-levels and absolutely no interest in working with computers. I’d tried FORTRAN in school using graphite-sensed punched cards and had a miserable time of it — so when the Civil Service interview panel in London asked if I’d be interested in computing, I said “No.”

A few years later, I found myself standing in the middle of a massive, under construction, data centre in Swansea, surrounded by tape drives, gas turbines, and hammer printers — and helping to build one of the UK’s largest early national IT systems.

The DVLC system was designed around tape-based batch processing. At its heart were magnetic tapes running at 1600 BPI (later 6250 BPI), each one a file in its own right. The system tracked millions of vehicle and driver records, with 340 tapes for vehicle data and 240 for drivers, processed in overnight cycles. If a single tape broke, the system could skip that segment and continue, avoiding full re-runs. Resilience by necessity.

Each update was a delicate orchestration of variable-length, variable-format records, which had to be unpacked into fixed-layout structures for COBOL processing, and then repacked before writing back out. Every byte counted. Adding one byte to the average record length added 11 minutes to processing time, multiplied across hundreds of reels, that was days of extra work.


Part 2: Paper, People, and Punch Cards

The real story wasn’t just in the hardware it was in the people. Data didn’t come from the cloud or online forms. It came from 220 local offices, each with handwritten records and local staff who understood their regions better than any machine ever would. Those clerks were asked to transcribe thousands of records onto new data entry forms, while still keeping the old system running.

They did this knowing full well they were working themselves out of a job.

The process wasn’t frictionless. Forms came in with errors, public queries arrived by post, and the clerks handling those enquiries? They had no online access to the masterfiles. Every lookup required a paper form, a tape-based query job, and a printed response returned days later. A time and motion study showed that while a transaction took three weeks to complete, only about 30 seconds of it was actual manual handling. After cutover, the local office records were stored in an aircraft hanger on shelving, a retrieval and filing nightmare.

The system was built for throughput, not responsiveness  and that distinction shaped the experience for staff and the public for years.


Part 3: Print Like You Mean It

At the end of every batch cycle came the thunder: sixteen 160-column barrel hammer printers, shaking the floor with mechanical fury as they fired off vehicle tax discs, licence confirmations, and system reports on fanfold paper.

And these weren’t just pieces of paper.

The vehicle tax discs were printed on, photogravure paper, circularly perforated, each one serial-numbered and audited like currency. Changing the layout or security features required coordination between IT, print operations, suppliers, and civil service policy. Some print jobs ran from offline spool tapes, meaning the spooling system was literally a physical spool.

Every misprint had to be accounted for. Every wrecked disc recorded. At that stage, we weren’t just handling data , we were manufacturing trust.


 ☕ The Epilogue

I often joke that I just made the coffee. But in truth, I had a front-row seat to the birth of modern digital government, in an age where the systems we built had weight, heat, noise and impact.

The Synology NAS sitting on my shelf today, silently syncing terabytes of data across two sites, is exponentially more powerful than the entire DVLC setup we built with tapes and turbines.

But it owes everything to what we learned back then: how to build systems that don’t just process data — they handle people, policy, and pressure.




28 June, 2025

Companies House GDS Saga continues

 You really couldn't make this up!


Companies House "system" to check the on-line identity of  Directors and persons of significant control relies on Gov.uk to perform that validation.  When you attempt to use this system you end up with web pages marked as "Beta" version. In the systems development world Beta version software is that which you think mostly works, but you might find bugs where we haven't tested/fixed fully.  It is not production quality software.

When you send an email to the GDS (GOV.UK) support team you get a response within a day, but it says you may have to wait up to 15 days* to get a response from them! 15 Days when all they'll say is "try again".  It sounds like an IT system in serious trouble.  

The Minister responsible for the GOV.UK should get his sleeves rolled up and get things fixed.  The UK Government Minister responsible for GOV.UK is the Minister for the Cabinet Office, as GOV.UK is managed by the Government Digital Service (GDS), which sits within the Cabinet Office. The current Minister for the Cabinet Office, as of the latest available information, is Pat McFadden MP (Chancellor of the Duchy of Lancaster).

For Companies House the ultimate responsible Minister is the current Parliamentary Under Secretary of State (Minister for Business, Energy and Corporate Responsibility) at the Department for Business and Trade, with responsibility for Companies House, is Justin Madders. He was appointed to this role on 9 July 2024.


31st July 2025 Edit:

After the Companies House "Escalations" Team refused to escalate the case, we've submited a detailed complaint dossier (35 Pages) to the Chief Executive (Ms Smyth) at Companies House  with the request to pass it on to their independent adjudicators.  We've emphasised that this problem may affect many company directors when the process becomes mandatory in Sept 2025.

We're compiling a similar dossier for the responses from GDS. 


*Edit: 6th Aug 2025

The projected 15 days wait, turned out to be 57 days wait for a response. The usual unhelpful nonsense:

  • We are unable to tell you why your validation failed;
  • Our system doesn't always work, go and pay an Account/Solicitor to validate your Identity.
We sent a response rejecting their tardy reply. Reminding them of the tsunami of potential complaints when other directors try to use their system. We've asked them to furnish  us with details of their complaints process.

Could it be that GDS are using AI to decide the validity of passport details, selfie scans?  It would explain why they are unable to explain why my application was rejected without giving a reason. Parhaps this is why they are reticent in responding to my Subject Access Request.

25 June, 2025

Companies House Woes - Gov.UK One Login - Continued

 I've reached the point where I'm making no progress with Companies House Customer Support. on the lockout of my Digital Id Verification. I've asked Companies House to escalate my complaint to the Head of Operational Delivery for a final internal review.

If that does not resolve the issue, the next step will be escalation to independent adjudicators. If that fails it is then referral to the Ombudsman via my MP.


It appears that this problem is not unique to me, and other people have similar problems.


 Source: perplexity.ai 25th June 2025

Reported Problems with Companies House Login and ID Verification

There have been multiple reports of issues with the Companies House login and identity verification process, particularly since the introduction of the new GOV.UK One Login system.

Commonly Reported Issues

  • Password Reset and Login Failures: Users have experienced difficulties resetting their passwords, even when following the specified criteria (e.g., password length, use of symbols, uppercase and lowercase letters). Some users repeatedly encounter error messages such as "there is a problem" despite meeting all requirements123.

  • Technical Errors: Frequent technical issues are reported, including error messages like “An error occurred on client” during login attempts. These errors can persist across multiple browsers and devices23.

  • Browser Compatibility: The Companies House website sometimes fails to function correctly on certain browsers, with Chrome being specifically mentioned as problematic. Users have found that switching browsers or devices can sometimes resolve the issue, though this is not always reliable123.

  • Account Activation and ID Verification Confusion: New requirements for identity verification and the need to create additional logins (on top of previous Companies House and Government Gateway accounts) have caused confusion. Some users are unsure how to proceed and have reported a lack of clear guidance from Companies House4.

  • Third-Party Charges and Workarounds: Due to technical difficulties and unclear instructions, some users have resorted to paying third parties to complete the ID verification process, with fees ranging from £75 to £250. Others have been given unofficial workarounds by Companies House support, such as accessing older login screens to bypass current issues43.

  • Delayed or Non-Functional Password Reset Links: Users have reported that password reset links either arrive late or do not work, leading to further frustration and inability to access their accounts3.

  • Access and Filing Delays: These login and verification issues have led to delays in accessing important documents and completing required filings, which can have significant business implications3.

Official Guidance and Support

Companies House provides online guidance and suggests:

  • Using different browsers and ensuring they are up to date.

  • Clearing browser cache and cookies.

  • Contacting Companies House support if problems persist.

  • For those unable to verify online, in-person verification at a Post Office is available25.

Summary Table of Issues

Issue Type

Description

Reported Solutions

Password/Reset Failures

Passwords meeting criteria still rejected; reset links not working

Try different browsers/devices; contact support123

Technical Errors

Error messages during login or verification

Clear cache/cookies; report to support23

Browser Compatibility

Chrome and others sometimes fail; device-dependent issues

Switch browsers or devices123

ID Verification Confusion

Multiple logins required; unclear instructions

Refer to official guidance; seek support45

Third-Party Fees

Some pay accountants/third parties due to confusion or technical issues

N/A

Filing Delays

Login issues cause delays in document access and submissions

Workarounds; contact support3

Conclusion

There are widespread, documented problems with the Companies House login and ID verification process. These include technical glitches, browser compatibility issues, confusing instructions, and difficulties with password resets and account activation. While Companies House offers some guidance and support, many users find the process frustrating and, in some cases, are forced to seek paid assistance or use unofficial workarounds1243.

  1. https://www.reddit.com/r/smallbusinessuk/comments/1l38pz5/anyone_else_having_issues_with_getting_into/

  2. https://forbusiness.net/companies-house-login/problems/

  3. https://www.accountingweb.co.uk/any-answers/companies-house-log-in-problems

  4. https://moneyweek.com/personal-finance/companies-house-id-checks-confusion

  5. https://www.gov.uk/guidance/verifying-your-identity-for-companies-house

  6. https://identity.company-information.service.gov.uk/identity-verification/direct/has-identity-been-verified

  7. https://commonslibrary.parliament.uk/companies-house-faqs-address-fraud-and-correcting-the-register/

  8. https://www.gov.uk/guidance/verify-your-identity-for-companies-house

  9. https://jakelee.co.uk/verifying-identity-on-companies-house-with-one-login/

  10. https://ewf.companieshouse.gov.uk/help/en/stdwf/faqHelp.html




20 June, 2025

Companies House Woes - Gov.UK One Login

 Blocked by Bureaucracy: A Cautionary Tale of Digital Identity Verification Gone Wrong

In early June 2025, I attempted to complete a new legal requirement: verifying my identity with Companies House under their recently introduced rules for company directors. As a British citizen with a valid UK passport and a longstanding directorship record, I expected this to be straightforward.

Instead, I found myself locked out of the process due to flawed system design, zero accountability, and a rigid reliance on automation that offers no escape hatch when it fails.

A System That Denies Access

Companies House now mandates that directors verify their identity through GOV.UK One Login, managed by the Government Digital Service (GDS). There are three free verification routes:

  1. The ID Check app (passport + facial recognition),

  2. The Post Office route, and

  3. Security questions (offered only in some cases).

I attempted the ID Check app. It failed without explanation. When I logged back into GOV.UK One Login, I was told the Post Office route was not available. I retained a screenshot of this notice. I was not given the option to proceed at a local branch, and the “security questions” route was also never offered.

In effect, I was blocked from all free options — by the system itself — with no clarity, no workaround, and no appeal.

No Help, No Override, No Responsibility

Companies House confirmed to me in writing that:

  • They are not told why a verification attempt fails,

  • They cannot reset or enable other routes,

  • They suggest using an Authorised Corporate Service Provider (ACSP) — a paid agent — as the only remaining option.

In other words: "We required you to verify, we outsourced it to a third-party system, and now we can't help you."

The Cost of Bad Design

My accountant, a registered ACSP, offered to complete the verification for £70 + VAT — a fair professional rate. But the issue is bigger than cost. The government has created a legal obligation, delivered through a system that can quietly fail legitimate users, and offers no backup plan.

This is not a technical hiccup — it's a governance failure. Companies House implemented a rigid, automated process without defining how to support valid users when the system fails. No manual override. No human review. No accountability.

What I’ve Done So Far

  • Submitted formal complaints to Companies House and GDS,

  • Sent Subject Access Requests (SARs) to both under UK GDPR, requesting all data and logic used in the identity decision,

  • Maintained a detailed timeline of interactions and failures.

What Comes Next

If the matter isn’t resolved, I will escalate to:

  • The Information Commissioner’s Office (ICO) for possible data rights violations,

  • The Parliamentary and Health Service Ombudsman, for systemic maladministration,

  • And my MP, to raise questions about public accountability.


🧭 Lessons for Others

If you're a UK director and your verification fails or is blocked:

  • Keep evidence (screenshots, emails, dates),

  • Submit a SAR — you have a right to know how your data was processed,

  • Challenge the process — don’t accept silence from a system that was designed without safeguards.


Important Update 6th Aug 2025

  • Issue: Despite the voluntary IDV period starting April 8, 2025, only about 200,000 out of 7 million individuals (less than 3%) have verified their identities so far, suggesting low awareness or reluctance.
  • Impact: The low uptake could lead to a last-minute rush as the November 18, 2025, mandatory deadline approaches, potentially causing delays in filings, rejections of incorporations, or penalties for non-compliance. Non-compliance is a criminal offence, with risks including fines, disqualification, or public annotations on the register that could harm a company’s reputation and access to finance or insurance.


  • Update:29th Sept 25

    My local MP has told me that he'll investigate.

    15 January, 2025

    How will AI affect your job?

     

    The Impact of AI on Lives in the UK: Opportunity or Challenge?

    Artificial intelligence (AI) is rapidly transforming industries, reshaping economies, and altering the way we work. In the UK, as in many other countries, the rise of AI brings significant opportunities but also raises pressing concerns, particularly around the potential displacement of white-collar jobs. This article explores how AI might affect lives in the UK and what steps can be taken to ensure these changes result in better outcomes for all.


    The Opportunities AI Presents

    AI offers considerable potential to improve the quality of life for UK citizens, with applications spanning various sectors:

    1. Enhanced Services:

      • Healthcare: AI systems can assist in diagnosing diseases, streamlining patient care, and reducing waiting times, contributing to a more efficient National Health Service (NHS).
      • Public Services: AI can optimize transportation, urban planning, and resource distribution, making everyday life more convenient and sustainable.
    2. Increased Productivity:

      • Businesses can use AI to automate repetitive tasks, lower operational costs, and increase overall efficiency, potentially leading to economic growth and reduced prices for consumers.
      • By handling mundane tasks, AI enables individuals to focus on creative, strategic, or higher-value work.
    3. Job Creation:

      • While AI may eliminate some jobs, it also creates demand for new roles in AI development, maintenance, and regulation. Fields like data security, human-AI interaction, and ethical AI oversight are expected to grow significantly.
    4. Personalized Benefits:

      • AI tools enhance daily life by streamlining mundane tasks, personalizing education, and improving access to entertainment and learning resources.

    The Challenges of AI Adoption

    Despite its potential, the adoption of AI brings significant challenges that must be addressed to avoid negative societal impacts:

    1. Job Displacement:

      • White-collar roles in sectors like finance, law, and administration are at high risk of automation, potentially leading to unemployment or underemployment for many workers.
    2. Economic Inequality:

      • Without careful intervention, the wealth generated by AI could become concentrated in the hands of a few, exacerbating existing economic disparities.
    3. Ethical and Social Concerns:

      • AI systems can inadvertently reinforce biases or invade privacy, raising ethical concerns that could undermine trust in technology.
      • Increasing reliance on AI-mediated services may lead to a loss of human connection in critical areas like healthcare and customer support.
    4. Skills Gap:

      • Workers displaced by AI may lack the skills needed to transition into emerging fields, creating a mismatch between the jobs available and the skills of the workforce.

    Ensuring Positive Outcomes

    To maximize the benefits of AI while mitigating its risks, several strategies should be considered:

    1. Education and Reskilling:

      • Comprehensive education and training programs are essential to equip workers with the skills needed for roles in fields resilient to AI disruption. This includes technical training as well as fostering creativity and human-centered skills.
    2. Inclusive Economic Policies:

      • Policies such as universal basic income (UBI) or enhanced social safety nets can help protect individuals during the transition.
      • Investments should focus on regions and communities most affected by job losses, ensuring that the benefits of AI are widely distributed.
    3. Ethical AI Governance:

      • Strong regulations are needed to ensure that AI systems are fair, unbiased, and used responsibly. Transparency and accountability should be core principles in AI deployment.
    4. Fostering Innovation:

      • Support for startups and small businesses leveraging AI can create new markets and job opportunities, fostering a culture of innovation.

    Looking Ahead

    AI holds immense potential to improve lives in the UK, from advancing healthcare to enhancing everyday conveniences. However, the risks associated with job displacement and economic inequality cannot be ignored. With thoughtful policies, robust education systems, and a focus on ethical AI development, it is possible to harness the power of AI to create a more equitable and prosperous society.

    The path forward requires collaboration between governments, businesses, and individuals to ensure that the transition to an AI-driven economy leaves no one behind. By addressing challenges proactively, the UK can position itself as a leader in the responsible adoption of AI, securing a better future for all its citizens.

    12 January, 2025

    A handy, but pricey label printer for small businesses

     

    Review: Brother QL-1110NWBc Label Printer – The Small Business Powerhouse

    Running a small business often means juggling multiple tasks, and shipping logistics can easily consume a big chunk of time. Enter the Brother QL-1110NWBc, a label printer designed to make the process seamless, efficient, and customizable. With its versatility, robust connectivity options, and programmability, this printer could be a game-changer for small businesses looking to optimize their shipping workflows. Here’s an in-depth review of what makes the QL-1110NWBc a standout option for printing shipping labels.

    We already possess the smaller Brother QL-810W for general label printing. This has been very reliable, but it can't produce the 4 x 5 inch label format in common usage by shipping/courier companies. We decided to buy QL-1110NWBc to handle the larger label format for our shipping needs. Upto now we have had to cut out the label from an A4 sheet and then find a way to adhere the label to the outgoing parcel.


    Key Features

    1. Exceptional Connectivity Options

    The Brother QL-1110NWBc supports a variety of connectivity options, making it incredibly adaptable to different business setups. Whether you work from a desktop, tablet, or smartphone, this printer has you covered. It features:

    • USB: A straightforward plug-and-play option for those who prefer wired setups.
    • Wi-Fi and Wi-Fi Direct: Wireless printing ensures flexibility, allowing you to print from multiple devices without being tethered to the printer.
    • Ethernet: Perfect for shared office environments, letting multiple users access the printer without needing a direct connection.
    • Bluetooth: An excellent option for mobile printing, particularly when paired with the Brother iPrint&Label app for quick and easy label creation.

    This broad range of connectivity ensures that no matter your tech ecosystem, integrating the QL-1110NWBc into your workflow is hassle-free.


    2. Programmability for Specialist Applications

    One of the standout features of the QL-1110NWBc is its programmability. This makes it a fantastic choice for businesses that require specialized or automated labeling tasks. The printer supports:

    • SDK Integration: Brother provides Software Development Kits (SDKs) for Windows, iOS, and Android, allowing developers to create tailored label-printing solutions. This is ideal for businesses using custom inventory or logistics management systems.
    • Custom Templates: Using Brother's P-touch Editor software, you can design and save templates directly to the printer. This ensures consistency in branding and label layouts while saving time during high-volume printing tasks.
    • ZPL II Compatibility: The printer can emulate Zebra Programming Language, making it easier to integrate with existing systems that rely on Zebra label printers.

    These programmability options make the QL-1110NWBc suitable not only for standard shipping labels but also for niche applications like barcode printing, product labeling, and warehouse inventory management.


    Performance

    The QL-1110NWBc boasts excellent print quality and speed, critical factors for any label printer. It supports labels up to 4 inches wide—perfect for large shipping labels required by major couriers like UPS, FedEx, and USPS. The printing speed, rated at 69 standard address labels per minute, ensures you can process orders efficiently, even during peak times.

    The thermal printing technology eliminates the need for ink or toner, reducing maintenance costs and ensuring crisp, smudge-free prints. Additionally, the automatic cutter provides a professional finish and minimizes label waste.


    Ease of Use

    Despite its advanced features, the QL-1110NWBc remains user-friendly. The setup process is straightforward, and the iPrint&Label app provides intuitive options for creating and printing labels directly from your smartphone. The ability to integrate with platforms like Microsoft Office and popular e-commerce tools further simplifies label creation for small businesses.

    For those with more complex needs, the Brother P-touch Editor software offers a wealth of customization options. You can easily add logos, barcodes, and QR codes, ensuring your labels meet both branding and regulatory requirements.

    Brother provide a free software package (P-Touch Editor) to aid the design of labels for its range of label machines. This is easy to use, and has powerful capabilities.


    Pros and Cons

    Pros:

    • Wide range of connectivity options (USB, Wi-Fi, Ethernet, Bluetooth)
    • High-quality, fast printing
    • Supports labels up to 4 inches wide
    • Programmability for custom and automated solutions
    • Ink-free thermal printing reduces costs
    • Easy integration with e-commerce platforms and custom systems

    Cons:

    • Premium price point compared to basic label printers
    • Advanced features may have a learning curve for non-technical users
    • The Brother labels are good, but expensive. There are cheaper compatible labels, but they may not be as good as the genuine article.

    Verdict

    The Brother QL-1110NWBc is more than just a label printer—it's a productivity tool for small businesses aiming to streamline shipping and labeling processes. Its robust connectivity, speed, and programmability set it apart as a top-tier solution for businesses with both standard and specialized needs.

    While its advanced features may feel overwhelming initially, the time saved and efficiency gained make it a worthwhile investment for growing businesses. If you’re looking for a versatile, reliable, and customizable label printer, the Brother QL-1110NWBc is hard to beat.


    Who is it for?
    Small to medium-sized businesses that require high-quality, customizable label printing with extensive connectivity and integration options.

    Final Rating: 9/10
    A feature-rich and reliable choice that justifies its cost for businesses serious about optimizing their shipping operations.

    05 January, 2025

    SD Card ratings explained

     I came across this useful YouTube video which explains the various SD Card ratings.  Well worth a look.



    01 January, 2025

    Fake memory Cards on Amazon

     Not all products on Amazon are genuine, and the reviews may be fake. Here's an example of fake MicroSD cards. 

    First the listing, taken from Amazon today:

    Notice the obvious spelling mistake of Extreme. The colour scheme is similar to a well known brand, and the price is too good.  There's 47 reviews, but they are sponsored with the reviewers receiving free memory cards from Amazon. Those reviews actually refer to a different capacity of memory card (64GB). Not a single review actually tested the claimed 512GB f capacity.

    Here's a YouTube video (a year old) that gives further details of these types of Scam.




    In the following text, I've ask ChatGPT to write a good review for a memory card, the results are very similar to those for the card.:

    Review Title: Exceptional Storage Performance in a Compact Package!

    I recently purchased the 512 GB SDXC U3 Micro SD card, and I couldn't be happier with my choice. It arrived quickly and was very well-packaged, ensuring the card was protected during transit. This attention to detail was reassuring and set the tone for a great experience.

    In terms of performance, this memory card is an absolute gem. The U3 speed rating delivers as promised – lightning-fast read and write speeds, which are perfect for my needs. I use it in my 4K action camera and smartphone, and it handles high-definition video recording and playback flawlessly. No lag, no buffering – just seamless performance.

    The 512 GB capacity provides ample storage for all my videos, photos, apps, and files, making it a versatile and reliable choice for both professional and personal use. It formatted easily and was instantly recognized by all my devices, including my laptop and gaming console.

    Overall, this SD card offers incredible value for its price. Whether you're a content creator, gamer, or someone who simply needs reliable storage, I highly recommend this product. It's a must-have for anyone seeking high-speed, high-capacity storage in a tiny, durable package!

    Rating: 5/5
    Pros: Fast, reliable, large capacity, well-packaged.
    Cons: None so far!

    Will definitely purchase this brand again in the future. Thank you for delivering such a fantastic product!

    Here's one of those reviews: