Slashdot Mirror


Hacking Web Services

siduri writes "Udi Manber, chief scientist at Yahoo!, gave a great talk on the kinds of hacks that Yahoo sees at the IEEE's Symposium on Security and Privacy. I wrote an overview of his talk for Dr. Dobb's Journal. While some of the message is well-known stuff (like that people will spend a lot of time hacking the most trivial things), the details of what Yahoo has to deal with are really pretty interesting."

15 of 226 comments (clear)

  1. no 1 by Mr+Coward · · Score: -1, Offtopic

    im no 1 :p

    1. Re:no 1 by Mr+Coward · · Score: -1, Offtopic

      hey! self esteem over here???

    2. Re:no 1 by hbmartin · · Score: -1, Offtopic

      No fair. I keep trying but I never get it.

      --
      Karma: Bizzare (mostly affected by varying internal caffeine levels.)
  2. turd post by Anonymous Coward · · Score: -1, Offtopic

    turd. third. ahahahahaaaaa!!!!!1111

  3. Dave by Anonymous Coward · · Score: -1, Offtopic

    I don't know about you, but this is pretty cool.

  4. RATTLE SNAKE MCNUGGETS by RecipeTroll · · Score: -1, Offtopic
    Cornmeal Crusted Rattle Snake with Cactus-Corn Succotash

    2 1/2 pounds rattle snake, dead
    1 cup buttermilk
    1 cup cornmeal
    1 cup flour
    1 tablespoon salt
    1 tablespoon chile powder
    1 tablespoon garlic powder
    1 tablespoon paprika
    1 teaspoon cayenne pepper
    1 teaspoon ground cumin
    1 cup vegetable oil


    Cactus-Corn Succotash, recipe follows
    Using a sharp boning knife remove the meat from the snake by cutting down the back, just slightly to 1 side of the spine from the head to the rattle. Using the tip of the knife peel the meat from the ?rib cage?. Once you removed the 2 long strips of meat, lightly pound them with the back of the knife to tenderize them. Cut the strips of meat into 1-inch pieces and place in a bowl with the buttermilk. Mix to coat well. In a large bowl combine the cornmeal with the flour and the spices. Heat the oil in a large skillet on medium high heat. Dredge the snake pieces in the flour mixture and fry for 2 minutes or until golden brown and then transfer to a paper towel lined plate. Repeat until all the snake pieces are cooked. Serve with Cactus-Corn Succotash.

    Cactus-corn succotash:

    2 tablespoons olive oil
    1 cactus pad, thorns scraped off, cut into small dice
    2 ears corn, shucked
    1 red onion, peeled, sliced in rings, grilled with olive oil and chopped in small dice
    1 bunch scallions, grilled and chopped
    1 chayote squash, sliced 1/4-inch thick, grilled with olive oil and chopped in small dice
    1 tablespoon minced garlic
    2 tablespoons minced jalape?o
    1/2 cup diced red bell pepper
    4 tablespoons butter
    1 cup chicken stock
    1 cup diced, peeled and seeded tomatoes
    1/2 cup chopped cilantro
    Salt and pepper


    Grilling the vegetables first gives another great layer of flavor, however, it is not absolutely necessary. Just omit that step and cook the vegetable right in the pan. In a skillet on high heat saute the vegetables except the tomatoes in the olive oil for 2 minutes. Add the stock and butter and cook until mixture reduces by half. Add tomatoes and seasoning and serve with the warm snake nuggets on top.


    Yield: 4 servings

  5. IMPORTANT WARNING: Avoid CmdrTaco's "special taco" by Anonymous Coward · · Score: -1, Offtopic

    This is an important warning to all slashdotters. CmdrTaco has been luring people (mainly underage males) into the slashdot compound to eat his "special taco".

    You may be wondering what CmdrTaco's "special taco" is. You will be wishing that you hadn't been wondering after you finish reading his post. To make his "special taco", CmdrTaco takes a taco shell and shits on it. He then adds lettuce, takes out his tiny withered dick (otherwise known as his "Commander"), puts his "special taco sauce" on it which means he jacks off on the taco, and adds a compound to make the person who eats the taco unconcious. Of course, the compound does not make the person unconcous until the taco is fully eaten. Thus CmdrTaco force feeds the taco to the unsuspecting victim. After all, who would knowingly eat shit and CmdrTaco's jizz.

    After the victim is unconcous, he is held against his will and used for CmdrTaco's nefarious homosexual purposes. This includes shoving taco shells up the victim's ass, taco snotting, and getting JonKatz involved. Trust me, you do not want JonKatz anywhere near your unconcious body. Also, rumor has it CmdrTaco is looking for a new goatse.cx guy. Don't let it be you!!!!!

    The last thing you may be wondering is how this goes along with "taco snotting", or what "taco snotting" is. George WIPO Bush and The WIPO Troll have been doing considerable work explaining what "taco snotting" is. Please see his FAQ on "taco snotting" which can be found as a -1 rated comment on most slashdot stories.

    Please, if CmdrTaco offers you his "special taco", RUN LIKE HELL!!!!!!!!

  6. Stop the witchhunt! by Anonymous Coward · · Score: -1, Offtopic
    Stop this fucking witchhunt already, OK!

    Go bash some gays or niggers instead, you bigots.

  7. Saving Private Goatse by Anonymous Coward · · Score: -1, Offtopic

    * TROLL HIGH COMMAND *
    * SPECIAL OPERATION 4A72FGSE - Q7 *

    * CONFIDENTIAL * FOR YOUR EYES ONLY * CONFIDENTIAL *

    Special mission: saving private Goatse

    Soldier, your mission is to penetrate the enemy lines
    and resue the private X.C. Goatse.
    His brothers Penisbirdman, WIPO Troll, Hot Grits and his
    naked and pertified sister Natalie Portman have
    already been killed in this war against censorship and
    bigotry at the slashdot frontpage theater.
    We want to save his troll family from another tragic loss
    and therefore remove him from the war and return him to
    his home.
    You have to find this private. He is member of the 2nd
    troll parachuters who were dropped behind the enemy lines
    to open a 2nd front and support our main attack at the first
    post. His exact location is unfortunately unknown.
    The objective of his team was to infest a BSD post and hold
    the thread with *BSD is dying posts until our main forces arrive.
    However, due to heavy moderation his team couldn't jump into the right
    thread so we have only a very vague idea of his whereabouts.
    After our primary attack at the first post, you have to penetrate
    the enemy lines and search for this private.
    This mission is very dangerous - we expect much bitchslapping
    at the first post and zealot pro-linux moderation in the back.

    Best luck soldier.
    If you die in action, you'll be honored posthumus by a PWP crapflood.

    General Borgus Trollus Trolligulus
    Troll High Command
    Special Operations

  8. illegitimate rating by jukal · · Score: 0, Offtopic

    > If you have any kind of rating, people go to all kinds of trouble to
    > get that rating in an illegitimate way,"

    What?! I people really without any moral!?! I would never, ever, and never have for example posted an article without real content just to gain a few karma points. Never! ;)

  9. Re:IMPORTANT WARNING: Avoid CmdrTaco's "special ta by SiskellAndEbert · · Score: -1, Offtopic

    Siskel: Jesus Kee-rist! This troll not only sucks, it sucks COCK!

    Ebert: Thumbs Dizzzzzown! Pass me that blunt, Gene.

  10. Yahoo! Uses *BSD, and as we all know... by duffbeer703 · · Score: -1, Offtopic
    FACT: Yahoo! is dying!

    Netcraft confirms: *BSD is dying

    Yet another crippling bombshell hit the beleaguered *BSD community when recently IDC confirmed that *BSD accounts for less than a fraction of 1 percent of all servers. Coming on the heels of the latest Netcraft survey which plainly states that *BSD has lost more market share, this news serves to reinforce what we've known all along. *BSD is collapsing in complete disarray, as further exemplified by failing dead last in the recent Sys Admin comprehensive networking test.

    You don't need to be a Kreskin to predict *BSD's future. The hand writing is on the wall: *BSD faces a bleak future. In fact there won't be any future at all for *BSD because *BSD is dying. Things are looking very bad for *BSD. As many of us are already aware, *BSD continues to lose market share. Red ink flows like a river of blood. FreeBSD is the most endangered of them all, having lost 93% of its core developers. The sudden and unpleasant demise of long time FreeBSD developers Jordan Hubbard and Mike Smith only serve to underscore the point more clearly. There can no longer be any question doubt: FreeBSD is continuing its slow downward spiral into darkness.

    Let's keep to the facts and look at the numbers.

    OpenBSD leader Theo states that there are 7000 users of OpenBSD. How many users of NetBSD are there? Let's see. The number of OpenBSD versus NetBSD posts on Usenet is roughly in ratio of 5 to 1. Therefore there are about 7000/5 = 1400 NetBSD users. BSD/OS posts on Usenet are about half of the volume of NetBSD posts. Therefore there are about 700 users of BSD/OS. A recent article put FreeBSD at about 80 percent of the *BSD market. Therefore there are (7000+1400+700)*4 = 36400 FreeBSD users. This is consistent with the number of FreeBSD Usenet posts.

    Due to the troubles of Walnut Creek, abysmal sales and so on, FreeBSD went out of business and was taken over by BSDI who sell another troubled OS. Now BSDI is also dead, its corpse turned over to yet another charnel house.

    All major surveys show that *BSD has steadily declined in market share. *BSD is very sick and its long term survival prospects are very dim. If *BSD is to survive at all it will be among OS hobbyist dabblers. *BSD continues to decay. Nothing short of a miracle could save it at this point in time. For all practical purposes, *BSD is dead.

    Fact: *BSD is dead FACT: Yahoo! is dying!

    --
    Conformity is the jailer of freedom and enemy of growth. -JFK
  11. Just in case your comment is /.ed... by Anonymous Coward · · Score: -1, Offtopic
    Why are you doing this? (Score:1)
    by wiredog on Monday May 20, @03:04PM (#3552639)
    (User #43288 Info)


    You know it's a blatant copyright violation. You trying to get slashdot shut down?



    If Dr Dobbs was slashdotted, it might be understandable. As it is, you're just being an asshole.


    [ Reply to This | Parent ]
    1. Re:Just in case your comment is /.ed... by Anonymous Coward · · Score: -1, Offtopic

      As the poster of the "just in case" post, I'd like to thank you for your discriminating taste. May you live to be a thousand years.

  12. Re:We steal more than pennies by Anonymous Coward · · Score: -1, Offtopic

    Can I have your script?