Slashdot Mirror


User: ozphx

ozphx's activity in the archive.

Stories
0
Comments
1,022
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 1,022

  1. Re:fixes? on New SQL Injection Attack Fuses Malware, Phishing · · Score: -1, Troll

    With a name like greywolf then hes probably a furry.

    Furrys aren't renowned for logical thinking since they took up the stance of all secretly being dragons that fuck other animals, and that its all a-ok ;)

  2. Re:Not really new on New SQL Injection Attack Fuses Malware, Phishing · · Score: 1

    Under MSSQL its a myth that stored procs are faster for basic CRUD tasks (they may even be slightly slower). In summary

    * Any 'arbitary' queries should be parameterized anyway: "set foo = @foo" style, rather than "set foo = 'foo'". That gives the same level of protection as stored procs from injection.

    * Arbitary queries go through the execution plan cache since v7, so they are just as fast.

    * Security has to be done per-table c/r/u/d, rather than per sproc. (No real difference here IMO, but sprocs do give you finer grained control).

    I tend to access data using a tool called Diamond Binding anyway, which is based on NHibernate - and the performance benefit of the flexible queries it can do far outweighs the more traditional CRUD sproc layer. (Pulling back say a customer and all addresses in one go, for example).

    Don't knock the flexibility of the ad-hoc query ;)

  3. Re:Not really new on New SQL Injection Attack Fuses Malware, Phishing · · Score: 1

    And its usually developed by a bunch of noobs that decide they fall in the "enterprise application" category.

    So the inbuilt data-binding crap will not be good enough for them! Also the cost of a $500 ORM product will be "too expensive" and... um "wont scale" or "we can do better in house" (shitty code generator ahoy).

    End result is a bunch of code-generated epic fail, completely vulnerable to all sorts of code-injection, inflexible, and runs like crap.

    All this because they couldnt suck in their pride and use the VS integrated crap for noobs, or drop the $500 on something like Diamond Binding.

    (Course, neither of those prevent XSS style attacks, but ASP.Net has a nice annoying setting that by default bitches about HTML tags in postback data.)

    Its just noobs doing what they do, running around with big egos, inventing the hell out of the wheell

  4. Re:Stupid and Redundant on Let Your Theme Song be Your Password · · Score: 1

    So how does this salt get on my home and work computer? Perhaps a second file I can carry around? My second favourite song? Or I could type in the goddamn salt every time?

    Its compounding the original bloody stupid idea, with another stupid idea. I can see the next crypto-noob suggestion:

    Lets just keep the unique key in a file and bung it on a smartcard! Oh, people don't want to carry around a file? Well lets make it simple, easy to remember, and they can type it in! We'll call it a "secret word".... genius!!

  5. Re:Stupid and Redundant on Let Your Theme Song be Your Password · · Score: 1

    I'd also like to point out that the department of redundancy recommends using an alphanumeric salt, of at least 6 characters....

  6. Re:Stupid and Redundant on Let Your Theme Song be Your Password · · Score: 1

    I know what a bloody salt is. My point is that if hashing my favourite file is going to replace my password then I'm not going to be smiling when this brave and stupid new technology prompts me:

    Enter Secret Salt: _

  7. Re:What a stupid idea on Let Your Theme Song be Your Password · · Score: 1

    You wouldn't need to download them... edonkey will let you ask for a list of file hashes ranked by popularity. ;)

    I mentioned before, this is one of the top ten stupidest ideas I have ever heard of in the field of security. Its taking, and bastardising the various login-with-dongle implementations, but making it insecure and harder to use than even a password.

    Its stupid.

  8. Re:Stupid and Redundant on Let Your Theme Song be Your Password · · Score: 1

    Oh great going there, I can enter the salt in like a password... and....

    Wait, has the whole world gone completely retarded? This is a TERRIBLE idea. Its moronic.

  9. Re:A great plan and I hope it works! on China to Build a Zero-Carbon Green City · · Score: 1

    Well now thats a lovely theory about how money is being hoarded. Seems to break down a little when I can go down to any aussie bank and get 7.5% p/a return on a standard savings account.

    Guess what? If you are dumb enough to be "hoarding" your money in the bank, then the bank is investing it for you and keeping the profits.

  10. Re:people still make opengl games? on OpenGL 3.0 Released, Developers Furious · · Score: 2, Informative

    DX11 brings "compute shaders" to the table, which is a Good Thing - forcing a standard for GPU computation, allowing say hardware accelerated physics libraries to run on GPUs from multiple vendors.

    Windows 7 is the usual product development cycle, and it was in the pipeline before Vista was even beta.

  11. Re:This can't be good. on OpenGL 3.0 Released, Developers Furious · · Score: 2

    You mean like .Net? *ducks*

  12. Re:I thought Taboos applied to people not things. on Google's Streetview Seen As Culturally Insensitive In Japan · · Score: 0, Troll

    He's jovial compared to me, I'm just going to call you a cunt.

    Ya cunt.

  13. Re:It's called a fence. on Google's Streetview Seen As Culturally Insensitive In Japan · · Score: 1

    Third time this discussion. Please mod Redundant :P

    I have a fence. I have six foot fence. This fence is the size fence that Australians put up when they want privacy. Google is driving around with a camera on an 8ft pole.

    WTF are we supposed to do now? Get in an arms race, or quite rightly tell them to fuck off?

  14. Re:Same here. on Google's Streetview Seen As Culturally Insensitive In Japan · · Score: 1

    I posted earlier that I have a 6ft fence, designed to give me a private front yard. Google drives past with a camera on an 8ft pole. Is this respecting my FENCE.TXT?

  15. Re:Same here. on Google's Streetview Seen As Culturally Insensitive In Japan · · Score: 1

    Actually its interesting you bring this up. The google-van cameras can see over my fence.

    Not sure what the law says about walking around with a camera on a pole. I would think that I have a "reasonable expectation of privacy" in my front yard if I have a 6ft fence up.

    Kinda tempting to run this past the privacy advocates here. Would be funny to make google run past everything again with a shorter pole :P

  16. Re:We started with Red Hat on Paid Support Not Critical For Linux Adoption · · Score: 1

    I understand that... however most commercial models around FOSS tend to work with a SAAS arrangement. This causes the break down when your neighbour can provide support for the software you write, without having to budget for actual development.

    All else being equal, the customer will be picking the cheaper support - or rather electing to not pay for continued development.

  17. Re:Does the physics feed back into the gameplay? on NVIDIA To Showcase PhysX Content · · Score: 1

    I've been playing around with Entanglar lately - and while I woudn't say they've "solved" the multiplayer physics sim issue (and whether it would scale to 3D), the alpha build theyve got up would certainly at least cover your boat scenario on LAN.

    Definitely the couple of prototypes I've been messing around with work a lot better than say Garrys Mod. The funny asteroids-without-guns sample they include lets you get two people pushing the same box around. Presumably it would all go to shit beyond 50ms of lag though - I can't see how it would be possible to keep a couple of worlds synced up in realtime if theres lots going on.

  18. Re:We started with Red Hat on Paid Support Not Critical For Linux Adoption · · Score: 2, Insightful

    Your RHEL support money goes into funding development (eg kernel dev) as well.

    Its going to lead to the odd situation where the companies that are actually _contributing_ to improving Linux won't be able to provide competitive support.

  19. Re:I call this progress. on Asus Release a Wiimote-Alike · · Score: 1

    Har har.

    Odd that the best FPS players use mice then!

  20. Re:Wha? on Google Earth Used To Predict Electrical Problems · · Score: 1

    Google: "We are going to put a huge datacenter down.... mmmm..here. We predict electrical problems in...mmm.. this 50 mile radius.. mmm.. here."

    Google, sucking up all your electricity with their huge horse nostrils.

  21. Re:Those comparisons are old. on Whole Disk Encryption For Vista? · · Score: 1

    Haha.

    You sir, are an ass.

    Door is to your left, GTFO.

  22. Re:At what point does ythis break down? on A Hidden Loop In the Carbon Cycle Discovered · · Score: 1

    Hey don't you complain. The Labor government in Australia has rode into power on a whole bunch of Think Of Teh Childrens(tm) grandstanding, and are busy destroying the economy in the name of the environment / internet safety / insert cause here.

    Australia's total annual emmisions are about a week of what China/US currently puts out - and we're thinking of introducing all kinds of carbon trading BS to "set an example". Only example we'll be setting is an exact metric of the effect being green has on the economy - and a good reason why China will never implement any green BS ever.

  23. Re:PDF on A Hidden Loop In the Carbon Cycle Discovered · · Score: 1

    Ditto with Foxit reader and IE...

    Perhaps you don't need to be using a 50 meg bloatware application with a horrendous amount of plugins to be able to display PDFs...

  24. Re:News? on Microsoft's Annual Report Reveals OSS Mistakes · · Score: 5, Insightful

    Compared to say Cnet's spin, which suggested that MS didn't spend very much on R&D compared to OSS companies.

    Apparantly half its income - around $7B spent on R&D is "not much".

  25. Re:Is my macbook faulty? on Laptops With Certain NVidia Chips Failing · · Score: 0, Offtopic

    After hiring monkey-boy Ballmer, for some strange reason everything he sniffs has an odour of BO.