Not really. This option works the other way around. Custom errors in ASP.NET are the ones provided by the developer. He turned custom errors off. Also in ASP.NET by default this option is set to RemoteOnly meaning that the errors are on for anyone but the localhost. This way you can develop on your own machine but when you deploy you can't be exploited by this or similar exploit even if you don't change the default configuration. Now if you go out and change it this is another thing...
I believe it is a standard security practice to NOT show your error infomation to the user in production environment. If anyone is doing it he should be fired anyway. No need to wait for an exploit to hit.
The attack requires the ASP.NET error page that shows exception information to be enabled. No sane person will leave it like this in production let alone that it is turned off by default.
Why should this games even exist? What is the target group? I doubt there are that many people that really want to play browser games but do not have Flash.
If suddenly he couldn't play Diablo 2 anymore this would mean that Diablo 2 Battle.net is down. If Diablo 2 Battle.net is down he won't want to play Diablo 2 anyway since someone who plays that much Diablo 2 probably plays on battle.net only and will find no satisfaction in playing anywhere else.
You may not buy games that require Internet connection but some people buy it exactly because they require Internet connection (i.e. are connected to a service). Have you ever heard of World of WarCraft? It doesn't even have a multiplayer mode with less than several hundred people.
This is not DRM. This is a missing feature. They decided there is no business value in implementing such a feature and guess what - they are right. The 2 people who want to play in the same room and have no internet connection won't buy the game but they probably won't pay off the investment in developing the LAN feature anyway.
So it seems like people here think tha MS wanted or at least promised.NET to become Open Source? How completely wrong. MS never said that and never wanted it. They just released the code so.NET devs could debug it. They still can debug it through Visual Studio integration. Microsoft never wanted to contribute.NET source to the community and to allow forks and I believe that I speak to the majority of the.NET developers when I say that I don't want anyone but Microsoft messing with.NET's code let alone creating forks.
if everyone saw that obvious value and weren't tied to existing applications and data they'd all jump ship immediately and by doing so would also immediately raise my operating system's quality of code to amazing levels: just because of the weight of bug reports and new blood of code.
Either that or your operating system would get forked millions of times instead of thousands.
Somehow keeping your games up to date with an unified process is a bad thing? My CDs with old games no longer work but Steam still supports old games. You go buy useless plastic crap I'll buy my games from Steam. Lets see whose games will last longer.
WTF? First of all how do.NET programmers have anything to do with IE6 installs? Second - why pick on.NET and not on Java which came first or even Python and Ruby which claim to be even easier? Oh yeah... the first from Microsoft and the others are open source... And btw these programmers you are talking about would still be employed and would be doing much more damage if it was not for.NET and Java to keep them from producing billions of buffer overflows and memory leaks.
Take.NET for example -- it is a miserable failure that they won't let die."
WTF? So creating a platform in the top 5 of the most popular development platforms (Java, C/C++ and PHP being the only that compete with.NET's popularity) is somehow a failure?
I know what you are talking about... oh how I wish that the undo feature in OpenOffice was able to always return me to the original state. It has a lot of problems when there is numbering and images in the document. And I wouldn't consider undo, numbering and images "advanced" feature.
And if I was a shareholder in a company and any employee of the company publicly stated that competitor's product is better I would want him fired on the spot.
And I assume that you don't want to believe this story because you want 1 search engine to rule them all. No competition, high ads prices, etc.
On the other hand you are probably complaining all the time about Windows monopoly...
So do you suggest that int should be removed from Java because it is passed by value "so you always have to be careful not to introduce subtle by value/by ref bugs"? I don't know how operator overloading destroyed Smalltalk but everyone working with.NET seems to be happy with it. And go read what var is before writing stupid comments.
Java easier to maintain? With so many things failing runtime (instead of compile time) because methods are virtual by default?
Structs - you need value types and this is why C# has them. Java's primitive types are complete mess with their wrapper classes.
I've seen many instances of total misunderstanding how the wrappers work in professional developers on many occasions. Let alone that in C# EVERY type is an object including int. 5.ToString() is legal in C# because 5 is an object unlike Java. So yes in C# everything is an object and in Java this is not the case.
Preprocessor directives - things like #region make the language much more readable in the IDE
Operator overloading - "asdf".Equals("asdf") vs "asdf" == "asdf" ? Come on you cannot believe the first is better!
Partial classes actually help you organize your code much more efficiently when you are using tools that generate code and even
in some other cases. Inheritance is not good enough for this purpose.
Functional programming - what is wrong with FP? What is more OOP and FP are orthogonal so you can have all the OOP in the world with all the FP in the world and they will not mess with each other.
Goto - what does goto have to do with OOP anyway?
Pointer arithmetic is there for when you need it. I've never ever had to use it for 3 years of professional C# development. However I guess sometimes people who need all the performance are blessing the ability to use it.
var has NOTHING to do with dynamic and is compiled pretty much the same way as any other type.
dynamic - pure interoperability story. There is the DOM and XML, there are IronPython and IronRuby, there is COM and C# has to work well with them. Java should go the same way in order to be more interoperable with Jython and JRuby.
If there is one thing that is sure about.NET vs Java this is it. Even if.NET is not a better platform (I'm not saying this) I believe no competent and unbiased person would argue that Java (the language) is better than C#. I believe at the moment C# has the best design from all imperative/OOP languages out there and even if it does not it is surely much better than the Java language. Anders (Hallowed be His name) is a pure genious.
Java is faster on pure math calculations and.NET is much faster on UI. Obviously that makes.NET programs seem faster because UI is what affects more users. Otherwise they have pretty much the same performance.
I pretty much agree but I would argue that these were in fact the main problems of Vista. If you've got a lot of RAM you can get Vista to perform better than XP in some cases (application startup for example).
Also the new taskbar is cool and the first game that is DX10 only is going to hit the market soon.
This is true and everyone is extremely happy about Win7. This means that Vista was an OK OS and if MS hadn't put out the remarkably stupid "Vista ready" campaign everything would have gone much better. I always liked Vista and believed it was fine if your machine had 2GB or more. Now everybody is gonna love the new Vista (called 7) because everyone has 2+ GB RAM.
Slashdot Mirror
Not really. This option works the other way around. Custom errors in ASP.NET are the ones provided by the developer. He turned custom errors off. Also in ASP.NET by default this option is set to RemoteOnly meaning that the errors are on for anyone but the localhost. This way you can develop on your own machine but when you deploy you can't be exploited by this or similar exploit even if you don't change the default configuration. Now if you go out and change it this is another thing...
I believe it is a standard security practice to NOT show your error infomation to the user in production environment. If anyone is doing it he should be fired anyway. No need to wait for an exploit to hit.
The attack requires the ASP.NET error page that shows exception information to be enabled. No sane person will leave it like this in production let alone that it is turned off by default.
Wait. Do you claim Sharepoint is dead like Wave?
Why should this games even exist? What is the target group? I doubt there are that many people that really want to play browser games but do not have Flash.
If suddenly he couldn't play Diablo 2 anymore this would mean that Diablo 2 Battle.net is down. If Diablo 2 Battle.net is down he won't want to play Diablo 2 anyway since someone who plays that much Diablo 2 probably plays on battle.net only and will find no satisfaction in playing anywhere else.
You may not buy games that require Internet connection but some people buy it exactly because they require Internet connection (i.e. are connected to a service). Have you ever heard of World of WarCraft? It doesn't even have a multiplayer mode with less than several hundred people.
This is not DRM. This is a missing feature. They decided there is no business value in implementing such a feature and guess what - they are right. The 2 people who want to play in the same room and have no internet connection won't buy the game but they probably won't pay off the investment in developing the LAN feature anyway.
They were busy making REAL money by selling REAL Office suite.
F# Seadragon ( http://www.seadragon.com/ ) StreamInsight ( http://blogs.msdn.com/streaminsight/archive/2009/08/20/streaminsight-goes-public.aspx ) Surface ClearType
This is why you work with Mono right? I work with the unforkable framework you work with the Open Source framework. Everyone is happy. World peace.
So it seems like people here think tha MS wanted or at least promised .NET to become Open Source? How completely wrong. MS never said that and never wanted it. They just released the code so .NET devs could debug it. They still can debug it through Visual Studio integration. Microsoft never wanted to contribute .NET source to the community and to allow forks and I believe that I speak to the majority of the .NET developers when I say that I don't want anyone but Microsoft messing with .NET's code let alone creating forks.
if everyone saw that obvious value and weren't tied to existing applications and data they'd all jump ship immediately and by doing so would also immediately raise my operating system's quality of code to amazing levels: just because of the weight of bug reports and new blood of code.
Either that or your operating system would get forked millions of times instead of thousands.
So why not use ActiveX on IE8?
Somehow keeping your games up to date with an unified process is a bad thing? My CDs with old games no longer work but Steam still supports old games. You go buy useless plastic crap I'll buy my games from Steam. Lets see whose games will last longer.
WTF? First of all how do .NET programmers have anything to do with IE6 installs? Second - why pick on .NET and not on Java which came first or even Python and Ruby which claim to be even easier? Oh yeah... the first from Microsoft and the others are open source... And btw these programmers you are talking about would still be employed and would be doing much more damage if it was not for .NET and Java to keep them from producing billions of buffer overflows and memory leaks.
Take .NET for example -- it is a miserable failure that they won't let die."
WTF? So creating a platform in the top 5 of the most popular development platforms (Java, C/C++ and PHP being the only that compete with .NET's popularity) is somehow a failure?
I know what you are talking about... oh how I wish that the undo feature in OpenOffice was able to always return me to the original state. It has a lot of problems when there is numbering and images in the document. And I wouldn't consider undo, numbering and images "advanced" feature.
No because MSN/Live has been the default search engine in IE since XP SP2 or something like this so IE8 has nothing to do with it.
And if I was a shareholder in a company and any employee of the company publicly stated that competitor's product is better I would want him fired on the spot.
And I assume that you don't want to believe this story because you want 1 search engine to rule them all. No competition, high ads prices, etc. On the other hand you are probably complaining all the time about Windows monopoly...
So do you suggest that int should be removed from Java because it is passed by value "so you always have to be careful not to introduce subtle by value/by ref bugs"? I don't know how operator overloading destroyed Smalltalk but everyone working with .NET seems to be happy with it. And go read what var is before writing stupid comments.
Java easier to maintain? With so many things failing runtime (instead of compile time) because methods are virtual by default?
Structs - you need value types and this is why C# has them. Java's primitive types are complete mess with their wrapper classes. I've seen many instances of total misunderstanding how the wrappers work in professional developers on many occasions. Let alone that in C# EVERY type is an object including int. 5.ToString() is legal in C# because 5 is an object unlike Java. So yes in C# everything is an object and in Java this is not the case.
Preprocessor directives - things like #region make the language much more readable in the IDE
Operator overloading - "asdf".Equals("asdf") vs "asdf" == "asdf" ? Come on you cannot believe the first is better!
Partial classes actually help you organize your code much more efficiently when you are using tools that generate code and even in some other cases. Inheritance is not good enough for this purpose.
Functional programming - what is wrong with FP? What is more OOP and FP are orthogonal so you can have all the OOP in the world with all the FP in the world and they will not mess with each other.
Goto - what does goto have to do with OOP anyway?
Pointer arithmetic is there for when you need it. I've never ever had to use it for 3 years of professional C# development. However I guess sometimes people who need all the performance are blessing the ability to use it.
var has NOTHING to do with dynamic and is compiled pretty much the same way as any other type.
dynamic - pure interoperability story. There is the DOM and XML, there are IronPython and IronRuby, there is COM and C# has to work well with them. Java should go the same way in order to be more interoperable with Jython and JRuby.
C# is a better language than Java
If there is one thing that is sure about .NET vs Java this is it. Even if .NET is not a better platform (I'm not saying this) I believe no competent and unbiased person would argue that Java (the language) is better than C#. I believe at the moment C# has the best design from all imperative/OOP languages out there and even if it does not it is surely much better than the Java language. Anders (Hallowed be His name) is a pure genious.
Java is faster on pure math calculations and .NET is much faster on UI. Obviously that makes .NET programs seem faster because UI is what affects more users. Otherwise they have pretty much the same performance.
I pretty much agree but I would argue that these were in fact the main problems of Vista. If you've got a lot of RAM you can get Vista to perform better than XP in some cases (application startup for example). Also the new taskbar is cool and the first game that is DX10 only is going to hit the market soon.
This is true and everyone is extremely happy about Win7. This means that Vista was an OK OS and if MS hadn't put out the remarkably stupid "Vista ready" campaign everything would have gone much better. I always liked Vista and believed it was fine if your machine had 2GB or more. Now everybody is gonna love the new Vista (called 7) because everyone has 2+ GB RAM.