And the ripped out car seat? And the inch of water on the floor of his car that he slept in? What about picking up his kids from school on a day when it was his wife's turn, with no recorded phone call between them to indicate this was arranged? Why would he do that when he'd never done it before?
There's circumstantial, and then there's circumstantial *wink*
- no untainting of CGI data - bad DB interaction practices
Now, I don't do ASP, so I'm unaware of the exact details, but in Perl (and any CGI language), it's always insane NOT to untaint your input submitted by users - even if (especially if!) you have set the values in hidden fields. Something like
my $id=0; # $id must be an integer under 100 $q->param('id') =~/^(\d{1,2})$/
and $id = $1;
And, as to the SQL injection itself, if ASP doesn't have placeholders, I would blame MicroSoft. Interpolating fields into DB statements is just asking for trouble.
I'm currently at 390Mb resident, 570Mb virtual, and I have to restart every few days (OK, not a huge issue now that sessions can be restored, but still irritating.
If a plugin is to blame, then FF should report that. Either way, it's a FF issue.
I would argue that if it was a binary format that nobody could fuck with, it would be fine. But it isn't, and people *do* edit it by hand.
I have to work with a bunch of conf files that are in XML format - for no real reason that I can ascertain (except that they, heh, want them to be human readable). I have been trying to abstract the interface to this data away (possibly into an sqlite DB with a perl module front end), but I get resistance from people who "just want to be able to edit the data by hand", or to scan it to see what it contains. And that is so, so wrong if you're using XML. Aside from allowing human error to creep in, it's really, really bad to lose control of the interface to the data - just begging for errors to creep in.
If you really want to edit by hand though, you want YAML instead - and XML should have avoided all this geek hate by *never* being designed to be browseable as a plain text format in the first place.
<reply xmlns="Slashdot:Comment"> <paragraph> <sentence>What?</sentence> <sentence>Are you telling me that this isn't the preferred way of presenting data?</sentence> <sentence>Honestly, this & SOAP are two technologies that have made my life so much more "interesting" as a developer.</sentence> <sentence>Fucking XML...</sentence> </paragraph> </reply>
Meucci had a voice link from his workshop to his mother year's before Bell's "patent". He'd been suing Bell for years when he ran out of money/died. It's pretty well established that Bell stole his patents. I think If you read the page linked to in the relevant foot note, you will see it's not as cut and dried as you selectively quoted. And who is Tomas Farley anyway? I can't see anything in Wikipedia quoting him as an expert on anything.
What we do know is that Meucci's sample hardware submitted to the Patent Office was "mislaid", and that one of Bell's close business associates worked at the Patent Office. Coincidence maybe, but worth investigating deeper than pulling a random quote from Wikipedia by an unknown source.
I google myself every now and then to check that I'm first for my name in Google and Google Images. It helps long lost friends find me. Better than trying to guess which social networks I'm in.
Of course, Slashdot's page rank can only help here, hence this comment:)
For those of you that think I'm a Perl programming asshole though, feel free to help build that little googlebomb;-)
Seems like those days are gone though. I mean, what the hell is wrong with introducing kids to really good music? At nearly 7 minutes, this has to be a Sesame Street record.
Kids do appreciate "adult" music. I was playing Portishead in the car yesterday, and my five year old made me shush so she could listen to Glory Box. And she also likes Daft Punk and Datarock.
I think if you look at the majority of content coming out of Hollywood today that you'd have to be lying your ass off to say that it's *not* commodity.
Then why is it that when I buy bread, I don't get a "credits" list:
Packaging designed by... Flour supplied by... Kneading machines built by...
It's a product. Not high art. And even if you want to argue the "art" route, just list the guy who "owns" the project.
Why the hell should I care who the programmers were?
What the hell makes film and video so special as a profession that every damn person down to the carpenters and personal assistants get a "credit"? I've never understood that one.
That would be one way to keep things secure though - it's hard for someone to guess your pass picture if they can't bring themselves to look at the background...:)
Well, I just "watched the credits" and it makes no sense. By the time I get around to playing, I think I'll have forgotten it. Maybe it's only a spoiler if you know what the hell she's singing about and why?;-)
Tehy wolud hvae no plorbem rndiaeg a stennece lkie tihs. Can Tehy?
Coincidentally, nobody in the town of Scunthorpe has Verizon service either. Reps are apparently mystified...
"work events"? Just where the hell do you work?
And the ripped out car seat? And the inch of water on the floor of his car that he slept in? What about picking up his kids from school on a day when it was his wife's turn, with no recorded phone call between them to indicate this was arranged? Why would he do that when he'd never done it before?
There's circumstantial, and then there's circumstantial *wink*
There are two parts to this:
/^(\d{1,2})$/
- no untainting of CGI data
- bad DB interaction practices
Now, I don't do ASP, so I'm unaware of the exact details, but in Perl (and any CGI language), it's always insane NOT to untaint your input submitted by users - even if (especially if!) you have set the values in hidden fields. Something like
my $id=0; # $id must be an integer under 100
$q->param('id') =~
and $id = $1;
And, as to the SQL injection itself, if ASP doesn't have placeholders, I would blame MicroSoft. Interpolating fields into DB statements is just asking for trouble.
100Mb? I *dream* of running Firefox in 100Mb.
I'm currently at 390Mb resident, 570Mb virtual, and I have to restart every few days (OK, not a huge issue now that sessions can be restored, but still irritating.
If a plugin is to blame, then FF should report that. Either way, it's a FF issue.
You know, just asking. Trouble with ^h is it's easy for you to lose count of how many you need. Go check. You lose -1 geek cred points.
I would argue that if it was a binary format that nobody could fuck with, it would be fine. But it isn't, and people *do* edit it by hand.
I have to work with a bunch of conf files that are in XML format - for no real reason that I can ascertain (except that they, heh, want them to be human readable). I have been trying to abstract the interface to this data away (possibly into an sqlite DB with a perl module front end), but I get resistance from people who "just want to be able to edit the data by hand", or to scan it to see what it contains. And that is so, so wrong if you're using XML. Aside from allowing human error to creep in, it's really, really bad to lose control of the interface to the data - just begging for errors to creep in.
If you really want to edit by hand though, you want YAML instead - and XML should have avoided all this geek hate by *never* being designed to be browseable as a plain text format in the first place.
<reply xmlns="Slashdot:Comment">
<paragraph>
<sentence>What?</sentence>
<sentence>Are you telling me that this isn't the preferred way of presenting data?</sentence>
<sentence>Honestly, this & SOAP are two technologies that have made my life so much more "interesting" as a developer.</sentence>
<sentence>Fucking XML...</sentence>
</paragraph>
</reply>
I recommend Nearly Free Speech - this will suit your needs incredibly well.
"...trying to get a t-shirt made that simply says F*** Jesus, has been very hard"
So you want to get a T-shirt made with Fuck Jesus on it, but you're too embarrassed to type that almost anonymously on Slashdot?
Um, OK then. Go for it you rebel!
ever.
Meucci had a voice link from his workshop to his mother year's before Bell's "patent". He'd been suing Bell for years when he ran out of money/died. It's pretty well established that Bell stole his patents. I think If you read the page linked to in the relevant foot note, you will see it's not as cut and dried as you selectively quoted. And who is Tomas Farley anyway? I can't see anything in Wikipedia quoting him as an expert on anything.
What we do know is that Meucci's sample hardware submitted to the Patent Office was "mislaid", and that one of Bell's close business associates worked at the Patent Office. Coincidence maybe, but worth investigating deeper than pulling a random quote from Wikipedia by an unknown source.
I google myself every now and then to check that I'm first for my name in Google and Google Images. It helps long lost friends find me. Better than trying to guess which social networks I'm in.
Of course, Slashdot's page rank can only help here, hence this comment :)
For those of you that think I'm a Perl programming asshole though, feel free to help build that little googlebomb ;-)
Or you can just install the No Script plugin in Firefox and worry a lot less :)
Um, ever heard of namespaces, modules and OO programming? I think you might want to go look those up before stating that things can get confusing.
I'm currently maintaining and building on top of a project that currently has about 12,000 lines of code in 24 modules, and I don't get confused.
You a PHP developer by any chance? *shudder*
...even though they were one year off, this is still a retro-nerd-heaven-pop-video!
Indeed. AIR is indeed a terrorist organization.
Stevie Wonder's performance of Superstition on Sesame Street kicks major ass.
Seems like those days are gone though. I mean, what the hell is wrong with introducing kids to really good music? At nearly 7 minutes, this has to be a Sesame Street record.
Kids do appreciate "adult" music. I was playing Portishead in the car yesterday, and my five year old made me shush so she could listen to Glory Box. And she also likes Daft Punk and Datarock.
Fuck all those "kids songs with stupid lyrics" ;-)
I think if you look at the majority of content coming out of Hollywood today that you'd have to be lying your ass off to say that it's *not* commodity.
And I don't know what a sentance is either.
:)
If you're going to be a grammar Nazi, at least spell-check your post
Jeez, and they didn't even blink when they wrote the check out to "Father Bukkake".
I bet MS feel like idiots right now for that one...
Then why is it that when I buy bread, I don't get a "credits" list:
Packaging designed by...
Flour supplied by...
Kneading machines built by...
It's a product. Not high art. And even if you want to argue the "art" route, just list the guy who "owns" the project.
Why the hell should I care who the programmers were?
What the hell makes film and video so special as a profession that every damn person down to the carpenters and personal assistants get a "credit"? I've never understood that one.
...about drawing penises on goatse photographs?
:)
That would be one way to keep things secure though - it's hard for someone to guess your pass picture if they can't bring themselves to look at the background...
Well, I just "watched the credits" and it makes no sense. By the time I get around to playing, I think I'll have forgotten it. Maybe it's only a spoiler if you know what the hell she's singing about and why? ;-)