Slashdot Mirror


User: Vekseid

Vekseid's activity in the archive.

Stories
0
Comments
67
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 67

  1. I would laugh... on 'Month of PHP Security' Finds 60 Bugs · · Score: 3, Insightful

    The fact that one of the bugs still remains from his original /2007/ Month of PHP Bugs shows that the PHP developers are clearly not doing a thorough job.

    ...but this sort of thing just makes me want to cry. Multiyear bugs exist in multitude. And these are just the ones they admit exists.

  2. Why are you assuming people will up and drop php5? on 'Month of PHP Security' Finds 60 Bugs · · Score: 1

    php 6.0 isn't even finished yet. It took years for php5 to get adopted - which isn't even available on some crappy hosts - and the inertia holding php5 is going to be that much stronger, if only because it's not in the atrocious state it was in with version 4. People aren't going to pick up version 6 on a whim, exactly for reasons like this.

  3. Re:Setting expectations on 'Month of PHP Security' Finds 60 Bugs · · Score: 1

    When was Facebook's database exposed?

    Most security vulnerabilities in major php offerings these days are not php's direct fault, except perhaps as a function of the language's accessibility. If someone creates a script to allow uploading files, and sticks it on a server with both mod_php and mod_perl, and the script doesn't check non-php extensions, how is it php's fault when the server promptly gets owned?

    The server owner has a responsibility not to allow one user to threaten others (by running php over FastCGI rather than mod_php), and the script author has a responsibility as a programmer to make a secure application. PHP is not where it was in the 4.x days.

  4. The only language where reinventing the wheel... on 'Month of PHP Security' Finds 60 Bugs · · Score: 1

    ...can be a good idea as a standard practice.

    Bugs in the bloated function list can last for years. Interfacing with external applications can often be incomplete - see the memcache versus memcached extensions. The best solution in one version may not be in the next, and may not even be available shortly after (see all the changes they are making to version 6).

    And yet, php is good where it dominates - pulling data from MySQL and shoving it through FastCGI. If someone ends up forking php 5.3/5.4 to flesh it out as a language, I would seriously consider looking at it.

  5. Re:Integrated bench on Mobile Phones vs. Supercomputers of the Past · · Score: 1

    If anything it's forward thinking. Why not integrate computing power into your furniture?

    It also looks rather awesome.

  6. Re:There is something deeper going on on Congressman Steps Up Pressure On Google, Facebook · · Score: 2, Insightful

    Microsoft's investment in Facebook aside, both Google and Facebook have lobbying teams. Few companies have the power to buy -all- of Congress.

  7. Wonder if this will get the US to take the Moon on Japan Plans Moon Base Built By Robots For Robots · · Score: 1

    seriously.

    Here's hoping, at least.

  8. Legislating one's business model into relevance on Ofcom Unveils Anti-Piracy Policy For UK ISPs · · Score: 1

    After all, they can't compete legitimately. They're still going to run into the old issue of respected laws needing to be respectable. The more onerous and invasive they get, the more people will notice.

  9. Re:Maybe if it gets popular? on Intel Considers Hardware Acceleration For Google's WebM Format · · Score: 1

    No, it has to be used more by providers. Why does everything have a H.264 codec, because Youtube and everyone else uses H.246. What Google needs to do is to get providers to switch to VP8 and make their intentions clear to swtich off H.264. HW manufacturers will follow the providers.

    I think they might just throttle it and put up a notice. They would need to let their users know that their phone is using 'outdated software' or whatever.

  10. Re:"Weird"? on Weird Exoplanet Orbits Could Screw Up Alien Life · · Score: 1

    That does not remove Earth and other planets as valid data points. We know that Venus and Mars, if they had life at one point, don't have much now, for a variety of reasons we can only work to refine our data on.

    At the same time, we can look at a number of extrasolar planets and come to similar conclusions by observation. While we can't really know until we find another world harboring complex life, we can look at an ever-increasing number of dead rocks to see what conditions are obviously unsuitable.

  11. What exactly was this meant to demonstrate? on Scientist Infects Self With Computer Virus · · Score: 5, Insightful

    Or was the good doctor merely going after being 'first' at something?

  12. Re:No, Mr Bond, I expect you to die... on Pacific Northwest At Risk For Mega-Earthquake · · Score: 1

    The Pacific Northwest doesn't need to worry about the Tsunami. That's the job of everyone else living near the Pacific.

  13. Re:Good for archival purposes? on Titanium Oxide For High-Density Optical Storage · · Score: 4, Interesting

    Titanium dioxide itself is ridiculously stable. It's what makes it so safe - we use it to whiten marshmallows for crying out loud. How stable the structure is is an open question though, it doesn't say what frequency or intensity of light.

  14. It's important to care who. on Congressmen Send Letters, Hope For Net Neutrality Fades · · Score: 4, Insightful

    Making a viable third party in this country would require a staggering amount of time, effort, and money. Any such third party would have to have a pretty solid message, with some pretty solid heads on its shoulders, to have a hope of getting anywhere. The rank level of dissatisfaction with the current party structure means that yes, it is probably possible. But if you're going to tell me to vote for and possibly help promote a third party, you'll get a much better reaction if you show me some damned smart people working on some damned smart platforms. Most third parties are not run by the best and the brightest that this nation has to offer.

  15. My parents weren't even conceived yet. on Where Were You When PLATO Was Born? · · Score: 1

    I wonder how many people we're going to make feel old with this one.

  16. I only wish I'd caught onto this sooner. on Privacy Machiavellis · · Score: 1

    I've been doing it for several years now, and it's invaluable. Something to keep in mind is that there is software that validates and cross-references zip codes, addresses, and phone numbers, which is intensely frustration. So, likewise, I've done a bit of research on my fake selves to fool that crap.

  17. Or since you have IPTables... on Researcher's Death Hampers TCP Flaw Fix · · Score: 1

    ...just use connlimit. There are some slight flaws in it but there is certainly no need to allow someone to open a thousand connections.