Slashdot Mirror


User: gbjbaanb

gbjbaanb's activity in the archive.

Stories
0
Comments
5,859
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 5,859

  1. Re:Everyone has to learn about it. on The History of SQL Injection, the Hack That Will Never Go Away (vice.com) · · Score: 3, Insightful

    The problem is inherent in many systems so you will always make a mistake until the day that you put all your queries into stored procedures.

    Treat the DB as a generic object pool of crap and it'll be that. Treat it like its a precious storage system with its own (customisable) API and you'll do far better.

    But of course, slapping SQL together in the client and sending it to the DB to parse and execute is so much easier everyone does it.

  2. Same here - they were a great idea and despite them not getting the user base they deserve (which is perhaps understandable considering they're not an in-your-face UI thing) they do serve the needs of some people very well indeed.

    And maybe this is the point - if you remove all the functionality that is not used by the ordinary user, then you'll end up with a browser that is suited solely for the ordinary user.

    I use tab groups a work, my lunchtime browsing is kept tucked away for lunchtime, and then I return to work and whatever work-related pages I happen to have open.

    I don;t mind them removing the functionality as it is, but I'd like to see the "hide this set of tabs" and replace with a new set - even if they implemented it as a auto-saved temporary bookmark group..

  3. Re:nope on Donald Trump Obliquely Backs a Federal Database To Track Muslims · · Score: 1

    Ha, but neither did you say you were against making Muslims wear identifying symbols... you republican racist!!!!!!!111!!!!11!!!!1!!!!!!

    Its one thing to hassle somebody with questions on the street at no notice with a microphone shoved up their ass, but then to take nothing he said and spin it into some OMG story is just purely the worst kind of "journalism".

    I don't mind attacking Trump on what he thinks and says, but to attack him on what he didn't say is getting to be silly. Ever wonder why politicians refuse to say anything - this is why, whatever they do say will be picked apart and turned into something else by journos trying to make a story.

  4. Re:Use a larger monitor. on Ask Slashdot: What's Out There For Poor Vision? · · Score: 2

    and possibly way more importantly - ensure there's no bright light source behind your monitor - like a window. You should ensure the contrast differential between monitor and background is roughly the same

  5. buit the biggest question is... on Google-Supported CodeGirl Documentary Makes "Exclusive YouTube Premiere" · · Score: 1

    feel-good fuel of watching smart, earnest girls talk about creating an app

    did they actually make an app, and was it anything worth making?

  6. Re:-ENOENT on Ask Slashdot: Innovative Operating Systems/Distros In 2015? · · Score: 1

    Linux offers not stupidness

    ahem. Systemd.

  7. Re:systemd deprecation warning on Busybox Deletes Systemd Support · · Score: 1

    This is the first I've heard about the reason systemd is so wonderful and a worthy replacement for init. My question is - seeing a systemd has been in development for years, and cloud containers only a new thing, why is containerisation suddenly being given as the reason systemd was developed?

    Could it be happy coincidence that systemd suddenly finds itself a problem that it happens to solve? Or couldn't they have said all this way back in the day to get people on board and prevent the arguments?

  8. Re: The Commit Message on Busybox Deletes Systemd Support · · Score: 1

    systemd wasn't properly making sure that networking was up before attempting to start aiccu

    I thought that was the point of systemd - to do this kind of initialisation 'better' than other systems that required custom scripts. I guess its a system management thing now then...

  9. Re:Another example of bloat on Batman Demands 12GB RAM For Windows 10 (steamcommunity.com) · · Score: 5, Informative

    and to look at the Steam Survey, only 14% of PCs have 12+ gig. 20% don't even have 4Gb.

  10. Re:What is IoT? on Why IoT Security Is So Critical (techcrunch.com) · · Score: 1

    On the flip side, hackers could turn off your lights prior to a home invasion

    lol, and then what are they going to do - intimidate me with a Klingon axe-thingy and demand all my caffeinated beverages?

  11. Re:Why "IoT" security is so critical on Why IoT Security Is So Critical (techcrunch.com) · · Score: 2

    Fridges work by being a closed air-con unit, as part of that process they draw moisture out of the air. Bread, placed in a fridge therefore goes stale quicker.

    To keep bread, either freeze it (and let it slowly defrost at air temperature to get it back to best condition) or put it in a closed container like a bread bin. Or buy bread so laced with chemicals that there's hardly any flour used in its production.

  12. Re:So, Java? on Oracle Fixes Java Vulnerability Used By Russian Cyberspies (itworld.com) · · Score: 1

    thought it wouldn't take long for the "Its not Java, its the browser plugin, Java is perfect and can do no wrong". posts to appear.

    Take a look at the list of affected products - scroll down a fair bit to the Java specific vulnerability list, particularly those marked with note 2:

    Applies to client and server deployment of Java. This vulnerability [...] can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service.

    Which means and Java program that responds to network connectivity, such as every Java server (and every Java client that talks on the internet) out there. So its not enough to remove the browser plugin, you need to patch Java everywhere. Everywhere.

    Don't forget to patch your Oracle database, or Oracle CRM, Siebel, Peoplesoft, too... it has Java components that are affected. Oh yes, MySQL too which has 2 remotely exploitable vulnerabilities.

  13. Re:What if we make them legally responsible for bu on Oracle Fixes Java Vulnerability Used By Russian Cyberspies (itworld.com) · · Score: 1

    Probably none of them - however, we would see every software product instantly bereft of its internet stack, no connectivity to anything except the system it was run on.

    I agree we need to do more to protect systems, but we should do this with education and standardised connectivity libraries and similar systems rather than draconian penalties.

  14. Re:Hipsters fight over limited supplies of juice on Charge Rage: Electric Cars Are Making People Meaner In California · · Score: 1

    I think the point is that you turn up at the charger - put your card in and say "bill me for the time I'm here", and someone else comes along unplugs you and put it into their car - you pay for their time and don't get a charge!

    If the plug was locked while charging that'd be something, but then when you're 100% charged, you'd really like it to unlock so someone else can have a go with it.

    Its a tricky thing that will require a fair bit of thought to get right. Until then, I will buy the popcorn and go watch the hipster 'fights'. Think there's money to be made uploading the videos to youtube?

  15. Re:CVS or Subversion on Ask Slashdot: Selecting a Version Control System For an Inexperienced Team · · Score: 1

    Maybe, but I find git is just too "unprofessional" for my taste and my work dev is on Windows so thhat counts against it as well - TortoiseSVN is possibly the best thought-out and helpful tool I just feel I should use it :-)

    Fossil is my preferred DVCS go-to nowadays, its a bit better thought out and comes with lots of good stuff that all system should have. I worry a little about its scalability (after having used SVN with a 10s of GB SVN repo) but it seems solid.

    It seems to have all the good stuff the competition has, in a single package that makes TFS look like the monstrosity it is. It just needs a bit more exposure - so go have a look at it and see what you think.

  16. Re:mecurial for source control on Ask Slashdot: Selecting a Version Control System For an Inexperienced Team · · Score: 1

    Heh. reminds me of a company I worked for... they used git and when I asked about backups they said "we don't need them, we use git, its distributed so the repos are on somebody's machine"

    Then I asked around and half the repos that were not used on a day-to-day basis were not distributed on somebody's machine. Nobody had them checked out at all. Whoops.

    And then I pointed out that they all did their development on a single, shared server.....

    backups are not an optional feature of DVCS. They are still required. The problem you have is that you just don't know what you have backed up - so you end up with a 'gold' clone that contains the latest merges and the current state of everyone's development.... or in other words, a centralised VCS!

    Maybe the concept of no DVCS works in Linux where there are thousands of people with a copy. In a business environment this isn't necessarily the case.

    Incidentally SVN manages its history very well indeed. You do not need to stop the server, you can send commits to it and it will happily replay them to a mirror, or you can hot-copy a backup off. SVN may not be everyone's cup of tea but it does its back-end stuff very seriously.

  17. Re:Git git and git on Ask Slashdot: Selecting a Version Control System For an Inexperienced Team · · Score: 1

    source does not mean only source code. An icon used to build your product is just as much part of the source as the text files containing programming code.

    Just because git doesn't work well with binaries only means the tool is poor, not the workflow. Remember computers are there to serve us, not the other way round.

  18. I'd agree with Fossil for this team - not only does it come with wiki, tickets and all that project management stuff built into it, its also a way of making DVCS use easier - and it doesn't have the dangers of git (the number of times I've seen people work with git only to say "umm, it seems to have..." makes it a poor choice especially for teams that don;t have a git guru to fix it)

    Fossil is much under-rated, for this team, its possibly the ideal choice. Written by the same guy who did SQLite so it should be pretty solid. I know its very easy to set up and get going with even though I've not used it in anger.

  19. Re:CVS or Subversion on Ask Slashdot: Selecting a Version Control System For an Inexperienced Team · · Score: 1

    I'd say git is a non-starter for compliance. Any SCM that lets you rebase your history away so it is actually deleted is not a SCM that was designed for business. (which is true, it scratched Linus' itch)

    For these guys, I'd possibly recommend Mercurial (works better on Windows than git) if they needed distributed development; Subversion if they are all in the office (as it has the best client tooling on Windows) or Fossil if they want to try something good that is half-way between the two.

    Fossil might actually be the tool for them - its a DVCS but does auto-updates to the server so it can look like a traditional VCS, if 1 developer works on 1 code branch at a time, then this is a bit of a killer feature - you just do work and your changes are uploaded for you, almost no thought required about using the system :-)

  20. self-certify? on EU Court of Justice Declares US-EU Data Transfer Pact Invalid · · Score: 1

    The BBC reports

    The EU forbids personal data from being transferred to and processed in parts of the world that do not provide "adequate" privacy protections.

    So, to make it easier for US firms - including the tech giants - to function, Safe Harbour was introduced to let them self-certify that they are carrying out the required steps.

    More than 5,000 US companies make use of the arrangement to facilitate data transfers

    self-certify that they're completely above-board and that no privacy is being invaded.. says Google and Facebook.

    I guess all that will happen is that these companies will open EU offices to scour though all our stuff instead of sending it to an American datacentre. Plus ca change!

  21. Re:GPLv3 - the kiss of death on FLIF: Free Lossless Image Format · · Score: 1

    What a waste of effort. Write it once, release it as open source, let everyone else use it.

    Everybody is then happy, the world becomes a bit better.

    these excuses for the GPL just show how redundant it is, we do need a licence that says an open source library can be used in closed source software while still mandating changes and fixes to the library must be released as open source.

  22. Re: GPLv3 - the kiss of death on FLIF: Free Lossless Image Format · · Score: 1

    Alas, that works fine with real Open software - developers can take the source, build it and bundle it into their product.

    The GPL prevents this - nobody disagrees that you shouldn't take the software and pretend you made it, but as the GPL makes your software have to be GPL too, it makes using the software impossible.

    If the GPL only applied to the open software and made no claims whatsoever about the software that used it, people would be releasing GPL licenced stuff all the time. As it is, BSD or similar licences are the ones to use if you want your software to become standard. I'm sure a middle ground of licencing could be produced that said proprietary software could use open source and kept the proprietary stuff closed while still mandating openness and upstream releases of changes to the open software.

    Nobody thinks "people should pay me because" concept is real, most open source software is in the form of libraries (like this image format) which should be used within the developers own project that they should be able to sell, because they made it.

  23. Re:GPLv3 - the kiss of death on FLIF: Free Lossless Image Format · · Score: 2, Insightful

    Well, this means no users will be using the software because Microsoft will not be able to bundle it in Windows as a native format (not without releasing the source code of Windows).

    This is the part where the GPL becomes problematic - while I think releasing the software that relates to the open source project is perfectly agreeable, making it apply to every other bit of software its linked to is not.

  24. Re:There could be reasons for skipping the broccol on Scientists Discover How To Get Kids To Eat Their Vegetables · · Score: 5, Insightful

    The reason vegetable gardens were smaller was because either the main crop would bring more money in, or that there was limited space left over for a vegge garden. At least they used to have gardens!

    Its not often nutritious food that we crave, its the hard-for-cavemen-to-obtain food that we love. Fatty, sugary, salty food is not so good for us in the quantities we eat, and that the real problem - its too readily available If we only ate small amounts, we'd be fine (he said while eating a huge cookie).

    And yes, this has the same sense of igNobility about it as anecdotal studies show that if you give kids loads of sweets they won't have appetite left for dinner, no matter what it is.

  25. Re:Seen this first hand on Are Enterprise Architects the "Miltons" of Their Organizations? · · Score: 1

    I see the same with Project Managers - there are exceptions of people who can actually organise a project and manage people - but the vast majority are just incompetent seat-warmers who have only 1 skill - of getting themselves into a position where they can do very little work and disguise their lack of any value whatsoever.

    at least, the ones who know they are useless do that, the really dangerous ones are those who think they're important and knowledgeable.