the problem seems to be one in the Java security model itself; but the evidence seems to be that if you turn off JavaScript, you turn off the vulnerability.
"Holy security through obfuscation batman!". JavaScript has NOTHING to do with the Java(tm) programming language, let alone the 'security model'. I'd have expected better from slashdot editors...
We want to make sure we get clarification about what is or is not covered by our NDAs
IANAL but here goes...
This one is kind of obvious to me, but an NDA is an Agreement between two or more companies that basically says 'I'll show you mine if you show me yours' and legally binds each party not to tell anyone else about it. I try to avoid these because I'm always paranoid that the other company will tell me something I'm already working on and later try to stake a claim on what's mine.
Simple answer to your question: Before you send ANY code into the public domain get your boss to sign off on EXACTLY what you are releasing. Otherwise, even if you get the OK you could be in hot water later if your boss backs out on you.
If your a business person, and you use Outlook at work (don't we all?) then you don't want a bulky PDA. The killer PDA application is the whole Outlook paradigm: Calendar, Contacts, Inbox
You need to do some homework on the features of cell phones out there and find one that has Outlook integration. Most can sync appointments and contacts back and forth. Some can download inbox email so you can read 'em offline. Some (Nokaia Communicator) can even connect to the net (with the disadvantage of dial-in costs, low battery life and being bulky & expensive - the speaker phone option on it is amazing though).
In the end we are moving to devive fusion anyway and PDA as we know it will cease to exist. We'll all just be using funkier, move advanced cell phones.
If you really want to make your code secure, you have to do it before the Geni is out of the bottle. This means longer coding cycles, development times and QA processes. How many of us have written some code that worked, thought about it over night and decided that we would like to refactor it but just didn't have the time due to development cycles?
Clean-up is a real tricky thing. The main problem is that every time you 'clean-up' a line of code, you are potentially throwing out a bug fix. Clean up too much code (throw out a single bug fix) and you open yourself up to more security problems (majority of all 'attacks' result from buffer over/under-runs)
My second HD started to 'wig out' making all kinds of funny noises last weekend. I unplugged it and havn't got around to tinkering with the cables yet. When I read this story I pulled it out and, sure enough, a maxtor 80 Gig...
Maybe I'm out of the loop becuase I've been out of University for about 4 years now, but when I was there any type of science degree meant that you picked up find . -name "*.cpp" | xargs grep "include pr0n.h" witin your first two years or you changed your major to Poli-Sci or MIS.
The year I graduated they had just put in a huge NT lab, so maybe the computing infrastructures of Universities are changing. I would exepect that *nix stations would play a big part of any Uni infrastrucutre. Isn't that the case at ITT, in which case raising the red flag for OSS is redundant?
Most companies pay flat-rate jackass. If your companies is running off a Bell DSL its time to think about some other alternative to you "Instant Online Diploma in the field of your choice!"
How about you just download the song from Kazaa and then 'stream' it where ever the hell you want.
This Apple thing is a great concept, lets charge people a buck a song and then restrict how they use it. This should make them loads of cash since they have a lock on the market
Apple busniess model:
1) Charge $1 dollar per songs on an mp3 service 2) Impement DRM that cripples existing purchases and acts a a deterent to new purchases 3) bankruptcy
This will only server to unite Open Source and Linux proponents alike. IBM will fight this lawsuit. IBM will win this law suit.
It's like the old high school sports team approach where the coach is a mean SOB that works his players to death. They may hate him, but they are united as a team against him, which forges strong bonds between the players.
When all is said and done, this legal battle will prove to be M$'s Waterloo (not to be confused with the i-Loo)
I just read through the first half of the article. The funny part is when Christine Stobl (sauerkraut minister general) starts talking about how this decision is somehow pivotal in creating new jobs. I'm a big linux fan and all, but I somehow fail to see the logic that results in one OS creating more jobs than the other. Instead of MSCE's you need Uni sys-admins...
You joke about this, but have you ever tried to debug an SAP R/3 program? The comments aren't so bad, some of 'em you can even translate, but it's the variable names that are a bitch. Theey're not even words, they're 12-letter abbreviations for words like Gegengewichtsgabelstapler [fork lift].
While SAP is one of the biggest (3rd largest software company behind Oracle and M$, #1 in ERP) the DB is not such a bug deal. See my other post. The DB is just a building block that SAP application servers use to store both runtime program strucutures and data. It's the busniess processes/logic that's HUGE.
Most SAP customers use Oracle DB. SAP competes with Oracle in the Enterprise Resource Planning space, but not the DB space.
SAP is developed on the typical 3-tier (which Hasso Platner former CEO claims to have invented along with the help of Al Gore).
3 tier = DB, Application Server, Client
SAP DB was developed to fill in the DB part of the three tier. Not because SAP wan't to sell it as a product, but because in a 3-tier you need a DB. As DB's progressed it was quickly out-paced by Oracle and got to be too much trouble to support additional development investment since it wasn't really a product to begin with and because most SAP clients were using Oracle DB anyway; hence SAP stopped development and made the code open source (more or less, I think some SAP guys still get paid by SAP to maintain the Open Source version).
Anyway, SAP DB isn't so bad, afterall its been the basis for a lot of customer installations , but I have my doubts. Afterall SAP DB is coming from the same guys that brought you ABAP; the language syntax alone is abyssimal.
It doesn't take a rocket scientist to figure out that OSS makes sense for government projects.
I find this highly suspect...
on
Making Change
·
· Score: 1
Wouldn't local sales tax and price distribution play a major role in usefule coin calculation? While the average may point to an 18 cent coin, the distribution plays a much more important role. Factor in the difference in region sales taxes and you end up with a coin that is not only based-10 friendly, but also fails to meet the intended results.
Then again, maybe I should RTFA. Then again, this is/.
the problem seems to be one in the Java security model itself; but the evidence seems to be that if you turn off JavaScript, you turn off the vulnerability.
"Holy security through obfuscation batman!". JavaScript has NOTHING to do with the Java(tm) programming language, let alone the 'security model'. I'd have expected better from slashdot editors...
fair enough...
We want to make sure we get clarification about what is or is not covered by our NDAs
IANAL but here goes...
This one is kind of obvious to me, but an NDA is an Agreement between two or more companies that basically says 'I'll show you mine if you show me yours' and legally binds each party not to tell anyone else about it. I try to avoid these because I'm always paranoid that the other company will tell me something I'm already working on and later try to stake a claim on what's mine.
Simple answer to your question: Before you send ANY code into the public domain get your boss to sign off on EXACTLY what you are releasing. Otherwise, even if you get the OK you could be in hot water later if your boss backs out on you.
If your a business person, and you use Outlook at work (don't we all?) then you don't want a bulky PDA. The killer PDA application is the whole Outlook paradigm: Calendar, Contacts, Inbox
You need to do some homework on the features of cell phones out there and find one that has Outlook integration. Most can sync appointments and contacts back and forth. Some can download inbox email so you can read 'em offline. Some (Nokaia Communicator) can even connect to the net (with the disadvantage of dial-in costs, low battery life and being bulky & expensive - the speaker phone option on it is amazing though).
In the end we are moving to devive fusion anyway and PDA as we know it will cease to exist. We'll all just be using funkier, move advanced cell phones.
Didn't the Germans learn their lesson the FIRST time???
If you really want to make your code secure, you have to do it before the Geni is out of the bottle. This means longer coding cycles, development times and QA processes. How many of us have written some code that worked, thought about it over night and decided that we would like to refactor it but just didn't have the time due to development cycles?
Clean-up is a real tricky thing. The main problem is that every time you 'clean-up' a line of code, you are potentially throwing out a bug fix. Clean up too much code (throw out a single bug fix) and you open yourself up to more security problems (majority of all 'attacks' result from buffer over/under-runs)
Nice hypothesis, but my 80 gig Maxtor that I bought less than 2 months ago died last weekend...and I'm in Canada...
My second HD started to 'wig out' making all kinds of funny noises last weekend. I unplugged it and havn't got around to tinkering with the cables yet. When I read this story I pulled it out and, sure enough, a maxtor 80 Gig...
Maybe I'm out of the loop becuase I've been out of University for about 4 years now, but when I was there any type of science degree meant that you picked up find . -name "*.cpp" | xargs grep "include pr0n.h" witin your first two years or you changed your major to Poli-Sci or MIS.
The year I graduated they had just put in a huge NT lab, so maybe the computing infrastructures of Universities are changing. I would exepect that *nix stations would play a big part of any Uni infrastrucutre. Isn't that the case at ITT, in which case raising the red flag for OSS is redundant?
Most companies pay flat-rate jackass. If your companies is running off a Bell DSL its time to think about some other alternative to you "Instant Online Diploma in the field of your choice!"
Can someone explain to me how this was modded 'insightful'?
By that logic "What ever happened to Kazzaa? Can't you just grab tunes from there and stream them to work?" should get me at least a 3.
How about you just download the song from Kazaa and then 'stream' it where ever the hell you want.
This Apple thing is a great concept, lets charge people a buck a song and then restrict how they use it. This should make them loads of cash since they have a lock on the market
Apple busniess model:
1) Charge $1 dollar per songs on an mp3 service
2) Impement DRM that cripples existing purchases and acts a a deterent to new purchases
3) bankruptcy
Where's Waldo?
This will only server to unite Open Source and Linux proponents alike. IBM will fight this lawsuit. IBM will win this law suit.
It's like the old high school sports team approach where the coach is a mean SOB that works his players to death. They may hate him, but they are united as a team against him, which forges strong bonds between the players.
When all is said and done, this legal battle will prove to be M$'s Waterloo (not to be confused with the i-Loo)
I just read through the first half of the article. The funny part is when Christine Stobl (sauerkraut minister general) starts talking about how this decision is somehow pivotal in creating new jobs. I'm a big linux fan and all, but I somehow fail to see the logic that results in one OS creating more jobs than the other. Instead of MSCE's you need Uni sys-admins...
because Its written in pig latin and I havn't read it myself so it might suck, but read it anyway...
This is just as bad as those people at work that are constantly forwarding news stories with the proprity flag set.
SAP wants no piece of the DB market. They left years ago and havn't looked back. See these.
You joke about this, but have you ever tried to debug an SAP R/3 program? The comments aren't so bad, some of 'em you can even translate, but it's the variable names that are a bitch. Theey're not even words, they're 12-letter abbreviations for words like Gegengewichtsgabelstapler [fork lift].
While SAP is one of the biggest (3rd largest software company behind Oracle and M$, #1 in ERP) the DB is not such a bug deal. See my other post. The DB is just a building block that SAP application servers use to store both runtime program strucutures and data. It's the busniess processes/logic that's HUGE.
Most SAP customers use Oracle DB. SAP competes with Oracle in the Enterprise Resource Planning space, but not the DB space.
Some history on the SAP DB....
SAP is developed on the typical 3-tier (which Hasso Platner former CEO claims to have invented along with the help of Al Gore).
3 tier = DB, Application Server, Client
SAP DB was developed to fill in the DB part of the three tier. Not because SAP wan't to sell it as a product, but because in a 3-tier you need a DB. As DB's progressed it was quickly out-paced by Oracle and got to be too much trouble to support additional development investment since it wasn't really a product to begin with and because most SAP clients were using Oracle DB anyway; hence SAP stopped development and made the code open source (more or less, I think some SAP guys still get paid by SAP to maintain the Open Source version).
Anyway, SAP DB isn't so bad, afterall its been the basis for a lot of customer installations , but I have my doubts. Afterall SAP DB is coming from the same guys that brought you ABAP; the language syntax alone is abyssimal.
Goodman added, "In terms of culture, social behavior, language and other factors, we share many things in common with chimpanzees."
That guys name looks suspiciously close to 'Godman'....Wait! It's Our Lord come to test our faith! Repent ye sinners! Repent!
It doesn't take a rocket scientist to figure out that OSS makes sense for government projects.
Wouldn't local sales tax and price distribution play a major role in usefule coin calculation? While the average may point to an 18 cent coin, the distribution plays a much more important role. Factor in the difference in region sales taxes and you end up with a coin that is not only based-10 friendly, but also fails to meet the intended results.
Then again, maybe I should RTFA. Then again, this is
a beowolf cluster of these!
public class PatentWhore extends DotBomb{
/* 1. */ hireLotsOfLawyers();
/* 2. */ fileSillyPatents("???");
/* 3. */ profit("!!!");
public static void main(String args[]) {
try{
}
catch(OutOfMemoryException oome) {
}
}
public void fileSillyPatents(String wtf){
filePatent();
fileSillyPatents(wtf);
}
}