This is pretty much right. We're trapped writing snippets of one language (SQL) in another (PHP/whatever).
Avoiding any single SQLi vulnerability is trivial - use stored procs, escape strings, or use parameterized queries. You can even avoid most problems at the organizational level as long as someone competent is in charge and raw SQL is banned or forced into rigid guidelines.
But it seems we've collectively decided to trust our data interface to a framework that is at its core no better than an eval() in terms of inherent safety. That's just asking for trouble.
Last time I looked into this (and it's been a while), that's true if you send the computers from a central point and they arrive unmodified at their destination.
But all of the Bell Inequality experiments I've seen pass the light/electrons through a filter or polarizer. Once you take into account the effect of the filter on the particles, it becomes a simple backtracking problem again.
Guh - I know I'm in the minority on this - I really should just run the math myself and see if I'm missing anything.
I've read a number of accounts of the Bell Inequality experiments, and I still don't see how it doesn't boil down to "Alice got X there for Bob got Y", or at least "Alice got X, therefore Bob has a Z% chance of having Y".
The numbers definitely jive with what you'd expect from wave-like phenomena, not particles. But I've never seen any good reason to believe that observation plays a causal part in the system. It's more like observing things locally can tell us what happened remotely - but that's just normal backtracking.
Just to be clear, Planck units have no physical significance. They're just a convenient way of doing physics calculations because when you use Planck units, you can treat some fundamental constants as equal to 1.
So Planck time isn't the frame rate of reality, it's just a really small unit that makes some calculations easier.
Sure, I'm a leech, whatever. But I wasn't responding to a comment that said "Hey, if you're a horrible human, drop me a line". I was responding to a comment that said "Sites GET NOTHING from adblockers". Making this about my personal failings is a non sequitor.
If I can't see their site, I'm not going to share it on social media, which is responsible for a ton of clicks - many of which are from non-adblocked browsers. I won't link to it from my blog. I won't tweet it.
You take a big chance when you block the most internet-savvy demographic from viewing your site.
TBH, my biggest beef with ads is their blinkiness. I don't mind static images, but I can't concentrate on an article when it's surrounded by blinky seizure-inducing ads.
Speaking as a circumcised male, I wish I'd had a choice in the matter. If I found myself too sensitive at age 18, I'd be able to make the right choice for me.
a) You'll note I said "immediately" - Bitcoin is volatile, but rarely that volatile
b) The same applies to other currencies. If you want to call those "scams", then I'll simply admit we have a different definition of that word.
c) I still don't see the scam. Who's benefiting? Bitcoin's value feels market-driven. "Scam" implies there's some puppeteer jerking the strings in order to make a profit.
Whether or not BTC will hold its value in the long term, I see no way to interpret it as a scam.
Sure, they have a very clear motive, and may bury any science that doesn't support their claims. That's bad.
But the idea that diet is the primary cause of obesity is a very intuitive one. There's no lack of studies showing the link, so burying new studies may not have a huge impact. The problem with intuitive ideas is that they're often wrong, or partially right, or ignore the root causes behind them. Research funded by a biased source is not necessarily bad research, and can uncover previously-unknown factors. That's good.
The research does come with a free frogurt, but the frogurt contains refined sugars. Just how bad that is is yet to be determined.
Yes! Unless you have a need the better color quality of inkjets, there is no reason to buy one. I've hated every inkjet I've ever had. They would eat ink for no reason and suffer from random problems that would eat up my life in half-hour chunks.
I've owned two laser printers (a color and a B&W). The color is 3 years old and works like new. It's still on toner cartridge it came with. The B&W (HP LaserJet) is 20 years old, has printed tens of thousands of pages, and still going strong. After 15 years it did need a gear replacement - which I considered cheap based on the value I've gotten out of it.
Of course it's not cheaper to cool over the weekend than to turn it off. Cool air warms faster than warm air, so the cooler it is in the office, the more energy you need to extract from the office air to maintain temperature.
Business rules are implemented however they are implemented. That can be a rules engine, or a more general language. And any rules engine I've seen tends to be infinitely extensible with your language of choice, because simply being a "rules engine" is rarely sufficient.
And I didn't say clouds were "just storage", I said that MySQL was a "cloud-based storage medium", which is certainly true for the various vague definitions of "cloud-based" I've seen.
See? My joke was accurate and - now that it has been fully explained - totally hilarious.
Applications will be created by Management based on Business Rules and Data Sets.
It's sad but true. That's why I've been preparing my move into Management. I've been learning to use a cutting-edge Management Suite called "Java" to implement Business Rules, and a bleeding-edge Cloud-based Storage Medium named "MySQL" to manage my Data Sets.
I'm going to miss Software Engineering, but as you say, the writing's on the wall.
It depends. If the place was advertising "Foo-Certified Technicians", then I'd consider no different than a trucker maintaining his driver's license. Half of your job description is "have this credential while simply continuing to exist".
you can't make a statement such as "10% of them are green"....You don't seem to understand infinity is not simply a big number.
And you don't seem to have much of an imagination. Can't you think of a single formulation that would produce 10% green marbles in an infinite set?
What if we had a barrel that was infinitely deep, and filled with marbles in sequence: 9 red, 1 green, 9 red, 1 green...?
You're kind of obnoxious. This is/. - we all took math in university. This kind of pedantic crap is like arguing over "who" vs "whom" in any conversation not already centered on linguistics. It makes you feel smart, and no one cares.
Slashdot Mirror
Wait, you make grilled cheese sandwiches by toasting the bread?
This is pretty much right. We're trapped writing snippets of one language (SQL) in another (PHP/whatever).
Avoiding any single SQLi vulnerability is trivial - use stored procs, escape strings, or use parameterized queries. You can even avoid most problems at the organizational level as long as someone competent is in charge and raw SQL is banned or forced into rigid guidelines.
But it seems we've collectively decided to trust our data interface to a framework that is at its core no better than an eval() in terms of inherent safety. That's just asking for trouble.
Last time I looked into this (and it's been a while), that's true if you send the computers from a central point and they arrive unmodified at their destination.
But all of the Bell Inequality experiments I've seen pass the light/electrons through a filter or polarizer. Once you take into account the effect of the filter on the particles, it becomes a simple backtracking problem again.
Guh - I know I'm in the minority on this - I really should just run the math myself and see if I'm missing anything.
I've read a number of accounts of the Bell Inequality experiments, and I still don't see how it doesn't boil down to "Alice got X there for Bob got Y", or at least "Alice got X, therefore Bob has a Z% chance of having Y".
The numbers definitely jive with what you'd expect from wave-like phenomena, not particles. But I've never seen any good reason to believe that observation plays a causal part in the system. It's more like observing things locally can tell us what happened remotely - but that's just normal backtracking.
I've never actually heard a convincing argument as to why this explanation is wrong. It seems to describe the Bell inequality experiments perfectly.
Just to be clear, Planck units have no physical significance. They're just a convenient way of doing physics calculations because when you use Planck units, you can treat some fundamental constants as equal to 1.
So Planck time isn't the frame rate of reality, it's just a really small unit that makes some calculations easier.
Sure, I'm a leech, whatever. But I wasn't responding to a comment that said "Hey, if you're a horrible human, drop me a line". I was responding to a comment that said "Sites GET NOTHING from adblockers". Making this about my personal failings is a non sequitor.
Keep your judgement to yourself. I'm just countering your argument that sites are better off without traffic from adblockers.
If I can't see their site, I'm not going to share it on social media, which is responsible for a ton of clicks - many of which are from non-adblocked browsers. I won't link to it from my blog. I won't tweet it.
You take a big chance when you block the most internet-savvy demographic from viewing your site.
TBH, my biggest beef with ads is their blinkiness. I don't mind static images, but I can't concentrate on an article when it's surrounded by blinky seizure-inducing ads.
Why is it that Free Energy True Believers can barely produce a coherent sentence?
What if a Christian rapes a white woman? Is the race of the attacker still protected?
Speaking as a circumcised male, I wish I'd had a choice in the matter. If I found myself too sensitive at age 18, I'd be able to make the right choice for me.
a) You'll note I said "immediately" - Bitcoin is volatile, but rarely that volatile
b) The same applies to other currencies. If you want to call those "scams", then I'll simply admit we have a different definition of that word.
c) I still don't see the scam. Who's benefiting? Bitcoin's value feels market-driven. "Scam" implies there's some puppeteer jerking the strings in order to make a profit.
Whether or not BTC will hold its value in the long term, I see no way to interpret it as a scam.
You can buy a bitcoin online for $X and then spend it immediately on some sites to get $X worth of products.
Where's the scam?
Sure, they have a very clear motive, and may bury any science that doesn't support their claims. That's bad.
But the idea that diet is the primary cause of obesity is a very intuitive one. There's no lack of studies showing the link, so burying new studies may not have a huge impact. The problem with intuitive ideas is that they're often wrong, or partially right, or ignore the root causes behind them. Research funded by a biased source is not necessarily bad research, and can uncover previously-unknown factors. That's good.
The research does come with a free frogurt, but the frogurt contains refined sugars. Just how bad that is is yet to be determined.
Yes! Unless you have a need the better color quality of inkjets, there is no reason to buy one. I've hated every inkjet I've ever had. They would eat ink for no reason and suffer from random problems that would eat up my life in half-hour chunks.
I've owned two laser printers (a color and a B&W). The color is 3 years old and works like new. It's still on toner cartridge it came with. The B&W (HP LaserJet) is 20 years old, has printed tens of thousands of pages, and still going strong. After 15 years it did need a gear replacement - which I considered cheap based on the value I've gotten out of it.
Of course it's not cheaper to cool over the weekend than to turn it off. Cool air warms faster than warm air, so the cooler it is in the office, the more energy you need to extract from the office air to maintain temperature.
The best part: With xkcd's audience, there's a good chance those names will become official.
Business rules are implemented however they are implemented. That can be a rules engine, or a more general language. And any rules engine I've seen tends to be infinitely extensible with your language of choice, because simply being a "rules engine" is rarely sufficient.
And I didn't say clouds were "just storage", I said that MySQL was a "cloud-based storage medium", which is certainly true for the various vague definitions of "cloud-based" I've seen.
See? My joke was accurate and - now that it has been fully explained - totally hilarious.
Applications will be created by Management based on Business Rules and Data Sets.
It's sad but true. That's why I've been preparing my move into Management. I've been learning to use a cutting-edge Management Suite called "Java" to implement Business Rules, and a bleeding-edge Cloud-based Storage Medium named "MySQL" to manage my Data Sets.
I'm going to miss Software Engineering, but as you say, the writing's on the wall.
It depends. If the place was advertising "Foo-Certified Technicians", then I'd consider no different than a trucker maintaining his driver's license. Half of your job description is "have this credential while simply continuing to exist".
Why?
I agree - it makes no sense. I can feel my agility dropping off after even half a joint.
you can't make a statement such as "10% of them are green"....You don't seem to understand infinity is not simply a big number.
And you don't seem to have much of an imagination. Can't you think of a single formulation that would produce 10% green marbles in an infinite set?
What if we had a barrel that was infinitely deep, and filled with marbles in sequence: 9 red, 1 green, 9 red, 1 green...?
You're kind of obnoxious. This is /. - we all took math in university. This kind of pedantic crap is like arguing over "who" vs "whom" in any conversation not already centered on linguistics. It makes you feel smart, and no one cares.