That said, if a full validation is not performed, at the very least a bounds check should make sure that a buffer overflow doesn't happen. I would hope you would agree that that's a minimum a good programmer should do.
"We will continue to see this type of vulnerabilities in every major application for the foreseeable future... It is not just images, but any type of complex file format. This is something that security researchers and hackers have realized to be a weak point in many applications."
If a programmer is taking the time and effort to interpret a complex file format, why can't he also take the time to validate it.
If a company is developing an embedded Linux ap for their own hardware. All of a sudden, all of the communications with the board-specific hardware is being done through binary drivers, resulting in an effectively closed system.
Got a cite? I'm not being a smartass, but this is the first I've heard of engineers before there was engines. Could it be a case of forward referencing the translation of some ancient word incorrectly?
--
Got a cite? I'm not being a smartass, but this is the first I've heard of engineers before there was engines. Could it be a case of forward referencing the translation of some ancient word incorrectly?
But your assumption is just as great. Obviously a simple endless loop can be written without bugs. How a about an endless loop with a couple input and output instructions? How about a couple of conditional branches? At some point the odds of a bug start to go up, but in *some cases* it is possible to write bugless code.
" The point of CNC machining is precision down to the tenth or half-tenth thousand."
Um, no. The point of CNC machining is to turn out parts cheaper than it can be done by hand. Vast quantities of CNC'ed parts are *not* accurate to a tenth. Often times +/-.001 to.003 is perfectly acceptable and is typical for a production CNC system. Getting closer tolerances than that are usually achieved by honing or lapping.
Specifying overly tight tolerances results in overly expensive parts and assembly problems.
The maker of any closed-source operating system or application shall not be held liable for any unauthorized disclosure of private information caused by defect of said operating system or application.
There. I've said it. I run both WinXP Pro and Linux (Redhat 9.0 and KDE) Linux/KDE is clearly slower starting aps than WinXP. This is a fairly big deal in a business environment.
NY and California suck ass and deserve shitty economies. Tyrany of the populos states.
Wow, that's insightful. I've lived and worked in California for 33 years. Son of poor white trash and high school educated. I've been unemployed all of 5 months in that time. Furthermore, I've accumulated $400,000 in home equity and I'm the sole owner of my own manufacturing business worth about $1,500,000. If that's a shitty economy, give me more.
With tech stuff these days, but this is awesome. A very clever use of technology just sitting in your computer and a huge timesaver. Anyone that does any transcoding will have immediate justification for laying out bucks for a premium video card.
Sounds like a great gig if you can get it. I can't. My comments were directed specifically at Pacific Bell aka Pacbell aka SBC. They promised fibre-to-the-curb and never delivered.
I remember the noble "Fibre-to-the curb" promises made 15 years ago. Where's my fsking fiber to the curb? I moved into a new neighborhood about 6 years ago and suffered with a crappy dialup that would never go faster than 28k because cheap-ass SBC had my whole neighborhood multiplexed back to the central office. No DSL, no 56k. Screw them. Even Comcast cable, who I really *don't* have a problem with is better.
Ever been to downtown Tokyo. I assure you there's plenty of buried cable there. In general, I'd say that Japan as a whole has neither more nor less buried cable than any other densely populated area.
That H1-B employees might also be less productive than US nationals? After all, most likely English would not be their native language and communications skills are important to quality productivity. Of course, if you're a die-hard marxist, everyone should be paid the same anyway...
Slashdot Mirror
Is like giving teenager boys whiskey and car keys. I think P.J. O'Rourke said it first about politicians and money...
And you actually believed enough of that load of crap to post it on slashdot? Sony is incredily stupid, but not that stupid...
Sounds like the file format isn't the only thing that needs validating...
Well, I prefer to think that I'm not ignorant.
That said, if a full validation is not performed, at the very least a bounds check should make sure that a buffer overflow doesn't happen. I would hope you would agree that that's a minimum a good programmer should do.
"We will continue to see this type of vulnerabilities in every major application for the foreseeable future ... It is not just images, but any type of complex file format. This is something that security researchers and hackers have realized to be a weak point in many applications."
If a programmer is taking the time and effort to interpret a complex file format, why can't he also take the time to validate it.
If a company is developing an embedded Linux ap for their own hardware. All of a sudden, all of the communications with the board-specific hardware is being done through binary drivers, resulting in an effectively closed system.
No more hacking WRT54G's for you, chump.
Got a cite? I'm not being a smartass, but this is the first I've heard of engineers before there was engines. Could it be a case of forward referencing the translation of some ancient word incorrectly? --
Got a cite? I'm not being a smartass, but this is the first I've heard of engineers before there was engines. Could it be a case of forward referencing the translation of some ancient word incorrectly?
But certainly a tactic the RIAA would use if they could get away with it...
But your assumption is just as great. Obviously a simple endless loop can be written without bugs. How a about an endless loop with a couple input and output instructions? How about a couple of conditional branches? At some point the odds of a bug start to go up, but in *some cases* it is possible to write bugless code.
The very first "engineers" ran steam engines.
Looks like your website is a fossil too.
When I modified the boot sector of some floppy disks and spread them around at work. If you tried to boot them, you'd see the following message:
You can't boot this floppy. Pull the floppy out of the drive and your head out of your ass and try again
" The point of CNC machining is precision down to the tenth or half-tenth thousand."
.003 is perfectly acceptable and is typical for a production CNC system. Getting closer tolerances than that are usually achieved by honing or lapping.
Um, no. The point of CNC machining is to turn out parts cheaper than it can be done by hand. Vast quantities of CNC'ed parts are *not* accurate to a tenth. Often times +/-.001 to
Specifying overly tight tolerances results in overly expensive parts and assembly problems.
The maker of any closed-source operating system or application shall not be held liable for any unauthorized disclosure of private information caused by defect of said operating system or application.
There. I've said it. I run both WinXP Pro and Linux (Redhat 9.0 and KDE) Linux/KDE is clearly slower starting aps than WinXP. This is a fairly big deal in a business environment.
NY and California suck ass and deserve shitty economies. Tyrany of the populos states.
Wow, that's insightful. I've lived and worked in California for 33 years. Son of poor white trash and high school educated. I've been unemployed all of 5 months in that time. Furthermore, I've accumulated $400,000 in home equity and I'm the sole owner of my own manufacturing business worth about $1,500,000. If that's a shitty economy, give me more.
With tech stuff these days, but this is awesome. A very clever use of technology just sitting in your computer and a huge timesaver. Anyone that does any transcoding will have immediate justification for laying out bucks for a premium video card.
Sounds like a great gig if you can get it. I can't. My comments were directed specifically at Pacific Bell aka Pacbell aka SBC. They promised fibre-to-the-curb and never delivered.
I remember the noble "Fibre-to-the curb" promises made 15 years ago. Where's my fsking fiber to the curb? I moved into a new neighborhood about 6 years ago and suffered with a crappy dialup that would never go faster than 28k because cheap-ass SBC had my whole neighborhood multiplexed back to the central office. No DSL, no 56k. Screw them. Even Comcast cable, who I really *don't* have a problem with is better.
What "balkanization of the internet" means?
Ever been to downtown Tokyo. I assure you there's plenty of buried cable there. In general, I'd say that Japan as a whole has neither more nor less buried cable than any other densely populated area.
That H1-B employees might also be less productive than US nationals? After all, most likely English would not be their native language and communications skills are important to quality productivity. Of course, if you're a die-hard marxist, everyone should be paid the same anyway...
Does not appear to be a single volume..
And blow the dust out of it.