Slashdot Mirror


User: TheSpoom

TheSpoom's activity in the archive.

Stories
0
Comments
3,645
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 3,645

  1. Re:It is a problem... we need tracker moderation on Public Bug Tracking and Open-Source Policy · · Score: 1

    Doesn't Gnome already require a trusted user to confirm bugs in their tracker before anything is done with them?

    I know that was the case with one that I discovered after talking with some Gnome devs on IRC (and the guy I was talking with immediately confirmed it; for the curious, it was a bug in Evolution).

  2. Dammit... on RIAA Argument About Streaming To Be Streamed · · Score: 4, Funny

    This article just put my brain into an infinite loop. Thanks a lot, RIAA.

  3. Re:Article should be renamed on Adbusters Suggests Click Fraud As Protest · · Score: 1

    Probably. Being from another country doesn't make you untouchable in civil court.

  4. Re:Best reply on DHS To Use Body Odor As a Lie Detector · · Score: 1

    DHS runs ICE, which operates a number of detention facilities, not to mention the numerous "black sites" that exist around the world. (This would be the CIA in most cases, if you want to get technical, though I don't know if they were in charge of Maher Arar's case.)

  5. Article should be renamed on Adbusters Suggests Click Fraud As Protest · · Score: 1

    "Adbusters gives Google a perfect opportunity to sue for tortious interference with business operation"

  6. Re:Same as always on DHS To Use Body Odor As a Lie Detector · · Score: 2, Insightful

    The DHS doesn't care. They just want a pseudoscience that can be used to detain people who don't do what they want.

  7. Re:Best reply on DHS To Use Body Odor As a Lie Detector · · Score: 1

    A) This is the DHS, which means they usually don't try people, they "detain" people. No trial necessary.

    B) When you're crossing a border, if you don't fully answer their questions, the best you can hope for is to get sent back.

  8. That's... on Workers At School For Mentally Disabled Force Patients to Fight · · Score: 1

    Pretty damn horrible.

  9. Re:Let's consider the crypto solution on iTunes Gift Card Key System Cracked, Exploited · · Score: 1

    Why the hell would you use increasing integers?!

    It's so obvious! You just use random numbers in a large enough keyspace! This seems obvious to me. Is there something I'm missing?

  10. Re:Ouch. on iTunes Gift Card Key System Cracked, Exploited · · Score: 1, Insightful

    If Apple used sequential keys for gift cards, they deserve what just happened. That's pure incompetence.

  11. Re:thus ensuring on Mississippi Bill Would Tax Software Sales · · Score: 1

    I don't usually go with what's normally a Republican line of thinking, but for something like this, businesses absolutely will move states to avoid being subject to a sales tax.

    This will only take jobs away from Mississippi and other states that pursue such policies.

  12. Re:Windows Users Beware... on Norton Users Worried By PIFTS.exe, Stonewalling By Symantec · · Score: 1

    X If you post an unordered list, you will be modded up higher, especially if it's a checklist having to do with solutions to spam!

  13. Re:The Moon: A Ridiculous Liberal Myth on ISS To Become Second Brightest-Object In the Sky · · Score: 1

    This is the best copypasta I've read in a long, long time. Bravo, sir.

    And if it's actually original, you should apply for a job at The Onion.

  14. Re:Disable IE? on Windows 7 Lets You Uninstall IE8 · · Score: 1

    Microsoft is hoping this happens so they can warn you upon running Firefox's installer that "ZOMG IE won't work anymore, beware!"

  15. Re:I agree with Bruce on Calif. Politican Thinks Blurred Online Maps Would Deter Terrorists · · Score: 1

    *head explodes*

  16. Re:Use a framework on Securing PHP Web Applications · · Score: 1

    I <3 CakePHP (though I like Auth as opposed to ACL).

  17. Re:inherently insecure? on Securing PHP Web Applications · · Score: 1

    ...unless there's a problem in the CLR/JVM.

    Which is effectively similar to the claim that something could be wrong in either the PHP binary or an extension. Since PHP doesn't use pointers, buffer overflows in PHP code itself is likewise practically non-existent.

  18. Re:inherently insecure? on Securing PHP Web Applications · · Score: 2, Insightful

    Culture. For a long time the mysqli library did not allow the use of parameterized queries leading to the unhealthy culture of concatenating or interpolating sql queries and even "require" arguments.

    And now it does. And there were other libraries that supported parameterized queries prior to mysqli supporting it. I agree that there are beginners who give the rest of us a bad name by not coding for security to begin with, but to say that that makes the language itself insecure is an unfounded assertion.

    Easy entry with little architectural guidance which leads beginners down the dangerous paths.

    The fact that the language is easy makes it insecure? So I guess we should all be programming in assembly to be completely secure? Oh, wait, that's stupid, since it's just as easy to have a buffer overflow in assembly as anywhere else.

    the ability to "require" scripts from foreign servers.

    Nobody does this; not once have I seen it in my eight or so years of coding PHP.

    stupid type coercion such as 1 == "1more" is actually true.

    That's what === is for, it does type checking.

    super-weak type system, meaning that you can never trust what you expect to be an integer to be just that.

    Again, an ease of use thing. If you want an integer, cast to int as you would in C, or use one of the checking mechanisms.

    stupid attempts to accomodate developers and save LOCs by introducing "magic quotes", superglobals and the ability to "automagically" map query parameters to global variables.

    Magic quotes is stupid. Thankfully, this has been discussed to death and they're disappearing as of PHP 6. Superglobals are fairly limited and used mostly for input. And register_globals is almost always off nowadays and, like magic quotes, will be removed as of PHP 6.

    The fact that PHP is merely a glue layer, relying on binary extensions written in C with the usual buffer overflows, memory corruptions etc.

    You could say the same about ASP.NET, yet it's used by huge enterprises. Haven't you ever heard of abstraction? Besides which, the "usual buffer overflows" in the underlying extensions of PHP are quite rare, and the fact that they're often used in more than just PHP means more eyes are examining them for security issues.

    Inherently insecure my ass. If you're a crappy coder, you'll make crappy code. If you know what you're doing, you'll make code that's secure. Protecting an app against attackers is the developer's job, not the language's.

  19. Re:Just don't on Securing PHP Web Applications · · Score: 1

    In other words, "Give me money, there's no other way! You people can't learn my craft, it's just too complicated! Only I can secure your applications, stupid developers!"

  20. Re:You can't rent content on Uproar Over Netflix's New Instant Viewer · · Score: 4, Insightful

    You can rent a physical good, like a disk or a cartridge, but you can't rent information.

    At least, not until they have brain implants put into all their customers that delete the memories after the rental period is over. I'd give it 15 years or so.

  21. Re:While I can see Nintendo's point, I wish they'd on Nintendo Asks For Government Help To Fight Piracy · · Score: 1

    No, I don't think it doesn't exist. I don't think that it's something that could easily be "bred out", either.

    Regardless of which, I wouldn't just say "shoot all the addicts, that'll solve our problem", which is functionally the same as that was suggested earlier.

  22. The Real Reason on Google Dev Phone 1 Banned From Paid Apps · · Score: 1

    Someone at T-Mobile has pressured someone at Google into doing this so nobody, not even developers, can have a "real" G1 without it being locked to T-Mobile.

  23. Re:The Ammendment on US District Ct. Says Defendant Must Provide Decrypted Data · · Score: 0

    IANAL, but this seems like the perfect case to bring to the Supreme Court. Definitely a question of Constitutional rights, and definitely not clearly stated in current laws (though my opinion is that he should have the right not to have to testify against himself, which is effectively what they're trying to make him do).

    This is, in effect, asking the question: Does the border search exception extend to the mind?

  24. Re:While I can see Nintendo's point, I wish they'd on Nintendo Asks For Government Help To Fight Piracy · · Score: 1

    Do you really think that it's as simple as there being an "addict gene"? Are you saying that if you took crystal meth, that you wouldn't soon become addicted?

  25. Re:MS in the resume is bad for you on Microsoft Unveils "Elevate America" · · Score: 1

    It's pretty much like that; in my recent experiences with freelancing, all the interesting jobs are using open source technologies while most of the less thought-out projects are using Microsoft technologies. I think it says something about the sort of person who posts them... not that I'm saying Microsoft products don't have their place.