Actually the immune system of humans is relatively weak in relation to others. And no: in a nuclear aftermath we are the first ones to die. And starvation might be the least dramatic cause.
( Why google finds the 7 version and not the 8 as first hits is beyond me:D )
The vulnerability comes from the option to overwrite "readObject()". Serialized data objects contain usually the classes as well. So when you read them, you also read and link the code, and hence use the supplied "readObject()" method.
However the vulnerability in the Apache.Commons libraries was a different one (don't remember right now how exactly), they exploited a bug in the library, so you could sent "code" without sending really a classfile.
Clap, Clap, Clap. Exactly! I, ax a human being, have no interests or stakes in spreading mankind to other stars. Neither my genes nor my intelect demand me to "make sure man kind survives"!
If there was a foreseeable disaster which would killl the world, and it would techonolgy wise possible to rescue me/and/or my kids, then I would think about that.
But do you really believe in 4 billion years when the sun goes into a red giant, anyone cares to make ships that take centuries to build and decades to evade the danger zone and millienia to travel avay to a different planet/solar system?
People will simply accept the fate, just like with cancer or old age.
You seem to be an idiot. Both the USA as Russia have about 7000 war heads. That means about 14000 hit cities. Supposed they are only targeting each other, you might be right. But they most likely target each others allies, too.
Or a few minutes after it is clear that the appocalypse is starting, all nations hit what they can, e.g. China on Japan and South Korea.
Would not extinguish live, yes. But humans are the most fragile in this planet, so I would not be so sure that a decent enough amount survives so that we can read the appocalypse stories a few hundret years afterwards.
Bugs in XML deserialization don't allow for arbitrary code execution. Neither does JSON or YAML.
So, what exactly would be the attack vectors (in a VM) via text only (de)serialization? I mean: buffer overflows, putting code on the stack or changing return adresses for JSRs obviously are impossible.
Wow, meanwhile you even managed to recruit hate mods:) Understandable, they know about alpha radiation, some even about beta, but with gama you simply lost them.
Why do you tell us bollocks like this? Studying in Scotland is free of cost. You are supposed to pay a 'honour fee' of 2000 pounds at the end of your studies. There are no 'crushing large bills'... moron.
Why would â" for a none Japanese â" Satoshi be clearly a male name? Plenty of jap. names are unisex, and the ending vowel like a/o in italian e.g does not indicate any sex in jap.
Or, take the income figures citing earlier -- if you know the median income is, say, 47k, then you can be pretty confident (but not certain) that the average income is not 10k or 100k. Yes, but it does not tell you what the average income is. So it is meaningless. It tells you actually nothing except a value and a fancy name for it. 90% of the americans here on/. think that median is just a more fancy name for average. You don't know if the median is below, above or close to average at all. So why handing out that single number? The median is only interesting if you know more...
The median tells you nothing at all about the likely average. And comparing two medians is even more meaningless. If you don't have the avarage as well, you need to know the total sum. E.g. [1 3 100] [2 4] Have both the same merdian. and have mothing in common to each other. And neither has: [-100 2 4 10000] something in common with the first to sets, besides naving the same median as well.
I leave it tto you to calculate the sums and avarages.
Slashdot Mirror
Actually the immune system of humans is relatively weak in relation to others.
And no: in a nuclear aftermath we are the first ones to die. And starvation might be the least dramatic cause.
Get a clue.
And most of them where underground or high altitude.
Hence my comment.
So you think there is a possibility that a technologic advanced civilization can build a machine that runs for 25 million years ...
I rather believe in 3D printed humans ;D
The build in ObjectOutputStream and ObjectInputStrream.
They allow serialized objects to either implement java.io.Serializable or java.io.Externalizable
https://docs.oracle.com/javase...
https://docs.oracle.com/javase...
( Why google finds the 7 version and not the 8 as first hits is beyond me :D )
The vulnerability comes from the option to overwrite "readObject()". Serialized data objects contain usually the classes as well. So when you read them, you also read and link the code, and hence use the supplied "readObject()" method.
However the vulnerability in the Apache.Commons libraries was a different one (don't remember right now how exactly), they exploited a bug in the library, so you could sent "code" without sending really a classfile.
https://blogs.apache.org/found...
And exactly that e.g is the reason why 'standard' deserialization of objects in Java/JVM does neither use ctors nor setters. .Net
No idea about
There is no chance in hell that there is any life 'as we know it' on a kuiper belt object.
You must be mixing up something.
What do you mean with "on the planet"?
Above the surface or below?
Above the surface we probably had two dozens, not thousands.
Yes, you can hop to Andromeda in 25 milion years.
If you are a rock.
If you are a human ....
You did not travell much on this planet, didn't you?
Clap, Clap, Clap. Exactly!
I, ax a human being, have no interests or stakes in spreading mankind to other stars.
Neither my genes nor my intelect demand me to "make sure man kind survives"!
If there was a foreseeable disaster which would killl the world, and it would techonolgy wise possible to rescue me/and/or my kids, then I would think about that.
But do you really believe in 4 billion years when the sun goes into a red giant, anyone cares to make ships that take centuries to build and decades to evade the danger zone and millienia to travel avay to a different planet/solar system?
People will simply accept the fate, just like with cancer or old age.
You seem to be an idiot.
Both the USA as Russia have about 7000 war heads.
That means about 14000 hit cities.
Supposed they are only targeting each other, you might be right.
But they most likely target each others allies, too.
Or a few minutes after it is clear that the appocalypse is starting, all nations hit what they can, e.g. China on Japan and South Korea.
So only Africa and Pacific Islands survive ...
Would not extinguish live, yes.
But humans are the most fragile in this planet, so I would not be so sure that a decent enough amount survives so that we can read the appocalypse stories a few hundret years afterwards.
Bugs in XML deserialization don't allow for arbitrary code execution.
Neither does JSON or YAML.
So, what exactly would be the attack vectors (in a VM) via text only (de)serialization?
I mean: buffer overflows, putting code on the stack or changing return adresses for JSRs obviously are impossible.
Wow, meanwhile you even managed to recruit hate mods :)
Understandable, they know about alpha radiation, some even about beta, but with gama you simply lost them.
Thank you for the clarification. :)
Sounds not really plausible, though
The serialization format has nothing to do with the deserialization vulnarabilities.
Why do you tell us bollocks like this? ... moron.
Studying in Scotland is free of cost. You are supposed to pay a 'honour fee' of 2000 pounds at the end of your studies.
There are no 'crushing large bills'
Just start to decide when you open a window and when a tab ... /. tabs ... why would I?
I never have more than about 5-10
However I noticed today for the first time that Chrome on Mac OS X indeed had flavicons in the tabs, never noticed before.
Which is pretty pointless if all the tabs in my /. window are /. tabs and all my tabs in my youtube window are youtube tabs :)
Why would â" for a none Japanese â" Satoshi be clearly a male name?
Plenty of jap. names are unisex, and the ending vowel like a/o in italian e.g does not indicate any sex in jap.
Or, take the income figures citing earlier -- if you know the median income is, say, 47k, then you can be pretty confident (but not certain) that the average income is not 10k or 100k. /. think that median is just a more fancy name for average. ...
Yes, but it does not tell you what the average income is. So it is meaningless. It tells you actually nothing except a value and a fancy name for it.
90% of the americans here on
You don't know if the median is below, above or close to average at all. So why handing out that single number?
The median is only interesting if you know more
I'm on my iPad right now. :)
There is no icon
However the text on the tabs is the 'title' of the page ...
Luckily Slashdot is prefixing each story with 'Slashdot:'
The median tells you nothing at all about the likely average.
And comparing two medians is even more meaningless.
If you don't have the avarage as well, you need to know the total sum.
E.g.
[1 3 100]
[2 4]
Have both the same merdian. and have mothing in common to each other.
And neither has: [-100 2 4 10000] something in common with the first to sets, besides naving the same median as well.
I leave it tto you to calculate the sums and avarages.
Perhaps they should plant something different? E.g. weed?
Or go even a step further and try Poppy or Coca?
Rofl ...
Imagine how much more you can produce if you hire the required amount of people to get the Tax Break and buy enough robots on top of that?
You have no clue how automation and robots actually work ... the US is decades behind in robotics.
The median only has any meaning when you also know the average, otherwise the number is completely pointless.