Wow. You mean they finally worked out that it's a good idea to escape things before you send them to the command line?
The security holes are always the same:
'TWiki X function allows arbitrary shell command execution'
My personal favourite is the vulnerability allowing command execution through the search page that managed to slip through and be included in every version of TWiki from May 2000 to September 2004 before being picked up.
They don't, MediaWiki is in PHP while TWiki is in Perl.
I use TWiki at work and I honestly am beginning to wonder if the makers of the software originally escaped anything that they send through exec(), the amount of shell execution bugs in this particular piece of web software is ridiculous.
It is indeed a little dodgey in that way, but I can see why they would include it now.
Only in recent time has the amount of information in Wikipedia (and more importantly the number of people editing and monitoring it and keeping it as accurate as possible) grown to the point where it can stand as a really useful information source.
I think what really makes this special as far as/. is concerned (to me anyway) is the amount of people stepping forward and providing links to their own favourite comics, many of which I would never have found if it wasn't for this thread.
Digg being Digg you probably also read about 20 'articles' that were either self-pimping links to really dodgey blogs providing commentary on the digg 'phenomena' or super newbified 'tech' articles.
Luckily if you missed these you'll no doubt see them again because Digg have, somehow managed to create a system that results in even MORE dupes than slashdot, even on the front page.
This post is completely off topic and will no doubt make my karma even worse than it already is, but the fact of the matter is that Digg will be worth reading when:
Stuff that is actually worth reading starts making the front page instead of being buried 20 back.
Digg users stop feeling that they somehow need to 'prove' themselves by having a pissing contest with slashdot, because you couldn't possibly read both now could you.
I could respond to this in full but it would be a bit like shooting fish in a barrel with an M16 after draining all the water out.
I can only hope that by bringing MS-Access into a discussion about (relatively) serious database management systems you were looking for +5 funny.
You may care to note that the MySQL backers weren't alone in forming links to SCO. Does this mean that we should boycott Postgresql as well? Or just continue to generate FUD about MySQL because you have a chip on your shoulder?
I have played it, unfortunately it offers nothing over at least 5 FPS games that came before it that I can think of and has been bettered by even more since.
Halo is the pinacle of FPS gaming? Yeah right, get a clue.
That's nice, but the deal with all versions of Windows since is the same. If you want decent video performance you wont be relying on the stock windows driver (even for 2d) because it lags like buggery on most cards.
While probably true I suspect the OP was talking about OS/2's ability to run Windows 3.* apps, among other things.
OS/2 was jointly developed by IBM AND Microsoft, not just IBM. While the two later split I doubt Microsoft were involved out of the goodness of their hearts and signed the IP away.
A full blackhawk barely has to stop to cap a flag though, and if the team aren't idiots they have engineers in the boot so even if it does get hit by the time you have reloaded it is going to be repairing.
Every vehicle has its own severe weaknesses. If you have just started playing the game then I understand why helicopters might seem overly powerful to you. You are obviously not sufficiently utilizing the available weaponry. Any of the rocket or explosion-based weapons can take out the helicopters in 2-3 hits. If they are hovering then the grenade launcher or anti-tank rocket make short work of them, if they are making strafing runs then the vehicular or ground-mounted anti-tank or anti-air rocket emplacements can scare them off or take them down.
All very well until you realise maps like Songhua Stalemate have a) Very low visibility and b) to my knowledge only one stinger emplacement (no AA vehicles). As a result of this the entire game is watching as the two opposing teams transport helicopters jump around the map racking up cheap capture points.
Well it's not exactly something getting fixed quickly by ANYONE, given that it is something that has existed since we first got JavaScript.
It is also debatable whether it is a problem on the part of the browser or just users being to stupid. In most mail clients after you click yes to open an attachment you can still get a virus from the executable, is this a bug?
I think I also fall into the category of someone who did game quite a bit and attended LANs etc. but found that darned Real Life TM thing got in the way and had to cut back.
Not being able to keep up with the gaming press does have its benefits though in my opinion. A lot of games these days get over hyped and when they finally come out people are let down because they don't live up to expectations.
In my experience my favourite games (even back when I did have time to game quite a lot) were those that I had never heard much (if any) pre-release information about them.
Considering the only reason I'm in this area of the thread is because I saw your original post before you (quite rightfully) got modded down yes they do.
My counter is what a retarded place/. would be if I had to read the retarded crap that comes through at -1 threaded all the time.
Slashdot Mirror
Wow. You mean they finally worked out that it's a good idea to escape things before you send them to the command line?
The security holes are always the same:
'TWiki X function allows arbitrary shell command execution'
My personal favourite is the vulnerability allowing command execution through the search page that managed to slip through and be included in every version of TWiki from May 2000 to September 2004 before being picked up.
They don't, MediaWiki is in PHP while TWiki is in Perl. I use TWiki at work and I honestly am beginning to wonder if the makers of the software originally escaped anything that they send through exec(), the amount of shell execution bugs in this particular piece of web software is ridiculous.
It is indeed a little dodgey in that way, but I can see why they would include it now. Only in recent time has the amount of information in Wikipedia (and more importantly the number of people editing and monitoring it and keeping it as accurate as possible) grown to the point where it can stand as a really useful information source.
If it's an excuse to shoot Richard Stallman into the outer regions of the solar system I'm all for it.
I think what really makes this special as far as /. is concerned (to me anyway) is the amount of people stepping forward and providing links to their own favourite comics, many of which I would never have found if it wasn't for this thread.
Digg being Digg you probably also read about 20 'articles' that were either self-pimping links to really dodgey blogs providing commentary on the digg 'phenomena' or super newbified 'tech' articles.
Luckily if you missed these you'll no doubt see them again because Digg have, somehow managed to create a system that results in even MORE dupes than slashdot, even on the front page.
This post is completely off topic and will no doubt make my karma even worse than it already is, but the fact of the matter is that Digg will be worth reading when:
Ooooh and we could call it Internet Explorer!
I could respond to this in full but it would be a bit like shooting fish in a barrel with an M16 after draining all the water out. I can only hope that by bringing MS-Access into a discussion about (relatively) serious database management systems you were looking for +5 funny.
http://www.eweek.com/article2/0,1895,1846635,00.as p
You may care to note that the MySQL backers weren't alone in forming links to SCO. Does this mean that we should boycott Postgresql as well? Or just continue to generate FUD about MySQL because you have a chip on your shoulder?
Only in Soviet Russia.
' at line 1.
I have played it, unfortunately it offers nothing over at least 5 FPS games that came before it that I can think of and has been bettered by even more since. Halo is the pinacle of FPS gaming? Yeah right, get a clue.
"...but it is one of the best online FPS ever." It's also obviously the only FPS you've ever played...
AC or not, he's right.
That's nice, but the deal with all versions of Windows since is the same. If you want decent video performance you wont be relying on the stock windows driver (even for 2d) because it lags like buggery on most cards.
While probably true I suspect the OP was talking about OS/2's ability to run Windows 3.* apps, among other things. OS/2 was jointly developed by IBM AND Microsoft, not just IBM. While the two later split I doubt Microsoft were involved out of the goodness of their hearts and signed the IP away.
A full blackhawk barely has to stop to cap a flag though, and if the team aren't idiots they have engineers in the boot so even if it does get hit by the time you have reloaded it is going to be repairing.
Every vehicle has its own severe weaknesses. If you have just started playing the game then I understand why helicopters might seem overly powerful to you. You are obviously not sufficiently utilizing the available weaponry. Any of the rocket or explosion-based weapons can take out the helicopters in 2-3 hits. If they are hovering then the grenade launcher or anti-tank rocket make short work of them, if they are making strafing runs then the vehicular or ground-mounted anti-tank or anti-air rocket emplacements can scare them off or take them down.
All very well until you realise maps like Songhua Stalemate have a) Very low visibility and b) to my knowledge only one stinger emplacement (no AA vehicles). As a result of this the entire game is watching as the two opposing teams transport helicopters jump around the map racking up cheap capture points.
Have you considered flipping your sarcasm detector to on?
The problem with the Battlefield 2 example is while it has a lot of bugs (most of which EA haven't bothered to fix in the first patch) damn it's fun.
Well it's not exactly something getting fixed quickly by ANYONE, given that it is something that has existed since we first got JavaScript. It is also debatable whether it is a problem on the part of the browser or just users being to stupid. In most mail clients after you click yes to open an attachment you can still get a virus from the executable, is this a bug?
I think I also fall into the category of someone who did game quite a bit and attended LANs etc. but found that darned Real Life TM thing got in the way and had to cut back. Not being able to keep up with the gaming press does have its benefits though in my opinion. A lot of games these days get over hyped and when they finally come out people are let down because they don't live up to expectations. In my experience my favourite games (even back when I did have time to game quite a lot) were those that I had never heard much (if any) pre-release information about them.
http://www.efa.org.au/Issues/Censor/cens1.html
Exactly, I'm not even sure that all browsers go to that as one of their options. All the shots I have seen were using Safari.
Considering the only reason I'm in this area of the thread is because I saw your original post before you (quite rightfully) got modded down yes they do. My counter is what a retarded place /. would be if I had to read the retarded crap that comes through at -1 threaded all the time.