Slashdot Mirror


User: RingDev

RingDev's activity in the archive.

Stories
0
Comments
3,567
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 3,567

  1. HTML mark-up type-o on WMF Vulnerability is an Intentional Backdoor? · · Score: 1

    wow, post as plain text cuts out < and >. the sentence ending: "it just graps until ." shoulds have read: "it just graps until <EoF>."

    -Rick

  2. Think about it like a programmer on WMF Vulnerability is an Intentional Backdoor? · · Score: 5, Interesting

    Code encounters escape character

    exit standard processing

    encounter SetAbortProc

    open thread to communicate with windows print manager

    thread attempts to read [length] bytes for sub value, encounters overrun

    this is where I'm guessing the real horrendous problem lies. I'm guessing that the original code ignores exceptions while pulling in the sub value, so in this case where code hits an overrun, instead of that sub value getting a few bytes of data, it just graps until . In this case that sub value winds up being the payload.

    So there you go, key and payload on an independent thread because of a bad exception handler in a 12 year old block of code.

    -Rick

  3. Re:I haven't worked with both, but.... on JSF vs ASP.net · · Score: 1

    "Spoken like a true astroturfer"

    Thanks for flying your colors up front. I'm glad to know that I won't be involved in an intelligent discussion this morning.

    "Several times more, at least in Web server arena, according to Netcraft. 69.97% for Apache vs. 20.92% for IIS."

    Exactly my point numb nuts. ASP.Net runs on Apache. So if by the parent's "little else then IIS" comment, he actually ment to say "will run on the vast majority of web servers", then yes he would be correct. But I'm pretty sure he was just reciting FUD from the anti-MS bin.
    (see http://www.codeproject.com/cpnet/introtomono2.asp, http://www.mono-project.com/ASP.NET, and even http://apache.slashdot.org/apache/02/07/22/2334239 .shtml?tid=109)

    "And Microsofts operating systems do suck, especially when used as servers;"

    That is debatable. Any server will "suck" when used incorrectly.

    "making a server application with a language that would tie you to Windows is a very bad idea"

    It depends, maybe your employer is pleased with Windows and doesn't see the need to invest in changing software and staff. In that case using a language that can get the most benefit from a Windows environment would be GOOD. In this case it's a mute point however as ASP.Net is NOT locked down to Windows.

    -Rick

  4. Re:I haven't worked with both, but.... on JSF vs ASP.net · · Score: 0, Flamebait

    "ASP.net, on the other hand, is a Microsoft solution, and you depend on the whims of MS for everything."

    Spoken like a true anti-MS bigot.

    "It runs on little more than Windows/IIS"

    I guess if you consider Linux/Apache "little more" the Windows/IIS then that statement is true.

    "and the only serious IDE for it would be Visual Studio.net"

    And it's probrably one of the best IDEs available. This is the one categoy that MS really pwns the competition, their IDEs are awesome.

    "and good luck trying to run it under mono if you favorite class or function is incomplete or has a bug in its mono implementation"

    Yes because when running a completely non-MS related open source solution you will never find a bug or incomplete functionality. If you're going to pimp OS, do so across the board. Not this "OS roxors, except when it deals with Microsoft!" bantor.

    Me personally, I prefer ASP.Net. I think Java is a great language for web development, but ASP.Net has a few advantages: 1) The IDE. 2) Availability and Cost of developers. 3) External vendor suport available.

    If you already have a shop of Java developers, then 1 and 2 are of little concern. And 3 is a pretty rare requirement.

    -Rick

  5. My email accounts on Spam is Dead · · Score: 1

    about 4 years ago I dropped the email address Ringmstr666@hotmail.com. It was getting 200+ spams a day. Shortly before droping that addy I opened another hotmail account that I have been using ever since. My current hotmail addy is on all of my web registrations, forums, posted publicly on numerous forums and pretty well circulated. I get maybe 5 unsolicited spams a day.

    I get good spam too. list activity, news letters, tech product offers (that I'm actually interested in), and Joel Spolsky's spam (although those ones I can't quite classify as "good".)

    5 with a decent filter on my inbox is nothing to worry about. Spam might not be "dead" but it has been beat back quite significantly.

    -Rick

  6. Re:expansion of pet market on Taiwan Breeds Transgenic, Fluorescent Green Pigs · · Score: 1

    I had a camo case and a black case with flames long before Apple released their jelly fish DNA altered cases.

    -Rick

  7. Re:Alright, another idea that will go nowhere! on Algae That Cleans Emissions and Produces Fuel · · Score: 3, Insightful

    Actually, WI is upping their ethanol blend again, we have a 200mil gal/year soy plant going in just out side of madison, and the new Milwaukee power plant could wind up being one of the most advanced clean coal burning plants in the US.

    The big problem is not solutions, but cost. $3/gallon is the magic point for gas. Unless vehicles shoot way above 30mpg and gas prices don't increase past $3/gal alternative fuels will be cheaper. And the joy of capitalism is that the most financial sound path is the best funded. So yeah, hydrogen fuel cells have been possible for decades. But why would anyone invest in hydrogen when it costs the equivilant of $3/gal of gas today when gas has always been cheaper? If hydrogen costs 15 cents per mile, and gas costs 10 cents per mile, gas is going to get the investment. But when gas costs 13 cents a mile, and is only going to rise, people start looking into hydrogen.

    That's where we're at now, gas is still cheaper, but just barily. As the hydrogen and alt fuel networks expand, and the cost of gas increases, alt fuels will become more and more popular.

    -Rick

  8. Re:Not to state the obvious... on Getting Off NetHack? · · Score: 2, Funny

    Agreed, I find that sex life and MMORPG life are inversely perportional. Untill you get married and/or have a child. At which point both drop dramaticly.

    -Rick

  9. Re:but wait did the MS apologist not say on Two New WMF Bugs Found · · Score: 4, Insightful

    "8 days should have been enough time for MS to completly check the code involved and use every attack possible."

    Yes becuase breaking hundreds of people off their regular duties, tracking down 10 year old code written by someone who either doesn't remember writing it or no longer works there, correcting the code in a way that prevents the exploit, but doesn't impact functionality, testing the correction on all supported versions of windows, numerous hardware configurations, and against dozens of 3rd party software packages that use the library, then documenting the problem, the change, and the disimination of the change, then getting the whole thing wrapped up into a nice neat deployment package, is easy.

    Yeah, I can see how 8 days is slacking.

    Try reading this article: http://blogs.msdn.com/ericlippert/archive/2003/10/ 28/53298.aspx "How many MS Employees to change a light bulb?"

    -Rick

    -Rick

  10. Re:What language? on When Bugs Aren't Allowed · · Score: 1

    I remember one of the first time I went to grab a copy of Ad-Aware (the great anti-spyware app) and wound up with a copy of Ada-ware (an extension package for Ada 95).

    -Rick

  11. Re:Flamebait this! on When Bugs Aren't Allowed · · Score: 1

    "OS would at least have a thing or two to learn from the mere *reading* of the specifications from such projects"

    In the same way that an air frame mechanic might gleam some knowledge from watching "The Great Biker Build Off" on the Discovery channel.

    -Rick

  12. Re:Microsoft error rates on When Bugs Aren't Allowed · · Score: 1

    "I've seen 2 errors in XP that were identical to ones in 3.1."

    Shenanigens. Which ones?

    -Rick

  13. Re:What language? on When Bugs Aren't Allowed · · Score: 1

    Ada is used in a lot of guidence systems and extensively in the Military. My MOS school (4067 Computer Programmer for the Marine Corps in 1997) was focused on Ada.

    -Rick

  14. Re:Flamebait this! on When Bugs Aren't Allowed · · Score: 2, Insightful

    You are completely missing the point of CbyC development. One of the fundamentals is that these apps are RESISTANT TO CHANGE. So yes, MS could make a much more solid OS, IF you ran their, and only their proprietary hardware (as Apple used to/still does), only used the pre-installed applications in the exact manor they were designed to be used, and never drempt of changing anything.

    When you are talking about an air traffic control system, you can set a very specific set of requirements. The Air Traffic Control system will never have to open an Excel worksheet, or run Quake 4, or be compatible with hundreds of other vendors tools. The Air Traffic Control system will never have to deal with someone swaping graphics cards and updating drivers. It doesn't have to worry about spyware and root kits. It doesn't have to worry about internet access.

    If you want to rag on MS, go for it, but don't think CbyC is the answer. It would only result in an OS that you wouldn't want to use. (As a consumer it would be worthless, but it could be great for imbedded systems)

    -Rick

  15. Requirements... don't we all wish on When Bugs Aren't Allowed · · Score: 1

    3 days ago I was given insufficient documentation and no testing information for a new invoice process. I told my Project Manager that the specs were not sufficient, I was told to "Do what you can". Over the last 3 days I have wasted a few hours waiting for people to get out of meetings so I could ask them piddly questions about the new process, double tracking over code as new requirements were "discovered", and dealing with a 3rd party database that isn't designed to handle what the users think they want.

    Today I sent 2 sample invoices up the the leasing department. They didn't understand why certain items where showing up twice (due to multiple transactions for an asset on an invoice), so they sent down two test cases. I ran both test cases and they both failed to pass the original (vague) business rules I was given.

    End result, I wasted 3 days developing an Invioce no one can use because no one could be bothered to come up with a requirements doc.

    -Rick

  16. Re:Even more interesting... on Microsoft Unveils 'Urge' Music Service · · Score: 1

    Just out of curiosity, what's up with the brackets and grammatical errors?

    And I wasn't insinuating that MS was folding their cards in some business deal, I was suggesting that perhaps MTV was significantly more involved in the Urge branding. And that MS was in a position to find a media company with solid branding to co-launch their new software.

    -Rick

  17. Even more interesting... on Microsoft Unveils 'Urge' Music Service · · Score: 4, Informative

    Check out http://www.urge.com/ it looks like MTV owns the rights to the Urge name and it might not be a MS name decision.

    -Rick

  18. You can't stop me! on Microsoft Unveils 'Urge' Music Service · · Score: -1, Offtopic

    I'm doing my happy dance damit!

    -Rick

  19. Re:Not Funny on French Military Police Switches to Firefox · · Score: 1

    Agreed, IF outsourcing and open sourcing goes unchecked, it will lead to a situation where supporting software is the only financially sound business decision and developing software is a waste of resources.

    It's one of the reasons why I don't mind working outside of the IT industry. Most of my app dev career has been spent in non-IT companies writing custom apps for different business systems. The environments and benefits are different, but there's a good amount of job security (can out source over seas for apps that require close communication with the users, and can't open source company sensitive processes.)

    So instead of losing my seat and buying shoes, I'll work for the shoe company on shoe tracking software ;)

    -Rick

  20. Re:Stock prices on French Military Police Switches to Firefox · · Score: 1

    Actually the devaluing of application developers would lead to an excess in the supply of (used) chairs, which would cause the sales of new chairs to plumet and prices to fall. That would likely lead to a reduction in the value of the CHR stocks.

    Funny though. ;)

    -Rick

  21. Re:open-source-poster-child dept? on French Military Police Switches to Firefox · · Score: 1

    Wouldn't this actually be the Freeloaders-And-Leeches department? I mean, the poster child for OS would CONTRIBUTE to the project, either with skill, time, or money.

    -Rick

  22. Re:Hybrid???? on New Aircraft is Part Blimp and Part Airplane · · Score: 1

    The linked to article doesn't have much to it, but the ohio airships site has some more info. The vessle is not boyant like a blimp. Fully loaded on helium with no cargo it will sit on a runway with a 30 knot cross wind. (or so they claim)

    -Rick

  23. Re:Digital Photo Frame on A CES Preview: CES Unveiled · · Score: 1

    Just wait, someone will come out with a device like the universal TV power remote that will allow people to walk up to any WiFi enabled digital frame and toss up pr0n.

    -Rick

  24. Re:Paranoid on Is AllPeers FireFox's P2P "Killer App"? · · Score: 1

    "Let's hope we don't trade safety for neato-gizmo stuff."

    Do you wear a base ball cap or a full face motorcycle helmet when you walk in the park? Are you willing to trade the saftey of a crash tested helmet for the neato-gizmo value of the baseball cap?

    We trade safty for convienence constantly. The same goes for this kind of thing. Is the security risk that someone might download my vacation videos of the kids in Disney Land greator then the convienence of sharing those videos with family and friend quickly and easily?

    -Rick

  25. Already done! on Google Talk Targeted In Patent Lawsuit · · Score: 1

    It's called TCP/IP. Time tested and true, it works excellently at moving data (in various forms) over a communication channel.

    -Rick