it is likely that many of the examples will no longer work as described. I know that is the case with current version Agile Web Development with Rails.
I guess that would depend on your definition of current. There is a new version in beta that has already been largely updated, and continues to actively follow Rails development.
Disclaimer: with this edition, I was recruited to be one of the authors of this book.
It was intended as a rhetorical question. I was told to think "radical" after all.;-)
Break only affects carefully constructed messages
on
More on Newly Broken SHA-1
·
· Score: 4, Informative
The new SHA-1 break only affects very carefully constructed messages. This means that it is completely useless for an attacker impersonating an existing message, unless that message was purposely constructed to be attackable. The attack is only useful if the attacker creates both messages, and the attacker can choose the exact format of both messages.
CIL = Common Intermediate Language. You will often see the term MSIL used instead. For that matter, MS refers to their implementation of the CLI as the CLR (Common Language Runtime).
MSCOREE and MSCORLIB is actually part of the ECMA standard.
I saw this slightly differently. Some of the other presenters and much of the audience were hostile, and in general MS came off moderate. If the open source community wants to focus on progress, it needs to be less confrontational.
In general, I was impressed by the number of MS people at this event. They seem to be listening.
The specific question (I was there) was wheter a palm pilot could issue a request to a Linux server using the Hailstorm API's without requiring any Microsoft software acting as an intermediary.
Of course Dave points out that open source has noticed XML RPC (his baby), but the open source community has also discovered SOAP: http://xml.apache.org/soap/.
I've discussed this with Dick Hardt - we need to work through the process by which third parties can contribute to the code base, but he is very interested.
Disclaimer: with this edition, I was recruited to be one of the authors of this book.
A closer Ruby equivalent to the Java sample would be as follows:
def cancelAll(c)
c.each { |t| t.cancel }
end
It was intended as a rhetorical question. I was told to think "radical" after all. ;-)
The new SHA-1 break only affects very carefully constructed messages. This means that it is completely useless for an attacker impersonating an existing message, unless that message was purposely constructed to be attackable. The attack is only useful if the attacker creates both messages, and the attacker can choose the exact format of both messages.
What's to stop the From:, To:, and Cc: fields from being spoofed (like a lot of viruses do)?
The "syndication format previously known as Echo" is now known as Atom.
CIL = Common Intermediate Language. You will often see the term MSIL used instead. For that matter, MS refers to their implementation of the CLI as the CLR (Common Language Runtime).
MSCOREE and MSCORLIB is actually part of the ECMA standard.
intro, guide, and more.
MEEPT!!. I can't exactly explain why, but I miss those posts.
I don't.
See Jakarta's whoweare.
Also, once reinfected (by whatever means), I would presume that the rename would fail.
Renaming c:\explorer.exe should help.
Here's a passport equivalent under development: dotgnu.
If you want one of those, take a look at dotgnu, but even there the strategy is to be a REPLACEMENT, not a plug compatible Microsoft clone.
Troll.
Check again: the primary author is KEVIN Burton.
Have you?
No. My only comment is that their level of attention to this has changed dramatically recently. And it is not merely dismissive.
In general, I was impressed by the number of MS people at this event. They seem to be listening.
The specific question (I was there) was wheter a palm pilot could issue a request to a Linux server using the Hailstorm API's without requiring any Microsoft software acting as an intermediary.
Not the first time such a thing has happened. See Apple, Carl Sagan settle suit over names.
http://www.southern-storm.com.au/portable_net.html
Of course Dave points out that open source has noticed XML RPC (his baby), but the open source community has also discovered SOAP: http://xml.apache.org/soap/.
It isn't just Microsoft's SOAP. There is an Apache implementation here. The spec has also been accepted by the w3c, and renamed to XP
I've discussed this with Dick Hardt - we need to work through the process by which third parties can contribute to the code base, but he is very interested.
Microsoft.
Do you really think Microsoft would fork a GPL implementation and open source their improvements? If they did, would that really be so bad?