Slashdot Mirror


User: Secret+Rabbit

Secret+Rabbit's activity in the archive.

Stories
0
Comments
675
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 675

  1. Re:Point of fact... on PHP Application Insecurity - PHP or Devs Fault? · · Score: 1

    What you're complaining about amounts to bitching at the gun manufacturer because guns don't have a "don't shoot own foot" "feature." Basically, IF YOU KNOW that PHP does NOT do validation, THEN DO IT YOURSELF! If you don't want to do that, then DON'T USE PHP!

    This also reminds me of something along parallel lines that one of my former Physics Prof. (may he rest in peace) said, "Ignore the symmetry at your own peril." Or in this case, "Ignore the way the language works at your own peril." Either way, you're just as stupid.

    Basically, and I quote my original post here:

    """
    This is real life, not nursery school. Take responsibility for your actions/knowledge or lack thereof, stop blaming the language, shut up and do you job properly!
    """

  2. Point of fact... on PHP Application Insecurity - PHP or Devs Fault? · · Score: 0

    ... no language is idiot proof nor can a language be idiot proof.

    Secure programming can be mostly done by defining an extremely narrow band of valid input and strictly requiring said input... for everything. Which mostly doesn't happen from what I've seen.

    Why does SQL injection work? Because of improper validation. Another cause of insecure code is because of a high level of complexity (usually needless complexity). Why does this happen? Because mentally challenged project managers (and up) make ridiculous schedules for the developers and as such, the developers are forced to rush. This leads to bad design, cutting corners, etc. There's clearly going to be security implications in there.

    You might notice that the above doesn't make reference to any particular language. That's because such things are *independent of the language!!!*

    From what I've seen, PHP pumps out "less secure" code not because of the language itself (i.e. the interpreter, etc), but because it is easy to learn. So, you have a bunch of graphic designers, etc that want to program the site themselves, so they learn PHP. Now how secure do you think that there code will be?

    Languages don't currently hold it for you while you piss, nor should they.

    Basically, "make it idiot-proof, and someone will make a better idiot."

    This is real life, not nursery school. Take responsibility for your actions/knowledge or lack thereof, stop blaming the language, shut up and do you job properly!

  3. Re:What's wrong with ncurses? on Which Text-Based UI Do You Code With? · · Score: 1

    Sir, you embarrass yourself and I fully believe that you don't realize this. I for one, b/c of the above, will no longer reply to any of your posts.

    Good day.

  4. Re:Why not open it now? on Pegasus and Mercury Circling the Drain · · Score: 2, Funny

    No shit! It's like this guy is looking for a bribe to open the code.

  5. Re:What's wrong with ncurses? on Which Text-Based UI Do You Code With? · · Score: 1

    I find it interesting that instead of actually commenting on what I said, you go for the "I'm older and wiser don't argue with me" BS.

    Basically, I used my experience, education and what info the guy/gal gave /. to form an opinion. Care to do the same? You know, instead of this childish posturing.

  6. Re:What's wrong with ncurses? on Which Text-Based UI Do You Code With? · · Score: 1

    Well, he did ask for a text based UI. Just using stdout isn't exactly what I would call a text based UI.

    For that matter, since the people (s)he's developing for are moving from a AS/400. So, they're probably used to something like ncurses.

    Also, personally when I see scrolling text, I think of config scripts and the like. But, something like ncurses gives me the feel of an actual application (not to mention *far* more control over the output i.e. highlighting, colours, etc). I honestly think that there is a reason for this given that I've lived in terminals for most of my computer experience. That reason, IMO, being a long the lines of an unspoken standard.

  7. What's wrong with ncurses? on Which Text-Based UI Do You Code With? · · Score: 3, Insightful

    IMO, unless you can give a good reason why you shouldn't use ncurses, use it.

  8. Trivial result on Researchers Create Selfish BitTorrent Client · · Score: 0

    Of course a protocol can be taken advantage of, how is this news? But, responsible researchers would point out the flaw, tell the bittorrent people and come up with a fix or work with the bittorrent people to make a fix. At most, responsible researchers would make proof of concept (which can be done by paper and pencil btw), NOT making a full blown client and publish it for 3 different platforms.

    Something tells me that these guys are looking for there 15 minutes instead of doing good research.

  9. Re:DMing a Cylon player would be hard... on Battlestar Galactica Pen and Paper RPG · · Score: 0, Redundant

    Your scenario 1 assumes metaphysical things that the game does not.

    Your scenario 2 assumes things about how YOU think a GM MUST run the game. Quite frankly, I'd never do this, nor would anyone I know.

    Your scenario 3 assumes that Centurions have no independent thinking abilities. This plainly isn't true as we've seen them exercise independent thinking before when searching for Halo and Boomer on Caprica (?). We know that they are given a general command (e.g. search and destroy) and then they execute as they see fit. If a Centurion noticed a threat at least a couple would break away to investigate.

  10. Re:License RPGs... on Battlestar Galactica Pen and Paper RPG · · Score: 3, Interesting

    I don't really agree with anything that you've said.

    I've run many games in D&D, A D&D 1st and 2nd ed. and have played in several Shadowrun campaigns. I've got to say, that in each instance, the books, etc just gave a world to play in. Canon, etc was pretty much ignored and everything came from the guy/gal running the game.

    This IMO is how table top RPG's should be. You give the player(s) a world to play in, and let them go. The only thing that the game should enforce is the limitations from equipment, fighting ability, etc. But, why should it restrict what must happen in game entirely? That really wouldn't be very fun.

    Oh, and BSG doesn't necessarily account for anyone. After all, there was that other Battlestar running around. Who's to say that there isn't another one running around? Who's to say that there isn't other civilian ship(s) running around either?

    Personally, I'm going to reserve judgement until I actually see the thing.

  11. Take a queue from highschool on George Orwell Was Right — Security Cameras Get an Upgrade · · Score: 1

    We all remember when in class, at a specific time, the students would organize a textbook drop. Everyone knows how loud a textbook is when it hits the ground. Imagine when 30 hit the ground at the same time. It's deafening.

    Similarly, why don't people find out where all these talking cameras are and organize a coffee cup drop... often.

    Drop a cup of coffee. If the "man behind the curtain" starts talking, flip the bird and walk away. Also, optionally but recommended, hand out something that explains what you're doing.

    Civil disobedience still has its place in the world.

  12. Re:Time of the loud mouth jackass begins in the ai on First Cellphone Use On Airplane Given OK · · Score: 1

    Didn't they do that in Mission Impossible? Perhaps we can snag some specs.

  13. Time of the loud mouth jackass begins in the air on First Cellphone Use On Airplane Given OK · · Score: 2, Funny

    We have all be subjected to the loud mouth jackass before. You know, the one that answers his/her phone in a restaurant and basically yells so that everyone can see/hear how important they are. Now the one save place we have from these people is going away.

    Perhaps we can convince the airlines to make the engine noise louder to drown them out.

  14. Most important aspect? on FSF Launches "BadVista" Campaign · · Score: 2, Interesting

    """
    the most important aspect of owning and using a computer: your control over what it does
    """

    So, who's opinion is this? B/c I know that my parents and any "normal" person that I've run into couldn't care less about ultimate control over there computer aside from being able to install M$ Word, etc and run a few games on it like MahJong. Since I do believe that Vista will allow this, I really don't think that any other freedom that might be limited will even be noticed.

    So, how important is this to the average user?

    On the flip side, those that need and/or want to have total control over what there computer does are probably already running a Linux/BSD/etc. That or they know how to bend windows to meet there needs.

    All this campaign will do is further confuse an already very confusing issue for the average user.

  15. Brought to you by... on White House Clamps Down On USGS Publishing · · Score: 2, Insightful

    ... your unfriendly neighbourhood big brother.

    In all seriousness, does this actually surprise anyone?

  16. SpiderMan on Scientists Developing Commercially Viable Synthetic Gecko · · Score: 3, Funny

    I can hardly wait! When this is out I can /really/ play Spiderman!!

  17. This is only an issue... on Why Do Computers Take So Long to Boot Up? · · Score: 1

    ...if you have extreme problems with regards to patience.I mean seriously, this guy is complaining about 30 seconds?In what world is 30 seconds (what, once a day?) so significant that it must be eradicated without prejudice?

  18. Re:server written in Java?!?! on Firefly MMORPG Announced · · Score: 1

    We aren't talking about the client, we're talking about the server.

  19. Re:server written in Java?!?! on Firefly MMORPG Announced · · Score: 1

    Ok, let's assume that the Puzzle Priates server is written in Java.

    I just went to there web site and right on the frontpage it stated that 5079 pirates are currently online. That really isn't all that many people.

    It has been a while since I looked into Puzzle Pirates in depth, but from what I recall, the reason why performance wouldn't really be an issue is the way that they handle things like searching for treasuer, etc. Basically, it does /not/ require constant anything over the wire nor much computation power. It works for them b/c of the way the game is designed.

    What I'm saying is that since most MMOG are of the type of Everquest/WoW/SWG/etc, the requirements would be much higher. Since this FF/S game is probably going to be at least along the lines of the previously mentioned (I base this on other games being developed with the multiverse tools), then Java is not exactly the best choice for this particular situation.

  20. server written in Java?!?! on Firefly MMORPG Announced · · Score: 0, Troll

    Yah, they'll get good performance out of that.

    Seriously, when dealing with the c2k problem, people should run away screaming from Java. I guess they'll have to find out the hard way when they run into performance problems.

  21. pet peeve on DHS Passenger Scoring Almost Certainly Illegal · · Score: 2, Funny

    One of my pet peeves is the word "deplane". It is NOT deplane, it is DISEMBARK!!!

    Jesus, when did the airlines have such a low opinion of their passengers that they think that they don't know what disembark means?

    Seriously, deplane? Sound more like delouse. AAAAAHHHHH, get these planes off me!!!

  22. complete crap on Professor Comes Up With a Way to Divide by Zero · · Score: 1

    All this guy has done is redefine what the real number line is and a few numbers. Let's go over his major mistake:

    inf \neq 1/0

    To get this one must do:

    lim_{x->0^+} 1/x

    Similarly for -inf.

    But one must note that if we approach 0 from the left then the sign flips. But that's another story.

    What he did was an operation that was undefined.

    This guy is playing with a NEW number line of his own invention. Also, this NEW number line has not been shown to be mathematically consistent in any way shape or form.

    This guy is a mathematical moron and he should be embarrassed to publish this.

    I guess that math degree of mine has proved itself handy after all ;)

    I just told the wife (PhD in Physics) and she has informed me that this happens in her field as well. Basically, Engineers learn a little bit of physics, think they know what they're talking about, and come up with "better" alternatives to relativity, etc. This apparently is what happens with the Comp Sci people as they learn a little bit of math, and think they come up with "solutions" to math problems.

    I honestly think that it'd be best if we'd all stick to basically our own major subject domain.

  23. NO! on Would You Trust RFID-Enabled ATM Cards? · · Score: 1

    Wholely crap NO!!! A question to you is, what the hell is wrong with you that you'd even need to ask this question?

  24. Re:Collateral damage on Millimeter-Wave Weapon Certified For Use In Iraq · · Score: 1

    I am very aware that it is electormagnetic radiation that is involved here. I am also very aware of the damage that can happen give a "proper" dose.

    Also, you are assuming that they are going to issue equipment that isn't capable of delivering a lethal dose. Just like any tech, the cap will probably be able to be worked around. As well, you are assuming that the person operating the equipment is aware of the consequences of going over the "safe limit". This just isn't the case. IMO the operators will most likely haven't a clue.

    We live in a society exquisitely dependent on science and technology, in which hardly anyone knows anything about science and technology. ~Carl Sagan

    Here's what I know that's going to happen. The police/military/etc are going to say that they need some "safety" button there to deliver a massive general surge in case they platform where the device is gets stormed and they need to basically drop everyone rushing the platform. Can anyone see a possibility of abuse here?

    I mean, we all know that the military/etc is basically incompentent/megalomaniac/etc to a large degree. IMO, abuse is just a matter of time.

  25. Re:Collateral damage on Millimeter-Wave Weapon Certified For Use In Iraq · · Score: 1

    If someone is causing problems (e.g. running around and destroying stuff) then rubber bullets and batons are fairly acurate in getting at those people. Indiscriminant pain, not so much.

    Also, if you read my original post, I said NOTHING about tear gas being able to target specific people. I was talking about batons then and I specifically stated that.