Your CGI or script or other middleware should be validating input. Not javascript, not the SQL server, the script/middleware.
As a responsible programmer, under no circumstances are you ever to trust client code to directly access a data source, or to allow your middleware to allow unchecked data to a data source.
Anyone who lets un-checked client data into any SQL server, constraints or not, deserves death, as far as I can tell, lazy ought to be a crime in that regard.:)
I agree, I run an entire user management system ISP-wide (smtp, pop, NSS auth, radius, dns, apache autoconf via NSS, etc) on MySQL with no problems, the most complicated thing that I ever have to do in all of that is a multi-table select (using 2 indexes across 2 tables is sometimes faster, esp. with indexes of blob data, than one large index), and mysql has no issues with those.
The only real problem with mysql is that when its under load you have to continually tell it to optimize tables after making changes, otherwise it lets it fall behind untill it goes to a crawl. I push several thousand (select) queries a minute through it without problem, but if you do an update or insert you really should optimize or run something in the background that optimizes regularly.
Data storage is sometimes all you need, if your application has a clue, anyway.
You are wrong. Why don't you read the fucking article. Mabye you could quit being some kind of egotistical openbsd-zelot as well?
It deeply concerns me that the RIAA is offline
on
RIAA Smacked by DoS
·
· Score: 2
So, since obviously, we all want to know when it will be back up, I strongly recomend everyone just run a generic ping process in the background and wait for a reply! Then we can flock back to the RIAA's website and feel at ease again.
After all, we don't want to DDoS them, we just want to check to see if the site is running again. A simple process executed by the slashdot masses out of concern for the RIAA....:)
You are taking a direct copy of a copyrighted work and playing it as your own. A more refined analogy is that you find a place on the Internet that will ship you the part, free of charge, and that the part was illegally created, breaking copyright laws.
...
More so, a copyrighted work I have the rights to use, that sits on a defective peice of media that replacements are not available for.
It's not the fault of the person downloading that a ROM was illegally created, its the distributer/creator of said ROM's problem. As for the person who owns the right to use the game, I hardly think it's against terms of fair use to utilize said software in any form it is available in.
Let's use your car analogy, let's say your old POS car needs a new engine, block up, and you can't find anything. Let's say some other POS owner decides to post the specifications of the engine on the internet, including block casting sizes, etc, but company XYZ that made the 1960 POS dosen't like that, since they still use the block design in a newer car and claim its trademarked/copyrighted/DMCA'd to death/whatever. Do you a) ignore company XYZ's complaint, since obviously, your car is 40 years old and whatever you do to it to replace the engine with one based on the original should be legal, b) flame the guy who loves his car and posted information on how to replace parts of it (that are of value to you) for violating company XYZ's wishes, even though their shitty car's engine block disinigrated because it was made from some cheap crappy alloy.
Last time I checked I was no longer able to buy brand new original 8-bit Nintendo cartridges.
I still own a brand new 8-bit Nintendo.
It works fine.
I am prevented, from a legal standpoint, of any easy way to back up or restore games to and from cart's, as far as nintendo is concerned.
Nintendo may have this right, but in reality nintendo does not provide replacements for the cart's themselves, how do you deal with that?
What rights to software owners have when software is abandoned?
None?
It's one thing to pirate music you can go buy from a store, I tend to beleive it's another thing alltogether when you download a replacement copy of software you honestly do own -- but even if, the law has made it difficult to put the game back into a cart for play on the original system, so when you talk about roms+emulators, then everyone automatically assumes you stole XYZ and your a damn dirty ape just because that's what corporate america has spoon fed them.
Mabye you should start thinking more about freedom and less about being pissed at people who cry wolf early and often to preserve your rights.
The main problem I have is when I've lost focus on a project, mostly this is a internal political problem at the company, that causes a project that a developer designs to be completly retrofitted by some marketing f*ck who dosen't know what he's doing.
Once that happens, the project goes downhill. It dosen't *always* happen, it just *usually* happens.
What I find is that if you give each person of a group a rough idea of what they have to work with and what each chunk of code has to return or do, it will get done. Once you start spoon-feeding it to them, they no longer care to complete the project (multiply this by 1,000,000 if the person spoon-feeding is not technically inclined).
Of course, I would have absolute faith in my employer under all conditions if they did things for me more offten, like random "take a day off", and mabye the occasional cash bonus at the finish of projects, but it just isin't going to happen and that's why most programmers are just hired guns, going to whatever job pays more. Having faith in my employer would most certianly give me a sense of purpose while listening to the mindless drivel of a marketoid trying to figure out if blue or red is a better color for a text box (actually happened to me, I interrupted the meeting and asked if I should go fetch a box of crayons for them to decide with, this didn't help:).
But then again, isin't some kind of faith in your job what motivates employees at most companies?
I am getting tired of hearing that company/organization XYZ has more control over something I own than I do.
I'm going to spend the next week ripping shit out of my car that dosen't need to be there. EFI? F*ck that, we're going back to a carburator since I can't trust the god damn ECU not to call the NSA if I drive too close to the Pentagon.:P
It adds more delight to my day to think of the two file swappers racing down a 2 lane road when it happens.:) P2P + Street Racing! The RIAA and the police will finally have a joint project with a purpose.:P
That's most likely a result of 2am web page design. Any unix developer type who makes a quick webpage for his application at 2am is going to have the webpage come out with as many bugs as his 2am code, but HTML dosen't whine when you typo like C does.:)
It has alot of tweakable settings, none of which I can preform myself but if I give the kid who works for the big bad car dealer $10 he'll do whatever I want.
Next car I buy, I will demand open specifications for, I'm getting tired of paying the kid to do what should have come with the car that I own.
I'm sure as fuck not signing a EULA when I buy my car not to violate its software.
I got it by beating the rally courses after I got my rally license in my Subaru Impreza WRX.:) Search for "Suzuki Escudo Twin Peaks" on google. this is the most relevant link I can find
Actually, I drive an Acura RSX. The Fuel Injection system in that thing is @#$%@#$ restrictive as hell out of the factory. I've yet to see any software to edit the ECU in the Integra or RSX, replace the unit, yes, modify the existing, no. And replacing it is the part that violates Californian (CARB) laws here in the US.
Fuck you man, the Suzuki Escudo Twin-Peaks edition rocks -- you can just go blindly arround the track and bounce off shit, it dosen't matter! I mean, fuck, everyone needs two engines in their car just for that reason.
It's actually not hard to read ECU ODB-II interfaces -- so easy that a little time spent googling can find howto's -- the big problem is that the code for re-programming the ECU is not available freely.
If there was a good programmable ECU, like this one, available at less than $1200 that worked with 99% of all new cars, it would be worth buying. The problem with AEM's unit is that they have major difficulties keeping up with automatic transmissions on new cars, so if you own a 2002 auto, no joy for you. Oh, the other problem with them is that they aren't legal for on road use. heh.. but that's a minor setback, neither are half the aftermarket exaust systems that people have on their cars.
I think I'm going to tell my next car dealer I want an open-source car.:(
Slashdot Mirror
I have Troll, and Flamebait, set to auto +5.
That's why logging in is half the battle!
Your CGI or script or other middleware should be validating input. Not javascript, not the SQL server, the script/middleware.
:)
As a responsible programmer, under no circumstances are you ever to trust client code to directly access a data source, or to allow your middleware to allow unchecked data to a data source.
Anyone who lets un-checked client data into any SQL server, constraints or not, deserves death, as far as I can tell, lazy ought to be a crime in that regard.
I agree, I run an entire user management system ISP-wide (smtp, pop, NSS auth, radius, dns, apache autoconf via NSS, etc) on MySQL with no problems, the most complicated thing that I ever have to do in all of that is a multi-table select (using 2 indexes across 2 tables is sometimes faster, esp. with indexes of blob data, than one large index), and mysql has no issues with those.
The only real problem with mysql is that when its under load you have to continually tell it to optimize tables after making changes, otherwise it lets it fall behind untill it goes to a crawl. I push several thousand (select) queries a minute through it without problem, but if you do an update or insert you really should optimize or run something in the background that optimizes regularly.
Data storage is sometimes all you need, if your application has a clue, anyway.
You are wrong. Why don't you read the fucking article. Mabye you could quit being some kind of egotistical openbsd-zelot as well?
So, since obviously, we all want to know when it will be back up, I strongly recomend everyone just run a generic ping process in the background and wait for a reply! Then we can flock back to the RIAA's website and feel at ease again.
:)
After all, we don't want to DDoS them, we just want to check to see if the site is running again. A simple process executed by the slashdot masses out of concern for the RIAA....
More so, a copyrighted work I have the rights to use, that sits on a defective peice of media that replacements are not available for.
It's not the fault of the person downloading that a ROM was illegally created, its the distributer/creator of said ROM's problem. As for the person who owns the right to use the game, I hardly think it's against terms of fair use to utilize said software in any form it is available in.
Let's use your car analogy, let's say your old POS car needs a new engine, block up, and you can't find anything. Let's say some other POS owner decides to post the specifications of the engine on the internet, including block casting sizes, etc, but company XYZ that made the 1960 POS dosen't like that, since they still use the block design in a newer car and claim its trademarked/copyrighted/DMCA'd to death/whatever. Do you a) ignore company XYZ's complaint, since obviously, your car is 40 years old and whatever you do to it to replace the engine with one based on the original should be legal, b) flame the guy who loves his car and posted information on how to replace parts of it (that are of value to you) for violating company XYZ's wishes, even though their shitty car's engine block disinigrated because it was made from some cheap crappy alloy.
Hmm?
Last time I checked I was no longer able to buy brand new original 8-bit Nintendo cartridges.
I still own a brand new 8-bit Nintendo.
It works fine.
I am prevented, from a legal standpoint, of any easy way to back up or restore games to and from cart's, as far as nintendo is concerned.
Nintendo may have this right, but in reality nintendo does not provide replacements for the cart's themselves, how do you deal with that?
What rights to software owners have when software is abandoned?
None?
It's one thing to pirate music you can go buy from a store, I tend to beleive it's another thing alltogether when you download a replacement copy of software you honestly do own -- but even if, the law has made it difficult to put the game back into a cart for play on the original system, so when you talk about roms+emulators, then everyone automatically assumes you stole XYZ and your a damn dirty ape just because that's what corporate america has spoon fed them.
Mabye you should start thinking more about freedom and less about being pissed at people who cry wolf early and often to preserve your rights.
I'm sure they'd give you $50 just to take away the case of miller lite.
Don't connect to gnutella either, you might be attempting to break federal trademark laws...
The main problem I have is when I've lost focus on a project, mostly this is a internal political problem at the company, that causes a project that a developer designs to be completly retrofitted by some marketing f*ck who dosen't know what he's doing.
:).
Once that happens, the project goes downhill. It dosen't *always* happen, it just *usually* happens.
What I find is that if you give each person of a group a rough idea of what they have to work with and what each chunk of code has to return or do, it will get done. Once you start spoon-feeding it to them, they no longer care to complete the project (multiply this by 1,000,000 if the person spoon-feeding is not technically inclined).
Of course, I would have absolute faith in my employer under all conditions if they did things for me more offten, like random "take a day off", and mabye the occasional cash bonus at the finish of projects, but it just isin't going to happen and that's why most programmers are just hired guns, going to whatever job pays more. Having faith in my employer would most certianly give me a sense of purpose while listening to the mindless drivel of a marketoid trying to figure out if blue or red is a better color for a text box (actually happened to me, I interrupted the meeting and asked if I should go fetch a box of crayons for them to decide with, this didn't help
But then again, isin't some kind of faith in your job what motivates employees at most companies?
*shrug*
Just my 2 cents.
If you post as AC, no one will beleive you. :)
Since generally you own your car, it shouldn't be an issue. When auto makers start only leasing vehicles and never selling them, be wary. :)
I am getting tired of hearing that company/organization XYZ has more control over something I own than I do.
:P
I'm going to spend the next week ripping shit out of my car that dosen't need to be there. EFI? F*ck that, we're going back to a carburator since I can't trust the god damn ECU not to call the NSA if I drive too close to the Pentagon.
You are infringing on my patent, which clearly covers your post above.
Prior art, which I created, is located here.
Please be prepared to pay royalty payments of $500 per letter of lameness filter bypassing text. Thank you.
He's practicing to be a pointy haired boss if he's successful.
It adds more delight to my day to think of the two file swappers racing down a 2 lane road when it happens. :) P2P + Street Racing! The RIAA and the police will finally have a joint project with a purpose. :P
That's most likely a result of 2am web page design. Any unix developer type who makes a quick webpage for his application at 2am is going to have the webpage come out with as many bugs as his 2am code, but HTML dosen't whine when you typo like C does. :)
"I see your point. Still, would you say the same for all the Windows users that did not patch there IIS code when Red Code hit?"
...
What about all the people who STILL ARE infected with code red?
"My house is being robbed. I don't know any better so I just let them do it."
...
Eh, at least its a rebadged prettier Civic Si.
It has alot of tweakable settings, none of which I can preform myself but if I give the kid who works for the big bad car dealer $10 he'll do whatever I want.
Next car I buy, I will demand open specifications for, I'm getting tired of paying the kid to do what should have come with the car that I own.
I'm sure as fuck not signing a EULA when I buy my car not to violate its software.
yeah, but its like a million bucks.
:) Search for "Suzuki Escudo Twin Peaks" on google. this is the most relevant link I can find
I got it by beating the rally courses after I got my rally license in my Subaru Impreza WRX.
TROLLS HELPING TROLLS. GOD DAMN. WHAT HAS THE WORLD COME TO.
THIS BLOCK OF TEXT MAKES ME LESS LAME, CMDRTACO SAYS SO:
sdklfjlksjdf
sdjflsd
sdlfkjl sdfklj sdkfjl sdfklj sldkfjlalwel welrkj eklrjldfiuviocuo???
ldfjklsdfjkflsd! sdjklflk sdlfkjlk sdfklj kljsd flkjsdklfjklj klsdjfkl klj sdklfj.
Actually, I drive an Acura RSX. The Fuel Injection system in that thing is @#$%@#$ restrictive as hell out of the factory. I've yet to see any software to edit the ECU in the Integra or RSX, replace the unit, yes, modify the existing, no. And replacing it is the part that violates Californian (CARB) laws here in the US.
Fuck you man, the Suzuki Escudo Twin-Peaks edition rocks -- you can just go blindly arround the track and bounce off shit, it dosen't matter! I mean, fuck, everyone needs two engines in their car just for that reason.
It's actually not hard to read ECU ODB-II interfaces -- so easy that a little time spent googling can find howto's -- the big problem is that the code for re-programming the ECU is not available freely.
:(
If there was a good programmable ECU, like this one, available at less than $1200 that worked with 99% of all new cars, it would be worth buying. The problem with AEM's unit is that they have major difficulties keeping up with automatic transmissions on new cars, so if you own a 2002 auto, no joy for you. Oh, the other problem with them is that they aren't legal for on road use. heh.. but that's a minor setback, neither are half the aftermarket exaust systems that people have on their cars.
I think I'm going to tell my next car dealer I want an open-source car.