Slashdot Mirror


User: Gravis+Zero

Gravis+Zero's activity in the archive.

Stories
0
Comments
4,915
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 4,915

  1. Re:Object serialization is dangerous. on Oracle Calls Java Serialization 'A Horrible Mistake', Plans to Dump It (infoworld.com) · · Score: 1

    That's an artifical distinction you just made up right now.

    No, that' is the default implementation in languages that support it.

    There's nothing stopping you from checksumming your binary data before reading them in, just like there's nothing forcing data field-by-field serialisation from not doing any validation.

    You are correct. However, the sad fact is that doesn't happen in the real world (since it's far easier to not do validation and get away with it until it shows up in a CVE which is the entire premise of them discontinuing it) which is why it's dangerous. Likewise there is nothing stopping a programmer from using goto properly and yet it's avoided like the plague.

    I'm always amused when people who clearly have very little experience in something chime in. Thank you for that.

    I find it depressing that there are so many condescending know-it-alls in tech. Please reconsider your approach to discussions or at the very least you should be correct.

  2. It was Microsoft. on Mystery Donor Pledges $1 Million To The GNOME Foundation (betanews.com) · · Score: 1, Funny

    If you look at the strings attached to the donation, it should be obvious what's going on here.

    Gnome 4 needs to be the Gnome 3 of Gnome 3s! We want a user experience so new, bold and exciting that nobody will believe it! Not just out of the box but in a different galaxy as the box! Also, all applications must be fully usable on smartwatches!

    But hey, I for one welcome our open source sniff-and-spit smartwatches! ;)

  3. Re:Object serialization is dangerous. on Oracle Calls Java Serialization 'A Horrible Mistake', Plans to Dump It (infoworld.com) · · Score: 1

    OP clearly stated that the problem with object serialisation was reading in fields that could be tampered with. I'm genuinely curious about what alternatives to persistence there is that overcomes this "problem".

    When data fields are filled in an object, they are validated by the methods that set them. However, object serialization by it's very nature bypasses these methods of setting data which results in the possibility of restoring object data that would have otherwise been caught by method setting it.

    Like AuMatar wrote, you don't belong in this conversation.

  4. Re:Object serialization is dangerous. on Oracle Calls Java Serialization 'A Horrible Mistake', Plans to Dump It (infoworld.com) · · Score: 2, Insightful

    Regardless of language, object serialization is a dangerous idea.

    Okay then, smartypants, what do you propose for persisting fields of an object?

    I was speaking specifically about object serialization. There's nothing wrong with data serialization but using it for object serialization is asking for trouble. If you don't understand the difference then you should excuse yourself.

  5. Object serialization is dangerous. on Oracle Calls Java Serialization 'A Horrible Mistake', Plans to Dump It (infoworld.com) · · Score: 2, Insightful

    Regardless of language, object serialization is a dangerous idea. While it may seem like a nice idea at first, loading objects from unverified mutable data is an invitation for someone to tinker with that data. The situation only gets worse when your object structure changes because now your object data is invalid or incomplete.

    Much like goto, I'm not arguing that it's not useful but rather that it's use it is inherently dangerous.

  6. Much ado about round corners on Samsung Must Pay Apple $539 Million For Infringing iPhone Design Patents, Jury Finds (cnet.com) · · Score: -1, Troll

    Just wait, I'm going to patent a smartphone with sharp corners and then sue everyone who isn't using round corners! ;)

  7. Clearly US embassies are haunted. ;)

  8. "Stolen" on About $1.2 Billion in Cryptocurrency Stolen Since 2017 (reuters.com) · · Score: 2

    I think we know what really happened. #UsedToBeABitcoinBillionaire ;)

  9. nobody has updated his Wikipedia page to report his death and it's even the primary article link!

  10. Obvious conclusion: on The Whole World is Now a Computer, Says Microsoft CEO Satya Nadella (zdnet.com) · · Score: 0, Flamebait

    Microsoft CEO Satya Nadella is a fucking idiot.

  11. Twitter is killing them? on Twitter Is Killing Several of Its TV Apps, Too (techcrunch.com) · · Score: 1

    MURDERERS! Oh, wait, shutting down? You wrote they were killing them, you lying bastards. *sigh*

  12. Well ... if Amazon is selling this to whoever, then I'm sure some "protesters" will also use this to face ID people at the "wrong" political rallies, etc.

    You mean neo-nazis, right? White supremacy isn't a political position, it's racism.

    Since "protesters" love to get people fired, blacklisted, harassed at home, etc. that should be fun.

    The solution is simple, don't be a racist.

    The irony of racism is that the highest level of genetic diversity (lots of "race mixing") ultimately results in superior offspring. That's not a political view, that's scientific fact (see also Darwinism).

  13. Not about FLAC or OGG on Faster Audio Decoding and Encoding Coming To Ogg and FLAC (phoronix.com) · · Score: 1, Troll

    I expected that since they were listing formats that somehow the formats had been modified. However, these improvements are not to FLAC or OGG but rather one implementation. What's worse is that these aren't even the most commonly used implementations.

    The headline is garbage and if you voted for this story then you deserve a spanking. >:(

  14. A journalist just caught the tail end of an epic diss-fest between two astronomers asserting that "your mama so fat..." ;)

  15. Re:I see only liberals whining on Treasury Secretary Steve Mnuchin Wants Justice Department To Scrutinize Big Tech (cnbc.com) · · Score: 1

    The drumbeat to investigate Google and Facebook started long before Trump. In fact the current push is primarily a response to Trump winning, in part because he was able to use Facebook analytics as effectively as Obama...

    Actually, the issue here is not that candidate XYZ won but that it enabled a foreign power to manipulate voters.

    And because they helped Trump, even if inadvertently, Google and Facebook must pay.

    There was and is nothing inadvertent about what the "Internet Research Agency" does. Trump is simply a bit character in this whole mess.

  16. No. on Can This New Treatment Stop the Common Cold? (fortune.com) · · Score: 4, Insightful

    How do people not know Mr. Betteridge by now?

  17. Waiting for the backlash. on Utilities, Tesla Appeal Federal Rollback of Auto Emissions Standards (arstechnica.com) · · Score: 1

    This deeply corrupt administration isn't going to be in charge forever (hell, I'd be surprised if the make it March) and there is going to be a backlash for all of this. Don't be surprised if the new regulation is ever stricter and then subsequently codified into law.

  18. Re:Live by the executive order. on Utilities, Tesla Appeal Federal Rollback of Auto Emissions Standards (arstechnica.com) · · Score: 2

    Live by the executive order. Die by the executive order.

    Seems you don't understand the difference between executive order and regulation.

    Shysters must be a sunk cost, at least this will keep them out of real trouble.

    Would you say the same thing if the next administration suddenly made companies pay to clean up every bit of pollution they generate and thus shutting down every coal energy plant inside a year? No, you would scream like a banshee.

    Environmental capital is a very real thing and it must be repaid to keep the planet from becoming uninhabitable for most species.

  19. Re:The Windows Kernel FTFY on Ask Slashdot: What's the Most Sophisticated Piece of Software Ever Written? (quora.com) · · Score: 1

    i for one am waiting on the win10 bugs relase notes

    Don't ask for a printout or it will bury you alive. ;)

  20. Translation: on Canonical Shares Desktop Plans For Ubuntu 18.10 (ubuntu.com) · · Score: 3, Insightful

    We can and will make this Linux distribution worse! ;)

  21. Naturally? on California Bypasses Science To Label Coffee a Carcinogen (undark.org) · · Score: 4, Insightful

    acrylamide, a substance created naturally during the brewing process

    Since when did coffee beans naturally brew themselves?

    Just sayin'

  22. Re:What was visionary in 2012 is a crime in 2016 on Justice Department, FBI Are Investigating Cambridge Analytica (cbsnews.com) · · Score: 0

    He got some people to finally care about privacy.

    FTFY. 20M people quit Facebook which isn't even a tenth of the number of fools that have signed up in the US.

    People weren't only indifferent. They were slobbering in ecstasy over the likes of google and obama for vacuuming all their PI everyday. Trump changed all of this.

    Exposing the depths (and more importantly the success) of manipulation by Cambridge Analytica is what woke some people up. However, this is just a repeat of the same old selfish pattern: people don't really care about some issue until it affects them personally. Do you think Trump voters suddenly cares about their privacy? I'm betting they are as indifferent as ever.

  23. Re:Dupe and Wrong on Encrypted Email Has a Major, Divisive Flaw (wired.com) · · Score: 3, Funny

    PGP is not broken. GPG is not broken. S/MIME is not broken. The flaw is in how mail clients display email.

    I don't buy it. I mean, if there were just a mail client issue then why am I already flailing my arms and screaming? ;)

  24. Re:Another one bites the dust... on Supreme Court Strikes Down Federal Law Prohibiting Sports Gambling (espn.com) · · Score: 5, Informative

    Good. Another law regulating harmless activities between consenting adults bites the dust...

    Gambling doesn't occur in a vacuum.

    Studies: Casinos bring jobs, but also crime, bankruptcy, and even suicide

  25. This is great! on Boston Dynamics' SpotMini Robot Dog Will Go On Sale Next Year (cnet.com) · · Score: 2

    I can't wait to be hunted down and killed by this unfeeling machine! ;)