Slashdot Mirror


User: Aethedor

Aethedor's activity in the archive.

Stories
0
Comments
290
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 290

  1. Re:Stop. Using. Wordpress!! on Timeline Of Events: Linux Mint Website Hack That Distributed Malicious ISOs (softpedia.com) · · Score: 1

    Of course. Ignorance is bliss.

  2. Re:Stop. Using. Wordpress!! on Timeline Of Events: Linux Mint Website Hack That Distributed Malicious ISOs (softpedia.com) · · Score: 1

    No one is capable of securing Wordpress. On the other hand, there are other CMSes out there that don't need special attention to make them secure.

  3. Name a better CMS.

    The Banshee Content Management Framework.

  4. Stop. Using. Wordpress!! on Timeline Of Events: Linux Mint Website Hack That Distributed Malicious ISOs (softpedia.com) · · Score: 0

    The stubbornness of some people is just unbelievable. How many examples of Wordpress's bad security do you need?!?!?

  5. Re: Editing Comments on Ask Slashdot: How Can We Improve Slashdot? · · Score: 1

    Yes!! Definitely this!! I have typos in my post so verry otfen.

  6. Re:True artist on David Bowie Dies At Age 69 (bbc.co.uk) · · Score: 2

    Sure, there are many like him. But the majority of modern musicians don't make their own music. Those are the Justin Bieber-like music industry puppets who can easily be replaced by any other clown.

  7. True artist on David Bowie Dies At Age 69 (bbc.co.uk) · · Score: 5, Insightful

    Whether you like his music or not, there is no denying that David Bowie was a true artist, a real entertainer. There was nothing fake about him. Nowadays, we don't see real artists like him very often.

  8. Re:Europe, land of the sheep and chickenshit on Uber In Retreat Across Europe · · Score: -1, Troll

    Why don't you go buy a gun, invade a random country and shoot everybody. That's what America stands for.

  9. Wrong business model on Oculus Rift Pre-orders Begin At $600 (oculus.com) · · Score: 2

    I think this price is too high. A VR helmet should not be a goal, but a means. VR games should be the goal. If you want VR to be a success, a VR helmet should be available for many people. $599 (for me it will be €699), is simply too much money for too many people. What they should have done is make the helmet relatively cheap and let game developers pay a small fee to have support for that helmet in their game. Or a business model comparable to those of 3D engines. So, you pay a big portion of the price of the helmet during the actual purchase of the helmet and pay the rest in small portions with every game you buy. That makes the helmet available for many people, which will make VR more interesting for game developers. Is seriously thing $599 is a missed chance.

  10. Hmm, you're absolutely right. I must admit that I didn't read the article well enough. I guess I've grown too tired of this shit to read it all carefully. However, it doesn't really matter. SQLi, XSS, CSRF, file inclusion, remote command execution, it's all the same shit to me. Incompetent developers only caring about getting it to work, not knowing what they're actually doing. The result of their fumbling is still the same.

  11. WHY?!? on Attackers Can Hijack Joomla Sites Via User-Agent Strings (softpedia.com) · · Score: 4, Insightful

    Seriously, how can this still be possible?? Don't developers ever learn? Use / develop a secure database driver and let ALL your database queries go though that driver. And when I say ALL, I actually mean ALL!!! We've had SQL injections 20 years ago. There is no excuse to have your application vulnerable for this ancient shit! Really.

    I know that my rant tells nothing new, but as a security professional, this shit is really starting to annoy me. I see this shit every week. And because of developers not being able to write secure code, companies get hacked, personal information gets stolen, governments act tough and come up with all sorts of security theater bullshit which results in my privacy getting invaded. So, yes, incompetent developers fucking their shit affects me personally! I really hate incompetent developers...

  12. Not relevant on HHVM Beats Stable Version of PHP 7.0 In Recent Benchmark (kinsta.com) · · Score: 4, Insightful

    I don't care about these results, for the simple fact that nothing guarantees that Facebook won't make any changes to HHVM in the future that is beneficial for Facebook, but adverse for all other PHP based webapplications. PHP 5 is fast enough for me. PHP 7 being significantly faster is more than good enough.

  13. Re:This is awful and irresponsible. on No More Security Fixes For Older OpenSSL Branches (csoonline.com) · · Score: 2

    Sticking with OpenSSL while other more secure and reliable SSL/TLS libraries exist, that's awful and irresponsible. I switched to mbed TLS (former PolarSSL) years ago and never cared to look back. I seriously can't understand why developers keep on using OpenSSL.

  14. Then you didn't even look at those websites. There are enough attack vectors. There are login pages (add /cms to the URL), weblogs with comments, a public forum and many other forms (login with demo:demo).

  15. Re:The attack that _would_ go away on The History of SQL Injection, the Hack That Will Never Go Away (vice.com) · · Score: 1

    You're right, Perl is the exception. But I wouldn't even call that a programming language. It's more like a scripting tool from hell.

  16. I did. You're just wrong. That's why I wrote my comment.

  17. Re:PHP and CGI make it too easy... on The History of SQL Injection, the Hack That Will Never Go Away (vice.com) · · Score: 1, Informative

    If any other language would have the same popularity as PHP, it would suffer the same problem. All the noobs that write bad PHP code would than write bad .NET/Java/Python/whatever code. With 'same popularity', I mean being used by all the noobish kiddo's that now abuse PHP.

  18. This is not a PHP thing, but a bad-developer thing. You can write the same crap in Java, .NET, Python or any language you want. PHP is easy to learn, easy to use and easy to deploy. That's why it has become so popular. Because PHP has so many users, it also has many incompetent users and incompetent users publishing their incompetence in bad tutorials. That's not PHP's fault.

  19. Re:Webserver with ability to block SQL injection on The History of SQL Injection, the Hack That Will Never Go Away (vice.com) · · Score: 1

    Hiawatha has the ability to ignore the SQL injection prevention for certain IP addresses, so you can whitelist the webadmin IP addresses.

  20. Well, than hack one of my websites. Fail, and you're nothing but a loudmouth kiddo.

  21. Re:The attack that _would_ go away on The History of SQL Injection, the Hack That Will Never Go Away (vice.com) · · Score: -1, Troll

    Perl?!? Are you serious? That's the language you will have problems with to read back your own code after a minute you wrote it.

  22. Re:PHP and CGI make it too easy... on The History of SQL Injection, the Hack That Will Never Go Away (vice.com) · · Score: 1

    A language is not secure or unsecure. It's what developers do with it that makes the result secure or unsecure. I can write a .NET or Java application that has all the vulnerabilities you can think of.

  23. Webserver with ability to block SQL injection on The History of SQL Injection, the Hack That Will Never Go Away (vice.com) · · Score: 1

    The Hiawatha webserver can block SQL injection attacks. I like to hear what you think of it.

  24. Re:PHP and CGI make it too easy... on The History of SQL Injection, the Hack That Will Never Go Away (vice.com) · · Score: 2

    And also too easy to do it right.

  25. Re: Bad practice. on Unhashable: Why Fingerprints Are Weaker Security Than Passwords (hackaday.com) · · Score: 1

    which means that you're completely misunderstanding how biometric security works, and also the ways in which it doesn't work

    Haha, sure dude. Whatever.