Catch up on stories from the past week (and beyond) at the Slashdot story archive

 



Forgot your password?
typodupeerror
×

Comment Not a Java, or even a library vulnerability (Score 3, Informative) 115

We were corrected by Mr. Frohoff that said the vulnerability is in how developers treat user-supplied serialized data, and not the library itself.

http://news.softpedia.com/news/the-vulnerability-that-will-rock-the-entire-java-world-495840.shtml

This is an issue with how some users use a 3rd party library Apache Commons Collections. Java doesn't have to be fixed. And Apache Commons-Collection doesn't have to be fixed, except maybe stating the obvious...

Do not deserialize objects with executable code from the internet.

Comment Brain-dead security hole (Score 4, Insightful) 80

Starting with Wordpress 3.5 XML-RPC was turned on by default, and the ability to turn off XML-RPC was removed. They didn't even leave the ability to filter the remote calls by IP address. E.g. allow localhost by default, have a button that 'allows current IP' or something like that.

I think this was one of the most brain-dead security decisions in a major piece of software in recent memory. And this decision simply has to be reversed to fix this.

Comment Re:i think it shows trends in GitHub's demographic (Score 1) 132

And isn't the business community part of "programming trends"? And hence should be included?

java usage has increased at GitHub, but this more likely reflects greater adoption of GitHub by the business community.

I can't understand the resistance to give Java credit here. It's one of the most successful modern programming languages and entirely open-sourced.

Comment Ubuntu does not support hibernate (Score 2, Interesting) 378

Considering the push for the "Year of the Linux Desktop" it's strange Ubuntu does not support hibernate and hasn't for years now. Hibernate is important, because unlike suspend it does not require power.

It's annoying to have the computer shutdown when it runs out of power instead of simply hibernating.

Comment MVNOs did it (Score 1) 155

T-mobile was the first to respond most likely because they are the smallest. Typically, smaller competitors react to market changes faster than the more entrenched. But the change to post-paid has been coming for years, as all providers were losing lots of customers to MVNOs. It has been obvious ( looking at the market in the rest of the world ) that this is where the industry was going.

Comment Blacks and Hispanics make up over 9% CS Grads (Score 1) 256

On average, just 2% of technology workers at seven Silicon Valley companies that have released staffing numbers are black; 3% are Hispanic.

But last year, 4.5% of all new recipients of bachelor's degrees in computer science or computer engineering from prestigious research universities were African American, and 6.5% were Hispanic, according to data from the Computing Research Association

From...
Tech jobs: Minorities have degrees, but don't get hired/a.

Comment Include the "Immigrant" dimension (Score 1) 256

Asians make up less than 6% of the population according to Google, whereas blacks are 13%. Yet the former are over 40% of the company at Facebook.

Include the immigrant dimension in those statistics and it makes a lot more sense. The Asian group includes Indian natives and other immigrant populations that have cultural norms very different then native populations.

Immigrants, regardless of race, have different rates of starting businesses, pursuing higher education and career in general.

For an accurate comparison you may have weed out 1st and 2nd generation immigrants to get a clearer racial comparison.

Comment Hiring diverse top performers (Score 1) 256

Or more aptly, those who apply and are the best fit for the job - there is no point in berating a company for woeful diversity hiring figures

Hiring a diverse team is not at odds with hiring the best fit for the job. Your quote assumes that the reason for the lack of black candidates is irrelevant, or at least should not be investigated by by hiring organizations.

No one is suggesting hiring workers who can't do the job. That would be silly. Rather, it's important for us to quantify the lack hires, and investigate the problem in general. This is science after all right?

Oh, should we resign to "it doesn't matter since tech is a perfect meritocracy?"

Slashdot Top Deals

Work without a vision is slavery, Vision without work is a pipe dream, But vision with work is the hope of the world.

Working...