Become a fan of Slashdot on Facebook

 



Forgot your password?
typodupeerror
×

Comment Re:Is this unique to Java? (Score 1) 130

I wrote a couple as a test and quickly abandoned those, as well as some desktop apps painful as they were, way back somewhere between 99 through the early 2000s. The 1% (hopefully much much less) is in reference to today's devs. No dev today should be writing an applet. In fact, I'd be perfectly happy if Oracle removed the applet code and browser integration "capability" (used very loosely) completely.

Submission + - 600 million Samsung phones vulnerable (cnn.com)

Gr8Apes writes: Every Samsung Galaxy device — from the S3 to the latest S6 — has a significant flaw that lets in hackers, researchers have discovered. The vulnerability lives in the phones' keyboard software, which can't be deleted. The flaw potentially allows hackers to spy on anyone using a Samsung Galaxy phone. You can be exposed by using public or insecure Wi-Fi. But some researchers think users are exposed even on cell phone networks.

Comment Re:Is this unique to Java? (Score 1) 130

The litany of security defects are largely edge cases in portions of the libraries most don't use or browser based (ie, applets) which don't concern 99% of java devs (I wish I could say 100%, but somewhere, some idiot is still writing applets) The core has been relatively stable since J5.

Comment Re:the world was supposed to end years ago (Score 2) 637

Not only that but there are actually a lot of people who are very perceptive of long term threats.

Yes there are, generally many of them are research scientists and other highly educated people. You can't picture long term threats if you cannot conceive of the concepts.

These people typically suffer from various forms of anxiety disorders and/or various chondrias. The worst ones typically hang out at 911truth.org, infowars.com, or prisonplanet.com, constantly pester the bilderberg group, and believe that there's an active global conspiracy by completely imagined groups like NWO or Illuminati.

I'd say an equal number or more hang out watching fox news etc. Neither are related to the first group.

Comment Re:Back doors are weak for everyone (Score 1) 108

What if you create a backdoor by creating an encryption method that accepts 2 decoding keys instead of one? Obviously the encryption is now twice as easy to bruteforce, but this doesn't seem to be a big deal. Are you worried about this factor of two, or is the theoretical weakening more severe?

There is now a key that is under the door mat, so to speak. Do you feel safe enough to leave your house key under the door mat, with an arrow pointing to it?

Comment Re:On Shopping Around (Score 1) 1032

I look at the author of the article, Lee Siegel, that Wikipedia says attended Columbia University. That school is a private ivy-league school currently and charges $51,008 per year.

No more needs be said, really. Lee needs to pay up.

I too would have loved a pricey private school's name printed on my degree. My wallet said "no".

Comment Re:america! (Score 1) 286

I'd say losing 10-20 feet (in depth) of land is a significant cost.

Keep in mind that the current rate of loss is less than a foot a century! Where's the evidence that this will change?

Some Evidence:

West Antartic ice sheet

You don't have to look to far for other evidence either. Yes, I know the timeline there - 100 years minimum, there was another article that predicts a 5 year timeframe for the collapse of a different shelf, which was not predicted to melt for many decades. Basically they're all guessing at the rate, and sometimes apparently even the most pessimistic are far too optimistic.

Comment Re:Web developers know they'll be attacked (Score 1) 225

It may not be HTML's job, but certain basics still need to be understood, such as where you load JS from, and what you can access when in HTTPS mode versus HTTP, and why those things matter. 99% of HTML "devs" do not understand a thing about those scenarios. Anyone that says Ruby is secure doesn't have a clue. Python? Seriously? They may have started taking it more seriously, but how seriously can you take a system that doesn't even verify certificates in 2015? (Since it was reported in Dec 2014, and I'm guessing it wasn't a 1 day fix)

Slashdot Top Deals

fortune: cpu time/usefulness ratio too high -- core dumped.

Working...