Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror
×

Comment Re:This is a good idea. (Score 1) 267

No, at best they get you back in a funny way; at worst you freak them out for a bit and after a short laugh you set them straight.

If your parent are nutjobs and take some insane extreme measure in response then you've got serious problems and it's better you know that your parents are morons sooner rather than later.

Comment Re:Slang isn't always cool. (Score 1) 400

I just stopped reading at that point, he basically belittled every young, single, childless male -- unless I misunderstood and the term "brogrammer" is somehow complimentary. If that's your basic premise then your whole argument is of no value buddy.

Also, random CEO of random start-up expresses own misguided opinion, everyone better take a knee and listen up.

Comment Re:Donglegate? Really? (Score 4, Insightful) 759

I don't know, I found the title funny -- which was probably the editor's intention in the first place. And she wasn't a feminist, that word has a real meaning that I'd rather we didn't dilute; she was a prissy, attention whoring, holier-than-thou, PC bitch.

And to answer the article's question: If I were a Python dev, I wouldn't attend. That would send a more clear message to everyone involved that those situations are ridiculous than a bunch of posts on random message boards.

Comment Re:Bad math? (Score 2) 150

I assume 10Gbps were eaten by protocol overhead and arbitrary resource restrictions. Perfect distribution/load-balancing is seldom the case in the real world and this does seem like quite an achievement, all things considered. Easy link aggregation at the protocol level, a big thank you to the devs. :)

Comment Re:Couldn't find any - the results so far ARE pret (Score 1) 85

There are a few assumptions being made here that should be addressed for people unfamiliar with the field:
  • It would be impossible for results of that magnitude to be manually verified in order to weed out false-positives, which are a real problem.
  • Just because that scanner hasn't found any vulns it doesn't mean there aren't any.
  • As others have pointed out, this is highly unethical. Scanning a site can be disruptive (and even devastating under some circumstances) which is why every such vendor discourages use of their software against live/production websites.

I imagine you saw HD Moore's nmap scan of the internet and thought to yourself "Wow, we got to get us some of that!" but this is a really bad idea and I imagine you already know that. The only way to have gone forward with this is after weighting the bad (ethical issues, fallout from site owners, possible legal troubles, etc.) and the good (getting attention) and here we are.

Comment Re:Ethics (Score 1) 85

The prof gave a wrong simile, you are an idiot. WebAppSec scanners can inject harmful payloads (like emptying whole DB tables harmful, a simple string like "or 1=1" in the wrong place can can cause loads of trouble) and should be never run again live/production websites.

Also, those guys are overly excited about their own work to the point or arrogance but give them time. They'll either get to appreciate all the complexities of those types of systems and power on or just give up after a while.
They got the attention they wanted now anyways...

Comment Re:Features lacking in paper course materials... (Score 1) 372

You are missing the point entirely, all the things you mentioned are optional and in addition to the functionality of a single piece of paper. If you can't handle the distraction, opt out of it.

Personally, I wouldn't have made it through uni without these distractions during class and without having all the lectures posted on-line for when I didn't feel like attending -- which was most of the time..pretty much all of the time actually.

People learn at their own pace so why not let them do just that -- and it works best for the university too.
I still paid tuition and I imagine I saved them some money by not using their facilities/resources that much; and because I had a lot of free time I came out of uni with both a degree and a nice OSS project -- which have been much more helpful in finding employment than my degrees.
Cloud

Mega Vulnerability Reward Program Starts Payouts: 7 Bugs Fixed In First Week 41

An anonymous reader writes "If you're a hacker or a security researcher, this is a reminder that you don't have to take on Google's or Mozilla's software to get paid for finding a bug. In its first week, the Mega vulnerability reward program has already confirmed and fixed seven bugs, showing that Dotcom really does put his money where his mouth is. Although Mega hasn't shared how much money it paid out in the first week, how many bug submissions were made, or even who found which bugs, the company did briefly detail the discovered security holes. It also confirmed that the program is here to stay and urged those participating to find more severe bugs."

Slashdot Top Deals

"Security is mostly a superstition. It does not exist in nature... Life is either a daring adventure or nothing." -- Helen Keller

Working...