Slashdot is powered by your submissions, so send in your scoop

 



Forgot your password?
typodupeerror
×

Comment Re:Open source code is open for everyone (Score 1) 211

Most are language-independent.... no surprise to see CWE-89 (SQL injection) and CWE-78 (command line injection) in there, as well as the slough of crypto/authN/authZ-related stuff. But where are the language-dependent bugs coming from? If you drill down on the code examples for CWE-120, -131, -134, and -676, you'll see C and C++ are a re-occurring theme.

Good then we're agreed, buffer overflows are not the most common security vuln.

All we need now is for you to realize that, if someone thinks the language means they don't need to worry about security, then their code will be much more vulnerable, even if they write in Java. Once you realize that, then we will be completely agreed.

Comment Re:not the point (Score 1) 375

If you're talking about the x11 stipple functions, then they're not a reason to replace X11 either, just ignore them until no one uses them, then remove them. If people are using them, then there's a reason to not remove them.

Being old is not a reason to replace software. Being new does not make software better.

Although, if you'd like to tell me how the computing landscape has moved on significantly, I'm sure I'd be entertained to hear it.

Comment I thought the point of the charge ... (Score 3, Interesting) 42

I thought the point of the charge was to make the "wooly" side-fibers of the strands wrap around the prey's limbs and/or the microscopic irregularities in the exoskeleton, tangling to it. "Tying" the fibers to the prey would have a similar binding effect to gluing them to it, without the need for glue, and lots of little fibers could make a very strong attachment.

(Stretching fibers made of long chains makes them stronger by aligning the chains along the direction of the stretch.)

Comment Re:inflation embiggens numbers (Score 1) 534

That's hilarious. The "liberal media" in Texas is owned by oil companies. The stories about all the earthquakes around Dallas explain how it's not fracking, and if it were fracking, it's a good thing, as the more common smaller earthquakes release pressure, preventing a larger one later.

And I'm referring to Belo, whose owners have ties to the West Texas oil fields. No, Mobile doesn't own Belo, but the owners of Belo have ties to oil.

Comment Re:No Kidding (Score 1) 220

Indent isn't meaningless. But there's no reason to double-space an indent. It carries a reading meaning, related to nesting of code.

Code "feels" smaller when it's compact. Also, having a single spacing method uniform across everyone makes for easier cut-and paste sharing. Having one person space things differently than another will result in decreased readability.

Comment Re:Funny thing about this... (Score 1) 29

Now this book comes out explaining that a SOC is basically just a bunch of smart (expensive) people intelligently mining data?

The hard part is finding the capable (expensive) people, even if you are willing to pay a lot. Programmers and IT guys are not hard to find in America, but capable ones are.

Comment Re:Rent a truck, rent a PC (Score 1) 307

Amazon EC2? Window Azure?

You need more horsepower, you just give them your credit card #.

Both to them and to the cellular carrier. Connecting to them requires a valid subscription to Internet access. Doing so while riding transit requires a separate subscription to cellular Internet access in addition to what you already pay for Internet at home.

Comment Multi-window and compilers (Score 1) 307

What is it you imagine you can do on a 10" netbook laptop that you can't do on a tablet paired with an external bluetooth keyboard?

Anything that requires multiple windows on screen at once. One example is using a calculator that doesn't fill the screen. Another example is putting a source code window on one half of the screen and the output window on the other half.

Or applications that Apple has not approved. One of them is programming for a class or a hobby. Last time I checked, programming on iOS was limited to a small selection of interpreters for dynamically typed scripting languages such as Codea (a Lua interpreter) and Pythonista (a Python interpreter). On a netbook, on the other hand, if I want to use C++, Java, Fortran, 6502 assembly language, or any other language, usable tools are a sudo apt-get install away.

(For the purposes of this post, I'm treating the ASUS Transformer Book, Surface Pro 3, and other Windows x86 tablets as laptops. My objection is not to the tablet form factor but to the restrictions inherent in iOS.)

Comment Also: lots of code has been vetted for decades (Score 1) 46

Why are they still using C to deal with network protocol? Is the performance so critical that it's worth all the troubles?

Also, because there's a lot of C code that has been in heavy use, and tested for correctness, for decades, suitable for reuse with substantial confidence that it's correct (though you check it anyhow...).

Let's see you find code like THAT for a language that hasn't been AROUND for decades. B-)

Comment Re:No Kidding (Score 1) 220

As the thread suggests, one advantage to different coding styles is that you can generally tell who wrote what and, if there seems to be a bug, you can track them down and tell them to fix it in that ugly mess. In our office, we have the rule that if you go around changing code style, you now own that code and are responsible for it. About the only issue we've run into is that people's styles evolve over time. So the guy right out of school may have a certain style that changes as he is exposed to more styles.

git/cvs/svn/mercurial blame can tell you who wrote whatever code. Please tell me you are using some kind of source repository.......

Comment For starters, because it's transparent. (Score 1) 46

Why are they still using C to deal with network protocol?

For starters, because it's transparent. The "K&R compliant assembly laguage", as one of my former colleagues once characterized it, translates to object in a clearly understandable way (especially if you turn optimization down or off). Though it gives you more opportunities to create bugs, it makes it hard for the bugs to hide from inspection.

The "higher-level" the language, the more it takes over and inserts its own stuff between you and the metal, and the more opportunity for that to inject an invisible vulnerability - which you might have trouble removing even if you DO discover it.

Meanwhile, many of the things "higher-level" languages protect you from can also be detected and flagged by both modern C compilers and code examination tools - starting with the venerable "lint".

Comment Re:Well I guess it's a good thing... (Score 4, Interesting) 203

Yeah, once again, compare the dross on the internet to the good things. Slashdot, Wikipedia, a bunch of corporate websites you can visit to learn about their company, restaurant websites, Linkedin seems to be a decent place to look for a job, ebay, amazon, some news websites. Slashdot and some news websites would die without advertising, but I would be willing to subscribe to those.

Now look at all the negative stuff. Buzzfeed, wired.com, all those websites that spew crap in order to attract your eyeballs. Out of all of that, are there any websites that would die without advertising, which you would also not be willing to subscribe to?

The only one I can think of is Facebook, and if that one died, it would only encourage a distributed model, where everyone essentially ran their own RSS feed for their friends to look at (or something similar).

So let the advertising die, I say, the internet will be a better place for it.

Slashdot Top Deals

A morsel of genuine history is a thing so rare as to be always valuable. -- Thomas Jefferson

Working...