Become a fan of Slashdot on Facebook

 


Forgot your password?
Close
typodupeerror
×

Comment Re:ACID3 (Score 1) 493

by daeg (#27082749) Attached to: Firefox Beta Touts Advanced Engine, Solves 8 Flaws

Did you actually use MS's implementation of web fonts? They made some proprietary font for no reason at all. They are trying to open it as a W3C standard now but that will hopefully fail completely. We already have enough font standards without introducing yet another format.

Comment Community more unsecure than the language (Score 1) 229

by daeg (#27044323) Attached to: Securing PHP Web Applications

The community and fleet of developers available to PHP is far and away the more vulnerable than register_globals could ever be.

Modern code bases, books, and examples are STILL being written using string concatenation to build SQL! These examples are teaching these dated, insecure methods to novices, thus guaranteeing these horrible practices will propagate for a long, long time.
Space

Submission + - Panic of failing QuikSCAT satellite overlown (wunderground.com)

Submitted by daeg
daeg writes: We previously read and discussed about the aging QuikSCAT weather satellite used to help predict tropical storms. It turns out that the panic is likely overblown and the loss of the satellite won't have any dramatic effects on forecasting at all. Some in the National Hurricane Center are now calling for Director Proenza's resignation over this and his overall handling of the center.
Security

Submission + - Passwords in small companies

Submitted by daeg
daeg writes: As any person in a small company can tell you, we have too many passwords and too many people know them because the defined job roles are very lax. The programmers know our shipping password because they've had to ship things before and the administrative assistants know our printer passwords, for instance. Are there any easy ways to manage these types of passwords securely? If an employee leaves, we have to change all of the passwords (particularly for the places that do not allow multiple delegate user accounts) and simultaneously tell everyone the new password, which is tedious and error prone, at best. What are some methods that have worked in your small companies?
PHP

Submission + - PHP 5.2.2 and 4.4.7 Released

Submitted by daeg
daeg writes: PHP 5.2.2 and 4.4.7 have been released with a plethora of security updates. Many of the security notifications come from the Month of PHP Bugs effort, and range from double freed memory to bugs in functions that allow attackers to enable register_globals, to memory corruption with unserialize(), to input validation flaws that allow e-mail header injections, with an unhealthy sprinkling of other bugs and flaws fixed. All administrators that run any version of PHP are encouraged to update immediately.
Networking

Submission + - China net use may soon surpass US

Submitted by GuerillaRadio
GuerillaRadio writes: The BBC is reporting that China could soon overtake the US to have the world's largest number of internet users, according to a state-controlled think-tank.
"We believe it will take two years at most for China to overtake the US," an official at the China Internet Network Information Center told state media. China had 137m internet users by the end of 2006, an increase of 23% from the year before, the centre reported. This figure means that more than 10% of the population is now online.

Slashdot Top Deals

UNIX was not designed to stop you from doing stupid things, because that would also stop you from doing clever things. -- Doug Gwyn

Close