Catch up on stories from the past week (and beyond) at the Slashdot story archive

 



Forgot your password?
typodupeerror
×

Comment Re:Bu the wasn't fired (Score 1) 1116

I stated to read the thread if you can't Google.

I read the thread from your post onwards, and up-posts some as well. If you mean the entire, up to the root, it's hundreds of posts long.

If you still fail to find where these donations went to, and what the yes on prop8 group advertised then request a citation.

Then I'm formally requesting a citation that backs up your original post.

Further, you never explicitly stated that you can't find data. You stated that my post was a troll and are defending that position.

I said, "But it does give the appearance of a troll." and referenced the many readers, one writer problem, which you have not once acknowledged.

Your laziness does not make me wrong, your laziness makes you lazy.

It makes you lazy for not providing it in the first place, or second place... I never said you were wrong, only that you failed to provide a reference (and handwaving at Google or a large body of Slashdot comments is not a reference).

Comment Re:Coding Style versus Language (Score 1) 239

Should higher level languages be used when possible? Absolutely. I'm a fan of high level languages. I prefer to write software in Haskell and Scala when possible.

This was my main point. Whether it is practical to rewrite OpenSSL in a safe language isn't something I was arguing. To requote what I originally responded to:

C and C++ are not necessarily the problem. It's true that higher level languages solve this particular kind of vulnerability, but they are not safe from other vulnerabilities. To solve problems like these, we need better coding style in critical open source projects.

Comment Re:Bu the wasn't fired (Score 1) 1116

Bullshit, you are trying to redefine a word in order to make a claim that "trolling" is the same thing as having a different opinion.

No, I explicitly used your definition and said it was inflammatory. This isn't a question of opinion. It's a question of whether your accusations are true or not. If your accusations are true then your post was not a troll, and you could have reduced the chances of it being labeled as such by providing references in advance.

You also keep insisting that the claim is false yet there is ample evidence to support the claim.

I didn't say it was false. I said you didn't provide any evidence, and you still haven't (I wonder why?)

So you are being untruthful in several ways.

You're the one being untruthful here, per above.

A well articulated non-offensive response lacking citations is no different than the person I responded to who provided no citation.

First of all, the post you responded to made reference to a quote that was linked in the summary. You, on the other hand, made a sweeping accusation without any references.

Second, by claiming the group he donated to promoted "hate speech" and making comparisons to Westboro Baptist Church, drug dealers, and slave traders, your post is offensive if the accusations aren't true.

That person must have been trolling by your definition, but you are defending their position in your fabricated claim.

The fabrications are all on your end, and given your carelessness here, your original post becomes even more suspect.

Comment Re:Coding Style versus Language (Score 1) 239

Could a higher level language help? Sure. Is it a realistic and practical solution to OpenSSL's issues? Not really.

Buffer overflows are an extremely common security error, especially at the level something like OpenSSL is written at.

I've heard this argument, and I've seen blunders of vulnerabilities in Java, C#, Ruby, Python, and other higher level languages. This is not a language or platform specific problem.

You're arguing because bugs still exist, there's no reason to remove a large class of bugs and it isn't the language's fault. That's nonsense. Buffer overflows are a language problem endemic to C.

Better languages can help, but they are not a panacea. It takes dedication and hard work to write hardened code.

I didn't say it was a panacea. It's still a large class of errors that can be completely removed without the failed advice that we can just code better to avoid them.

Comment Re:Coding Style versus Language (Score 1) 239

C and C++ are not necessarily the problem. It's true that higher level languages solve this particular kind of vulnerability, but they are not safe from other vulnerabilities. To solve problems like these, we need better coding style in critical open source projects.

It's better to remove a very large class of bugs by the language making them impossible rather than insisting that a certain coding style will save you, "This time for sure!"

Comment Re:Situation is a Shambles (Score 2, Interesting) 239

This is not a memory management issue per se, and has nothing to do with mmap or malloc.

But what the grandparent post said still applies. It's how C treats memory via pointers. The issue, from looking at the code you posted, is that memcpy() copies from beyond the length of rec_p. In a sane language that doesn't treat memory as free-for-all, this isn't possible.

Due to the fact that this code works more or less exactly as designed, the exploit functions across architectures and operating systems. This bug is so amateurish, i almost find it difficult to believe that it was unintentional.

It's the kind of mistake programmers make all the time in C. Sure, you can tell me battle-hardened, conscientious, professional programmers wouldn't make this mistake. Whatever, we've seen this kind of thing too many times for this sentiment to mean anything practically useful.

Comment Re:Bu the wasn't fired (Score 1) 1116

No, it does not. Please read the definition of troll and trolling again. A different opinion is not "trolling" or being a "troll".

If your accusations appear untrue and inflammatory, they have the appearance of being a troll. We've been over this. That's the whole point of providing evidence, which you are too lazy to do even at this point.

Not only myself, but numerous other people in this thread explained a different opinion respectfully and allegorically. All of them were down modded. It's called censorship, and it happens all the time here. It's been much worse since the beta exodus.

Sure, it happens all the time, but there's less chance of it happening when you substantiate your claims.

Comment Re:Bu the wasn't fired (Score 1) 1116

That does not make a post a troll!

But it does give the appearance of a troll.

As it is, this thread is full of references to back my statement.

I didn't see any when I read this thread and replied.

It's not baseless because a person refuses to look for or read information.

You're ignoring the many readers, one writer problem. If you want your posts to be taken seriously when there's a good chance it won't be taken at face value, it's better to substantiate them upfront yourself.

Comment Re:Bu the wasn't fired (Score 1) 1116

Which is drastically different from providing easy to find references in a Google search because someone is too lazy to search themselves.

Without evidence it is inflammatory. There are many readers and one writer. Expecting all your readers to verify your accusations is a non-starter. You can give yourself credibility at the time of reading by not being lazy yourself and providing the evidence in advance.

Comment Re:Bu the wasn't fired (Score 1) 1116

Except that it was not 'because of his political views', it was because he gave money to support a group spreading FUD about homosexuality making him affiliated with a group promoting hate speech. [..] Hey, douche bag with mod points. This is not a troll.

Maybe if you had provided evidence for your accusations it wouldn't have been labeled a troll.

Comment Re:More anti-religious (Score 1) 1037

Religion is the original strong belief system upon which all others are based. Stalin may have been an atheist, but his regime and cult of personality was a lot like a religion.

If you make the statement, "religion has caused so much more suffering in the world than it has ever managed to prevent, for example how wars may be started by people, but wartime atrocities almost always require religion to be involved", then it's bullshit to include governments that specifically denied religion.

What is being argued against is supernatural belief in a deity. If you move the goalposts to include any strong belief system, the original argument is meaningless.

So when Stalin wanted somebody executed, for example, there were plenty of unthinking people around him who would blindly follow his orders.

Those that didn't follow his orders would be tortured and killed. He was a tyrannical dictator. But you don't need Stalin to find war atrocities. Name a war and you can find them, such as the My Lai Massacre.

Slashdot Top Deals

"Engineering without management is art." -- Jeff Johnson

Working...