Forgot your password?

Comment: Re:Heh (Score 1) 54

by dotancohen (#48204359) Attached to: Drupal Fixes Highly Critical SQL Injection Flaw

If this were a map, say in Python, then the programmer would have to supply the value $i (or in Python, just i) with an ++$i (or in Python i+=1). This can be done in PHP too, so there is no disadvantage to what PHP supports. The problem here is that the programmer is putting dynamic code in the SQL query without sanitizing it first. So what if it is supposed to be variables that are not supposed to be affected by the user? The first rule of preventing SQL injection is to use ZERO outside string variables, even those ostensibly created by your own code. If the data _or metadata_ (i.e. array keys) came in through a function argument, then it is NOT CLEAN.

Of course, the "natural way" to write code is often riddled with buffer overflows, SQL injection, and other naive security issues. This is why you hire a programmer with experience, just as with any other profession. There is no end to the problems with PHP, but this particular bug is not one of them.

Comment: Re:Who cares about performance? (Score 1) 105

by dotancohen (#48195645) Attached to: Which Android Devices Sacrifice Battery-Life For Performance?

Besides gamers, who cares if it takes a few more milliseconds to launch a web browser or process an image?

My Note 3 cat get _three days_ out of a single charge because I don't leave the internet connected and I don't have faceschmuk / viber / fartsapp pinging home every N seconds. I charge it every night anyway.

Don't make me wait to open the camera, give me the best performance and don't spare the battery just because _other users_ can't disconnect from the internet ever.

Comment: Re:Headline Is Missing The Word "Highly" (Score 1) 89

by dotancohen (#48175181) Attached to: How Curved Spacetime Can Be Created In a Quantum Optics Lab

A distinction that makes no difference. It's also always locally curved, for other definitions of "locally".

How should I mod this? It deserves a downvote, but it is not overrated (rated 0), not flamebait, nor a troll. It's not even redundant.

It's just plain wrong.


Mysterious Feature Appears and Disappears In a Sea On Titan 65

Posted by Soulskill
from the interplanetary-game-of-battleship dept.
schwit1 writes: Cassini images taken in 2007, 2013, and 2014 of one of Titan's largest hydrocarbon seas find that a mysterious feature there keeps appearing and disappearing. Quoting: "The mysterious feature, which appears bright in radar images against the dark background of the liquid sea, was first spotted during Cassini's July 2013 Titan flyby. Previous observations showed no sign of bright features in that part of Ligeia Mare. Scientists were perplexed to find the feature had vanished when they looked again, over several months, with low-resolution radar and Cassini's infrared imager. This led some team members to suggest it might have been a transient feature. But during Cassini's flyby on August 21, 2014, the feature was again visible, and its appearance had changed during the 11 months since it was last seen.

Scientists on the radar team are confident that the feature is not an artifact, or flaw, in their data, which would have been one of the simplest explanations. They also do not see evidence that its appearance results from evaporation in the sea, as the overall shoreline of Ligeia Mare has not changed noticeably. The team has suggested the feature could be surface waves, rising bubbles, floating solids, solids suspended just below the surface, or perhaps something more exotic." That the seasons are slowly changing on Titan is probably contributing to the transient nature of this feature.

Are the World's Religions Ready For ET? 534

Posted by Soulskill
from the Alf-as-messiah dept.
Science_afficionado writes: At the current rate of discovery, astronomers will have identified more than a million exoplanets by the year 2045. That means, if life is at all common in the Milky Way, astronomers could soon detect it. Realization that the nature of the debate about life on other worlds is about to fundamentally change, lead Vanderbilt astronomer David Weintraub to begin thinking seriously about how people will react to such a discovery. He realized that people's reactions will be heavily influenced by their religious beliefs, so he decided to find out what theologians and leaders from the world's major religions have to say about the matter. The result is a book titled Religions and Extraterrestrial Life, published by Springer this month. He discovered that from Baptists to Buddhists, from Catholics to Mormons, from Islam to the Anglican Communion, religious views on alien life differ widely.

Comment: Re:try SLASH (Score 1) 57

by MikeTheGreat (#48028333) Attached to: How To Find the Right Open Source Project To Get Involved With

No worries on the search - I embedded the link to the slashdot stories AND quoted it above :)

I agree that the 24 bit counter was incomprehensible. Apparently it's a standard choice in MySQL, though, which explains why it's an issue - one can just pick 'mediumint' and bam - 24 bit integer.

I'm mystified as to why one would want to do that - does MySQL actually pack the integers in such a way as to use those extra 8 bits for something else? On a 32 bit machine you're going to need to either ignore (zero-pack) those extra 8 bits or else extract whatever you put there before every operation (addition, comparison, etc) that you do.

Anyways - those were good times :)

Things are not as simple as they seems at first. - Edward Thorp