Forgot your password?

typodupeerror
Security

Study Shows Many Sites Still Failing Basic Security Measures 103

Posted by Unknown Lamer
from the remember-stack-smashing dept.
Orome1 writes with a summary of a large survey of web applications by Veracode. From the article: "Considered 'low hanging fruit' because of their prevalence in software applications, XSS and SQL Injection are two of the most frequently exploited vulnerabilities, often providing a gateway to customer data and intellectual property. When applying the new analysis criteria, Veracode reports eight out of 10 applications fail to meet acceptable levels of security, marking a significant decline from past reports. Specifically for web applications, the report showed a high concentration of XSS and SQL Injection vulnerabilities, with XSS present in 68 percent of all web applications and SQL Injection present in 32 percent of all web applications."

Comment: Re:Cornholio (Score 4, Interesting) 151

by PFactor (#37898144) Attached to: Military Labs Develop Caffeinated Jerky and "Zapplesauce"
As a former Marine myself (8 years active duty), I can attest that Oodaloop is right on the money. We used to call them Meals Rarely Excreted.

As an aside, if you ever go to Korea (not Best Korea, the other one) the locals will trade you a bottle of Soju (rotgut liquor) for the main meal in your MRE.

Comment: Re:It's our fault the program is over (Score 2) 80

by PFactor (#36747518) Attached to: Last NASA Spacewalk Marks End of Era
That's pretty much my point. I doubt many Americans WANT a huge department of justice/prison-filling-machine but many Americans continue to go with the status quo instead of demanding change. I'm of the opinion that our democracy is failing principally because the people won't get (and stay) engaged on matters of substance.

Comment: Not a good long-term move (Score 1) 538

by PFactor (#36474016) Attached to: Why Businesses Move To the Cloud: They Hate IT
I work in the healthcare vertical. I've seen 2 major health systems attempt this form of outsourcing over the last few years. In both cases, the short-term cost savings were far outweighed over the long term by down times and a complete lack of true integration between the tech implementers and the business units (e.g. doctors and nurses).

This is the exact opposite of the experience detailed in TFA.

You think your IT is glacial? Try to get an IT org to move for you when they don't even work in the same company. Lawyers can sue to enforce the contract and all that, but by the time your case gets to court you've already lost your competitive advantage.

Comment: Re:Lost interest when I saw the feces trailer (Score 1) 462

by PFactor (#36449242) Attached to: Ars Technica Review Slams Duke Nukem Forever
It's due to the ongoing pussification of our society. Everything must be hyper politically correct for anyone to be allowed to say they enjoy it. We DO enjoy high- and low-brow humor. We're just not allowed to admit it in public, else someone will sue or publicly shame you. For example, if you say, "DNF was mildly enjoyable", a common response from the politically correct crowd might be, "Well, that means you like murdering rape victims. You're a monster and you don't deserve any cake*". Most people decide to keep their mouth shut, and the vocal minority who run all things politically correct win. This is a slight tangent but I think this concept actually makes us less "free" than people in countries where sticks are not surgically implanted in their asses at birth.

On topic, I've played through about half the game. It's a barely average shooter with a few chuckle-worthy moments - all due to "childish" humor. I am enjoying the game as much as I enjoyed playing the last Call of Duty game though, because DNF has more personality and is completely not serious in how it presents itself. I can actually *gasp* mindlessly relax in this game. Call of Duty, et al, are SRS BZNS and it takes more mental energy to play them through.

That said, the game is not worth $60, even the PC version I'm playing. I bought it on Steam for $44US and I think that's overpriced, too.

*Please note that the cake is actually a lie.

"If the code and the comments disagree, then both are probably wrong." -- Norm Schryer

Working...