Forgot your password?
typodupeerror
Security

+ - djb awards $1000 for first djbdns security hole->

Submitted by emad
emad (4377) writes "Last week, a patch and sample exploit were posted to the djbdns mailing list concerning a bug that allowed subdomain administrators to take over parent domains when served from the same tinydns/axfrdns servers. Today, Dan Bernstein acknowledged the security hole, recommended users to install the patch, and awarded $1000 to Matthew Dempsky for publishing the first verifiable security hole in djbdns. In the words of Dan Kaminsky (of recent DNS security fame): "However, Dempsky's bug in djb's tinydns is way more surprising, if only because...holy crap, he pulled an exploitable scenario out of THAT?!""
Link to Original Source

Comment: Re:Where I come from... (Score 1) 343

by xtort17 (#23118430) Attached to: U. of Chicago Law School Blocks Internet Access

You have no idea what law school is like. You don't learn anything in class. You get more confused and listen to hypothetical situations that have no answer and indirectly discover whether your professor has certain leanings towards various types of analysis (e.g. if they're the law and econ kind, social utility kind, favor strict interpretation, etc.) all of which you can learn while idly listening (or even just asking the other people that have had your professor).

And re: lectures.. we don't have lectures generally. We have the socratic method which is like a sick hazing method where professors batter you with questions until time is up or you start crying (okay, exaggerating slightly, but..). Most likely the impetus behind this is because the professors are sick of students who aren't paying attention in class (and we can't skip because there are ABA requirements regarding class attendance) and they get called on to recite the facts of, say, Frigaliment Importing Co. v. BNS International Sales Corp. and have no freaking clue what's going on (because no one really cares about the difference between hens and stewers and their respective market values. We were satisfied at the "you assume words are defined as trade usage unless explicitly specified otherwise" rule), and then the professor stands there for 10 minutes while the person frantically flips around in their books trying to figure out how to answer the questions.

And (responding more to other people below), if the professors don't want to waste class time, they should go "Gosh, Fred doesn't know the answer, wasn't paying attention, or just didn't read for today" and move on to their next victim or one of the gunners with their hands in the air who are more than to willing to recite the facts of the case and then explain in excruciating detail why they think it's wrong or right or just talk about something random and tangentially related, rather than trying to embarrass the person they decided to pick on.

Google

Google StreetView Is In Your Driveway 439

Posted by Zonk
from the friendly-google-car dept.
hermit_crab writes "Janet and George McKee are the neighbors of the Borings, who we discussed yesterday as the couple suing Google over StreetView. The McKees own a house that is featured in a much more intrusive set of Google StreetView images. 'The Google car continued past the steps leading to the McKees's front door and came to a stop outside the house's three-car garage (and next to the family's trampoline and portable basketball rim). Taking photos all the time, the Google vehicle was squarely on private property, a fact that presumably should have been apparent when the gravel path became paved.' Unlike the Borings, the McKees have not announced intentions to sue Google, nor have they requested to have the images removed."

Thus spake the master programmer: "When a program is being tested, it is too late to make design changes." -- Geoffrey James, "The Tao of Programming"

Working...