Forgot your password?
typodupeerror

Comment Mitigations work (Score 2) 92

See, this is a case of mitigations working. ASLR makes the exploit substantially harder weaponise. There are plenty of other mitigations you can use to reduce the chance of a bug being successfully exploited. Examples include:

  • Ensure PHP (and mod_wsgi, and mod_lua, and whatever else) can't be invoked on servers and/or vhosts where it isn't necessary. You don't want stuff being inadvertently executed as scripts.
  • Don't allow PHP (or other server side scripting languages) to run from any directory the web server user has write access to. This protects you from a whole class of exploits that involve uploading a file and then tricking a vulnerable web application into making the web server treat it as as server side script. Yes, this prevents WordPress from auto-updating, but it protects you from most known WordPress exploit kits. Same applies to other CMS, wikis, etc.
  • Use at least a basic selinux policy to constrain the web server and associated processes. A separate out-of-band whitelist of what the web server is allowed to access can block successful exploitation of vulnerabilities.

You need to be paranoid and assume the network is hostile.

Comment Re:Sony Rejoices (Score 1) 99

Not into the annual mindless CoD/FIFA/NBA etc myself BUT that mindless interaction with friends is what many people are looking for. If that does it for them why should they expand their horizons? gaming is their to entertain and whether that is a ball on a string game or complex games with indepth stories comes down to whatever fulfills the persons needs.

Comment Re:I wonder whether this even has a market (Score 1) 99

It is a good couple of years off and even current gen is not far off these prices. As long as it is not crippled spec wise it will probably be fine, Sony will be releasing in a similar price bracket as well unless something happens like an AI collapse to reduce component costs (unlikely in the timeframe)

Comment teams boss (Score 2) 78

If it was a teams decision then it is that teams boss/leader that is responsible or everyone involved in that team decision should be held legally accountable. The bullshit of "no one person made that decision" is just bullshit to try and avoid legal acountabiulity, they have been shown to have known what they were doing was not legal so they have zero defense.

Comment Re: You cannot destroy data, harmless or not ... (Score 4, Insightful) 327

No part of your statements says that DHS obtained a warrant to search and seize his phone. This where DHS is using SchrÃdinger's reasoning: According to DHS, they do not need a warrant because the search was "random" and he was not under any investigation. Yet they told Customs to look for certain things because he was under investigation and he was targeted for a search at the border. It turns out they lied and the search was not random. Such a search requires a warrant. Therefore the search was illegal.

Comment Re: anyone can be searched on entry (Score 5, Informative) 327

Your person and luggage can be searched without a warrant; however, seizure is limited to specific things. Contraband, food, etc. There are conflicting federal court rulings as to whether devices can be searched without a warrant. In this case, DHS was arguing that they did not need a warrant because Turnick was not under investigation yet they knew to search him because he was under investigation.

Comment Elon Musk == Wish.com Arthur Jensen (Score 1) 124

And our children will live, Mr. Beale, to see that... perfect world, in which there's no war or famine, oppression or brutality. One vast and ecumenical holding company, for whom all men will work to serve a common profit, in which all men will hold a share of stock. All necessities provided, all anxieties tranquilized, all boredom amused. [emphasis mine]

-- Arthur Jensen, Network (destroying his golden goose)

Further viewing.

Slashdot Top Deals

What sin has not been committed in the name of efficiency?

Working...