RogueCode - Slashdot User

Comment Constitutional basis for that law ? (Score 1) 313

by RogueCode on Monday November 23, 2015 @11:29AM (#50985401) Attached to: Australian State Bans Possession of Blueprints For 3D Printing Firearms

Can anyone explain how in earth could such legislation be approved in a democratic country ? It seems to me that one could be thrown to jail for something that he _could_ do if he managed to actually build a gun from the blueprint. I know that in some places there is the concept of "conspiracy to commit a crime" (or something like that), but usually the authorities must build their case on something more tangible...

Submission + - How Russia Transformed a Subtropical Beach Resort to Host the Winter Olympics 1

Submitted by Hugh Pickens DOT Com on Sunday February 09, 2014 @08:47PM

Hugh Pickens DOT Com writes: Duncan Geere reports at The Verge that Russian resort as Sochi, on the eastern shore of the Black Sea, is humid and subtropical with temperatures averaging about 52 degrees Fahrenheit in the winter, and 75 degrees in the summer. "There is almost no snow here — at the moment it's raining," says Olga Mironova, a local resident. It's estimated that the cost of staging the Olympics in Sochi has been greater than the previous three Winter Games combined — ballooning to a whopping $51 billion including the cost of implementing an extensive system of safeguards to ensure there'll be sufficient snow in Sochi for the games including the cost of implementing one of the largest snowmaking systems in Europe. The system includes two huge water reservoirs that feed 400 snow cannons installed along the slopes that can generate snow in temperatures of up to 60 degrees fahrenheit. If that snow isn't enough, then the authorities will fall back on 710,000 cubic meters of snow collected during the winters of previous years leading up to the games. To keep it from melting in the region's hot summers, 10 separate stockpiles have been kept packed tight under insulating covers high up in the mountains, safe from the sun's rays. Down in Sochi itself the other half of the games will be held in five indoor arenas that will host figure skating, speed skating, hockey, and curling, and an additional outdoor area will host the opening and closing ceremonies. In each of these indoor arenas, underfloor cooling systems are installed so that the ice stays frozen above it using propylene glycol, which doesn't freeze until temperatures reach 8.6 F. Climatologists predict that even under a best-case scenario, almost half the venues that have hosted the Winter Olympics over the last century would be unable to do so by 2080 without resorting to extensive and expensive artificial snowmaking techniques. Renowned sites, including Squaw Valley in the U.S. Garmisch-Partenkirchen in Germany, Vancouver in Canada and Sochi in Russia will probably no longer have climates suitable to reliably host the games by the middle of the 21st century. "It will be more problematic than ever to find suitable and snow-safe places," says Hans Linderholm, a climatologist at the University of Gothenburg. "It's likely the use of indoor arenas will become more common in the future. Then the Winter Games can be held almost anywhere — even Qatar!"

Submission + - LinkedIn ditches feature that was a 'dream for attackers' (computerworld.com.au)

Submitted by angry tapir on Sunday February 09, 2014 @08:14PM

angry tapir writes: LinkedIn is shutting down Intro, its recently launched mobile service for connecting people over email, that raised security concerns. Intro was launched last October and described at the time as a 'dream come true for hackers' The service was made for the iPhone, and was designed to grab LinkedIn profile information and insert it into emails received on phones. The service displayed that information to the recipient from the email's sender if the sender was also on LinkedIn.

Comment Re:Parameterized SQL (Score 1) 244

by RogueCode on Tuesday June 15, 2010 @09:27AM (#32577164) Attached to: Kaminsky Offers Injection Antidote

No - I'm not a fool, but I do security reviews for a living, and this is the kind of stuff a see all the time. Anyway, my point is about the misconception that parametrized SQLs can get you rid of all kinds of SQL injection. As you wrote, the basic problem is lack os proper user input sanitization.

Comment Re:Parameterized SQL (Score 1) 244

by RogueCode on Tuesday June 15, 2010 @07:49AM (#32576290) Attached to: Kaminsky Offers Injection Antidote

You can't use parameters for things like table and column names, so you can't write stuff like an "advanced query", where you add additional clauses to a select statement in order, without some kind of string concatenation. This fact, in turn, opens the door to SQL Injections even if you use parametrized queries. Another scenario is when you use parametrized SQL to call a stored procedure which is vulnerable to SQL injection. Bottom line: Parametrized SQL helps, but does _not_ completely prevent SQL Injection.

Slashdot Top Deals