Forgot your password?
typodupeerror

Comment Re: They write themselves, folks (Score 1) 16

Function calls are expensive in Python. This makes it attractive to write huge functions with deeply nested control structures.

Within a function, to can indent twice, maybe 2 times in the case of a switch statement.

Besides the other issues with this sentence, Python doesn't have switch statements. Python 3.10 introduces a "match" statement that's supposed to provide similar functionality, but it isn't the same.

Comment Mitigations work (Score 3, Interesting) 95

See, this is a case of mitigations working. ASLR makes the exploit substantially harder weaponise. There are plenty of other mitigations you can use to reduce the chance of a bug being successfully exploited. Examples include:

  • Ensure PHP (and mod_wsgi, and mod_lua, and whatever else) can't be invoked on servers and/or vhosts where it isn't necessary. You don't want stuff being inadvertently executed as scripts.
  • Don't allow PHP (or other server side scripting languages) to run from any directory the web server user has write access to. This protects you from a whole class of exploits that involve uploading a file and then tricking a vulnerable web application into making the web server treat it as as server side script. Yes, this prevents WordPress from auto-updating, but it protects you from most known WordPress exploit kits. Same applies to other CMS, wikis, etc.
  • Use at least a basic selinux policy to constrain the web server and associated processes. A separate out-of-band whitelist of what the web server is allowed to access can block successful exploitation of vulnerabilities.

You need to be paranoid and assume the network is hostile.

Comment Re:It must suck to wake up everyday and be so wron (Score 1) 152

Your ancestors were "barbarians" from what's now western Germany who took advantage of the decline of the Roman empire to invade the Gaulish provinces, or Norsemen who muscled their way in because they liked the more pleasant climate. The Romans before them subjugated the Gaulish peoples. You weren't the first people to inhabit the land now known as France, and you won't be the last. Everything is temporary.

Comment Re:Utah (Score 1) 50

Large quantities of porn are made in China. The chance of being arrested just for possessing porn or distributing porn on a small scale are basically zero. Every convenience store in Shanghai sells vibrators (as in female sex toys), with the boxes displayed conspicuously. They're a lot less hung up about sex than the USA and a lot of other western countries.

Comment Re: Very Annoying (Score 5, Insightful) 116

The trouble with really short expiries is you have a lot less time to fix issues before everything breaks. With 90 day expiries, you can comfortably renew your certificates two weeks before expiry, giving you plenty of time to sort out any issues before things break. With the 7-day expiries they're pushing for, you've got almost no time between scheduled renewal and certificate expiry to get stuff sorted out when things inevitably go wrong. The point of the really short expiries seems to be to compensate for revocation being under-utilised or something. But are there any real-world issues with 90-day certificates? Also, I really don't trust the certbot scripts very much. It's a lot of code I don't trust to allow running as root if I want to allow automated scripted renewal. Right now I run certbot as an unprivileged user and manually install the updated certificates and bounce services. That's going to become impractical as they make expiries shorter. And that's before you consider all the devices that don't make automation practical. Lots of devices have embedded servers.

Slashdot Top Deals

To downgrade the human mind is bad theology. - C. K. Chesterton

Working...