Comment Re:Priorities (Score 1) 156
Could this be more then a giant DDoS bug?
In theory, could you submit a legitimate value for key 1. That value then is the one that gets validated. Could you then submit a second value with key 2 that hash's to the same value as key 1 overwriting the data for key 1 in the data structure. Since the application isn't expecting a get/post value with key 2 the data never gets validated. When the value for key 1 is retreived, the hashes have collided the the data for key 2 is retreived.
Thinking about PHP, the collision would occur before the script executes, so validation should get key2's value and thus validation should value. It might not be the best failure mode, but validation should catch the error. Is that a good assumption and is that true for all the implementations? I think this is theoretical, but I can't convince myself to ignore the possibility either.
Comment Re:Uh, would someone care to explain... (Score 3, Insightful) 256
Comment Re:will you have to pay for incoming and roaming (Score 2, Interesting) 256
Comment Re:The Premise is False (Score 1) 615
Comment Re:There are no other questions (Score 0, Redundant) 902
Comment Re:Intel (Score 4, Insightful) 230
Comment Re:A musicians perspective (Score 1) 150
Comment Re:correction needed (Score 1) 136
Journal Journal: Autistic Child Forced Out of Kindergarten By "Popular Vote"
Comment Re:Photographers and IP (Score 1) 616
I first encountered this with my daughter's day care. Once a year they bring in a professional photographer who send home permission slips a head of time explaining they will be there to take pictures and the procedures for ordering copies. About 2 weeks after the pictures are taken, they show back up for two days with the prints for a package. You can either custom order, buy part of what they have, or if you buy the whole package (about $100) they also mail you a cdrom with the pictures and a letter explicitly assigning the copyright of the pictures to you (in case you try to get prints later and they give you a hard time). I was primarily impressed since I've always seen where school pictures where an order a head thing (and I had just done my daughter's through her school that way and they were horrible) so I really liked the idea of seeing before I bought. Second of all I was impressed that they were very upfront about the cd and the copyright assignment that would come with it.
The second place I know of where this is possible are the photography places in most Sears. My daughter's mom worked at one and their procedure was to take the pictures and then help you order prints (charging WAY too much for them). Then when you came to pick them up they would offer you "specials" which were basically the same print options you saw before but discounted (they figured you already spent the money you were budgeting up front, so now they try to offer you a deal to get the impulse buy). The one option they added was a cd of the images with a copyright assignment.
Finally, when my former co-worker got married the photographer explained the great lengths she went to keep backups of the pictures so that him not receiving an electronic copy was not a big deal. He countered how with things like digital pictures frames, wanting to share the pictures online, and the fact she could go out of business all made him not receiving the digital copies a big deal to him. After a bit of discussion in which the photographer was assured he would respect her copyright they came to an agreement that all prints would be order through her but he would get unlimited rights to digital copies. All-in-all not a bad deal and it only upped the price by about $100.
I'll concede my sister couldn't find a photographer willing to make the same deal (she's in a small town) but there are at least some of photographers willing to work this way. I know my daughter's mom dislikes the idea because she has an art degree and getting paid per unit time makes her a craftsman not an artist, but working at sears has diminished her ego enough to accept it. (She doesn't get the concept of a day job).
Apple and Fox Set to Announce Movie Rental Deal 192
Submission + - Don't wait for Vista SP1, pleads Microsoft (apcmag.com)
AMD Considering Getting Out of Fabrication Business 229
Feed Joost evaluating its hardware options (engadget.com)
Filed under: Home Entertainment
Joost, the hard-partyin', beta-stage releasin', streaming TV-service you've been watching on your PC appears to be making baby-steps towards integrating their service with somebody's third-party set-top box. Joost began making public statements this week suggesting that it's already in talks with manufacturers, although we don't know who or where. According to their executive VP of global advertising, "You will see Joost in the living room," which really only makes sense. Paradigm-shifting media delivery platform or not, people still seem to typically prefer to watch TV sitting on their couch and with their TV.[Via BGR]
Read | Permalink | Email this | Comments
Office Depot Featured Gadget: Xbox 360 Platinum System Packs the power to bring games to life!