The Insider News

Code Arcana[^]:

Format string vulnerabilities are a pretty silly class of bug that take advantage of an easily avoidable programmer error. If the programmer passes an attacker-controlled buffer as the argument to a printf (or any of the related functions, including sprintf, fprintf, etc), the attacker can perform writes to arbitrary memory addresses.

Entrepreneurial Seduction[^]:

The problem with talking about functionality not in the current release sets expectations and distracts from marketing what’s already wonderful about what you’re selling. All you’re doing is diminishing the product you’re selling. You are also making a promise to your customers that you may need to break down the road if priorities change (or Apple implements new OS features that force your hand).

Wired.com[^]:

In the dark old days of the late 1990s and early 2000s, debates would rage about whether open source software is as good as proprietary software. And it was all a matter of opinion. Then, in 2006, the Department of Homeland Security partnered with a software code analysis company called Coverity to examine open source code for security vulnerabilities and software defects. Each year since, Coverity has published a report on the quality of open source code.... But the latest report, published on Wednesday, found something new: the code quality of open source projects tends to suffer when they surpass 1 million lines of code, whereas proprietary code bases continue improve when they pass that mark.

Network Wrangler[^]:

With a nod to Vivek Gite and his popular 20 Linux System Monitoring Tools Every SysAdmin Should Know article, we present "20 Windows Tools Every SysAdmin Should Know". Many of the programs listed below are included with Windows and provide all kinds of information about what is happening on the computer. Some you've probably heard of, and hopefully a few will be new to you.

Gamasutra[^]:

[I] recently came upon magazine called "Video Games", published between 1982 and 1983. Within a lot of these issues were well written articles on a lot of things at the time -- and they're absolutely fascinating. Being around before and after the crash makes it quite unique. Starting off with Issue 8, March 1983 - Welcome to the Club! An amazing article written by Ann Kreuger about the role of Women in developing video games. Here’s a good start: "In my research, I turned up 15 women in positions that are not related to promotion, publicity or advertising." In the article she talks with Dona Bailey, one of the creators of Centipede, Sue Forner, an artist on Professor Pac-Man, Janice Hendricks who designed the art for Joust, Lynda Avarett, Sue Currier and Roberta Williams. Fascinating!

The H Security[^]:

Anyone who uses Skype has consented to the company reading everything they write. The H's associates in Germany at heise Security have now discovered that the Microsoft subsidiary does in fact make use of this privilege in practice. Shortly after sending HTTPS URLs over the instant messaging service, those URLs receive an unannounced visit from Microsoft HQ in Redmond.

Quartz[^]:

Big data! If you don’t have it, you better get yourself some. Your competition has it, after all. Bottom line: If your data is little, your rivals are going to kick sand in your face and steal your girlfriend. There are many problems with the assumptions behind the “big data” narrative (above, in a reductive form) being pushed, primarily, by consultants and IT firms that want to sell businesses the next big thing. Fortunately, honest practitioners of big data—aka data scientists—are by nature highly skeptical, and they’ve provided us with a litany of reasons to be weary of many of the claims made for this field.