|
I may be rabble, but I'm certainly not common. 
If you have an important point to make, don't try to be subtle or clever. Use a pile driver. Hit the point once. Then come back and hit it again. Then hit it a third time - a tremendous whack.
--Winston Churchill
|
|
|
|
|
In Jordan they love BS security measures to enter a "mall". You have to go through one of those metal detector-y things etc.
One time a guard decided I was an obvious terror threat, so he put his arms around me and started to pat me down around my copious belly without any warning. I must have either clenched my fists or the other guard realised I was a foreigner or something as he pulled the the guard away from me. I walked off saying "it's not even as we've been formally introduced" . Probably the I only witty thing I've ever said, and no one within miles who would have understood.
|
|
|
|
|
Yes, they have the same BS security measures in Israel. When I was last in Turkey (about ten years ago), they had them there, as well. To misquote Shakespeare, all men are actors, and all the world is a security theatre.
If you have an important point to make, don't try to be subtle or clever. Use a pile driver. Hit the point once. Then come back and hit it again. Then hit it a third time - a tremendous whack.
--Winston Churchill
|
|
|
|
|
flavoured tea (vanilla, fruits, chocolate...) is awful. (ok, except some fruity tea in the torrid hot summer days with lots of ice)
I used to only like earl-grey tea, but now I like the more earthy Pu-erh[^] tea and the lighter japanese Genmaicha[^].
I'd rather be phishing!
|
|
|
|
|
Tea is a drink made with the leaves of the tea plant.
Anything else is an infusion.
You appear to be drinking an infusion.
veni bibi saltavi
|
|
|
|
|
Marketing calls it tea 
My blog[ ^]
public class SanderRossel : Lazy<Person>
{
public void DoWork()
{
throw new NotSupportedException();
}
}
|
|
|
|
|
Sander Rossel wrote: Marketing calls it tea
And we always believe everything Marketing says, don't we?
Clickety[^]
If you have an important point to make, don't try to be subtle or clever. Use a pile driver. Hit the point once. Then come back and hit it again. Then hit it a third time - a tremendous whack.
--Winston Churchill
modified 23-Feb-15 4:18am.
|
|
|
|
|
Have you actually tried drinking tea that contains real tea (Camelia sinensis), because the infusions you mention (with the possible exception of green tea), do not actually contain any of the marvellous leaf.
=========================================================
I'm an optoholic - my glass is always half full of vodka.
=========================================================
|
|
|
|
|
Sander Rossel wrote: And for those who think all those flavours are for women and wussies, I really
don't care 
If you don't care what we think of your choice of wussie flavors, what makes you think we give a tinker's damn about what's happening to you?
".45 ACP - because shooting twice is just silly" - JSOP, 2010
-----
You can never have too much ammo - unless you're swimming, or on fire. - JSOP, 2010
-----
When you pry the gun from my cold dead hands, be careful - the barrel will be very hot. - JSOP, 2013
|
|
|
|
|
Please remind we are here: Quote: For lazing about and discussing anything in a software developer's life that....
Seems the experts knows SQL injection and mentioned it frequently when a “Q” write some test code. *Lol* and that is the only thing what they (_the_ experts) know and can suggest protecting from it. And why one can discus SQL injection and _not_ the other abusive themes?
Sorry, if this is all, please ask yourself how you can call you a “professional”.
Bruno
modified 19-Jan-21 21:04pm.
|
|
|
|
|
There's a big difference between SQL injection (or script injection) and writing a virus.
SQL injection is only possible when you write poor code. So it's important to teach people to write their code in a SQL injection-safe manner.
A virus or worm attacks your computer. Maybe it changes a registry setting, or sends out emails to all your contacts. There is really nothing you can do about it except download a virus blocker/scanner, not visiting dubious websites, opening dubious emails, make regular backups and hope for the best. I agree that if you want to write a virus blocking application you need to know quite a bit about it, but for your regular day-to-day software programming you won't need information on how virusses and worms are written.
And in fact you can find other stuff on security on CP as well. I'm pretty sure there are plenty of posts on setting up HTTPS and why you'd prefer it over regular HTTP, AntiForgery tokens, script injection, encryption/decryption, etc.. Why? Again, because this can protect your code or data from bad people just by writing good code or setting up good configs. And that's what CP is about, writing good code. Not writing harmfull code!
My blog[ ^]
public class SanderRossel : Lazy<Person>
{
public void DoWork()
{
throw new NotSupportedException();
}
}
|
|
|
|
|
Ok, I give up. Serious programmers seems to deny serious attacks 
On attacks (SQL inj., ...) why I should make a difference between this and that, it is only another blabla and _no_ background knowledge because it can not discussed....sorry for that.
EOD, Bruno
modified 19-Jan-21 21:04pm.
|
|
|
|
|
As a software developer, it is my responsibility to make sure that my software is protected from attacks, and since I write a lot of apps with web service calls, database transactions, or REST operations, there's a lot of bullet proofing I do there.
I do not, however, write OS's. Therefore, it is the user's responsibility to keep their machine virus, malware, adware, etc. free. And yes, there's a responsibility that the OS manufacturer has too, of course. But my point is, I can only be responsible for my little corner and asking me to take on things I cannot in any way shape or form be responsible for is silly.
Marc
|
|
|
|
|
Dear Marc Clifton
I read a lot of your articles and learned a lot there!
But Quote: Therefore, it is the user's responsibility to keep their machine virus, malware, adware, etc. free.
No, I can't agree. If the user is my 80 years old mother, I don't think it is appropriate to put the responsibility to her 
Bruno
modified 19-Jan-21 21:04pm.
|
|
|
|
|
Bruno Sprecher wrote: If the user is my 80 years old mother,
Well of course, some people need the help of a professional. Which is also why we have IT departments that make our lives miserable by blacklisting websites like CodeProject and StackOverflow and prevent us from chatting on FB while at work. 
Marc
|
|
|
|
|
I allreday disabled CP and others programmers Forums for my 80 year old mother 
Bruno
modified 19-Jan-21 21:04pm.
|
|
|
|
|
Bruno Sprecher wrote: why one can discus SQL injection and _not_ the other abusive themes?
Contrarywise; we are always quick to chastise a petitioner who asks for help in writing malware, keyloggers and such. Fortunately there are fewer of them.
But the real problem in your statement is that intentionally writing code to do bad things is very different from naively writing code that can have bad things done upon it.
|
|
|
|
|
Boah, this is just also only a general statement. Please read all the rubish to my previous question in the forum. Things like "i know somebody who knows somebody...". About the abusive things nothing is known...and that is a shame! I like to know them (the abusive things) to fight against them!
Thank you for your comment
Bruno
modified 19-Jan-21 21:04pm.
|
|
|
|
|
Ah. Let me put it this way...
Someone may think he's being helpful when giving advice on how to detect or avoid an attack of some sort, e.g. "always check your tailpipe for bananas before starting your engine". That sounds reasonable doesn't it? But, there is very little likelyhood that the average person will come under that type of attack, particularly from a serious attacker. The more likely outcome of publishing such advice is to give the local urchins an idea for a prank.
Several such instances of "advice" have circulated the Internet (and they sometimes get picked up by broadcast media), much like chain letters, and I cringe every time I hear of one, because I know they're actually putting bad thoughts into people's heads.
Examples:
http://www.snopes.com/horrors/robbery/slasher.asp[^]
http://www.snopes.com/crime/gangs/lightsout.asp[^] (I first heard of this one on the radio)
http://www.snopes.com/crime/warnings/maryland.asp[^]
So, even if I knew how to write a virus or similar malware (and I don't), I wouldn't tell anyone.
I do recall there was a book, though, back in the 80 or 90s... 
Or you might like this: http://www.amazon.com/Malware-Analysts-Cookbook-DVD-Techniques/dp/0470613033/ref=sr_1_1?ie=UTF8&qid=1424628134&sr=8-1&keywords=virus+book+code+computer[^]
<hidden>
I do recall, in high school, writing a program, that was essentially a password grabber, which I would leave running on a terminus.
It would prompt for Username and Password (this was RSTS-E on a PDP-11), write them to a file in my directory, delete itself, and exit.
Fun times. I don't think I caught anyone with it.
</hidden>
|
|
|
|
|
Bruno Sprecher wrote: And why one can discus SQL injection
Because the only thing that is published on the subject is how to prevent it happening. If you want a discussion on how to prevent viruses, worms, trojans etc., then start a thread with that clear objective. But having a discussion on how to write such software is plain silly.
|
|
|
|
|
Sorry, but SQL injection is a children Story (which a lot of experts push to Show how "experts" they are).
Yep let discuss how to implement a virus! No, that is _not_ silly...because you, neither me and all the others do not have any idea about it.
Bruno
modified 19-Jan-21 21:04pm.
|
|
|
|
|
Bruno Sprecher wrote: SQL injection is a children Story (which a lot of experts push to Show how "experts" they are).
On the contrary, we do it to show "newbies" and others, that their code exposes a weakness, and they should change it in order to protect their systems. The fact that you appear not to understand the importance of this is rather worrying.
Bruno Sprecher wrote: let discuss how to implement a virus! No, that is _not_ silly
Of course it is, if it gives people information on how to create such software.
|
|
|
|
|
No! If it is published one can defend! If not published only gibberish is available, like here! And that is not the Job of this forum!
Bruno
modified 19-Jan-21 21:04pm.
|
|
|
|
|
Sorry Bruno, I really don't understand those statements.Sorry, I re-read that and think I do understand; but I can only continue to disagree with you. If you publish information on how to create this sort of software, then every hacker in the world can find out how to do it. That is not only silly, but totally irresponsible.
|
|
|
|
|
Hmmm, most probably my bad english. Anyway I appreciate that you still discuss with me.
The only thing I like to reach is, that one can discuss free about the "dark side" and develope defense against it.
Bruno
modified 19-Jan-21 21:04pm.
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
