Jump to content

Erebus the Black

Member
  • Posts

    851
  • Joined

  • Last visited

Everything posted by Erebus the Black

  1. Given the amount of people calling themselves humanists here, the starting results sure show a more authoritarian way of thinking, any comments?
  2. Favourite Comic: AMD Favourite Painter: Van Gogh Favourite Sculptor: none Favourite Architect/Building: none Favourite Composer: Beethoven Favourite Musician/Band: Beatles Favourite Prose Writer: Hemingway Favourite Poet: none Favourite Playwright: Shakespear? (it's either him or Molier as they are the only ones I know) Favourite Filmmaker: none Favourite Philosopher: Socrates Favourite Miscellaneous Artist Not Covered Above: I. Asimov + J.R.R. Tolkien + D. Adams
  3. Given the political orientation of the participants of this forum I was wondering in which direction does the wind blow here on the subject of the nuclear spy Jonathan Pollard. So I made a little poll. I know it's probably no use to ask, but let's try to keep it civil.
  4. Not until recently, no, and if someone really wanted a copy he could have gotten it through a russian mirror server, the russians mirror everything
  5. We're talking about Australia, rather... So unless you think the aborijnies are on par with the vahnati then your point is rather moot
  6. Ah, Iran and the end of the world, now that's a funny coincidence Do you think the Iranian government allows Jeff's games given some of the pics there?
  7. But they had sunlight and real beer
  8. @SoT: how can they make money: 1,250,000$ + goblins get around 1K-50K$ every time he releases a new tempts fate, GG does a lot of merchandising. So you see the big ones do manage
  9. My list contains Order Of The Stick, Looking For Group, Girl Genius, XKCD, Erfworld, PHD, Darths & Droids, goblins, A Modest Destiny (before it was abandoned), 8-bit theater and the three mangas One Piece, Naruto and Bleach. My favorites are OOTS GG and XKCD + the mangas, 8bit kinda took time to grow on me, and, no offence, goblins have just turned out to be a real let down with what I feel is a shoddy schedule and fragmented story telling, but I'm still following because the story itself is solid.
  10. Originally Posted By: Rowen is off to the coast In high school I was able to get the lock on my locker set so that it would open anytime for anyone. I never even bothered knowing my combo past day 1. Everyone I knew did the same things to their lockers too. In high school I didn't have a locker
  11. Originally Posted By: Aʀᴀɴ I know this story; I think it was on the Daily WTF some time back. Quote: The password field of the user table was also the primary key field making it impossible to have duplicate passwords, and they were stored unencrypted to make the verification process easier. This is... awesome. The only way to improve on it would be to tell users which other account has the password they tried to enter. Finally someone bothered reading beyond the first two paragraphs
  12. Monday, April 02, 2007 by Jake Vinson (not me) Originally Posted By: Jake Vinson We all know the rules for good passwords. They should be at least 90 characters long, have no recognizable words or phrases, consist of 30% lowercase characters, 30% uppercase characters, and 40% special characters, and they should be changed daily, if not hourly. Where I work, if you forget your password, you're fired on the spot and recommended for execution. OK, maybe I'm exaggerating a little, but let's quit jerking each other around and get serious. Password security is a big deal. Enrique knows this as well as the rest of us. Sadly, two developers he worked with missed the message. Enrique was doing maintenance work on an application that allows users to register to buy and sell antiques. The registration process was simple. Enter a username, address, phone number, email address, and password, and you're in. Of course, if the username is taken, you're asked to enter a different username. And of course, if the password you've chosen is in use by another user, your registration fails. No, I'm not kidding. Passwords had to be unique throughout the system. And judging by lists of user passwords I've seen, many users probably encountered this issue when trying to use a password of "password." The password field of the user table was also the primary key field making it impossible to have duplicate passwords, and they were stored unencrypted to make the verification process easier. On the bright side, the original developers hadn't forgotten to set a unique constraint on the username, but Enrique was intrigued enough to email them and ask them about the architecture. They sent back a database diagram, and what Enrique saw next chilled him to the bone. The password field was used as the foreign key throughout the system. To reiterate, every table that recorded a bit of user information used an unencrypted password to identify the user. A lot of words ran through Enrique's head, most of which can't be printed here. His biggest concern, though, was "what if the user wants to change their password?" See, most users have grown accustomed to luxuries like the ability to change their password. He fired back another email asking this very question. "Well, we'd first check that no one else was using that password. Then we run sp_change_password." sp_change_password consisted of a long list of UPDATE statements; one for each table that had any user related information in it. Any time new tables were added, they'd have to remember to update sp_change_password. None of these updates were done within a transaction. Enrique asked about referential integrity — if a field was updated, other tables would point to data that didn't exist anymore. "Oh, we had that problem the first time, so we removed all of the foreign key constraints in the database and it works now." Since referential integrity wasn't preserved, cascading updates were impossible, requiring sp_change_password to be built, but then referential integrity couldn't be preserved, and now the circle is complete. Enrique knew he'd have to push the other developers and let them know how bad of a design this was, so he pointed out possible system exploits. "Say someone made a script that'd create accounts like crazy, guessing different passwords each time. If a password error came back, they'd have a user's password. If a username error came back, they'd have a user's username. Eventually a matrix of usernames and passwords would be compiled, then it'd be a simple matter of attempting to log in." "Ohhh... umm... I guess you're right," was all the developer could muster. "But then we'd have to change every table to use a username as the foreign key, maybe even apply constraints on the server, and change the token each user carries throughout the application to be their username!" It was a major change, but Enrique insisted they do the work. The next day, the boss summoned Enrique to his office. "I hear there might be some major delays in our project, and I heard a funny rumor that you have something to do with it." ..... if anyone is looking for employees , Enrique is looking for a job.
  13. Originally Posted By: dorfydorf Originally Posted By: Homage Originally Posted By: Actaeon I never thought of Spiderweb games as needing recent hardware before, but I suppose AEftP is pretty advanced by previous standards. Half the reason I'm getting a new computer is because I had to play a SW game at anything other than the maximum graphics settings. Really, when that happens, you are obligated to upgrade. I never even fathomed that a SW game would need to be adjusted to play right. I have an old, cheap laptop, and it plays A:EftP perfectly. So it's not as old as you think
  14. Originally Posted By: Cairo Jim Originally Posted By: Cairo Jim You can have Africa if you want. Originally Posted By: δ³Σx² Originally Posted By: JamesMighty Oh Avadon is some mystical island on a sea surrounding Averforge/Genernum whatever, and is so far away no ship has ever sailed to the lands of Lyneaus. Read: Sholai On that note, how does Greenland sound? Iceland sounds better
  15. Now shoot yourself in the leg and savior the pain
  16. It saddens me to hear people calling A1-3 the original series when for me the originals will always be E1-3.
  17. After the first 3 questions I already hate this test because of how shallow they are. What does that make me?
  18. Ah yes, from movies you have Eliott and the dragon from Disney's "Reluctant dragon" and nearly all dragons in "Flight of Dragons" were good or just not evil.
  19. The only stories I remember with good dragons are dragonlance and death gate cycle. On a sidenote chinese dragons are in fact considered to be : *Drumroll* *Drumroll* *Drumroll* *Drumroll* Click to reveal.. Sea Horses *Fireworks*
  20. It gets better in A6 as you don't sell anything until you close the screen (unless you want to sell part of a stack, in which case it is sold immediately)
  21. Then the Schrodinger cat experiment is a bad example? If you're dead you're dead not much you can do about it once the brain matter dies, it's irreversible. Also what does recorded irreversibly means? When does nature record anything?
  22. with warm up I can reach a maximum of 20 pushups, without I can reach a max of 3
  23. Originally Posted By: Student of Trinity There's no obvious reason at all why all matter has to emit light. A priori one would just expect that a lot of matter wouldn't. Thing is it doesn't seem to reflect light (at least, not enough for us to be able to see it down here) either which is why some can't seem to be able to accept the term. If I may take a step back here for a moment, it's been over 2 years now since I was in the academia and something has struck me as quite odd. When is a quantum experiment considered to have been measured or seen? (I have a follow up question depending on your answers)
  24. I'm a leftist libertarian similarly to Gandhi so I hit Economic Left/Right: -5.00 Social Libertarian/Authoritarian: -2.10 As expected plus the question about protectionism stumped me, no idea what that means, and the test wouldn't let me skip it. Another thing is that both the lower part and the far right of the chart are considered libertarian, what gives? Are there not enough words in the English language to distinguish those two?
  25. Originally Posted By: !WoUlD yOu LiKe SoMe CuPcAkEs? [img:center][/img] What's the illusion, it looks more like it's photoshoped
×
×
  • Create New...