3194 posts • joined 16 Nov 2009
Re: @dogged LinkedIn are dangerous amateurs
1. How bullshitable are they? That is, how strong is their validation that your identity is real and unique?
Given a disposable email address, you could get far enough to log in and you only need to be logged in to use this vulnerability. So, pretty bullshittable.
2. What's the difference between when another member should and shouldn't be able to see this information on the page anyway? (Or are you specifying that the registration email address can differ from that listed for limited publication in one's profile, and that if so it's the former that's being spaffed? That would indeed be extremely bad.)
A "connection" - somebody you've given access to your details - could just send you an on-site message which LinkedIn would spam you with anyway but they couldn't see your email address. They actually sell the addresses to employment agencies as a paid service, which I find ironic.
And yes, it's the registration address that's in the source.
3. Anecdotally, do you reckon there are many source-botherers on there? Clearly you are, but it always struck me more as a managers' playground. Just wondering if it has that many denizens who'd even consider viewing the source (not that this would mitigate the vuln really but...)
Put it this way - unless there's somebody you specifically wanted to connect with (I did) then if you're the kind to wrangle source code at the 'raw bits' level, you have no real reason to be on LinkedIn because it's only useful for getting you a job or finding somebody you used to work with. However, there an awful lot of developers of the type who struggle to find work on there, if you understand me.
Probably some of those get bored. Me, I just wanted to know what the plugin did so I installed it and looked at what it was really up to.
Re: LinkedIn are dangerous amateurs
> You are not the only one to be Clueless though, the oft quoted Clueley concluded that "I really don’t feel as if [linked in] have handled this situation badly at all"...
I really don't feel that Graham Clueley has any fucking idea how insecure LinkedIn actually are.
This kind of comment on the basis of no analysis whatsoever is exactly what's wrong with current journalism and what the grauniad still insists on calling the "blogosphere".
Re: LinkedIn are dangerous amateurs
I'm not trolling. Did you log in?
This is pretty much what the plugin does.
LinkedIn are dangerous amateurs
View a profile page in LinkedIn whether or not you are a "connection".
Search the source for "@"
And there you find that user's registered email address.
In my opinion, this is unforgivably bad practice. Don't give LinkedIn a genuine email address. I think the only reason most people don't notice the spam-vuln is because LinkedIn send so much fucking spam themselves.
Re: "but the 64-bit x86 Atoms"
But he's not wrong.
Emulating x86 windows code on ARM is always going to be so slow as to be practically unusable anyway.
I'm not hostile. I'm... obstructive, I suppose. Personality politics annoy me, mostly because I used to live with a very strident feminist.
I don't like what's implied by Brendan Eich's donation but we have to remember that it is only an implication. He hasn't changed any policies or made any rules discriminating against gay people or anyone else.
Put it this way - I wouldn't much like the idea of a rabidly fundie Christian taking over the company I work for but... provided we didn't have to say grace in the canteen and nothing else changed and he did a good job, it would be both uncharitable and - yes, let's go there - bigoted of me to reject him based on nothing more than a single assumption.
Am I making sense?
Re: So, what do you recommend then?
You could fork Firefox and call it "FayFox" or something?
> As a gay man I have to admit that I find his promotion and the comments here disheartening.
Really? You suspect then, that only those who wholeheartedly support gay rights - or perhaps, only homosexuals? - can do a decent job as CEO of Mozilla?
You have some evidence that legal historic donation to a political campaign (which lost) somehow renders one incompetent in entirely unrelated fields?
I should be interested in reviewing the studies which led you to this conclusion.
Reductio ad absurdam
Suppose you support legalization of cocaine and you work for Mozilla.
Cocaine is illegal.
You do not use it but you donate to a "legalize" campaign.
SHOULD YOU BE SHOT IN THE FACE?
Beautiful. Well spotted.
So, short version -
A ping of less 100ms doesn't make much of a difference simply due to the fact that most humans take longer to react (fully, rather than simply "notice there is something to react to) than that. Even if you could see bullets coming at you, it wouldn't help you dodge them.
(And you can't anyway; I can move my hands faster than you can see and so can any street magician).
Therefore, Trevor sucks at Titanfall but he can always blame it on Microsoft (via Azure) to maintain the ongoing theme of this site. Everyone happy?
> "Our raters were able to estimate intelligence with an accuracy higher then chance from static facial photographs of men but not from photos of women,"
So can I, based on the presence or otherwise of a baseball cap.
Re: So Flop gets to ruin the phone business, again
Earning your pay on this one, Bob?
@A J Stiles
I absolutely agree with you.
The problem is, this is owned by the Accounts department who see that a) what they have now works b) replacing it would cost money in developer time and analysis and c) they (as the Accounts department) would be paying.
The odds on sneaking any improvement past the beancounters are infinitesimal.
Re: Head to head - Windoze upgrade
> Dogged makes the point that the 28Mb spreadhseet with VBA macros aint gonna run on Linux. Well, I have news for you - it can and does run under OpenOffice, and it was 3,000 MB. However, it was developed under Office 2003 using WinXP.
That's interesting. The (actually real) spreadsheet I was referring to has any number of MSGraph COM objects in it and crashes explosively under WINE and the VBA doesn't work at all under OpenOffice.
So, some will, some won't. But most of the homebrew line-of-business Windows applications absolutely won't run so my point stands.
Re: Head to head
> And I'm a .NET developer (glad to be shot of Visual Studio!).
What are you using instead?
(Personally, I quite like VS, post VS2010 which was crashy and irritating).
Re: Head to head
Except for IE; no linux browser will currently run ActiveX components (and quite rightly so). Although idiots who wrote in-house applications using ActiveX and IE are sadly not rare and those applications are now causing everyone a whole lot of grief.
And not everything runs in a browser. That hideous spreadsheet your accounts department uses for reporting with the 28MB of VBA macros in it.... not gonna run, even with WINE.
You know and I know it should never have been created but it was and it is and it's mission-critical now...
Or the untold billions of in-house developments using VB or .NET Winforms or WPF that mono will simply never support.
Migration can be a great a policy but it can also be a terrifyingly expensive and time-consuming policy.
Re: A good cause for anger....
That is not an acronym. You can pronounce an acronym. RADAR is an acronym. LGBTQIA (whatever the hell that stands for) is (presumably) an abbreviation because good luck pronouncing it.
Re: eich is a bigoted hater...
All we know is that he supported a group which wanted to keep gay marriage illegal in California.
Maybe he also supports groups try to ban all marriage. Maybe he sponsors every year's Pride to the tune of half a million dollars. Do you know?
I don't know either. So I can't call him a bigoted hater because I have insufficient evidence.
But I can call you a judgmental wankstain because you've helpfully proved it.
Re: Clarification for Mr. Eich
> who died and made you Queen?
Careful, I think that may technically count as "hate speech".
I just wish people would stop telling me what I should think.
I like gays; anything that gets the well-dressed good-looking guys with the personal hygiene obsession and the ability to chat out of the market can only be a good thing. Yes, that's a joke, except for the first bit. I've met many gay men, most were people I'd happily spend more time with. On the other hand, I find men being effeminate distasteful and greatly dislike the Graham Norton/Alan Carr style that I thought (and hoped) had died with Larry Grayson.
I mean, you're still men, right? Sexual preference doesn't change the tone of your voice or make you flap your hands about, does it?
So what it really comes down to is, is that opinion homophobic? Is it an all-or-nothing thing? Must you accept every aspect of every community in order not to be a bigot? Because, y'know, that is analogous to suggesting that because you support multiculturalism you must also support female circumcision or the stoning of adulterers....
We think the way we think. In Britain, you might sign a petition or mumble something non-committal at a political rally, in America they give money because it's 1 dollar, 1 vote over there. So he gave money because he had an opinion.
And the thing is, that's all we know. We don't know any of his other opinions. Maybe he thinks marriage should be restricted to a religious arrangement and all legal benefits to it should be transferred to civil unions (I'd support that myself). He might be attempting to uphold the US constitution by separating Church from State which would certainly not be anti-gay.
You don't know. I don't know. This couple in California don't know. Only Brendan Eich knows.
The rest of us, all of us, especially the bigots going on about the right to hate fairies and the gays claiming that everyone is Hitler should shut the fuck up.
Only if you do so in every browser.
Have fun with VBScript.
Re: Oh, a new outrage of the week. Finally, I was getting worried.
It's pretty rare for me agree with Matt Bryant but yeah.
Perhaps this couple should read some Voltaire.
"Man holds opinion - 'burn him' squeal people who dislike that opinion". Godwin's Law has already been invoked so I'll avoid it but obviously, no future CEO can ever hold any public political opinion, meaning nobody who ever wants to get anywhere can ever hold any opinion because they'll get you historically as well and then you're just as bad as Stalin.
They never say which direction the costs are spiralling in, do they?
Personally I solved all this nonsense by moving in with a doctor. The only trouble is that every tiny inconvenience that I'd ignore gets treated like a symptom of something more major.
They're only headaches....
4chan. Send everyone to 4chan and we will soon know that all symptoms can only indicate AIDS and ebola.
Re: @no shill dogged
Professionally, I code for MS platforms which gives me an interest in them. They pay my bills and clothe my child.
If you have a problem with that, I suggest you kill yourself.
Privately I code for the debian project because it's valuable to me and I like to be able to put something back. If you have a problem with that, I suggest you kill yourself.
Neither of these makes me blind to the realities of probability or gives me any religious obligation to "support" any side or company. Working with their products every day tells me that those products are no worse than any other software from any other company or project. Even debian, which I vastly prefer, has some glaring flaws in it.
Whereas you post as if you think that MS are some kind of dark evil vastly powerful (and yet simultaneously utterly incompetent) Sauron equivalent that wants to rape your mum. Which is a completely retarded (not to mention contradictory and hypocritical) opinion to express.
And you started throwing the word "rape" around, you fucking child.
Re: Microsoft's influence within a private Dell?
> What's to say that Microsoft, in it's bid to legitimise it's non-disclosed claims against Android, offered a cash bundle for Samsung and Sony to develop Windows Phone in exchange for S & S to 'license' MS's patents at zero cost?
The fact that Sony don't make a Windows phone? Sorry, but you're reaching now.
> How about a class action against any organisation that provides a public email service and then reads said emails?
Doomed to failure due to the ToS.
However a class action lawsuit by people who have sent mail to companies or individuals who use GMail in the (reasonable) expectation of privacy - and bear in mind, with GMail for domains there is no way the average punter knows they're sending mail to google.com instead of domain.suffix - only to have their email read by a third party would probably stand some chance of success.
Re: Microsoft's influence within a private Dell?
If you win, you don't pay costs. The loser pays. If you're certain you're going to win, you know the whole exercise is free.
This means they weren't certain. This means the patents are probably legit.
Re: Microsoft's influence within a private Dell?
> Microsoft is not dumb enough (yet) to take anyone to court that might win and fight back
Tell me, if you think it's so obvious that these patents are simply an irrelevant shakedown, why did Samsung and Sony pay for them?
Neither are exactly best buds with MS and neither is short of either lawyers or money. And in Samsung's case, the expenditure on licensing Android is more than just significant.
I think you have to be irrationally convinced of the religious superiority of Android to convince yourself that so many companies just gave away money for absolutely nothing. I think the only reason so many cash-rich, legally tooled-up companies paid the money is because the patents are legit.
I think "denial" and "delusion" are poor things for an engineer of any description to indulge in.
Re: Dell does build Android slabs
Probably, yes. Personally I prefer this to "don't be seen to be evil" as your employer should probably put it.
Re: @ dogged
@eulampios - I do not work for Microsoft and am not paid by them.
You just shat all over the House Rules just because you're the electronic equivalent of a Jehovah's Witness.
All this is true. The problem was the off-by-default Windows Firewall.
Does Thief has a third-person mode?
I suffer from simulation motion sickness and first-person mode literally makes me puke.
Reviews never mention it but I find it's worth asking. Skyrim was pretty playable in 3P, after all.
Re: Needed software
take a day off. I'm pretty sure nobody's paying you to sell linux installs and the author stated explicitly that he'll be installing win7.
> So what is wrong with a "most favored nation" clause?
Everything, where it implies price fixing and effectively stealing from your customers.
Returning a laptop to PC World ruined this bloke's credit score. Today the Supreme Court ended his 15-year nightmare
Scotland is a special case for a couple of reasons
1. They keep going on about how much better off they'd be outside of the UK
2. They get a referendum this summer on leaving the UK.
This strikes me as slightly unfair. As a citizen of the nation of the UK that pays for all the others, I'd quite like my tax bill reduced and I'm pretty sick of the Scots a) getting freebies I don't get (but pay for) and b) going on about what a bastard I am.
The awful truth is that Scotland probably won't secede because if they did, they couldn't piss away my taxes anymore and it seems a trifle unfair that they get to decide this but I don't.
> It is such a strong hand that when Microsoft sued Barnes & Noble, they ended up giving B&N 300 millions dollars to stop their counter attack.
You picked an appropriate handle, didn't you?
B&N decided to fight the lawsuit in order to keep Nook unit prices down and angle for wealthy partner to subsidize their failing dead-tree+bricks+mortar business. Sadly, it was going nowhere and (given the toppling of Android dominoes) was likely to fail. This gave MS a chance to make a grab for the ebook market for cheap, which fortunately also failed. I wouldn't put it past them to have gone for Apple-style cartel pricing and the fact that they were beaten to it should make everyone happy, especially B&N who got exactly what they wanted.
Give it up, fandroid. Are MS bastards? Yes. Are the patents legit? Yes. Why does that hurt you personally? Because you can't see that Google are just as bastardy as MS but you really should. Open your eyes. None of them are on your side.
Could be worse. Could be Bublé.
Re: sounds familiar
As a confirmed misanthrope, I quite like this idea.
The Curse of HP
Bye then, Google.
> I humbly propose anti-social, with "anti" in the earlier Greek meaning: in front of, in the place of, in opposition to, real-life social activity.
"In front of" would be "ante" rather than "anti".
Re: ..a multimillionaire already ..... can afford to walk away
> They're Sociopaths, not Psychopaths
Most mental health professionals consider these two terms to be synonymous these days.
Just another example of Sherlock Holmes being wrong.
As an o2 customer who has sufficient minutes and texts but ALWAYS runs out of the poxy 512MB data allowance three weeks into each month (and there is no way to increase that without paying for more minutes and texts), I just applied online for Three's One Plan SIM-only contract because enough is, frankly, enough.
Re: Things change.
Ah, the explanation-free downvote. You disagree, but you don't know why.
- Infosec geniuses hack a Canon PRINTER and install DOOM
- 'Windows 9' LEAK: Microsoft's playing catchup with Linux
- Boffins say they've got Lithium batteries the wrong way around
- Game Theory Half a BILLION in the making: Bungie's Destiny reviewed
- Phones 4u slips into administration after EE cuts ties with Brit mobe retailer