|
From the news articles on the front page today:
Quote: One in three security professionals lack effective intelligence to detect and action cyber threats,
That's blunt. Ok, most lack effective intelligence for many things, often even getting from A to B is a major problem when they are digesting at the same time. Please be more polite and don't let them feel it. 
On second thought: Ol' Pointy Hair will never have a clue, even if it sneaks up on him and bites him into the office chair flattener.
|
|
|
|
|
It sometimes seems as though 4 in about 5 developers lack effective intelligence to write code resembling a program.
Friggin' 1000 line functions are NOT acceptable in an object-oriented programming language (or probably any language for that matter).
Having a helper class, instantiated with DI, with one line of code to create some object through DI that could already have been created using DI is NOT proper design, it's just stupid and completely unnecessary.
Speaking of DI, MEF is not a DI library.
Also, a hash isn't some randomly generated key.
"Not doing software architecture because it's not for us" is not how it works.
Creating a unit test that only checks if an exception is thrown because some third party component is unavailable and cannot be mocked is not a good unit test.
Also, a unit test that tests whether int.Parse really parses a string to an int is not a good unit test (why the hell are you testing .NET!? If that test fails you've got bigger problems than that failing test!).
Unfortunately, I could go on for quite some time 
|
|
|
|
|
Those that are simply dumb are surprisingly rare. There are 2.5 distinct types that you can meet at every corner:
1) The guys with more ego than brains. They think they are so smart that they don't have to learn anything and that the stuff they come up with automatically has to be the best solution. Period. No discussions. And no questions why nobody in the entire world does anything this way.
2a) The poor sobs who did not have enough ego to keep type 1 from beating them into submission. They know every 'rule', 'convention', 'law', 'dogma' or 'standard' type 1 has thrown at them and proudly recite them when they are thrown a bone. Like any good dog, they are trained not to think themselves or asking any questions.
2b) Very well trained types 2a who have memorized all rules and conventions may ascend to be the right hand to some type 1. They will do the beating into submission part for him, so that he needs not to get the hands dirty anymore.
In a profession that requires the ability to think and solve problems, we have countless people who avoid thinking at all cost.
|
|
|
|
|
Is there the kind that just doesn't care and don't really like programming and haven't learned anything new in 20 years?
|
|
|
|
|
|
I see, maybe I was wrong then and we're really just writing Sinclair BASIC.NET rather than C# 
|
|
|
|
|
Sander Rossel wrote: Unfortunately, I could go on for quite some time
You make some excellent points, and the most disturbing hidden point is that I imagine you are speaking from the experience of working with other developers. 
Marc
Latest Article - Create a Dockerized Python Fiddle Web App
Learning to code with python is like learning to swim with those little arm floaties. It gives you undeserved confidence and will eventually drown you. - DangerBunny
Artificial intelligence is the only remedy for natural stupidity. - CDP1802
|
|
|
|
|
Marc Clifton wrote: you are speaking from the experience of working with other developers
Young developers, old developers, developers with a formal education, certified developers, developers from multiple companies...
One of my favorites, without a doubt, is this gem:
string newHashCode =
Guid.NewGuid().ToString().Replace("-", "") +
Guid.NewGuid().ToString().Replace("-", "") +
Guid.NewGuid().ToString().Replace("-", "") +
Guid.NewGuid().ToString().Replace("-", "");WHO IN THEIR RIGHT MIND...!? 
This was written by a programmer with about 20 years of experience who probably makes more than I do. Go figure 
|
|
|
|
|
The problem is, we, including my girlfriend, my mom and my aunt (just for the record, those are 3 separate people!), are forced into the role of being a security professional. Install anti-virus/anti-malware. Check that the site is https. Check that icon (if your browser supports it) for the https site you're about to enter your credit card indicates something higher than a domain level cert. Keep your anti-virus/malware up to date. Check your email before clicking on a link, who's it from, where does the link take you, report email spam. Report Skype invites from beautiful women that claim to know me, some of which even go so far as to say something nice about a blog post or an article (I kid you not.)
Because, ironically, those who know absolutely nothing about cyber threats cannot trust the security professionals that supposedly do.
Marc
Latest Article - Create a Dockerized Python Fiddle Web App
Learning to code with python is like learning to swim with those little arm floaties. It gives you undeserved confidence and will eventually drown you. - DangerBunny
Artificial intelligence is the only remedy for natural stupidity. - CDP1802
|
|
|
|
|
Marc Clifton wrote: Check that the site is https. Check that icon (if your browser supports it) for the https site you're about to enter your credit card indicates something higher than a domain level cert.
Bad guys can get SSL certificates too - even EV certs.
The presence of a certificate doesn't mean that you're talking to the right site; it just means nobody* can eavesdrop on your communication with that site.
And an EV cert just means that someone at the CA has (hopefully!) verified the name and country it displays in the address bar. But there are valid sites out there where the name on the EV cert doesn't obviously have anything to do with the site, so it's not always a great deal of help.
* Assuming the site isn't misconfigured, the CA hasn't been hacked or handing out invalid certificates, your government hasn't required you to install an intermediate cert in order to access the internet, and the NSA haven't deployed a quantum computer to break the encryption.
"These people looked deep within my soul and assigned me a number based on the order in which I joined."
- Homer
|
|
|
|
|
|
... and the very next item on the (Aussie) ABC News is this[^]
Software rusts. Simon Stephenson, ca 1994. So does this signature. me, 2012
|
|
|
|
|
Sort of, right?
:IAMRIGHT: :ICOULDBEWRONG: :CPRULEZ:
![Java | [Coffee]](https://www.codeproject.com/script/Forums/Images/coffee.gif)
![Jig | [Dance]](https://www.codeproject.com/script/Forums/Images/jig.gif)
|
|
|
|
|
IRC used it long before CP existed
|
|
|
|
|
IIRC 
Jeremy Falcon
|
|
|
|
|
|
Chris Losinger wrote: IRC used it long before CP existed
Say it ain't so! I don't remember using those in IRC. Although, I never messed around with the special character stuff. I must be getting old because I barely remember IRC. Only used it in the 90's. I got hooked on some of the games. I think trivia.
|
|
|
|
|
Back in the day it was easy to link to other channels depending on the client used. Don't recall the syntax off the top of my head, but linking was possible.
Jeremy Falcon
|
|
|
|
|
/join #channelname At least in the IRC I remember and still use today
|
|
|
|
|
|
The employment department sided with him, so no big deal
|
|
|
|
|
Americans! 
|
|
|
|
|
Story is from Daily Mail Online, therefore 99% chance it's fake news...
|
|
|
|
|
I did not intend for this to be such a long rant, but it kinda got out of control, and actually helped me solve the problem. 
I am greeted first thing this morning by a call from my colleague informing me that something's awry with the mail server (self hosted 2008r2 w/hMailServer). Hmm...my last incoming email from it was around 2AM and now it is unreachable. 
A quick glance through the event viewer shows a forced restart at 2:30 due to a few windows updates. The hMailServer logs naturally show the service shutting down and starting back up, but also, is showing a severe application error with a sql query. This error shows only once, even after restarting the service numerous times. Has it fixed itself??? Running the diagnostics test in hMailServer still fails to connect to my static IP on port 25. 
OK, I admit, my version of hMailServer was a few versions (5 years) out of date, so maybe it's time for an upgrade. This went fine, but did not resolve the issue. The clients/telnet still can't connect, even using an internal IP for the server.
Other things I checked:
0: port forwarding rules in my access point/router
1: firewall settings on the server
2: port filtering in my (ISP) modem/router
Things I tried:
0: changing port numbers for both send and receive
1: reinstalling and reconfiguring hMailServer from scratch
2: rolling back the windows updates that caused the restart
3: rechecking the server firewall...hang on! What is this picture of a park bench? Why the elephant is this network connection classed as Public???   Set it to 'Work' and everything works again!
So, on the forced reboot, something bad happened with the adapter/driver and it created itself a new connection which obviously defaults to Public...which in turn obviously blocks the ports I needed for email. Strangely, no other services (ports) (rdp, ftp, sql server, file sharing) were affected.
On another note, it's almost like the server (OS) knows it's about to be replaced and is showing out.  I think Alexa heard me talking on the phone the other day and told it. If it were up to me, I would have never brought one of these things into the house...now we have one in the living room, a smaller one in the bedroom, and now the newest one (with a screen) in the kitchen. The newest one worries me the most as it has a camera on, and lights up when I walk in the room as if to signal that 'they' are listening and now probably watching!
I've got a blank 480GB SSD...all I need to do is buy/download the server 2016 iso and spend the weekend setting it up and swapping it out. Even though the box is almost 7 years old, the hardware is still more than adequate for my needs, so it'll just get a new larger home drive with a new set of instructions. Honestly, it's a nice opportunity to skip the weekly yard chores and relax in the A/C.
"Go forth into the source" - Neal Morse
|
|
|
|
|
Glad to hear you got it fixed  On a tangential note: software like Alexa and Siri creeps me out. A friend had her tablet "off" (probably in stand-by or low-power) and was talking about needing to look for a new baby-seat since the old one broke and not 10 minutes later turned on her tablet to an ad for baby-seats. Nope nope nope. All the nope 
(She hadn't searched for a new one yet.)
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
