|
Guess what happens when they smell that she is getting ready to call for a tournament.
I have lived with several Zen masters - all of them were cats.
|
|
|
|
|
I just got the following very useful error from Windows.
Service 'MyService (MyService)' cannot be started due to the following error: Cannot start service MyService on computer '.'.
Upon further investigation it seems I don't have the proper credentials to start the service.
So I guess "Cannot start service..." is pretty accurate, because I cannot 
|
|
|
|
|
Yep - I've had that. They ought to replace to with "Just because shut up that's why!"
|
|
|
|
|
Need help? Here's a tip: skip straight to the end and reinstall windows.
you could send all sorts of logs to the help desk and on their suggestion do the "sfc/scannow" and other useless things, but when has that ever helped
- scroll down almost any windows bug forum, nearly always ends with "try reinstalling windows"
(too often followed a bit later with a reply from the OP: "thanks - that worked" - FFS)
Signature ready for installation. Please Reboot now.
|
|
|
|
|
Why don't error messages look like this:
Quote: I'm here to tell ya honey
That I'm bad to the bone
Bad to the bone
B-B-B-Bad
B-B-B-Bad
B-B-B-Bad
Bad to the bone
|
|
|
|
|
One of the Apps I wrote that had a humours error messages, customer / employeer not impressed. Users loved it! 
|
|
|
|
|
It just means they don't have enough try catches. Everyone has code like that.
Everyone is born right handed. Only the strongest overcome it.
Fight for left-handed rights and hand equality.
|
|
|
|
|
I can safely deduct from this that you have never ever done any iOS programming.
Try that and then you will see catch all messages like there is no tomorrow.
throughout my life, my two greatest assets have been mental stability and being, like, really smart.
modified 20-Oct-19 21:02pm.
|
|
|
|
|
That's the female release of Windows.
I'll get my coat
|
|
|
|
|
Best one today, "An error has occured." when navigating to an internal website.
Common sense is admitting there is cause and effect and that you can exert some control over what you understand.
|
|
|
|
|
Opening VS after 2 months off - "unspecified error" - no effect on the system and is has disappeared today.
Never underestimate the power of human stupidity
RAH
|
|
|
|
|
When I get to see user prompts like that it really makes me feel someone's stuck on the stone age of web development.
I'm not sure, I could be wrong. Do we still limit user from entering special characters? If yes, for what reason someone should be blocking these innocent characters? - * +, - & _ etc.
I was painstakingly writing a product review in detail. At the end when I clicked on Submit button,
it says "Please avoid using special characters". As if it's just a ignorable warning. It jus didn't let me submit till I removed the last quote symbol. How weird this is.
I thought it's just about removing angle brackets (HTML Tags). But I had to remove even quotation marks,:, ; ,-, + , &,/,\ everything.
Is there a sane reason behind this restriction? (I remember me restricting people entering "<>" tags in input box when I tried my very first classic Asp page  )
Starting to think people post kid pics in their profiles because that was the last time they were cute - Jeremy Falcon.
modified 13-Feb-18 7:15am.
|
|
|
|
|
Well, it stops those pesky SQL syntax errors without having to waste time learning about (and fixing) SQL injection. 
"These people looked deep within my soul and assigned me a number based on the order in which I joined."
- Homer
|
|
|
|
|
somebody is using some piece of software which he never reviewed. 
Press F1 for help or google it.
Greetings from Germany
|
|
|
|
|
ithinkwhitespaceisaspecialcharachterinsertsmiley
... such stuff as dreams are made on
|
|
|
|
|
Well, filenames can't have certain characters, so in some cases, telling the user that is okay, in my eyes.
".45 ACP - because shooting twice is just silly" - JSOP, 2010
-----
You can never have too much ammo - unless you're swimming, or on fire. - JSOP, 2010
-----
When you pry the gun from my cold dead hands, be careful - the barrel will be very hot. - JSOP, 2013
|
|
|
|
|
If you are naming a file, then it's understandable to check for those characters. But not in a username or password or plain text input field to be inserted into a file or database.
If you think 'goto' is evil, try writing an Assembly program without JMP.
|
|
|
|
|
Password raise a scary thought. If they're rejecting special characters in a password it implies they're writing it straight into the database as plain text without hashing it.
|
|
|
|
|
A very good observation.
There is another argument (I am not saying that it is valid, though:
I prefer to use passphrases, not passwords. Phrases have space in them. If you prefer to primarily work in a command line environment (read: You're a Linux guy), you want the password to be an argument on the call line, like -p passwd. Standard command line parsers want the argument value to be a single word, or you would have to quote it, and that is too cumbersome.
You can go on from there: If the real -p argument starts with (/contains) a quoting charcter (there are several), a hyphen, a backslash, ... then it must be quoted in some suitable way, even if it consists of a single word. The method of quoting may depend on which special character(s) that makes quoting necessary.
In a GUI, you don't have to be concerned about printable characters - they are all valid. Of course the encoding must be defined - trying to use an 8859-1 encoding of the key to decrypt a document which was encrypted with an UTF-8 encoding of the same key won't work. As long as you state that 7 bit ASCII "should be enough for everybody" (again: You are a Linux guy) different encodings is not an issue: ASCII is a subset of all 8859-variants and of UTF-8.
So if you rule out non-ASCII characters to avoid encoding issues, and all those characters that is affected by command line parsing conventions, there isn't that much left beyond a-zA-Z0-9.
|
|
|
|
|
You wouldn't want to pass passwords as a parameter because then you can't control whether or not they're being logged by anything watching stdin. I'd be OK with the limitations being on some transport layer like only accepting ASCII or UTF-8. I more take issue with validation where they characters like '<', '>' and '&' are blocked, or in the most severe cases I've heard of words like 'select', 'where' and 'script'.
Actually I'm reminded of a an argument I had with a security 'expert' when I was a junior dev. He said I'd failed one of his security tests because the form I'd built accepted a SQL Injection. I'd used Linq to SQL so the attempt at injection had just been perfectly escaped and stored as a string, but he was pretty adamant the UI should be blocking submission.
|
|
|
|
|
I wouldn't want them applications to require the password as a parameter, but nevertheless I have to accept it when the application is not one that I can change. There are load of them out there, requiring the password as a parameter!
Bamboo (the CI system) recognizes this, and lets you pass the password through a bamboo defined variable. If the name of this variable contains the substing 'password', in the log files from the build, the actual value is not printed; the log rather displays a number of asterisks.
I hate it when some site tells me "Your new password looks too much like your old one", which proves that they store the password in cleartext. Other sites refuse passwords having the site name or service name as a substring, or my user name as a substring (even if it makes up only five of the twenty characters). It is like they say "We do not accept any sort of memorizing rule - we insist on passwords that are so meaningless that you HAVE to write them down".
Kerberos was (/is) a very well designed single-sign-on system developed in *nix environments. Unfortunately, MS didn't wait until it had been established as The *nix authentication system, but were in the forefront, including Kerberos in Windows. To the *nix community, that was like poisoining Kerberos - it was instantly made intouchable in *nix environments. You do not want to touch anything that has been soiled by MS.
Yet, Kerberos is a great system: An authentication (login) service sends you a (time limited) proof of your identity, encrypted with your password. No PW is transferred across the net. If you cannot decrypt it locally, it has no value. If you can decrypt it, you can ask a ticket servcice (or several) for (time limited) tickets to various services, by showing this certified ID card as a proof of identity. You can access any number of services without re-specifying any password. The ticket service may, based on the authorizations in the ID card or its own database, issue tickets with limited or extended rights. A service need only look at the ticket to decide what to make avilable and for how long - the identity of the requester is available, but many services need not relate to it. A lot of extra security features is built into the tickets, such as expected client IP adddress (making stolen tickets worthless from other sites), service authentication (the ticket has fields encrypted with the key of the service) ect.
It really is a pity that Kerberos did not break through as The Internet login method. If MS could just have held back until *nix people had started promoting it as their solution... but that didn't happen. Kerberos was lost and login procedures remain at stone age level.
|
|
|
|
|
I used to have an Amiga 1000 which allowed filenames to have special characters and even non-printable characters. It worked great. That computer was way ahead of its competitors.
|
|
|
|
|
I was a student in the minicomputer era, and when we managed to get hold of the Administrator password, we created users with ESC in the password. On this OS, ESC was used to escape(!) out of the current operation, such as specifying the keyword. The login procedure was restarted. I, and a few other students could still login, by escaping the ESC. You wouldn't discover it by watching us log in: When reading the password, nothing was echaoed.
When *nix arrived, we excelled in making file names such as ../myfile, or \r\n/myfile (backslashes were not escapes), or with a backspace character in the name. Maybe some of these file names are illegal in modern *nixes - given that the primary user interface is a command line, a few restrictions can make sense.
|
|
|
|
|
IMHO, there shouldn't be any restrictions on length or composition of a password if they are using proper security. It looks like they are either storing passwords as clear-text, which is incredibly bad, or they are encrypting the passwords in the database, which is also bad. If they used salted hashes, like they should, none of it would matter.
if (Object.DividedByZero == true) { Universe.Implode(); }
Meus ratio ex fortis machina. Simplicitatis de formae ac munus. -Foothill, 2016
|
|
|
|
|
Wait, what, he was writing a product review, nothing to do with passwords.
Never underestimate the power of human stupidity
RAH
|
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
