― Ned Raggett (Ned), Friday, 13 February 2004 05:27 (twenty-two years ago)
― lyra (lyra), Friday, 13 February 2004 05:38 (twenty-two years ago)
― donut bitch (donut), Friday, 13 February 2004 05:40 (twenty-two years ago)
My dad's company finally got smart about handing out laptops with encryption on them concurrent with instituting a 90 day password change policy... and from what I hear, the tech support is having a ball trying to retrieve documents of people who can't remember their new passwords & can't access their stuff anymore.
― lyra (lyra), Friday, 13 February 2004 05:44 (twenty-two years ago)
― donut bitch (donut), Friday, 13 February 2004 05:48 (twenty-two years ago)
― lyra (lyra), Friday, 13 February 2004 05:52 (twenty-two years ago)
http://www.allposters.com/IMAGES/MMPH/247818.jpg
but failed, and decided to take out his angst against the source of the stolen code.
― donut bitch (donut), Friday, 13 February 2004 05:58 (twenty-two years ago)
― Ned Raggett (Ned), Friday, 13 February 2004 06:07 (twenty-two years ago)
― donut bitch (donut), Friday, 13 February 2004 06:11 (twenty-two years ago)
― Ned Raggett (Ned), Friday, 13 February 2004 06:13 (twenty-two years ago)
Rumor has it that one on win 95 source yields over 800 or so!
― Sterling Clover (s_clover), Friday, 13 February 2004 06:20 (twenty-two years ago)
― Andrew (enneff), Friday, 13 February 2004 08:42 (twenty-two years ago)
― Markelby (Mark C), Friday, 13 February 2004 11:12 (twenty-two years ago)
― caitlin (caitlin), Friday, 13 February 2004 11:17 (twenty-two years ago)
― toby (tsg20), Friday, 13 February 2004 11:21 (twenty-two years ago)
― Johnney B (Johnney B), Friday, 13 February 2004 11:22 (twenty-two years ago)
― caitlin (caitlin), Friday, 13 February 2004 11:28 (twenty-two years ago)
― Andrew Farrell (afarrell), Friday, 13 February 2004 13:26 (twenty-two years ago)
― Dale the Titled (cprek), Friday, 13 February 2004 13:41 (twenty-two years ago)
― CharlieNo4 (Charlie), Friday, 13 February 2004 14:01 (twenty-two years ago)
― Ned Raggett (Ned), Friday, 13 February 2004 14:02 (twenty-two years ago)
Think of it as a box to put junk in. If the code was really good and tight, they wouldn't need it. Finding 2811 lines of code with it points to a bloated mess.
― BrianB (BrianB), Friday, 13 February 2004 14:08 (twenty-two years ago)
― Sterling Clover (s_clover), Friday, 13 February 2004 16:59 (twenty-two years ago)
― Markelby (Mark C), Friday, 13 February 2004 17:06 (twenty-two years ago)
The use of "foo" in code doesn't necessarily mean the code is better or worse!
― donut bitch (donut), Friday, 13 February 2004 18:50 (twenty-two years ago)
but seriously...donut bitch...when are you gonna stop teasing us and release the rest of the source?
― Lord Custos Omicron (Lord Custos Omicron), Friday, 13 February 2004 20:02 (twenty-two years ago)
― Jon Williams (ex machina), Friday, 13 February 2004 20:42 (twenty-two years ago)
void *MS_Windows(VERSION_ID,func_main,HLOCAL_USER_KEY,HLOCAL_COUNTRY_KEY){while(1){fwrite(0xDEADBEEF,"Hello, Life Sucks Fuckin Die\n");}}
― donut bitch (donut), Friday, 13 February 2004 21:24 (twenty-two years ago)
― Lord Custos Omicron (Lord Custos Omicron), Saturday, 14 February 2004 01:34 (twenty-two years ago)
I'd be amazed if that much source code was found off a server. Most large software development is done almost entirely remote.
― Mr Noodles (Mr Noodles), Saturday, 14 February 2004 03:01 (twenty-two years ago)
― Lord Custos Omicron (Lord Custos Omicron), Saturday, 14 February 2004 03:05 (twenty-two years ago)
And a few years back someone got access to the MS network via a home computer, but i don't remember that they reached src code...
― lyra (lyra), Saturday, 14 February 2004 03:27 (twenty-two years ago)
― Mr Noodles (Mr Noodles), Saturday, 14 February 2004 03:33 (twenty-two years ago)
― lyra (lyra), Saturday, 14 February 2004 03:39 (twenty-two years ago)
― Mr Noodles (Mr Noodles), Saturday, 14 February 2004 03:41 (twenty-two years ago)
― lyra (lyra), Saturday, 14 February 2004 03:51 (twenty-two years ago)
But I may know a programmer you worked with. Im pretty sure those are the years he was there.
― Mr Noodles (Mr Noodles), Saturday, 14 February 2004 04:27 (twenty-two years ago)
Also, CNN has a oh dear, profanity in source code! article up this evening. ;-)
― lyra (lyra), Saturday, 14 February 2004 05:18 (twenty-two years ago)
PROGRAMMERS CUSS? WHAT THE FUCK IS UP WITH THAT SHIT?
― donut bitch (donut), Saturday, 14 February 2004 05:25 (twenty-two years ago)
― donut bitch (donut), Saturday, 14 February 2004 05:26 (twenty-two years ago)
― Mr Noodles (Mr Noodles), Saturday, 14 February 2004 05:27 (twenty-two years ago)
― lyra (lyra), Saturday, 14 February 2004 05:34 (twenty-two years ago)
― Mr Noodles (Mr Noodles), Saturday, 14 February 2004 05:37 (twenty-two years ago)
― Mr Noodles (Mr Noodles), Saturday, 14 February 2004 05:38 (twenty-two years ago)
― Jole (Jole), Saturday, 14 February 2004 05:45 (twenty-two years ago)
― lyra (lyra), Saturday, 14 February 2004 05:46 (twenty-two years ago)
― lyra (lyra), Saturday, 14 February 2004 05:48 (twenty-two years ago)
― donut bitch (donut), Saturday, 14 February 2004 05:48 (twenty-two years ago)
― lyra (lyra), Saturday, 14 February 2004 05:50 (twenty-two years ago)
― Jole (Jole), Saturday, 14 February 2004 06:18 (twenty-two years ago)
not to mention how confused you get by scope issues if you use difft. "foo" variables all over the place!
so yeah, bad development practice.
― Sterling Clover (s_clover), Saturday, 14 February 2004 07:07 (twenty-two years ago)
display_bill_rules_message();do_nothing_loop();if (first_time_installation){
make_50_megabyte_swapfile();
do_nothing_loop();
totally_screw_up_HPFS_file_system();
search_and_destroy_the_rest_of_OS/2();
make_futile_attempt_to_damage_Linux();
disable_Netscape();
disable_RealPlayer();
disable_Lotus_Products();
hang_system();}write_something(anything);display_copyright_message();do_nothing_loop();do_some_stuff();if (still_not_crashed){
display_copyright_message();
basically_run_windows_3.1();
do_nothing_loop();}}if (detect_cache())disable_cache();if (fast_cpu()){
set_wait_states(lots);set_mouse(speed,very_slow);set_mouse(action,jumpy);set_mouse(reaction,sometimes);}/* printf("Welcome to Windows3.1"); *//* printf("Welcome to Windows3.11"); *//* printf("Welcome to Windows95"); *//* printf("Welcome to Windows NT3.0"); *//* printf("Welcome to Windows98"); *//* printf("Welcome to Windows NT4.0"); */printf("Welcome to Windows2000");if (system_ok())crash(to_dos_prompt)elsesystem_memory =open("a:\swp0001.swp", O_CREATE);while(something){sleep(5);
get_user_input();sleep(5);
act_on_user_input();sleep(5);}create_general_protection_fault();
― Lord Custos Omicron (Lord Custos Omicron), Saturday, 14 February 2004 08:30 (twenty-two years ago)
― Lord Custos Omicron (Lord Custos Omicron), Saturday, 14 February 2004 08:32 (twenty-two years ago)
Whoever did this is going to very publicly handled, either that, or they did this shit on purpose for reasons I don't like to think about.
― TOMBOT, Saturday, 14 February 2004 17:01 (twenty-two years ago)
― Momus (Momus), Saturday, 14 February 2004 17:03 (twenty-two years ago)
Neither of us has seen the code, Sterling, so it's really presumptious of either of us to judge this thing we haven't seen.
All I'm saying is: for very simple functions like swapping, doing linked list, etc. of which there are usually a SHITLOAD of.. things that are often automatically generated to save the programmer time on doing real development tasks... things that have been tried and true in programming tasks since the 70s, "meaningless" (i.e. simple) variable names are often used.... and used far more often then meaningful variable names used in meaningful data structures, just because of the sheer amount of macro'd utilities in said tasks above one needs in data structures. So the AMOUNT of meaningless variables could easily have nothing whatsoever to do with the quality of the programmers.
― donut bitch (donut), Saturday, 14 February 2004 17:13 (twenty-two years ago)
Here is the link.
(xpost db)
― Jole (Jole), Saturday, 14 February 2004 17:13 (twenty-two years ago)
― donut bitch (donut), Saturday, 14 February 2004 17:17 (twenty-two years ago)
― TOMBOT, Saturday, 14 February 2004 19:49 (twenty-two years ago)
― TOMBOT, Saturday, 14 February 2004 19:54 (twenty-two years ago)
― lyra (lyra), Saturday, 14 February 2004 20:07 (twenty-two years ago)
― TOMBOT, Saturday, 14 February 2004 20:14 (twenty-two years ago)
I'd hope that after this MS learns to build security into their OSes which doesn't rely on obscurity so much, but actually uses a more robust model. Paranoia by developers has always struck me as a better construct.
― lyra (lyra), Saturday, 14 February 2004 20:25 (twenty-two years ago)
I honestly wish I could be bothered to learn more about this stuff and not have to rely on slashdotters et al. for the nitty-gritty.
You can lock down a Win2K or NT box really well, actually, it's just that most administrators don't know what the fuck they're doing, which is more a problem with the MCSE program and the dismal lack of technical know-how in the field. To be honest most of the touted security problems with Windows have a lot to do with having a gigantic mass of screaming idiots for a userbase (lowest bidder gets the uh, worm)
― TOMBOT, Saturday, 14 February 2004 20:29 (twenty-two years ago)
― lyra (lyra), Saturday, 14 February 2004 23:15 (twenty-two years ago)
― Viva La Sam (thatgirl), Saturday, 14 February 2004 23:19 (twenty-two years ago)
Ur, I agree, Tom.. I was just arguing quality of code vs. quality of results with Sterling on that digression... not the consequences of code leaks.
― donut bitch (donut), Saturday, 14 February 2004 23:19 (twenty-two years ago)
What?! The code for Quake, Doom etc is freely available and is pretty damn clean.
― Andrew (enneff), Saturday, 14 February 2004 23:43 (twenty-two years ago)
― donut bitch (donut), Saturday, 14 February 2004 23:49 (twenty-two years ago)
― donut bitch (donut), Saturday, 14 February 2004 23:50 (twenty-two years ago)
* Note = I mean Carmack and Romero, not Flandsberg and Linnell.
― Lord Custos Omicron (Lord Custos Omicron), Sunday, 15 February 2004 02:50 (twenty-two years ago)
tom: what could ntfs code open up (outside of security breaches)?
― Sterling Clover (s_clover), Sunday, 15 February 2004 03:22 (twenty-two years ago)
I wonder if it would be legal for someone in a country that doesn't have strong copyright laws to look at the Win2k source and make a specification for the NTFS crap that could be legally implemented?
― Jon Williams (ex machina), Sunday, 15 February 2004 03:29 (twenty-two years ago)
DB: Sorry, I just thought if nobody else was going to point out the weakness of your metaphor I would go ahead and score some mod points for myself! Oh, wait.
Sterling: Just waiting for someone to write a gray-hat application that lets unix kids mount drives formatted under windows 2k et al. and write to them natively. Oh, the fun.
I'm still trying to figure out what filesystem is used on the iPod. I took a look at mine with WinHex at work one day and it was all googly-moogly. It does however store your username, quicktime version and the name of your computer. So if you ever need to identify a stolen iPod... but I digress.
― TOMBOT, Sunday, 15 February 2004 03:30 (twenty-two years ago)
The point of what? Macros are small programming utilities used to optimize speed of compilation and resulting excecutables. They're no more obsolete than they were from the start. And macros are often very common limitations of development platforms like, say, X-Box games, where STL is (or at least at one point was) not allowed.
I doubt current MS code uses anything even self-called expert programmers use... it's all probably very specifically tied to DLLs and COM objects or what not, and is nothing remotely familiar to, say, game programming code or any other planet of programming... which is a perfect segue to my admission to Tom that using a game development analogy was indeed weak...(hey, i've been programming games for nine years, what else do i know?)
― donut bitch (donut), Sunday, 15 February 2004 04:00 (twenty-two years ago)
i guess maybe i'm just reactive coz this was drummed into my head by my profs who would occasionally call someone out for this sorta stuff.
its just if yr. building something this *vital* it strikes me as something where fun/games/loose practice should be right out the window.
― Sterling Clover (s_clover), Sunday, 15 February 2004 04:16 (twenty-two years ago)
Yeah, but Sterling, it's not like anybody else is gonna see the source code, you know
― TOMBOT, Sunday, 15 February 2004 04:23 (twenty-two years ago)
Well, if you're compiling the code, then it really doesn't matter what the variables are named. And macros just apply a bit of "unrolling", so to speak, in order to make the code run faster. It really depends.. there are many factors.
If this were code being interpreted at run-time, like in Flash Actionscript, then the variable naming would be a more important issue, surely.
The worst and first thing I did was insist on doing what my professors taught me to do at my first real programming job when i first started. My boss laughed and said "yeah, that's because they're going to be teaching for the rest of their lives -- they're never going to get a real programming job.".. ouch.
― donut bitch (donut), Sunday, 15 February 2004 04:26 (twenty-two years ago)
― lyra (lyra), Sunday, 15 February 2004 05:00 (twenty-two years ago)
― donut bitch (donut), Sunday, 15 February 2004 05:56 (twenty-two years ago)
― Mr Noodles (Mr Noodles), Sunday, 15 February 2004 14:17 (twenty-two years ago)
FIRST EXPLOIT!!!
― Jon Williams (ex machina), Monday, 16 February 2004 18:42 (twenty-two years ago)
Oh dear.
― Ned Raggett (Ned), Monday, 16 February 2004 18:52 (twenty-two years ago)
ALL my workers are gay, dahling. ALL OF THEM, GAY!
― donut bitch (donut), Monday, 16 February 2004 19:02 (twenty-two years ago)
― donut bitch (donut), Monday, 16 February 2004 20:33 (twenty-two years ago)
Expert: Microsoft dominance poses security threat
― TOMBOT, Monday, 16 February 2004 21:27 (twenty-two years ago)
Also, this bug is why C is a bad language and hurts people.
A real language could have caught that error two ways.
1) Bounds checking. (Array index -1 out of bounds, throw exception)2) Type checking. (Trying to index into array with signed variable! I think most languages would allow this.)
Please kids, leave C to us REAL PROGRAMMERS.
― Jon Williams (ex machina), Monday, 16 February 2004 21:53 (twenty-two years ago)
― lyra (lyra), Tuesday, 17 February 2004 03:18 (twenty-two years ago)
― Curt1s St3ph3ns, Tuesday, 17 February 2004 03:25 (twenty-two years ago)
― donut bitch (donut), Tuesday, 17 February 2004 04:51 (twenty-two years ago)
― lyra (lyra), Tuesday, 17 February 2004 04:55 (twenty-two years ago)
― lyra (lyra), Tuesday, 17 February 2004 04:56 (twenty-two years ago)
(not (blame Lyra me))
― donut bitch (donut), Tuesday, 17 February 2004 05:03 (twenty-two years ago)
― lyra (lyra), Tuesday, 17 February 2004 05:21 (twenty-two years ago)
(I know Javascript, Actionscript 1.0 & 2.0, and am about to take a small course in C#, and I've gotten my feet wet in Java.. and have done C++ for 9 years.. is that good enough?)
― donut bitch (donut), Tuesday, 17 February 2004 05:42 (twenty-two years ago)
ha ha ha >> sucks
― Jon Williams (ex machina), Tuesday, 17 February 2004 06:55 (twenty-two years ago)