|
A major dust-up on an Internet discussion forum is touching off troubling questions about the security of some browser-trusted HTTPS certificates when it revealed the CEO of a certificate reseller emailed a partner the sensitive private keys for 23,000 TLS certificates. What if he asked that person (nicely) to delete the email?
|
|
|
|
|
Could be a chain letter deal where the letter told the Trustico CEO he had to email 23,000 private keys to people he knew or he would encounter bad luck. I give him props, he tried to avoid the bad luck, but it was probably supposed to be 1 private key to 23,000 people. Instead he did 23,000 private keys to 1 person. Minor oversight, but if you don't do it right, the letter clearly states get the bad juju.
|
|
|
|
|
It looks like a few heads will roll for this f***-up.
What do you get when you cross a joke with a rhetorical question?
The metaphorical solid rear-end expulsions have impacted the metaphorical motorized bladed rotating air movement mechanism.
Do questions with multiple question marks annoy you???
|
|
|
|
|
Their names and partial driver’s license information was stolen. Don't worry, it's just your credit history
|
|
|
|
|
The vulnerability resides in the UDP protocol implementation of Memcached servers that amplify incoming packets with a factor of over 50,000 times. For example, an incoming Memcached request of 203 bytes results in a response weighing around 100 megabytes. For those who think there's no benefit to caching
Also: patch your Memcached servers
|
|
|
|
|
A new survey reveals that 52 percent of companies admit to cutting back on security measures to meet a business deadline or objective. With all the security issues going around, I never would have guessed
|
|
|
|
|
A follow up to "How Developers Can Take a More Proactive Approach to Security", explaining why it didn't happen 
Bastard Programmer from Hell 
If you can't read my code, try converting it here[^]
|
|
|
|
|
And part of the issue for DevOps is getting SecOps to understand their own environment.
For example, a need exists to connect to a corporate database server through firewalls. Ask the SecOps to open the firewall and you get asked, "Which one? We have over 400." and "What type of firewall is it?" DevOps shouldn't have to provide that information.. simply the source and end point and required port.
Then, when it takes a month to complete a simple task which delays the entire project and all of the people working on it for that same month, they wonder why DevOps wants to bypass SecOps, install a local DB to get it off the ground and move forward.
Is this the right approach? No. But frustration leads to bypassing snail-pace SecOps.
|
|
|
|
|
Stochastic computing may improve retinal implants, neural networks, and more Here's your best chance for a "well, actually..." point today
Me, I didn't get past stork aspic. Or whatever it was they were talking about.
|
|
|
|
|
AI research and video games are a match made in heaven. Researchers get a ready-made virtual environment with predefined goals they can control completely, and the AI agent gets to romp around without doing any damage. Sometimes, though, they do break things. Now the AI are coming for our arcade high scores
|
|
|
|
|
The Universe cooled faster than we thought, possibly due to weird form of dark matter. And the award for "Most Forced Acronym" goes to...
|
|
|
|
|
It's official: the new name for the technology formerly known as Java Enterprise Edition (and Project EE4J) is Jakarta EE. I was really hoping for "The Language Formerly Known as Java", with a cool symbol
Or Java McJavaface, of course
|
|
|
|
|
The .NET Core 2.1 release, across .NET Core, ASP.NET Core and EF Core is intended to improve the product across the following themes: Faster Build Performance, Close gaps in ASP.NET Core and EF Core, Improve compatibility with .NET Framework, GDPR and Security, Microservices and Azure, More capable Engineering System For those who prefer their edge a little bloody
|
|
|
|
|
“Augmented programming” refers to both established and emerging approaches for boosting developer productivity. "More human than human"
|
|
|
|
|
The percentage of daily Chrome users who've loaded at least one page containing Flash content per day has gone down from around 80% in 2014 to under 8% in early 2018. And that 8% is mostly people running the new version installer after getting an upgrade notice
|
|
|
|
|
Hangouts Chat, Google’s take on modern workplace communication, is now generally available and is becoming a core part of G Suite. Try it, before they cancel it
Slack competitors seem to be this year's "Excel killer"
|
|
|
|
|
We've been using this for three years now. It's mostly usable, but there are enough quirks that I'd hesitate to bring it out of beta.
If you think 'goto' is evil, try writing an Assembly program without JMP.
|
|
|
|
|
Bill Gates does not seem to be a fan of cryptocurrencies. I guess he didn't buy into bitcoin at the bottom?
|
|
|
|
|
Bill said: He said that the ease with which people can anonymously buy drugs is a major problem
So the opioid epidemic is caused by BitCoin?
Bastard Programmer from Hell 
If you can't read my code, try converting it here[^]
|
|
|
|
|
Gates is just a real crypto pessimist, I think he said something again 
|
|
|
|
|
Windows 7 computers without an antivirus scanner won’t receive the latest security updates automatically. Well, there's a new way of dealing with Windows Update
|
|
|
|
|
In other news, Windows Defender now auto-installed on Windows 7.
You can't win...
If you have an important point to make, don't try to be subtle or clever. Use a pile driver. Hit the point once. Then come back and hit it again. Then hit it a third time - a tremendous whack.
--Winston Churchill
|
|
|
|
|
Daniel Pfeffer wrote: You can't win...
You could always just set the registry key and carry on getting updates for your legacy software. Methinks it's Microsoft that can't win 
98.4% of statistics are made up on the spot.
|
|
|
|
|
It appears many programmers work in environments where they are treated like idiot savants; brilliant children capable only of coding. Make sure the wake-up call includes their extra-foam, two-pump, skinny vanilla cap
|
|
|
|
|
Unfortunately, it is often true.
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
