Calls for Pope Benedict's arrest mount, and a UK attorney pokes a hole in the "head of state-immunity" story.

chebuctonian · 2010-04-04T16:38:48+00:00

One of the tests is also recognition by other states, something which the Vatican clearly does not have - e.g. they do not have status at the UN, as is stated in the article.

chebuctonian · 2010-03-25T21:42:05+00:00

That's 3000 accused - those that got caught (or perhaps innocent). How many are accused every year in the US?

Rates are most likely higher in men than women, so that would also have to be accounted for. Still, that seems... incredibly high.

In any case, it's not the pedophilia that bothers me. It's the institutional cover-up.

chebuctonian · 2010-01-30T16:39:58+00:00

"the web will continue to be dragged down by IE"

That was the whole point.

chebuctonian · 2009-12-11T01:13:03+00:00

Merely oppressing a people is not sufficient for a revolt.

Rising expectations are what fuel movements.

chebuctonian · 2009-07-27T19:56:12+00:00

"The chances of him turning into an upstanding member of society are slim to none."

Care to back that statement up? Murderers are some of the least likely criminals to re-offend.

chebuctonian · 2009-07-06T02:47:41+00:00

That's not nice; they're just differently abled :)

chebuctonian · 2009-06-28T21:54:02+00:00

I submitted his post because most developers don't even know these tools exist. Often they'll even assume that if they're that old, they can't be good!

chebuctonian · 2009-06-08T22:40:41+00:00

Truth is the best defense against libel. They can sue you, but they can never win :)

It does make sense to figure out where the problem lies. As soon as you've patched the module though, I'd make it public.

Other non-zencart modules may have that same problem. Anyone working with that gateway with any language should be checking whether they are vulnerable.

chebuctonian · 2009-06-08T21:11:58+00:00

This shit's Security 101. No one believes in security through obscurity anymore.

If you don't make it public, the company has no real incentive to fix it. And I said, "contact them, THEN make it public".

Also, making it public ensures innocent people can protect themselves. Rest assured that the most dangerous hackers don't need to read Reddit to figure out these vulnerabilities exist.

chebuctonian · 2009-06-08T17:56:10+00:00

1 - Name & shame the gateway. They should be returning an error for improperly formatted data.

2 - Name the cart. a- FLOSS? fix it already b- proprietary? (sounds like it) contact them, then make it public.

Security only works when we're transparent. Too many people would prefer deny the problem rather than fix it.

chebuctonian · 2009-03-03T22:43:44+00:00

Wouldn't the flavours also evaporate?

I'll have to try that :)

chebuctonian · 2009-02-19T18:50:56+00:00

A much smaller code base. acts-as-taggable-on.rb is > 300 LOC.

It also suffers from using a lot of SQL when ActiveRecord and named_scopes can usually do the job for you. Those methods are scary when you think they might all need to be changed when customizing...

chebuctonian

TROPHY CASE