• George Bezel (unregistered) in reply to awefwaeffewaewaf

    Hey elitist programmers! Please read the following message, as it's directed at you.

    SHUT THE F*CK UP ABOUT YOUR STUPID LANGUAGE OF CHOICE.

    Yes, I did it in all caps, as a way to indicate that I am "yelling." Nobody gives two shits that you think that LISP or FORTRAN or Ruby is the best language ever. The real programmers use whatever language best suits their needs. In the end, there's only one language, and it's machine language. Get your stupid mind around that, and shut up about how we're all dumb for using whatever other language we're using (to get the job done, no less). Use your awesome syntax and super framework elsewhere, because I'm sick of hearing about it. It's bullshit. It's analogous to saying a number 5 Torx is better than a #3.

    Love, George Bezel

  • julz (unregistered) in reply to Onanymous

    Twice as good shurely?

  • George Bezel (unregistered) in reply to julz

    No, that would be the Torx #6.

  • Anonymous (unregistered) in reply to R.Flowers
    R.Flowers:
    hash:
    Gene Wirchenko:

    Sincerely,

    Gene Wirchenko

    <PULLINGHAIR>
    Can you PLEASE stop ending every post like that?! It annoys the crap out of me everytime I read one of your posts, I doubt i'm alone.
    </PULLINGHAIR>

    You are letting his signature get to you, and I know that feeling - it's just like an itch that you try to ignore until finally you claw your eyes out. But seriously, I don't think anyone thought about it until you started bringing it up every time! No offense, but the problem is you...

    Some forum software allows the user to block sigs and avatars in their personal views. Of course with this software, we cry tears of joy when it actually gets some code right, or inserts a picture...

    Of course, what's his name doesn't actually use a signature, he actually signs the end of his post, or pastes it from god knows where, every freaking time.

    Sincerely,

    Anonymous

  • (cs)

    If you guys think Gene Wirchenko's signature is annoying, imagine how I felt when he replied to one of my posts on rec.arts.int-fiction - signing his post the way he always does...

  • (cs) in reply to Norm MacDonald
    Anonymous:
    Anonymous:
    Anonymous:
    hash:
    Gene Wirchenko:

    Sincerely,

    Gene Wirchenko

    <pullinghair>
    Can you PLEASE stop ending every post like that?! It annoys the crap out of me everytime I read one of your posts, I doubt i'm alone.
    </pullinghair>

    Now that's a WTF. Who cares?

    Sincerely,

    David Hasselhoff

    We love you, David!

    Sincerly,

    Germany

    Which once again proves my theory that Germans love David Hasselhoff!!!!!

    Sincerly,

    Norm MacDonald



    Whenever I mentally parse the word 'Sincerly' in any electronic communications...my poor brain automatically translates it into it's possible... nope, probable other meaning, i.e. !Sincerely_at_all.

    Yours forever in loving embrace,

    Andrew




  • (cs)

    Why is everyone making fun of this dude.  Consider the following:

    Click a logout button. This will change the url to "logged_on=NO".  In the code behind you check for the query string and if it says logged_on=no then you will destroy the session or cookie.

    Just a thought.

  • Rumpelstilz (unregistered)

    Howdie Young Folks,

    1. That's not a matter with the programming language, it's a matter of poor design.
    2. You may have noticed that web programming, as they call it, is nothing else but a particular type of client/server programming.
    3. Keeping your skills current might just not be what you make it sound like. Certainly, it's not about the language-du-jour.

    Cheerio

  • Rumpelstilz (unregistered) in reply to no name

    It is not trolling but historical fact. The first C++ was implemented as a front-end to a C++ compiler. Look up "cfront".

    I don't need to look it up, I know for a fact. It was NOT a front-end to a C++ compiler, C++ didn't exist at the the time. Cfront was the tool that took "C with classes" code and translated it into C. C with classes later then became C++.




  • Rolf (unregistered)

    Encoding things in the URL as plain text is becomming more and more polular. I guess it has something to do with complicated things we mortals don't understand, like "server load" and "performance tradeoffs"...

    http://blogger.xs4all.nl/rrolfje/archive/2006/01/12/74016.aspx

    https  and sessions are SO last month....

  • (cs) in reply to Rolf

    Nice. 112 replies, and everybody's so intent on flaming Gene that nobody's noticed that the WTF'er is processing credit card info on a non-SSL site ...

    Sincerely,

    Kristian

  • utunga (unregistered) in reply to Kiss me, I'm Polish

    Anonymous:
    Anonymous:
    Anonymous:

    What kind of Web Developer would dream of using IE?


    One with a clue? One who actually acknowledges that over 90% over web users use IE? One who realises that IE has enough failures to comply with standards that it needs to be specifically catered for? One who isn't some kind of bigotted, anti-MS, open source weenie? Take your pick.

    Anonymous:

    That said just curious, for all the Developers on this forum, except for those doing IE-only .ActiveXXXNet stuff, what Browser do you use?


    There's only one good answer to this: "as many as possible".



    I don't think that was the original point. The point was who "develops" in IE when there's no debugging etc. Sure it has to work eventually in IE, but surely everyone who's developing for the Web gets everything working on say Firefox with the Web Developer extension and *then* makes it work in IE. It's a hell of a lot easier doing it that way round too since you code to standards and then hack for IE.

    Oh, OK then. Well if that was the original point then his original point was bullshit. Some people prefer to develop in FFox and then fix it for IE, some front end designers prefer to go straight to developing for IE, and, knowing the standards as well as they do, can design for FFox and test it in IE at the same time, so that the second step is easier. Back end programers which is probably, one would imagine something that would apply to even the best (but not all!) Cobol.Net ASP.Net developers probably don't give a rats arse what the browser is, since they are just writing out standard old-school HTML and none of this fancy box model stuff even comes into it.

    The original point was very bigoted, but also indicative of someone who doesn't know what they are on about.

     

    Yours sincerely,

    NO NO NO NO NO ^W^W^W^W^W^W^W^W^W^W^W ARGH

    --

    This post [pi] approved

  • (cs) in reply to Norm MacDonald
    Anonymous:
    Anonymous:
    Anonymous:

    Now that's a WTF. Who cares?

    Sincerely,

    David Hasselhoff

    We love you, David!

    Sincerly,

    Germany

    Which once again proves my theory that Germans love David Hasselhoff!!!!!


    That's not a theory, that's flogging a horse that has been dead for more than 10 years.

    Though after what happened the LAST time a foreigner whose name began with H got ridiculously popular in Germany, I suppose it's understandable that Americans are still worked up about it.

  • (cs) in reply to Rumpelstilz

    Anonymous:
    It is not trolling but historical fact. The first C++ was implemented as a front-end to a C++ compiler. Look up "cfront".

    I don't need to look it up, I know for a fact. It was NOT a front-end to a C++ compiler, C++ didn't exist at the the time. Cfront was the tool that took "C with classes" code and translated it into C. C with classes later then became C++.

    You must have missed the post where he corrected himself...
    I'm pretty sure that most of us translated "The first C++ was implemented as a front-end to a C++ compiler" into "The first C++ was implemented as a front-end to a C compiler" because making the first implementation of something a frontend of a previous implementation of the same is pretty impossible. Or is due to some odd space/time continuum ripple. ;) Bmwoahaha!

  • aeg (unregistered) in reply to Gene Wirchenko
    Gene Wirchenko:
    Zlodo:
    I'm myself more annoyed by the gratuitous (and so thoroughly argumented) drive-by trolling like "Or C, as in C++."


    It is not trolling but historical fact.  The first C++ was implemented as a front-end to a C++ compiler.  Look up "cfront".


    Your so right Mr. Wirchenko  and C was only a front-end  to Asm.
    like your head is the front-end to your ass.

    But no more today with .NET (niet), No need for that.
    it is only ass.


  • (cs) in reply to brazzy

    Germans love David Hasselhoff?

    Rather: 6-10 year old Kids in Germany loved him (a decage ago or so). When he tried to start a carreer as a rock star, his concerts where sold out - but it was mostly children with their parents.

  • Gene Lysenko (unregistered) in reply to masklinn
    masklinn:

    Remember guys, everything that's been done in CS in the past 40 years has been trying to catch up with Lisp with a more readable syntax for the beginner.



    Spoken like a true Lisp smuggie.  Lisp was ahead of modern CS 40 years ago in the same sense that Latin is the one true language of scholarship.  Perhaps you should open your eyes to progress and accept that Haskell is more powerful and more expressive today than Lisp has ever been - and it's provably safe, too, unlike Lisp where you can kill a program just by taking the cdr of an empty list.

    George Bezel:

    SHUT THE F*CK UP ABOUT YOUR STUPID LANGUAGE OF CHOICE.
    Yes, I did it in all caps, as a way to indicate that I am "yelling." Nobody gives two shits that you think that LISP or FORTRAN or Ruby is the best language ever.

    And you think we give two shits whether you give two shits or not?

    George Bezel:

    In the end, there's only one language, and it's machine language.

    You, sir, are not only an idiot but an ignorant idiot.  When you say "machine language", what the fuck do you think you're referring to?  Which machine?  In case you didn't realise, Pentiums and PowerPCs don't actually read the same language, ya know?  And even Athlons and Pentiums only read the same language on the surface - they translate it into different code internally - so even IA32 "machine code" is only really an abstraction of what the processor reads, just like .NET's CLR or Java's bytecode.

    Please shut the fuck up about your stupid misconceptions that all languages are created equal.  You CAN write code in Lisp, Python, Ruby, ML, or Haskell, that would be unfeasible to write in C++.  This is called "being more expressive".  Many people think this is a Good Thing.  And we have a right to say so, whether you like it or not.
  • Oscar Wilde (unregistered) in reply to Gene Wirchenko

    Sincerely,
        -- Oscar Wilde on Gene Wirchenko

  • (cs) in reply to hash

    Doesn't bother me.

  • (cs) in reply to BlackTigerX
    BlackTigerX:

    and I was just telling Ben about that

    http://www.ben-rush.net/blog/PermaLink,guid,8e623a1c-17a2-46c3-a1a3-e38675f8f190.aspx

    I quote my self

    "...we are migrating a generation that got to work on punch cards, assembler, C, C++, up to C#, those are (for the most part) the people that strougle, those are the same people that won't accept that a 15-20 (or younger that them for that matter) can kick their old butts

    I think as new generations come in we'll do better moving on with technology"



    The huge problem with that article is that it makes the mistake of considering C++ is a low level language. There are not much things that the new trendy languages based on VMs do that C++ cannot do as well. Of course, you can program in a low level way and do stupid stuff with pointers, and stuff. But it's just tools that are present for the sake of low level code that shouldn't be used in a high level app, but WTFers are everywhere.

    I think that the biggest difference is the presence of an extensive framework in the more recent languages.
    The fact that C# and Java and such use a VM instead of native code is useful for some apps (because of the binary level cross platform compatibility) and detrimental for others (waste of resources, poor scalability in some situations)

    There are very nifty and useful high level programming techniques that are just not available in java or C#, because you don't have a fine grained control of the life cycle of your objects (I have a friend writing .net code that routinely curses the necessity of having to explicitely call dispose() to force an object to free its resources right away and not when the garbage collector feels like doing it)
    I always get the impression that the "moving on with technology" people just always consider anything more recent has to be better.

    I know that I can write pretty clean, concise, robust and efficient code in C++, and that the new shiny languages woudln't allow me to do it any better (and would have some performance cost). While there are some situations where I would probably use them over C++ (like if I had to write a web application), I would use C++ for anything like a desktop application or a game.

    And for the record, I'm 27, so no, I'm not an old technology rejecting guy.
  • (cs) in reply to nickelarse
    nickelarse:
    Doesn't bother me.


    Damn, hit the wrong button.  It was in reply to someone whinging about sincerely.  Anyway, it should be "faithfully", as it's written to nobody in particular.

    Yours faithfully,

    Nick Lee
  • (cs) in reply to maht
    Anonymous:

    the other guys at Bell Labs where Bjarne Stroustrup wrote C++ were not that impressed, AFAIK not one of them even bothered to go with C++

    Consider that those guys were Denis Ritchie, Ken Thompson and Rob Pike.


    So what ?
    I have the utmost respect for these people and what they built, but it's not like I should just take everything they say as gospell. I can make my own choices.
    Besides, if you look at the following messages on that ML, one of the explanation given for creating "Plan 9 C" instead of going with C++ was they weren't happy with the C++ implementation and it was kind of unstable.
    It was probably a legitimate concern at the time, just like the lack of standardisation of C++ was a legitimate concern in the past.
  • (cs) in reply to Zlodo
    Zlodo:


    The huge problem with that article is that it makes the mistake of considering C++ is a low level language. There are not much things that the new trendy languages based on VMs do that C++ cannot do as well. Of course, you can program in a low level way and do stupid stuff with pointers, and stuff. But it's just tools that are present for the sake of low level code that shouldn't be used in a high level app, but WTFers are everywhere.

    I think that the biggest difference is the presence of an extensive framework in the more recent languages.
    The fact that C# and Java and such use a VM instead of native code is useful for some apps (because of the binary level cross platform compatibility) and detrimental for others (waste of resources, poor scalability in some situations)


    2 things you have in .net and Java but get (easily) in C++:
    Reflection
    Garbage collection (I think it's a good thing)

    And that's little compared to the additional possibilities of dynamic languages like Python etc.
  • (cs) in reply to ammoQ
    ammoQ:

    2 things you have in .net and Java but get (easily) in C++:


    "can not" missing
  • (cs) in reply to Rank Amateur
    Rank Amateur:
    Anonymous:
    hash:
    Gene Wirchenko:

    Sincerely,

    Gene Wirchenko

    <pullinghair>Can you PLEASE stop ending every post like that?! It annoys the crap out of me everytime I read one of your posts, I doubt i'm alone.
    </pullinghair>


    You're not alone.

    Now, doggonit, I've been signing the end of my posts since before I joined this forum. Why aren't I annoying anyone?

    --Rank



    Because your not sincere enough, dear sir!

    Sincerely,

    Magic Duck
  • Tichy (unregistered) in reply to Colin
    Anonymous:
    I sure hope it's not:

    http://secure.intercontinental-ballistic-missle.com/launch.aspx?LOGGED_IN=TRUE&MISSLE_ID=6&KILL_CHILDREN=NO&KILL_WOMEN=NO&KILL_TERRORISTS=YES&TARGET=IRAQ+AFGHANISTAN+IRAN


    This reminds me on an old C joke:

    if (status = UNDER_NUCLEAR_ATTACK) {
      launch_full_counterstrike();
    }

    Yours,

    Tichy
  • (cs) in reply to ammoQ
    ammoQ:

    2 things you have in .net and Java but (can't) get (easily) in C++:
    Reflection


    This is perhaps the most critical thing that C++ lacks IMO, and I never found a good general purpose external reflection system (like something that would parse header files and generate the necessary runtime description code and data).
    However, you essentially need this when you want to write a serialization framework. So, write one (or grab one off the net, even though I found most of the readily available ones leaving me wanting) and be done with it.


    Garbage collection (I think it's a good thing)


    Garbage collection is a double edged sword. Most of the resource management can be solved with reference counting (which can be automated easily in C++ using smart pointers). Yeah, I know that it's not good when you have cyclic references, hence why I said "most". Anyway, I didn't find much need for cyclycal references in most of the code I write, and if I do, I can just solve the problem locally using weak smart pointers or such things (like if I'm writing a graph node class)

    Garbage collection unecessarily bloats the heap, and makes automatic freeing of resources others than memory painful, because you have to do it explicitely.
    Having garbage collection over reference counting is not clearly an advantage as far as I'm concerned. And anyway, you can quite easily integrate a ready-made grabage collector like Bohems in C++ code, so I wouldn't say that it's something that you can't get easily in C++.

    And that's little compared to the additional possibilities of dynamic languages like Python etc.


    You don't need any of this for most apps. If you do, you're often better off having your app in C++ and embed a scripting language (like lua or python) for the very high level stuff where a dynamic language can be useful. You often don't want, however, to pay the price of the dynamic language throughout your app just because it's useful somewhere in it.
  • (cs) in reply to George Bezel
    Anonymous:
    Hey elitist programmers! Please read the following message, as it's directed at you.

    SHUT THE F*CK UP ABOUT YOUR STUPID LANGUAGE OF CHOICE.

    Yes, I did it in all caps, as a way to indicate that I am "yelling." Nobody gives two shits that you think that LISP or FORTRAN or Ruby is the best language ever. The real programmers use whatever language best suits their needs. In the end, there's only one language, and it's machine language. Get your stupid mind around that, and shut up about how we're all dumb for using whatever other language we're using (to get the job done, no less). Use your awesome syntax and super framework elsewhere, because I'm sick of hearing about it. It's bullshit. It's analogous to saying a number 5 Torx is better than a #3.

    Love, George Bezel



    Amen! I was just about to post the same. Fucking n00bs!
    Also, different languages has different advantages. Sometimes it doesn't matter which language you choose (just a matter of taste), sometimes you need one of those advantages. I would have thought everyone posting at this site knew stuff like this...

  • (cs) in reply to Zlodo
    Zlodo:
    ammoQ:

    Reflection

    However, you essentially need this when you want to write a serialization framework.

    Not only that. Another example would be a web application framework where an url like
    "http://myserver/webapp?class=myOwnClass&action=doSomethingSpecial&id=4711"
    causes the app to look for a class called "myOwnClass" and calls the "doSomethingSpecial" method with 4711 as parameter.
    (of course some security checks are necessary so a malicous user cannot do a reflection injection attack)

    I've thought that COM is close to the idea of reflection, isn't it?


    Garbage collection is a double edged sword. Most of the resource management can be solved with reference counting (which can be automated easily in C++ using smart pointers). Yeah, I know that it's not good when you have cyclic references, hence why I said "most".  Anyway, I didn't find much need for cyclycal references in most of the code I write, and if I do, I can just solve the problem locally using weak smart pointers or such things (like if I'm writing a graph node class)

    A container (e.g. Windows form) has an array with it's childs; the child have a pointer to their parent... not that uncommon.

    Garbage collection unecessarily bloats the heap, and makes automatic freeing of resources others than memory painful, because you have to do it explicitely.

    Yes, that's the downside of GC.

    Having garbage collection over reference counting is not clearly an advantage as far as I'm concerned.

    The new generational GC in Java has a big advantage over traditional memory management: allocation is lightning fast if no GC occurs. During garbage collections, only the objects that are still alive are processed (moved to the next generation); all the temporary objects are thrown away in one step. In traditional memory handling, every object is released from memory seperately.

    And that's little compared to the additional possibilities of dynamic languages like Python etc.


    You don't need any of this for most apps. If you do, you're often better off having your app in C++ and embed a scripting language (like lua or python) for the very high level stuff where a dynamic language can be useful. You often don't want, however, to pay the price of the dynamic language throughout your app just because it's useful somewhere in it.

    Embedding Lua or Python is a possiblity, but that means you have to master two languages.
  • (cs) in reply to Zatanix
    Zatanix:
    Anonymous:
    Hey elitist programmers! Please read the following message, as it's directed at you.

    SHUT THE F*CK UP ABOUT YOUR STUPID LANGUAGE OF CHOICE.

    Yes, I did it in all caps, as a way to indicate that I am "yelling." Nobody gives two shits that you think that LISP or FORTRAN or Ruby is the best language ever. The real programmers use whatever language best suits their needs. In the end, there's only one language, and it's machine language. Get your stupid mind around that, and shut up about how we're all dumb for using whatever other language we're using (to get the job done, no less). Use your awesome syntax and super framework elsewhere, because I'm sick of hearing about it. It's bullshit. It's analogous to saying a number 5 Torx is better than a #3.

    Love, George Bezel



    Amen! I was just about to post the same. Fucking n00bs!
    Also, different languages has different advantages. Sometimes it doesn't matter which language you choose (just a matter of taste), sometimes you need one of those advantages. I would have thought everyone posting at this site knew stuff like this...

    What exactly is wrong about comparing languages and discussing merits and disadvantages of each?

  • Adam (unregistered) in reply to hash
    hash:
    Gene Wirchenko:

    Sincerely,

    Gene Wirchenko

    <PULLINGHAIR>
    Can you PLEASE stop ending every post like that?! It annoys the crap out of me everytime I read one of your posts, I doubt i'm alone.
    </PULLINGHAIR>

    You are more alone than you think.

    Adam

     

  • Mr Variable (unregistered) in reply to Tichy
    Anonymous:

    This reminds me on an old C joke:

    if (status = UNDER_NUCLEAR_ATTACK) {
      launch_full_counterstrike();
    }

    Yours,

    Tichy


    You do know that you're assigning instead of comparing, right? That statement both puts the country under nuclear attack AND launches the full counterstrike! It's not rocket science you know.
    *Ba-dum dum*
  • Tom C (unregistered) in reply to Mr Variable

    Anonymous:
    Anonymous:

    This reminds me on an old C joke:

    if (status = UNDER_NUCLEAR_ATTACK) {
      launch_full_counterstrike();
    }

    Yours,

    Tichy


    You do know that you're assigning instead of comparing, right? That statement both puts the country under nuclear attack AND launches the full counterstrike! It's not rocket science you know.
    *Ba-dum dum*

    Are you explaining the joke? Or are you, having not understood the joke, pointing out a typo?

     

  • (cs) in reply to COBOL GUY
    Anonymous:
    tSQL:

    it is kind of a Yawn .. of a wtf.  Now, seeing a COBAL version of a webpage, now that would be down right neato!  Do we have a screen shot please?

     



    To your pleasure : ASP.NET Cobol

    *tears* why would this madness exist?? Now I know there is a hell!!

  • (cs)
    Alex Papadimoulis:


    Another Initech post, is it same company as mentioned in this post: http://www.thedailywtf.com/forums/52300/ShowPost.aspx?
  • (cs) in reply to Awaiting Troll Points

    Anonymous:
    What kind of Web Developer would dream of using IE?  That's just nuts! An outdated Mozilla build? ok, a Firefox 1.0 build? yeah, ok, even an Opera Install would have shown some apptitude for the task, but IE... yeah, only if you don't want to debug your applications, or build something Web 2.0.

    That said just curious, for all the Developers on this forum, except for those doing IE-only .ActiveXXXNet stuff, what Browser do you use?  Anyone already shaking their heads at the Beta2 of IE7 (oh man that's a LOOOOOONG way from a stable, public release)

    I exclusively use IE. The only place Firefox is installed is on a test machine, along side with Opera, Netscape, and AOL, to make sure that software works cross-browser when needed.

    Many have tried to convert me, but when it comes down to it, I don't use this "web thing" that much at all. So, why bother?

    Also, consider, if I got "hooked" on another browser, then I'd have to install it on my own laptop and workstations. Then, when I'm on on-site at a client, I'll whine and scoff that I have to use IE because they don't have (other browser) Bah.

  • (cs) in reply to Mr Variable
    Anonymous:

    This reminds me on an old C joke:

    if (status = UNDER_NUCLEAR_ATTACK) {
      launch_full_counterstrike();
    }

    Yours,

    Tichy

    Joke? That's Skynet's source code!
  • (cs) in reply to A Wizard A True Star
    A Wizard A True Star:

    I think I know where this guy is working now:

    http://www.inetonsite.com/onsite/default.asp?ADMIN=False

     

     

     

    that is just two funny ... where do these developers come from??

  • (cs) in reply to Alex Papadimoulis
    Alex Papadimoulis:

    Also, consider, if I got "hooked" on another browser, then I'd have to install it on my own laptop and workstations. Then, when I'm on on-site at a client, I'll whine and scoff that I have to use IE because they don't have (other browser) Bah.



    For the same reason, I use only notepad as an editor.

    (just kidding)
  • (cs) in reply to Anonymous
    Anonymous:
    You can actually go deeper than that. Go to the website, click a company with cameras, like Dearden, and click a camera. You will be prompted for a password. Go back to the main page, change ADMIN=false to "true" and click on Dearden and click on a camera. It will then bypass the password and present you with a camera viewer. Is this bad security or what? For a serveillance company (I think), it certainly has poor online security.


    OK, I couldn't get this to work.  How exactly do you execute the "Go back to the main page" step?  I don't see anything different when I do this, since I am just typing the URL back into the address bar the same way as the first time.  So I get asked for a password the second time too.
  • (cs) in reply to Magic Duck
    Magic Duck:
    Rank Amateur:
    Anonymous:
    hash:
    Gene Wirchenko:

    Sincerely,

    Gene Wirchenko

    <PULLINGHAIR>Can you PLEASE stop ending every post like that?! It annoys the crap out of me everytime I read one of your posts, I doubt i'm alone.
    </PULLINGHAIR>


    You're not alone.

    Now, doggonit, I've been signing the end of my posts since before I joined this forum. Why aren't I annoying anyone?

    --Rank


    Because your not sincere enough, dear sir!
    Sincerely,
    Magic Duck

    Well, there you go. It seems every third Tuesday, someone on this forum complains, "Oh, we need sarcasm tags or emoticons --people don't realize I'm kidding." But when someone comes out and explicitly says he's being sincere, it's more controversial than a supreme court nominee. Gee whiz, make up your mind. Boy. Gosh darn.

    --Rank

  • (cs) in reply to Otac0n
    Otac0n:

    I think that Mr. Wirchenko has his signature PERMANENTLY FUSED to his Windows clipboard.

    All he has to do is CTRL-V and his sig poops into the text box.



    That would be...less than sincere. True sincerity would involve really typing it every time. Otherwise it's just lip service.

    He keeps using that word. I do not think it means what he thinks it means.
  • Mr Duh (unregistered)

    The obvious fix is to change it to - LOGGED_OFF=YES... I mean, duh.. who could figure that one out.

    People who actually put stuff like that in query strings should probably just be shot or at least taken to a web programming security conference. hehe

  • (cs) in reply to connected
    connected:

    WTF Batman:
    ammoQ:
    He should have scrambled it.

    http://www.initech-foundation.org/support/giving.aspx?NO_DEGGOL=ON

    ;-)


    Or, for SUPER DUPER high security, Rot-13 is your friend:

    http://www.initech-foundation.org/support/giving.aspx?YBTTRQ_BA=BA

    You've completely missed the point. What this guy did is nothing short of genius...placing something like that wide in the open is clearly a new form of security--one based not on obfuscation or encryption, but on psychological deterrence. Anyone looking to break into the site will see it, but the stupidity of it will overwhelm the mind, and the hacker will be "shocked" into giving up.



    Heh. Security through reversed obscurity. What if you passed all the stuff normally (in my world, this means through databases, not through cookie or url) but put that stupid "Logged_on=No" tag in the url. When some bright boy saw it and changed it to "yes" you could map back his IP, and send it to the FBI reporting him for trying to circumvent security.

    Seriously...If I saw that I'd be too worried that someone was being subtly evil to exploit it. "Logged_on=No" screams trap.
  • (cs) in reply to pjsson
    pjsson:
    Another Initech post, is it same company as mentioned in this post: http://www.thedailywtf.com/forums/52300/ShowPost.aspx?


    It's the name that Alex puts in place of the actual company name in submissions. It's from Office Space I think (I didn't see it).
  • (cs) in reply to Anonymous
    Anonymous:
    !First Post


    &First_Post=NO
  • daSMB (unregistered) in reply to no one
    Anonymous:
    hash:
    Gene Wirchenko:

    Sincerely,

    Gene Wirchenko

    <pullinghair>
    Can you PLEASE stop ending every post like that?! It annoys the crap out of me everytime I read one of your posts, I doubt i'm alone.
    </pullinghair>

    No one cares what you think.

    Sincerely,

    Me



    Yeah, I thought it was pretty clever too

    Sincerely,

    Gene Wirchenko (actually dasmb)


  • (cs) in reply to Onanymous

    ...which is why the developer chose it.

  • (cs) in reply to WTF Batman
    WTF Batman:
    A Wizard A True Star:

    I think I know where this guy is working now:

    http://www.inetonsite.com/onsite/default.asp?ADMIN=False



    Hah! It actually works! If you change the False to True, and click on a link, you get an 'Exit Administrative Function' button (or something to that effect).

    Wild. I'm gonna start a consulting company and look for web sites like this, point out the issue, and become their IT department.


    Actually, you still need a password to do anything.  However, I'd bet that there is a SQL Injection opportunity here though.

    http://www.inetonsite.com/onsite/getpassword.asp?RETRY=False&CLIENT=Williams+Scotsman&SITE=Wsbaltimore&CAMERA=Automatic&OPCODE=LAST&FILE=ip.asp&DATE=undefined&FRAME=S_Wsbaltimore_Automatic_2002_05_29_13_00_06.jpg&O=L&CL=84&S=151&CA=373&F=656474
  • (cs) in reply to Mung Kee
    Mung Kee:
    ...which is why the developer chose it.

    Damn, chose reply vs. quote.  This was a reply to the comment "Rot-26 is far superior"

Leave a comment on “COBOL_SECURITY”

Log In or post as a guest

Replying to comment #:

Log Out

« Return to Article