• rainer (unregistered)

    SPN_NAME - TODO

    Great company, superb product. Highly commendable!!!

  • (cs)

    What's with the paving truck? Is it just the typo in "Free Estmates" or am I missing something more subtle?

  • Alargule (unregistered)

    "Free Estmates". Wow. That's either a very self-referential typo, or a whole new kind of mates...and they're free!

  • c (unregistered)

    The password pic reminds me of the secret questions/answers where you have to pick the question from a drop-down list and most of the people I know can answer any of the questions or learn their answer with very little effort, effectively forcing me to write answers like !@#(&^@JASKFNJKpriuasfn32^*%&^(324o67t.

  • IRS Agent (unregistered)

    Hey, Carl, be thankful you're making anything in this economy! And oh yeah don't forget to send in the tax on your outrageous profits. Trouble paying 40% of one penny? Heck, just send it all in. That's our ultimate goal anyhow.

    Oh, and nice work hiding your last name. Fortunately Alex complies with our rules about anonymous posts.

  • Ob Server (unregistered)

    Forget the fire extinguisher, what about the ribbed condom right next to it? I think the guy in the picture at the top forgot to put one on.

  • Mike (unregistered)

    The office hour sign is a novelty item you can purchase all over the place: http://www.after5catalog.com/business-hours-sign-p-1499.html.

  • (cs)

    I wouldn't answer a call from someone who can't spell "collector", either.

  • (cs)

    The fireman looks like he fell into the fire.

  • (cs) in reply to Alargule
    Alargule:
    "Free Estmates". Wow. That's either a very self-referential typo, or a whole new kind of mates...and they're free!
    Looks like those mates are restricted to the eastern seaboard, though.
  • (cs)
    Password must be EXACTLY eight characters
    I'm willing to bet US$20 that this requirement exists because they're storing it unencrypted, in plain text, in a eight-byte field.
  • Osno (unregistered)

    The office hours are great. What it looses in "informative", it makes up in "funny".

  • (cs) in reply to Ob Server
    Ob Server:
    I think the guy in the picture at the top forgot to put one on.
    Nah, he's just following Gulliver's example in putting out the Lilliputian castle fire.
  • USR_NAME (unregistered)

    TODO

  • Nah (unregistered) in reply to dpm
    dpm:
    Password must be EXACTLY eight characters
    I'm willing to bet US$20 that this requirement exists because they're storing it unencrypted, in plain text, in a eight-byte field.

    Nope. All the fields in their database are char(255)

  • Warren (unregistered)

    If you were going to copy / fake the "high-value" cheque, wouldn't you just fix it so your version didn't contain the text about the colours and simulated (i.e. already fake) watermark?

    Although substituting "this cheque is in black and white and looks like a cheap copy" would probably be pushing it....

  • Anon (unregistered)

    Post 17. This is the main article.

  • silent d (unregistered) in reply to Alargule

    Werner Erhard has a new spin on his seminars... and a paving business on the side.

  • Guillaume (unregistered)

    TRWTF is that while Carl's last name is blanked out on the check, it's conveniently located in the explanation right above.

  • Addison (unregistered) in reply to dpm
    dpm:
    Password must be EXACTLY eight characters
    I'm willing to bet US$20 that this requirement exists because they're storing it unencrypted, in plain text, in a eight-byte field.

    I work for the government. I can tell you from experience that's practically standard procedure here!

  • (cs) in reply to dpm
    dpm:
    Password must be EXACTLY eight characters
    I'm willing to bet US$20 that this requirement exists because they're storing it unencrypted, in plain text, in a eight-byte field.
    Don't worry! They'll check it carefully with javascript on the client side before sending it over the network by plain HTTP to the server which will just use it verbatim in a database query. After all, nobody knows how to bypass javascript in a webpage!

    (I'd call this a joke, but it makes me feel too uncomfortable…)

  • (cs)

    I didn't know Estmates was in jail.

  • Anonymous Coward (unregistered)

    Not only they reduced the password strength by making it exactly 8 characters, those other restrictions make it even weaker. Only about 39 possible characters, and the first one must be one of 27 lower case alphabets, and of the 7 characters left one must be $ or # - no need to brute force any passwords which do not have $ or # there. Even further weakened by the fact there can't be 3 consecutive characters. Nice. Of course, bruteforcing a website account is propably not feasible if there are any safeguards in place, and getting your hands on the database would propably mean there's no need for bruteforcing at all...

  • (cs)

    I really like the advertisement on www.ToDieFor.biz.

    EXPERTS PREDICT LARGE SCALE PANDEMIC FLU OUTBREAKS. Preparedness is key.
  • ClaudeSuck.de (unregistered) in reply to dpm
    dpm:
    Password must be EXACTLY eight characters
    I'm willing to bet US$20 that this requirement exists because they're storing it unencrypted, in plain text, in a eight-byte field.

    Had you bet US$20000 you could have used that sum as a password

  • ClaudeSuck.de (unregistered) in reply to Guillaume
    Guillaume:
    TRWTF is that while Carl's last name is blanked out on the check, it's conveniently located in the explanation right above.

    TRWTF is that this is TRWTF.

  • Piercy (unregistered)

    So not only do they show RAM instead of the CPU they pass on bad practices like putting your fingers all over the connectors.

    WTF!

  • Me (unregistered)

    The fish food is people.

  • ClaudeSuck.de (unregistered) in reply to dkf
    dkf:
    dpm:
    Password must be EXACTLY eight characters
    I'm willing to bet US$20 that this requirement exists because they're storing it unencrypted, in plain text, in a eight-byte field.
    Don't worry! They'll check it carefully with javascript on the client side before sending it over the network by plain HTTP to the server which will just use it verbatim in a database query. After all, nobody knows how to bypass javascript in a webpage!

    (I'd call this a joke, but it makes me feel too uncomfortable…)

    On the other hand with SSL and encryption and private and public keys, and all that heck, nobody would ever guess that the plain text password really is a plain text password but that it has rather been subject to a new sort of encryption that makes it look like a plain text password. That's called

    Social Enryptioning

    SaudeClucked.

    CAPTCHA: enim or mine backwards, har, har. Well enryptecd.

  • ClaudeSuck.de (unregistered) in reply to ClaudeSuck.de
    ClaudeSuck.de:
    dpm:
    Password must be EXACTLY eight characters
    I'm willing to bet US$20 that this requirement exists because they're storing it unencrypted, in plain text, in a eight-byte field.

    Had you bet US$20000 you could have used that sum as a password

    Shit! This should have been US$20OO0, of course. Tsk, tsk.

  • Some Dude (unregistered)

    So... the check... Is the WTF that the check only for $0.01? I understand that the check itself probably cost E-Trade more than a penny.. but is that the only thing 'wrong' here?

  • (cs) in reply to Anonymous Coward
    Anonymous Coward:
    Only about 39 possible characters, and the first one must be one of 27 lower case alphabets, and of the 7 characters left one must be $ or # - no need to brute force any passwords which do not have $ or # there.

    Last time I checked the Western alphabet had 26 letters.

  • Slobodan (unregistered) in reply to Me
    Me:
    The fish food is people.
    "I brought a potato salad, it's made out of people... I'm just kidding."
  • ClaudeSuck.de (unregistered) in reply to Flatline
    Flatline:
    Anonymous Coward:
    Only about 39 possible characters, and the first one must be one of 27 lower case alphabets, and of the 7 characters left one must be $ or # - no need to brute force any passwords which do not have $ or # there.

    Last time I checked the Western alphabet had 26 letters.

    He didn't mention letters but entire alphabets, so it must be damn secure (especially the lower case ones).

  • ih8u (unregistered) in reply to Nah
    Nah:
    dpm:
    Password must be EXACTLY eight characters
    I'm willing to bet US$20 that this requirement exists because they're storing it unencrypted, in plain text, in a eight-byte field.

    Nope. All the fields in their database are char(255)

    And they're all in one giant table which holds logins, payroll, ... everything. It's just simpler that way.

    CREATE TABLE BrilliantDatabase ( F0001 char(255), F0002 char(255), ... F9999 char(255) )

  • Junkie (unregistered) in reply to Nah
    Nah:
    dpm:
    Password must be EXACTLY eight characters
    I'm willing to bet US$20 that this requirement exists because they're storing it unencrypted, in plain text, in a eight-byte field.

    Nope. All the fields in their database are char(255)

    So eight charachters followed by a bunch of spaces? It's a good thing they don't allow spaces in the password.

  • Bernie (unregistered) in reply to Me
    Me:
    The fish food is people.
    Only the green flakes.
  • (cs) in reply to Nah
    Nah:
    dpm:
    they're storing it unencrypted, in plain text, in a eight-byte field.
    Nope. All the fields in their database are char(255)
    You're assuming that they're using a database. *I* bet they believe flat-text files are "good enough".
  • Gordon (unregistered) in reply to ClaudeSuck.de

    Nope, should be us$20oo0. You can't have uppercase letters.

  • Anon (unregistered)

    The fish food is for fresh H20 as opposed to marine H20. You the fule! No, you the fule!

  • morry (unregistered)

    What? You never seen a multi-chip CPU before, you whippersnapper? Back in my day we had one chip per register. It was darn hard to slow those things down to 1Mz and such without splitting it you know.

  • (cs) in reply to ClaudeSuck.de
    ClaudeSuck.de:
    Flatline:
    Anonymous Coward:
    Only about 39 possible characters, and the first one must be one of 27 lower case alphabets, and of the 7 characters left one must be $ or # - no need to brute force any passwords which do not have $ or # there.

    Last time I checked the Western alphabet had 26 letters.

    He didn't mention letters but entire alphabets, so it must be damn secure (especially the lower case ones).

    I like my password in cyrillic because the backwards Rs look funny.

  • (cs) in reply to Slobodan
    Slobodan:
    Me:
    The fish food is people.
    "I brought a potato salad, it's made out of people... I'm just kidding."

    Nope, just papas.

  • Lamah (unregistered)

    THE FACE OF THIS COMMENT IS BLUE AND GRAY. THE BACK CONTAINS A SIMULATED LOLCAT

  • Americium (unregistered)

    In this economy, the store needs longer Holiday Hours. That's 00:00 to 00:00 on the 24 hour clock. It's open from Midnight to Midnight, all day!

  • (cs) in reply to Anon
    Anon:
    The fish food is for fresh H20 as opposed to marine H20. You the fule! No, you the fule!

    A molecule consisting entirely of twenty hydrogen atoms? I'm not entirely sure that's possible, either fresh or marine.

  • EatenByAGrue (unregistered)
    Maxim K spotted this waterless flushing urinal in Botany Bay National Park, Kurnell, NSW.
    Botany Bay ... Botany Bay! Oh, no! We've got to get out of here, now! Damn! Hurry!
  • (cs) in reply to dpm
    dpm:
    Password must be EXACTLY eight characters
    I'm willing to bet US$20 that this requirement exists because they're storing it unencrypted, in plain text, in a eight-byte field.

    How else would they be able to do routine sweeps for non-conforming passwords?

  • (cs)
    "If they're standing behind it," Rick Xaver writes, "they're doing it wrong."

    Either that or they have really good projectile aim.

  • Joe (unregistered)

    todiefor.biz apparently has the same high standards for their website editing as they do for their product and their...erm, tact. Either that or there's some difference between a "NEW! Zippelessr Style" body bag and one that's zipperless.

Leave a comment on “Sponsor Appreciation, Flushing Logic, Estmate Problems, and More”

Log In or post as a guest

Replying to comment #:

Log Out

« Return to Article