- Feature Articles
- CodeSOD
- Error'd
-
Forums
-
Other Articles
- Random Article
- Alex's Soapbox
- Announcements
- Best of…
- Best of Email
- Best of the Sidebar
- Bring Your Own Code
- Coded Smorgasbord
- Mandatory Fun Day
- Off Topic
- Representative Line
- News Roundup
- Editor's Soapbox
- Software on the Rocks
- Souvenir Potpourri
- Sponsor Post
- Tales from the Interview
- The Daily WTF: Live
- Virtudyne
Admin
Well then you need an automatic installed with the keys pre-installed. No sense having to type in a new password for each client. And why transmit information encoded? Plain English please!
Admin
Always a bad sign, whether it is because the toddler's found the toilet cleaning materials or because some cow-orker's found how to turn off security…
Admin
If only the cow-orkers could find the toilet cleaning materials...
Admin
Not sure of their setup, but XMPP pairing isn't that long of a process. Maybe the whole setup took a lot of time?
Admin
There is no need to be buddies in order to exchange messages over XMPP. So in this regard probably even the first setup was flawed already. The only "protection" there might have been the non disclosure of "node names" (jids). Which practically boils down to security by obscurity.
All of which is nothing unique to ejabberd. Just as ejabberd would have offered that simplified central administration of buddy lists called shared roster groups.
In order to protect nodes from talking to each other in ejabberd you'd have to add a simple custom module (think of it as a plugin) that utilizes a specific hook to block any communication between nodes.
Admin
Robert should have pulled in a legal rep to give a little insight into what the litigation risks are when you willfully violate client confidentiality.
The real WTF is that Robert doesn't know how to fight ;)
Admin
Continuing the discussion from Jibber Jabbered:
Seconded.
He needs to say, "I'm sorry, but there's an important point here which I think needs to be understood: ..."
And again, if necessary: "Sorry, but I might have failed to make this plain: ..."
And don't give up until either you have completely made them see sense, or they have finally managed to make you see sense. (Just because you know you're right doesn't necessarily mean you're right.)
Admin
A lot of my devs don't know how to make a case for something. They'll say "This tool is awful, just awful!" when they ought to say "Contractors take an average of six days to get truly productive under this tool, resulting in $X wasted on average, plus $X in support due to mishaps and correcting mistakes", which would get them new tools :)
Admin
Well, that's one of the things they don't teach you in college.
Admin
Document the details of problem in e-mail (politely) to cover your own butt when the weed-whacker hits the poop and move on. If it's not illegal, immoral, dangerous (life/limb) or abusive, it then rests squarely on the shoulders of Jim. If it is, go over Jim's head.
Admin
At the risk of mistaking a joke for a serious point, it's Jim's responsibility to understand what he's being told, and Jens responsibility not to open up security breaches. These are trusted employees failing their company. Robert shouldn't be having to fight anything. Robert should be choosing to move elsewhere.
Oh right, you were joking. You'd think I'd learn to read to the end of a sentence before typing.
One thing I have learned with inescapable certainty is that some people cannot be made to see sense without committing a felony against them.
Over and over again I find myself working in companies where somebody with power thinks it's ok to just "get the product out the door" no matter what state it's in, and you better believe the underlings are pulling unpaid overtime to churn out these steaming piles of product.
Some people will hold on to their stupidity until it's imminently fatal, and setting up such circumstances is usually against the law. The vast majority of my own WTF anecdotes are of somebody's wilful or careless ignorance.
Admin
Admin
...and were intelligent enough to open the bottles...
Admin
+1 for double entendre
Admin
Filed under: Really don't try this at home, kids!
Admin
Seriously? No-one's posted Mr T yet? [image]
Admin
That's because he plays WoW these days:
https://www.youtube.com/watch?v=1bsOKH3_DNo
Admin
If you manager / boss refuses to listen to reason involve the laws. Depending on what data you store and what country you are in, protecting customer data is not optional. Make anonymous report somewhere higher up and watch it all burn.