* Posts by bombastic bob

10281 publicly visible posts • joined 1 May 2015

Rust rustles up fix for 10/10 critical command injection bug on Windows in std lib

bombastic bob Silver badge
Devil

Re: Argh

"On the occasions when I am forced to use Windows, the first thing I do is install a proper shell, be it Cygwin or MinGW, WSL or a VM"

Back in the day I used them for lots of things. One of my more (in)famous batch files at $workplace was called "Megamake" (it built everything and produced a distribution as a zip file). Windows nmake is pathetic so I used a batch file to coordinate the build. Worked well enough on a Win '98 or NT 4 system. Obvious Spaceballs reference, heh.

bombastic bob Silver badge
Devil

Re: Ha! Rust Is The Answer To All Our C Programming Security Issues?

I once wrote a windows 'command.com' shell I called 'WinCMD' that did a lot of what CMD can do, specifically batch files and asynchronous windows applications from the command line. CMD in Win '95 of course made my application obsolete.

Maybe someone might write a console application for Win 7 and later that can do similar things, NOT be PowerShell, and contain improved command line security features...

bombastic bob Silver badge
Trollface

Re: Ha! Rust Is The Answer To All Our C Programming Security Issues?

"They've never claimed to be a silver bullet for all security issues ever."

which means we should snark even harder, for laughs

/me rolls on the floor in a wild snicker fit

US reckons it's about time the Moon had its own time zone

bombastic bob Silver badge
Devil

Re: Surely Coordinated Lunar Time is CLT

Based on what we did when I was on a sub decades ago, switching clocks to 'Zulu Time' (UTC) once outside of territorial waters, using adjusted UTC would be the best and makes the most sense. All you need to do is make sure that Lunar time exactly tracks UTC based on the time it takes for a radio signal from Earth to reach the surface of the moon at the center of its face and we're good. Then we can make adjustments for craft in flight as needed.

[on a sub daylight cycles only make sense when at periscope depth or on the surface. For everyone else to keep regular schedules, Zulu makes the most sense when submerged, which is most of the time]

Hillary Clinton: 2024 will be 'ground zero' for AI election manipulation

bombastic bob Silver badge

where were you in 2000 with the "hanging chads" ??? AlGore kept insisting on infinite recounts.

You may have short-term-only highly selective memory, but nice try - mine's more complete

And HILDEBEAST herself INSISTED that she won...

bombastic bob Silver badge
Facepalm

/me thinks: a shill for Demo[n,c][R,r]ats would say...

* FACEPALM *

[the left cannot meme]

I think we should let the people decide, and make sure that NO speech is silenced, filtered, nor edited [including the vile kinds of things that are often said about Trump] so that everyone is well informed, NOT motivated by pure emotion nor psychologically manipulated. and that ONLY legal (live) citizen votes are counted, exactly once per voter.

Do that and I'd accept the results. But I doubt that will actually happen... (the neo-nobility is compelled to divide us and keep us peasants in our place, RIGHT CCP???)

Singapore improves the AI it uses to detect smokers

bombastic bob Silver badge
Unhappy

As F'ing irritating as public smoking is...

does anyone REALLY want to live in a society that is an AI-based *POLICE* *STATE* ???

How about we just ask them to put it out instead? Oh wait, that means treating people like HUMAN BEINGS.

I happen to get horribly bad sinus headaches and runny nose from hell just being around people who have RECENTLY smoked, let alone catching a face-full of exhaled cigarette exhaust. That being said, I do not like this AI surveillance at all, I'd rather just ask nice, first.

[then if the idiot won't put it out I find a cop, delegate up, and allow the cop to ask nice before arresting/etc.]

Uncle Sam's had it up to here with 'unforgivable' SQL injection flaws

bombastic bob Silver badge
Devil

"Bobby'; drop tables;" - heh.

You can store that within the table as "Bobby&#3b; drop tables" [only tolerating internal ';' when part of a '&#' sequence]. Or similar.

bombastic bob Silver badge
Meh

Re: Coders vs Developers

Ahem. count the number of 'goto' statements in the Linux and BSD kernel source. Efficient code often requires old-school methodology.

bombastic bob Silver badge
Devil

Re: Coders vs Developers

"String building SQL commands etc etc should just be an absolute no no."

You mean like constructing an 'INSERT" or "SELECT" command yourself? Works fine every time for me. Hard rules like that are what do not belong. Old school C code building queries and passing it to psql (or whatever) could be the best solution, even using 'malloc()/free()' on pointers, fixed length temporary buffers, and stdin/stdout to send and get data to/from a forked process that does the DBMS work, I do that a lot. It also means not having to link your code to a specific library, nor re-writing the interface too much if you switch DBMSs.

bombastic bob Silver badge
Devil

Re: "developers allow user-input data to be supplied to a database directly as a SQL command"

One method I try to use (always) is to make sure that the data itself will never contain characters that might cause SQL injection, such as a single quote mark or semicolon., Or I can explicitly escape them somehow before building the SQL command myself. This gives you the opportunity to test your code to see how it responds to a data field like "Boo'; DROP TABLE MASTER;" and so you check for the single quote, the semicolon, and so on, and test for control chars that might also do something bad. Then you can create generic SQL good for any DBMS that's also safe, use utilities like "psql" to do the dirty work, and so on.

But yeah getting that sanitized input takes some effort. Not hard with PHP though. Time worth spending regardless.

Truck-to-truck worm could infect – and disrupt – entire US commercial fleet

bombastic bob Silver badge
Big Brother

Re: UN regulations

How about a policy that tells BIG BWUDDER GUMMINT to STOP TRYING TO MICRO-MANAGE OUR LIVES???

Oops, that makes TOO MUCH SENSE to the CONTROL FREAKS pulling on all of the puppet strings. They need to keep us PEASANTS in our place after all!!!

bombastic bob Silver badge
Unhappy

Re: There's a very simple fix that can't be bypassed

That is until some "vehicle inspection" system requires that this circuit board trace be functional...

bombastic bob Silver badge
Mushroom

Re: Going Fishing with Another Can of Worms

Any jingle from a "Big Pharma" TV ad will require only a small number of repeats

bombastic bob Silver badge
Big Brother

Re: See icon

exactly. Gummint at "work"

A federal mandate requires most heavy-duty trucks to be equipped with ELDs, which track driving hours.

So, because gummint cannot trust drivers to keep logs and maintain things on their own (including themselves) they have to INVENT A CRISIS in which a SURVEILLANCE system is MANDATED because we're just a bunch of DUMB PEASANTS who cannot manage ANYTHING without THEM.

And, naturally, they made it WORSE.

What's next, AIRLINE PILOTS? No, wait...

My uncle was a trucker, owned his own rig. He's probably FURIOUS. With the mileage he accumulated he had to buy a new one every few years. Long haul, interstate stuff. Gummint dweebs have NO clue as to what truckers need to know, and the skills involved.

And without the truckers, there will be CHAOS.

bombastic bob Silver badge
Happy

Re: The Hollywood script writes itself

I learned it as:

Ooey Gooey was a worm, a gooey worm was he;

He climbed up on the railroad track, the train he did not see!

Ooey Gooey!

Microsoft defends barging in on Chrome with pop-up ads pushing Bing, GPT-4

bombastic bob Silver badge
Big Brother

Re: One more reason

A rumor (that I just now started) has it that Mozilla will be funded with secret Micros~1 money, like Gnome, and after a silent coup d'etat will be JUST AS HEINOUS as CHROME and Edge...

bombastic bob Silver badge
Mushroom

Re: Microsoft's actions remind me of a past romance that really, really wants you to come back

"We value providing our customers with choice, so there is an option to dismiss the notification."

[who ELSE remembers GWX?]

US CHIPS Act set to electrify semiconductor scene with billions

bombastic bob Silver badge
Facepalm

Remember Solyndra, the OBAKA admin's ginormous "Cluster-Feel" new/shiny solar tech funded by gummint?

I expect more of same, except with silicon chips this time.

[$$$M in gummint loans/grants/funds/etc. followed by squandering, looting, golden parachutes, and bankruptcy, just like before.]

bombastic bob Silver badge
Happy

Re: There's no such thing as silicon heaven..

Electric Sheep-land

Raspberry Pi OS 5.2 is here, with pleasant tweaks to Wayland-based desktop

bombastic bob Silver badge
Unhappy

Re: No way-land

"I tried to install my usual Mate desktop and it completely ignored it, booting back in Pixel, even after configuring X.org. Hopeless."

It sounds like they did TOO much integration of that desktop. I am guessing that deliberately UNINSTALLING the userland and starting from scratch might fix it. Boot to console for a while until it is re-done.

Might be a little difficult to do that though.

Also for EMBEDDED use, Wayland is a SHOW STOPPER. You ABSOLUTELY need to work on programs REMOTELY from a desktop, and that means using DISPLAY and XOrg.

bombastic bob Silver badge
Alert

Re: No way-land

I think we're gonna need a "Devuan" style makeover on RPi OS

'Chemical cat' on the loose in Japanese city

bombastic bob Silver badge
Coat

Re: History repeating itself

...And that was only the beginning of CatZilla's reign of terror....

Known as "Nyanjira" in Japan, sometimes "Nekojira" - the latest kaiju. Can't wait for the movie!

The end of classic Outlook for Windows is coming. Are you ready?

bombastic bob Silver badge
Stop

Re: I need classic outlook

"POP3 is horrible. It simply doesn't work in any situation where you need to access your mail from multiple devices (which i reckon is at least 90% of users these days)."

Then leave it ALONE - many of us prefer it. Like 3D Skeuomorphic vs 2D FLATSO. "The highway" is NOT an alternative the rest of us should be forced to accept.

Note: I take advantage of the "leave mail on the server for NN days" feature in TBird and other PROPER mail clients.

Trump, who tried kicking TikTok out of the US, says boo to latest ban effort

bombastic bob Silver badge
Megaphone

Re: Reference

(you were being facetious, right? right?)

Unfortunately foreign lobbyists [too] often get the ears (and votes) of the [crooked] politicians they pay for.

And BOTH major parties are guilty, It's why "America First" is SO appealing to at least half of the voters.

and $3Trillion in borrowing per year to buy all of that "help everyone but Americans" DEFICIT spending should make it obvious to EVERYONE (who;s head is not in the sand) that this has been going on for WAY too long.

(If I had MY way I'd "imminent domain" all CCP-owned EVERYTHING, from farmland to Bytedance, declare the CCP an enemy to the USA, detach our economy from the CCP, etc. and make up for it by being a HUGE net exporter of CHEAP oil which would ultimately help EU, UK, and also help drive Putin out of Ukraine THAT way - economically)

Anthropic unlocks Claude 3, claims it's better than ChatGPT and Gemini

bombastic bob Silver badge
Megaphone

Is this yet another example of teaching computer AIs to FEEL instead of use LOGIC, to simulate "intelligence", when EMOTIONAL INTELLIGENCE is an OBVIOUS OXYMORON?

worse than 'military intelligence' - SO many bad decisions made in the name of "FEEL". And that would include AI designs, apparently, unless you WANT "Artificial Stupidity"

According to Elon, the solution to AI is a VERY STRICT adherence to THE TRUTH. Or something similar to that.

In other words "just the facts" without the Artificial Stupidity "morality" programmed in by leftists.

Chinese 'connected' cars are a national security threat, says Biden

bombastic bob Silver badge
Alert

Re: There is way too much 'Because they can' in todays vehicles,

Once in Central Cali-Fornicate-You, on I-5, in the summer, farmland all around, I hit a swarm of bugs in the middle of the night that COATED my windshield.

Wipers and fluid kept me seeing long enough to get past the swarm and keep going. But do forward cameras have wipers and washer fluid?

bombastic bob Silver badge
Megaphone

Re: Are the United States

(RE: China becoming world's biggest economy)

All done with slave and child labor, grossly underpaid employees, totalitarian control, unfair international trade practices, and [specifically] theft of intellectual property [which I have seen clear examples of]

(under communism there is *NO* *REAL* *INNOVATION* - because the nail that STICKS UP gets THE HAMMER!)

bombastic bob Silver badge
Pirate

Re: The lack of features as a feature

EV migration does not need to happen, nor will it. People will just fix up OLD cars - JUST! LIKE! CUBA!!!

(and I do not want to live in a place like CUBA, nor does anyone else, so there will never BE an "EV migration")

bombastic bob Silver badge
Black Helicopters

Re: By 'no radio' you mean AM/FM

but specifically NOT an AM radio.

Most conservative talk radio is on AM after all, and is VERY anti-CCP and pro-Trump. Make up an excuse like "the power converter creates too much noise for the AM band to be usable" and now Sean Hannity, Mark Levin, Clay&Buck, and others no longer threaten the CCP domination of the world, since nobody can listen to them while driving any more.

bombastic bob Silver badge
Big Brother

Re: Came to say the same thing

that would be illegal and unusable

Has not stopped such things in the USA. FISA abuse, for starters.

A distributed database with 250 million sets of records is NOTHING. I can see how to build and use such a thing, tie it in with motor vehicle departments and law enforcement, and make it available for anyone that wants the data with the right "warrant" even though we know FISA has already been abused like this.

A daily report of GPS location and time, taken every 5 minutes, means 12 records per hour of driving, consisting of a 64-bit integer (seconds since the epoch), and 3 double precision floating point values (longitude, latitude, elevation). Total 32 bytes times 12 for each hour of driving, indexed to your VIN number, which is associated with YOU.

NOT hard at all. Not a lot of data, either. (I know)

And all law enforcement needs is a place to look or a person to investigate, and if this information NEVER shows up in court, it does not need to be "admissable evidence" as far as anyone is concerned.

Best hope those in power do not suddenly say "Find me the man and I'll find you the crime".

bombastic bob Silver badge
Big Brother

Re: Came to say the same thing

see icon

bombastic bob Silver badge
Coat

Re: Came to say the same thing

Yes, but are they equipped with the EV equivalent of 'Atmos'??? (invented by Sontarans, of course)

When it suddenly steers you into a deep body of water and leaves the windows up and the doors locked... "You have reached your final destination"

bombastic bob Silver badge
Megaphone

Re: Came to say the same thing

"I don't want China to be able to disable my car as part of a tit for tat if they invaded Taiwan and the US was helping Taiwan defend itself. But I wouldn't want a US or EU based automaker to have that power EITHER."

A VERY SANE summary.

Besides, the one thing about the actions of that doddering old fool (King Bidas, and his puppetmasters behind the curtain) is that it is currently an election year. And you always know he is lying whenever his lips are moving.

(This will all blow over after November)

Elon and the terrible, horrible, no good, very bad legal week

bombastic bob Silver badge
WTF?

Uh,.. what?

(unions are not necessarily bad, and I do not believe Elon intentionally discriminates nor endangers his employees. But l[aw]Yers often go after deep pockets because poorly written laws ENABLE them to.)

people need to THINK instead of *FEEL*. *FEEL* has been making bad decisions since human history began, and like beer goggles, often results in a hangover and a possible "coyote ugly" situation.

bombastic bob Silver badge
Thumb Down

DEI *IS* discrimination. I rail against it ALL OF THE TIME.

bombastic bob Silver badge
Megaphone

Re: What is it with these hard-right muppets?

"Hard right"

I do not think those words mean what YOU think they mean...

If 'hard right' (Adolph, Mussolini) is not a mirror clone of 'hard left' (Mao, Stalin) then I think your definition might be "inaccurate" at best... [in fact both circle around and meet at the bottom, In My Bombastic Opinion]

bombastic bob Silver badge
Pirate

Re: Odd, isn't it?

Elon's cars will never be "affordable" for most people. This is not his market. Earlier Cadillacs had air conditioning and cruise control when few others did, and now it's standard equipment. But back then, only those with a lot of disposable income could afford cars with them.

In the "Marketing Cycle" world these customers are the "early adopters". The masses will not have this for a decade or more.

Early in Ford's history, Benz sued him over their invention of "The Automobile". Benz lost Ford's patent challenge, i.e. "too broad" or similar. European car makers only wanted cars for the WEALTHY and not for the masses, after all, and Ford wanted his own employees to own some of the cars they made [mostly for PR I bet but he understood the MASS market].

Anyway new/shiny is generally bought by early adopters. In a decade or so the features that CAN be in mass market cars will end up there, and patent royalties will enrich the inventors.

bombastic bob Silver badge
Alien

Re: Odd, isn't it?

"But there's a reason those things never got beyond kids comics..."

meanwhile re-usable SpaceX rockets REGULARLY land on their tail on a barge that moves with the ocean,.. like a 1950's kid's sci fi comic.

Lightweight Windows-like desktop LXQt makes leap to Qt 6 with version 2.0

bombastic bob Silver badge
Unhappy

The snag is that by the time they'd done it, Gtk 3 was on its last legs and GNOME had moved on to Gtk 4.

Sadly true. Some of GTK3 is an improvement over GTK2 (or at least has the appearance of being an improvement) but it DOES mean that appearance settings are schizophrenic.

The WORST design choice for GTK4 essentially *CODIFIES* AdWaita as the ONLY theme, basically, regardless of how it is being portrayed. But in Mate it is possible to reverse this, even with Firefox, by un-doing the AdWaita override so you can get NORMAL LOOKING SCROLLBARS back (and similar things) with TraditionalOK as your theme.

In FreeBSD there was no Gnome 3 port for a long time. The Gnome 2 code got REALLY stable. I liked it. Then Mate came along and solved the rest of the problems.

I wish there had been a similar fork for Qt-related things like KDE and now LXQt where you are NOT locked into a 2D FLATSO TIFKAM clone theme.

bombastic bob Silver badge
Devil

Re: Can someone man'splain this to me?

in reality it is children who grew old enough to say "It is OUR turn now", but have convinced themselves that the choices made in the past were NOT based on experience, but on a LACK of what THEY (the younguns) have, something that us "old farts" cannot POSSIBLY understand.

And once again I mention Arthur C. Clarke's "Superiority"

https://metallicman.com/laoban4site/superiority-by-arthur-c-clarke-full-text/

bombastic bob Silver badge
Pirate

Re: Can someone man'splain this to me?

can we just fix the bugs and stop mucking around with the UI? This change for the sake of change, is why I'm moving to Linux instead of Windows. The last thing I want is for that disease to infect Linux.

Welcome aboard!!!

bombastic bob Silver badge
Megaphone

Mate for a traditional interface

The one thing Mate has going that nonefew of the OTHERS seem to "get right" is a 3D skeuomorphic look with TraditionalOK and related themes.

AdWaita and ALL of the 2D FLATSO FLATASS themes (including GTK 4 and above) should be taken out back and KILLED until they DIE to DEATH, possibly out of a 4th floor window onto the boss's car.

I took a look at some of the LXQt screenshots https://lxqt-project.org/screenshots/ and I saw Win-10-nic TIFKAM title bar and buttons and OTHER window decorations. YUCK!!!

What is WRONG with people these days, taking away CHOICE from users by ONLY OFFERING 2D FLATASS themes??? And, GOING WITH THE BORG's DESIGN AS THE *ONLY* CHOICE!!!

New solvent might end winter charging blues for EV owners

bombastic bob Silver badge
Unhappy

Re: Fluoroacetonitrile

* do not allow your vehicle to be exposed to a flood nor drive it into a lake

* do not get into a traffic accident,

* do not let your vehicle be consumed by a house fire

* do not shoot your vehicle with any kind of projectile

* do not accidentally short wires together due to rats chewing on the cables

etc.

bombastic bob Silver badge
Flame

I think you pretty well nailed it

yes, a "halt and catch fire" situation seems even MORE likely how...

Some years ago I did a lot with LiPo batteries, charging circuits, determining how much battery is left, yotta yotta and one time I accidentally plugged a battery into a test circuit that was inadvertently shorted directly across the battery, In under 2 seconds it swelled like a sausage shaped balloon (from being flat and rectangular) and made a weird hissing noise when it did it. I yanked it out of circuit and got it to a sink in a few seconds and ran water on it, then it immediately collapsed into a wrinkled version of its former flat rectangular self. And this battery was under 300mAH if I recall correctly,.

So yeah, put multi-KAH batteries into an electric vehicle with this electrolyte, along with Lithium electrodes, and see what happens in a traffic accident,..,

bombastic bob Silver badge
Devil

Re: Doesn't

good resource. needs javascript enabled though

bombastic bob Silver badge
Alert

Re: A new solvent.

flouro-something means it has flourine in it. This by itself is not so much of a problem, unless it re-combines with OTHER things. HF acid is extremely toxic and dangerous, for example, though a flouride buffer solution used by your dentist really isn't [when use properly], nor is the flouride in toothpaste. CFCs used in air conditioning are non-toxic unless you BURN them, and then you can get phosgene gas (from the chlorine) and possibly similar kinds of chemicals from the flourine (I am not sure on this however, just making a point about what burning does in general). And as we all know lithium-based batteries have been known to "halt and catch fire" now and then.

That being said, my SPECIFIC concern here has to do with a technology MONOPOLY by CCP regarding electric vehicles, and the FLAT OUT UNSCIENTIFIC LIES that are being used to (literally) FORCE people to switch over to them from gasoline and diesel engines. We know that CCP scientists have done their best at industrial and academic espionage on our technology for a LONG time, and they have finally reached a point with EV batter tech where WE must honor THEIR patents (when THEIR lack of patent respect towards US has been BLATANT).

THAT is my main concern. We do NOT need to enrich the CCP. any further.

It's crazy but it's true: Apple rejected Bing for wrong answers about Annie Lennox

bombastic bob Silver badge
Devil

Re: "willing to sell Bing, which you wouldn't do if it was a strategic asset."

And now is attempting to put the CoPilot lipstick on the pig…

but will they manage to get it on the end that goes "Oink" ?

bombastic bob Silver badge
Happy

"U-Bend links"

heh - good one

bombastic bob Silver badge
Black Helicopters

Re: If Google loses, it does not win

I just want a search engine that does NOT include SIlly Valley BIAS in the results, whether in the order they are presented, or any additional filtering applied

The fear is that GEMINI will become "the norm:, and NO amount of DuckDuckGo search tracking mitigation will help you.

Elon has floated the idea of his OWN search engine, with an unbiased "free speech" focus. We shall see.

Thinking of Gemini, it is as if Google tried to teach the AI how to *FEEL* instead of using LOGIC. The result is a search engine that *FEELS* its results are correct, but when you remove the beer goggles, you find out just how COYOTE UGLY those results really are. "Artificial Stupidity" is the predictable result.