Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror

Comment COBOL programmers aren't all old (Score 1) 383

There's a COBOL shop in my small town that contracts for corporations and the government. I know several COBOL specialists in their 30s. It's actually an extremely lucrative field to get into these days, with good pay and job security.

Rewriting all that COBOL code in some other language would be bound to cause major problems.

Submission + - Badlock Vulnerability Falls Flat Against Hype (threatpost.com)

msm1267 writes: Weeks of anxiety and concern over the Badlock vulnerability ended today with an anticlimactic thud.

Badlock was the security boogeyman since the appearance three weeks ago of a website and logo branding the bug as something serious in Samba, an open source implementation of the server message block (SMB) protocol that provides file and print services for Windows clients.

As it turns out, Badlock was hardly the remote code execution monster many anticipated. Instead, it’s a man-in-the-middle and denial-of-service bug, allowing an attacker to elevate privileges or crash a Windows machine running Samba services.

SerNet, a German consultancy behind the discovery of Badlock, fueled the hype at the outset with a number of since-deleted tweets that said any marketing boost as a result of its branding and private disclosure of the bug to Microsoft was a bonus for its business.

For its part, Microsoft refused to join the hype machine and today in MS16-047 issued a security update it rated “Important” for the Windows Security Account Manager (SAM) and Local Security Authority (Domain Policy) (LSAD). The bulletin patches one vulnerability (CVE-2016-0128), an elevation of privilege bug in both SAM and LSAD that could be exploited in a man-in-the-middle attack, forcing a downgrade of the authentication level of both channels, Microsoft said. An attacker could then impersonate an authenticated user.

Comment Re:PHP 7 is faster than HHVM (Score 1) 39

Hi, I'm https://ancillary-proxy.atarimworker.io?url=https%3A%2F%2Fgithub.com%2Ffredemmott, on FB's HHVM open source team, and primary author of https://ancillary-proxy.atarimworker.io?url=https%3A%2F%2Fgithub.com%2Fhhvm%2Foss-pe...

Optimizing: have you tried using hhbc/repo-auth-mode? This can gets you tens of percents, though isn't compatible with all code. Additionally, are you excluding JIT warm-up time?

Standard disclaimer: we are not faster at everyone's code. In particular, PHP tends to be faster if you have a load of code just in files, but not in functions/methods.

Comment Re:Facebook (Score 1) 39

Hi, I'm https://ancillary-proxy.atarimworker.io?url=https%3A%2F%2Fgithub.com%2Ffredemmott and I work on Facebook's HHVM Open-Source team*.
  • - we're open source (under the same licences as PHP itself). If we start showing ads, delete the code. If we stop being open source, fork it with the help of the other major companies using it
  • - same story for trying to move extensions to a "full" version
  • - HHVM gets us more from the benefits of open source (contributions, recruiting, new hires being familiar with our code, etc) than we could reasonably expect to get by selling it

* my job, and the job of the rest of the team, is to make HHVM better for people who aren't Facebook (Wikipedia, Baidu, Etsy, and everyone else who uses it). Facebook pays us full-time for this.

Slashdot Top Deals

A CONS is an object which cares. -- Bernie Greenberg.

Working...