Forgot your password?
typodupeerror

Comment Re: Formatting as part of logging is a terrible id (Score 1) 77

I never suggested making the log use a binary format, though of course that becomes possible with such a system too.

You mentioned logging serialized objects. In Java, that's pretty much putting binary - well, java bytecode - directly into the log since Java has ways to save/load serialized classes.

That's actually what caused a massive security flaw in Apache Struts years ago as people were serializing a Java class and then including it in the headers of HTTP requests. Which meant the server would run the class before checking the user permissions.

Comment Re:I still love how it was first found in Minecraf (Score 1) 77

Consider the time spent to even implement that useless feature.

Somehow I have the feeling the "exploit" was placed there intentionally.

I doubt it took much time at all. JNDI already existed to handle the remote fetch and execute. Log4j just used JNDI.

As for why they did that. I'm going on a hypothetical here. Assume someone has 100 servers and they want to send an email when something happens. So they code up a e-mailer class that would now have to be pushed out to all 100 servers on every patch.

How about instead of updating all 100 servers, we have the servers pull down the e-mailer when that thing happens. That way we don't have to patch all 100 servers every time, they will all pull the update automatically. Marvelous! Time saved! Scheduling update windows no longer needed!

Comment Re:A solution looking for a problem? (Score 1) 219

Who is asking for this?

Corporate environments already use internet proxies. Creating a thin-client/proxy combination - which is exactly what this sounds like - isn't a terrible idea. Assuming that the corporation can own the server and only serve clients inside their network.

Anyone expecting to use this from home is mad.

Comment Re: Go tell that to the OS developers. (Score 1) 325

You use an exiting compiler and change its back end, that is called cross compiling.

Seriously? Compiling is translating the higher level language down to the byte-code. Assembler is mnemonics for the byte-code instructions.

You can't simply "change it's back end" without knowing the assembler for the target architecture.

Every compiler uses assembly. Every interpreter uses assembly.

Comment Re:Self fulfilling prophecy (Score 1) 467

As long as everyone keeps doing it in their own way, Linux will never supplant Windows.

Let's think about cars for a minute. If you move from a Honda to a Chevy, will you be able to drive it? Or would you have to learn a new interface before starting the engine?

Every time this comes up, I have to point to Eric Raymond's Luxury of Ignorance article. It's the perfect example of why Linux will never take over the desktop. And it was written 12 years ago. We still haven't learned.

Comment Re: Linus is completely wrong... (Score 1) 467

Right. But to bring this back to the original line of thought, would you expect Joe User to be able to do this? Do you want Joe User poking around with kernel compiling?

The problem is that the people who are developing the code don't understand how stupid Jow User can be. But here's the thing, Joe User is right.

Do you drive a car? Could you change the oil? Change a tire? Change a headlight? Change the brake pads?

Should you have to know how in order to drive a car?

Then why the fuck do we keep expecting Joe User to understand how to update the kernel and rebuild the necessary drivers?

Slashdot Top Deals

"I go on working for the same reason a hen goes on laying eggs." - H. L. Mencken

Working...