This is such a bizarre comment. Why do you think that I found that story somewhere? It absolutely happened to me.

What are you talking about?

Better keep the mask on though.

It doesn't rely on passing any input from the user to bash, per se. The CGI standard says that all the HTTP request headers should be put into environment variables before scripts are called. That is not Apache's fault, it is doing what it is supposed to do. The vulnerability is not in the scripts, all they have to…

Maybe for your specific deployment scenario, but for a lot of situations it is a very real vulnerability. The DHCP vector is particularly insidious. It's been a while since we had a vulnerability that could let someone own your machine just for connecting to an untrusted wireless network.

What's different about Shellshock though is that it is a very deep vulnerability in a tool which is used by lots of other pieces of software. That makes the attack surface ridiculously huge since you have to look at everything that uses bash or makes a system() call. Most vulnerabilities (including Heartbleed) are…

I just thought it was an informative comment, and that some people on GT might also find it interesting. It got 12 stars in the like 10 minutes that it was up, so I think I was right.

Except you are totally wrong. When they lift it up again the water doesn't turn back into ice, it just drips away. It is melting because the metal is room temperature and a very good conductor of heat.

I think it depends on the financial viability of the subject and the amount of funding departments get from outside sources. In general, science and engineering PhD students do not pay their own tuition because of NSF, NIH and industry grants that the college receives and uses to pay graduate students. Even in areas…

Is that strange though? I feel like the vast majority of scholarships are not applicable for doctorate degrees. Especially in science and engineering, where students are expected to be funded by their advisors.

I thought the whole point of "locally sourced" was that you change your diet/culinary tastes to eat whatever happens to grow in your area, not force the stuff you like to grow near you. That's why it's real easy to do if you happen to live in California where all the most delicious shit in the world is grown. Not so…

I'm confused though. Is this practice in danger somehow? I can definitely see advocating for it if someone is threatening to make it illegal or something, but out of context it seems like she is encouraging everyone everywhere to eat seals for some inexplicable reason. That is not a reasonable stance to take.

Do you know how much a drawbridge weighs? Hundreds, if not thousands, of tons. If less than 1% additional weight causes it to break, it was already going to break.

Railing, maybe. Bridge, no. All the locks are going to add up to maybe the weight of a single car. If the tolerances of the bridge are that small, then it would have already collapsed during a particularly bad rush hour or when a couple busses drove over it at the same time.

I probably shouldn't even humor you with a response, but you do know that "the cloud" is the default on most platforms now, right? And you can't expect every person to be aware enough of the security implications to disable it. You might as well blame Apple and Google.

I hope you're joking. Because we are the ones who forcibly conjoined church and state in Iran after we lead a coup to overthrow their democratically elected secular leader, Mohammad Mosaddegh.

I wish I could star your comment a thousand times. People should know that this is largely our (the United States) fault.

How often does it work to just tell people, "hey, don't do that?" If it were that easy then we would have solved our crime problem a long time ago. Rapists are not going to be deterred by a commercial that tells them not to rape. They already are ignoring the protests of the victim.

Also there are people would have to answer "yes", but the context would be "she asked me to choke her during awesome sex." Just sayin'.

It's just as easy to say, "no thanks, not working out" and block them in your phone though, right? The person don't know they're being ignored until a couple days later. You could be saving that person some anxiety at really no cost to yourself, is my view.