Register a SA Forums Account here!
JOINING THE SA FORUMS WILL REMOVE THIS BIG AD, THE ANNOYING UNDERLINED ADS, AND STUPID INTERSTITIAL ADS!!!

You can: log in, read the tech support FAQ, or request your lost password. This dumb message (and those ads) will appear on every screen until you register! Get rid of this crap by registering your own SA Forums Account and joining roughly 150,000 Goons, for the one-time price of $9.95! We charge money because it costs us money per month for bills, and since we don't believe in showing ads to our users, we try to make the money back through forum registrations.
 
  • Post
  • Reply
rotor
Jun 11, 2001

classic case of pineapple derangement syndrome

detroit posted:

i write things in mumps for a living, welp see ya

talk about owned

Adbot
ADBOT LOVES YOU

Posting Principle
Dec 10, 2011

by Ralp

detroit posted:

i write things in mumps for a living, welp see ya

unironic condolences

Nomnom Cookie
Aug 30, 2009



Do mumps jobs pay well? That seems like the sort of thing where no one can tell if ur doing a good job or taking the piss and that sounds p good to me

Blotto Skorzany
Nov 7, 2008

He's a PSoC, loose and runnin'
came the whisper from each lip
And he's here to do some business with
the bad ADC on his chip
bad ADC on his chiiiiip

Nomnom Cookie posted:

Do mumps jobs pay well?

they pay like 15% below market

detroit
Nov 11, 2009
its competitive enough to attract new cs graduates and keep them churning out self-obfuscating code for a handful of years, but ive never seen anyone with prior programming experience in the real world go after a mumps job

Gazpacho
Jun 18, 2004

by Fluffdaddy
Slippery Tilde
i thought about moving to atlanta for a while but half their available jobs that dont require clearance are video tech (already done it) and the other half are hospital IT (no)

JawnV6
Jul 4, 2004

So hot ...

tef posted:

isn't D what happens when you try and reverse engineer a language out of a c++ compiler?

what comes out of a ++c compiler? d♯?

Nomnom Cookie
Aug 30, 2009



detroit posted:

its competitive enough to attract new cs graduates and keep them churning out self-obfuscating code for a handful of years, but ive never seen anyone with prior programming experience in the real world go after a mumps job

Otto Skorzeny posted:

they pay like 15% below market
Yeah I'm not breaking rule 1 for a joke job

Nomnom Cookie
Aug 30, 2009



Gazpacho posted:

i thought about moving to atlanta for a while but half their available jobs that dont require clearance are video tech (already done it) and the other half are hospital IT (no)
One bad thing about nova is 95% of the jobs are making webs or full scope w/poly required

Gazpacho
Jun 18, 2004

by Fluffdaddy
Slippery Tilde
5. What do M programmers love about M?

High productivity, low hardware requirements, good scalability.

[Thomas C. Salander in M Computing, June 1994, p.74]

I still program with other languages (Pascal, C, APL, LISP, and so on), but
almost always find myself saying, 'but it's so much easier in MUMPS!' ...
it's just plain quicker to implement most applications MUMPS. MUMPS is a
powerful computing language designed to solve real-world problems.

[John Lewkowicz, The Complete MUMPS, p. xii]

When I was first at the VA, Greg here gave me a 1 page batch of M code and
asked if I could do it any faster in C. Two weeks, a lot of aspirin, and
two compilers later, I had 'barely' working code (it would only run *once*).

[Mark Komarinski]

M is powerful and succinct. It's excellent for general hacking. If I
suddenly get a hankering for the first thousand digits of pi, or for all the
order 4 magic squares, or for a table of word frequencies in a document, I
don't know of any language I can accomplish this in faster.

[Keith F. Lynch]

f p=2,3:2 s q=1 x "f f=3:2 q:f*f>p!'q s q=p#f" w:q p,?$x\8+1*8

[part of Keith Lynch's .signature; it prints a table of primes,
including code to format it neatly into columns--DPBS]

I really like the way that the global tree is "just there" without any
file opening, record declarations, and the like.

[Kevin O'Gorman]

Indirection. Execute strings. String subscripts. Enormously valuable.
No other language has all of them.

[Ricardo Garcia]

I haven't touched MUMPS since the late 70's. I`ve been missing globals ever
since. While I was using MUMPS I implemented a simple programming tool
couple of pages of MUMPS code. I've missed that tool ever since, as well as
how easy it was to implement.

[Steve J. Morris]

Gazpacho
Jun 18, 2004

by Fluffdaddy
Slippery Tilde
hey tbc bow before your masters

Nomnom Cookie
Aug 30, 2009



Nomnom Cookie posted:

One bad thing about nova is 95% of the jobs are making webs or full scope w/poly required
Sometimes they want a clearance for j2ee. I guess their beans are classified

gangnam reference
Dec 26, 2010

shut up idiot shut up idiot shut up idiot shut up idiot
so codin mumps is like codin cobol but without the big salary?

Cold on a Cob
Feb 6, 2006

i've seen so much, i'm going blind
and i'm brain dead virtually

College Slice
my favourite part of cobol is all the reserved words for dealing with magnetic tape

trex eaterofcadrs
Jun 17, 2005
My lack of understanding is only exceeded by my lack of concern.

Cold on a Cob posted:

my favourite part of cobol is all the reserved words for dealing with magnetic tape

mine is the part where you have to be in the right column or your poo poo won't compile/becomes a comment

pic X(9) my balls

Cold on a Cob
Feb 6, 2006

i've seen so much, i'm going blind
and i'm brain dead virtually

College Slice

trex eaterofcadrs posted:

mine is the part where you have to be in the right column or your poo poo won't compile/becomes a comment

pic X(9) my balls

ugh yeah forgot that part lol

glad i've never had to do any real work in cobol and my exposure to it was purely masochistic curiousity

Janitor Prime
Jan 22, 2004

PC LOAD LETTER

What da fuck does that mean

Fun Shoe

Holy poo poo, thanks for the link.

quote:

For example, Amazon’s Flexible Payments Service PHP library attempts to enable hostname verification by setting
cURL’s CURLOPT_SSL_VERIFYHOST parameter to true. Un-fortunately, the correct, default value of this parameter is 2;
setting it to true silently changes it to 1 and disables certificate validation.

Tiny Bug Child
Sep 11, 2004

Avoid Symmetry, Allow Complexity, Introduce Terror

Hard NOP Life posted:

Holy poo poo, thanks for the link.

1. they did something stupid by changing the value. the default behavior is what they wanted

2. this behavior is explicitly documented

3. the correct settings for CURLOPT_SSL_VERIFYHOST and CURLOPT_SSL_VERIFYPEER are both false because otherwise you'll sometimes get these pain in the rear end SSL errors

Sweeper
Nov 29, 2007
The Joe Buck of Posting
Dinosaur Gum

Hard NOP Life posted:

Holy poo poo, thanks for the link.

lol php

Miley Virus
Apr 9, 2010

Sweeper posted:

lol web scripting

Miley Virus
Apr 9, 2010

also its dawned upon me that i'm a pos coder so now my goal in life is to bullshit enough to get a lovely job with little responsibility

Miley Virus
Apr 9, 2010

Orbi posted:

also its dawned upon me that i'm a pos

Catalyst-proof
May 11, 2011

better waste some time with you

Orbi posted:

also its dawned upon me that i'm a pos coder so now my goal in life is to bullshit enough to get a lovely job with little responsibility

same

Catalyst-proof
May 11, 2011

better waste some time with you

goddamn my avatar looks loving awesome

jooky
Jan 15, 2003

WHOIS John Galt posted:

goddamn my avatar looks loving awesome

yah its good

lamentable dustman
Apr 13, 2007

ðŸÂ†ðŸÂ†ðŸÂ†

Orbi posted:

also its dawned upon me that i'm a pos coder so now my goal in life is to bullshit enough to get a lovely job with little responsibility

done


learn java and all your dreams can come true

HORATIO HORNBLOWER
Sep 21, 2002

no ambition,
no talent,
no chance

Gazpacho posted:

i thought about moving to atlanta for a while but half their available jobs that dont require clearance are video tech (already done it) and the other half are hospital IT (no)

getting a clearance isn't that bad, I have awful credit and copped to prior drug use and I still got one

you just need a few months lead time and some good explanations for any derogatory information

and not be a current and active gently caress up of course

Shaggar
Apr 26, 2006

lamentable dustman posted:

done


learn java and all your dreams can come true

rotor
Jun 11, 2001

classic case of pineapple derangement syndrome
java is fine, i dont get the hate.

if it ever got actual function pointers that'd be just the best.

MononcQc
May 29, 2007


More than that. Of note:

  • Amazon's EC2 Java libs & Elastic Load APIs
  • Apache Axis & Axis2 (Java)
  • Apache Libcloud
  • Codehaus XFire
  • Rackspace iOS client
  • ElephantDrive & FilesAnywhere (Windows cloud stuff)
  • Android library for pusher notifications
  • Apache ActiveMQ
  • Amazon Flexible Payment services (Java + PHP)
  • PayPal Payments Standard and PayPal Invoicing (PHP)
  • PayPal Payments Pro, Mass Pay, and Transactional Information SOAP (Java)
  • ZenCart, Ubercart, PrestaShop, and osCommerce
  • AdMob mobile advertisement stuff
  • Trillian (opening for Google, Yahoo, etc.)
  • AIM
  • Chase mobile banking app (Android)
  • Lynx
  • TextSecure

Particular weaknesses and issues are seen in the SSL libraries for Java, Python, and PHP, and some blame goes to cURL.


Interesting Tiny Bug Childesque quotes obtained from forums, replicated in the paper:

quote:

  • “I want my client to accept any certificate (because I’m only ever pointing to one server) but I keep getting a javax.net. ssl.SSLException: Not trusted server certificate exception”
  • “Tutorial: Disabling Certificate Validation in an HTTPS Connection... Reply: Thank you very much. You solved my biggest problem in the project.”
  • “I have always turned off CURLOPT_SSL_VERIFYPEER in curl.”
  • “I am using axis on java to consume a webservice. The web service is in https, and I want to avoid the the check for certificate.”

11.1 has DOs and Don'ts for devs. Basically: test your poo poo, don't disable cert verifications, don't depend on default settings

11.2 for SSL lib developers: make semantics more explicit, don't delegate the responsibility of connections handlings to apps, get some god drat error reporting in there.

Tiny Bug Child
Sep 11, 2004

Avoid Symmetry, Allow Complexity, Introduce Terror

MononcQc posted:

don't disable cert verifications, don't depend on default settings

wrong and wrong. php's default settings are the correct behavior so you should leave them alone, unless you're dealing with someone who has a bad cert and doesn't really care about it, in which case you have no option but to disable validation

MononcQc posted:

"I have always turned off CURLOPT_SSL_VERIFYPEER in curl."

i do this by default too because otherwise your poo poo will break when the other guy forgets to renew his cert

MononcQc
May 29, 2007

it's u, your'are the reason papers are written about terrible devs

Tiny Bug Child
Sep 11, 2004

Avoid Symmetry, Allow Complexity, Introduce Terror
yeah hey boss it's me, tiny bug child. i'm sorry but we can't put these cross-sales on our join form anymore cause the shithead who runs them is too busy blowing huge rails of coke to buy a new ssl certificate and an internet person says i'm not allowed to just shrug and ignore it

MononcQc
May 29, 2007

"my software is terrible because ..."

Jonny 290
May 5, 2005



[ASK] me about OS/2 Warp
now you're getting it

Shaggar
Apr 26, 2006

MononcQc posted:

More than that. Of note:

  • Amazon's EC2 Java libs & Elastic Load APIs
  • Apache Axis & Axis2 (Java)
  • Apache Libcloud
  • Codehaus XFire
  • Rackspace iOS client
  • ElephantDrive & FilesAnywhere (Windows cloud stuff)
  • Android library for pusher notifications
  • Apache ActiveMQ
  • Amazon Flexible Payment services (Java + PHP)
  • PayPal Payments Standard and PayPal Invoicing (PHP)
  • PayPal Payments Pro, Mass Pay, and Transactional Information SOAP (Java)
  • ZenCart, Ubercart, PrestaShop, and osCommerce
  • AdMob mobile advertisement stuff
  • Trillian (opening for Google, Yahoo, etc.)
  • AIM
  • Chase mobile banking app (Android)
  • Lynx
  • TextSecure

Particular weaknesses and issues are seen in the SSL libraries for Java, Python, and PHP, and some blame goes to cURL.


Interesting Tiny Bug Childesque quotes obtained from forums, replicated in the paper:


11.1 has DOs and Don'ts for devs. Basically: test your poo poo, don't disable cert verifications, don't depend on default settings

11.2 for SSL lib developers: make semantics more explicit, don't delegate the responsibility of connections handlings to apps, get some god drat error reporting in there.

thats not a weakness in java ssl, its a bunch of people disabling the certification validation.

Shaggar
Apr 26, 2006
also there arent vulnerabilites in those apache projects, those are apache projects people use and then disable the ssl validation. what retard wrote that?

MononcQc
May 29, 2007

Shaggar posted:

thats not a weakness in java ssl, its a bunch of people disabling the certification validation.

The paper blames the lib for being a badly designed POS that causes these errors.

quote:

For example, JSSE (Java Secure Socket Extension) has multiple interfaces for managing SSL connections. The “advanced” SSLSocketFactory API silently skips hostname verification if the algorithm field in the SSL client is NULL or an empty string rather than HTTPS.

[...]

This feature is not explained in the API documentation. Instead, the following warning can be found deep inside the JSSE reference guide: [...]

[...]

The prevalence of Java software that uses SSLSocketFactory to create SSL clients yet does not perform hostname verification (see Section 4.2) suggests that developers are not aware of this feature. The existence of alternative JSSE interfaces that do perform hostname verification only increases the confusion.

Then they go on and blame the Java libraries built using the Java SSL stuff as being generically insecure, mostly because the underlying Java libraries are badly designed.

E: typoes

MononcQc fucked around with this message at 19:50 on Oct 25, 2012

Lysidas
Jul 26, 2002

John Diefenbaker is a madman who thinks he's John Diefenbaker.
Pillbug

rotor posted:

java is fine, i dont get the hate.

if it ever got actual function pointers that'd be just the best.

i like java because it makes it cost effective for jetbrians to release their IDEs for linux

Adbot
ADBOT LOVES YOU

Catalyst-proof
May 11, 2011

better waste some time with you
i'm probably going to start working in java soon. it's the absolute worst but at this point i don't see how it could be worse than anything else

still gonna script in python and experiment with go and clojure at home, gently caress the haters

  • 1
  • 2
  • 3
  • 4
  • 5
  • Post
  • Reply