The Captain’s Log

Pontifications of The Great and Terrible Captain Cucamunga.

New Posts

Wed, 24 Apr 2024 14:28:37 EDT

Ransomware attacks are 100% avoidable.

The proliferation of ransomware attacks has not been caused by an increase in the cleverness of attackers. The ultimate cause is badly-coded web servers, their third-party modules, or the third party modules of popular webdev languages. The bad code places client-supplied data in contexts in which the data is interpreted by the shell. This is the cardinal sin of security failures because it effectively surrenders control of the host machine.

Examples of attacks that exploit this mistake are described in these blog entries.

The bad coders cannot be held legally liable because all software licenses, whether they are closed source or open source licenses, disclaim liability. The user accepts all risks.

The simple bugs that enable these attacks can be discovered and eliminated through third-party auditing. It is time for webdevs to step up and take proactive responsibility for quality control. Your bugs shouldn’t cost blameless institutions millions of dollars.

Hang your heads in shame.

Tue, 23 Apr 2024 06:09:14 EDT

Preventive and Preventative

Preventive and preventative are synonyms. Both are adjectives, but some also use preventative as a noun: Suntan lotion is a sunburn preventative.

Tue, 23 Apr 2024 06:06:51 EDT

Orient and Orientate

Orient and orientate are synonyms. Literally, to orient is to point something or someone to the east. Figuratively, to orient is to point something or someone in a specific direction.

Thu, 18 Apr 2024 10:51:52 EDT

Wow

The interjection wow is Scottish in origin. The print use of wow dates back to the 1510s. Wowza.

New Posts