pitay

This reminds me of BlueJ. Does anyone remember BlueJ with its auto generated class diagrams?

Parameterized queries and statements are great. They solve problems where the paramaterized queries are used. However care must be taken, a script running on the database after information has been entered can still inject long after the initial parameterized statement put it into the database if that script itself does not use parameterized queries, making a SQL injection still work, in a delayed way.

It was one time for me. Although I do think what they advertised there and the way they advertised it was nonsensical and disrespectful to the user.

I do not have this issue, but I have a very customized about settings.

Here is the relevant about:config settings I have these changed for the URL bar:

  browser.urlbar.suggest.searches false
  browser.urlbar.searchSuggestionsChoice false 
  browser.urlbar.showSearchSuggestionsFirst false

Also for your urlbar you want to change it so it always shows the scheme and every part of the URL.

  browser.urlbar.trimURLs false

Stop Firefox trying to help with incomplete urls and loading the wrong site:

  browser.fixup.alternate.enabled false

Setting the above about:config entries should stop URLS you type being sent to a search engine and also stop some other surprises in the URL bar.

My bank used to have a virtual keypad, they now have a normal password field. So they actually saw reason. I think there is reason to be optimistic about bank password security getting better; what is known to be good password policies and interfaces are getting more widespread. It may take some time, but it should get better because it is accidental or ignorant password policies from the past, not deliberate attempts to make their customers trip up (unless someone knows better).

As for the asking birthday for security reasons, relic from the past, getting more useless as time goes by. With so many websites asking for that information, and then they get hacked, sold or leaked. Yes, this said the completely obvious, but it still amazes me that any organisation that I have a financial relationship with asks that for identification over the phone, usually my address as well, but that is almost as public.

Steam also allows a user to view the raw information if they want. At least the last time I looked. The option could definitely be more obvious though. Giving the user the ability to see the like/dislike data over time gives them their own ability to decide whether likes/dislikes come from an external source to the page. This information should include a graph of the total views over time as well as likes and dislikes over time in parallel.

Not giving users this information and removing like dislike counts just makes it so that a small number of people at YouTube have even more ability to control what is pushed on that site. With this change users have even less ability to check the validity of a video; validity means different things to different users here. People who stay at YouTube will just have to deal with the fact that they will have videos pushed to their screen for reasons that are hidden to them, that they don't have the ability to check out anything other people think about the video, and can't even signal that there is something wrong to them about the video (sure, they could comment, but any comment can be deleted by the video author and there is the fear of losing your Google account, which can include their email contact to everyone and authentication information also, which can have huge consequences for their ordinary life).

Microsoft could just not give discounts to computer suppliers that don't have UEFI secure boot on forced on.

I definitely recall Microsoft killing hardware manufacturers putting Linux on the machines that they sold by mandating that if they put Linux on any consumer desktop they would not get the OEM discount for a Windows licence for any computer they sold. It stopped new non Windows PC sales dead at the time IIRC. This was something like over a decade ago.

Yeah the lack of consequences for those that administer justice is (I believe) the strongest reason an innocent person is convicted or punished far too harshly for the given crime. The only time I have heard of judges ever getting punished for their judgments is either when it is revealed that they have been taking bribes or their nation lost a war.

Here you go:

  DavidXanatos
  on 16 Aug
  
  Interesting driver,
  is the process termination feature of PH the only thing MSFT has a problem with?
  I mean if its the only thing they don't like, may be its worth moving that feature into a separate tool or a plugin with an own unsigned driver?
  Also changing the name would be an option, if than all the problems can be avoided.
  @dmex
  dmex
  on 16 Aug
  Maintainer
  
      the only thing MSFT has a problem with
  
  MS refused to discuss anything and have ignored every email so who knows what their problem is.
  
      if its the only thing they don't like
  
  It's not the only thing.... There are recent changes to APIs that block and limit features when the caller isn't taskmgr.exe.
  
  Either way this discussion is offtopic from the KPH updates.

Sounds like a micropayment system where there is much more significant first buy in amount to be on the micropayment system than the actual (tiny) cost of a micropayment to use a service would make it worth far less worth it to spam online services.

The risk of having their payment identifier/address banned from services before significant use makes it very risky for them to use such a thing even if tiny micropayments a worth it to the spammer.

It certainly could have other problems with people getting banned from such a system for things other than: spam and other use detrimental to the service provider. There is also the issue of how the initial buy in fee is distributed.

But a high buy in for a system that many online service providers use would very strongly discourage use detrimental to the services providers (I think; this is only for discussion, as this is posted by someone with little knowledge on this. Micropayment systems have been talked about a lot, but I don't remember high buy-in mentioned).

Edit: Forgot to mention that the idea of this is that service providers can offer their services at lower cost because the risk to them from a account/address with a high buy in is lower than from an account/address with no buy in.

That was a previous attacker, not the one now. The article does not give any identifying information about the new attacker except they know who he is, but don't have the data to prove it. Look at the top of the paragraph quoted to see this.

I completely agree with this list. Although Windows 8 had a bad desktop UI, it was easily mostly fixed with Classic Shell at the time (these days it is Open Shell as Classic Shell is not updated any more). What Windows 10 has now is a better UI, but it has all this background stuff and telemetry which screws any performance for long periods of time, other times it is fine. But I have had to have performance monitoring tools open all the time to see what is going through my hard drive. It is that bad that I have resource monitor open all the time, just out of habit, because of how often there is Windows telemetry stuff or update medic service or even stuff which tries to measure power usage of programs in Windows when I am running it on a desktop. This is all stuff built into Windows installed by Microsoft, not 3rd party stuff. I have been able to deal with this by bypassing the haphazard protections MS put into place to stop me turning that stuff off, if they truly manage to stop me using my PC the way I want, not allowing me to disable the stuff I don't like, then it will become to unbearable to use Windows. The only reason it isn't unbearable is the protections against turning stuff off can be bypassed (not that they haven't tried to stop it).

With Win 11 requiring SecureBoot and the Trusted Platform Module turned on, it is a hard no for me. I like having control over my PC.