Feed aggregator
Apple Loses Fourth AI Researcher in a Month To Meta
Read more of this story at Slashdot.
60% of Americans Use AI for Search, Only 37% for Workplace Tasks, New Poll Finds
Read more of this story at Slashdot.
Anthropic Nears Deal To Raise Funding at $170 Billion Valuation
Read more of this story at Slashdot.
The World's Biggest Passenger Planes Keep Breaking Down
Read more of this story at Slashdot.
Apple Opens Manufacturing Academy in Detroit
Read more of this story at Slashdot.
Apple Shift Turns India Into World's Top Maker of US Smartphones
Read more of this story at Slashdot.
AI Boom Sparks Fight Over Soaring Power Costs
Read more of this story at Slashdot.
Dog-Walking Startup 'Wag' Files For Bankruptcy
Read more of this story at Slashdot.
PayPal Expands Crypto Payments For US Merchants To Lower Cross-Border Fees
Read more of this story at Slashdot.
Distorted Sound of the Early Universe Suggests We Are Living In a Giant Void
Read more of this story at Slashdot.
CodeSOD: IsValidToken
To ensure that several services could only be invoked by trusted parties, someone at Ricardo P's employer had the brilliant idea of requiring a token along with each request. Before servicing a request, they added this check:
private bool IsValidToken(string? token) { if (string.Equals("xxxxxxxx-xxxxxx+xxxxxxx+xxxxxx-xxxxxx-xxxxxx+xxxxx", token)) return true; return false; }The token is anonymized here, but it's hard-coded into the code, because checking security tokens into source control, and having tokens that never expire has never caused anyone any trouble.
Which, in the company's defense, they did want the token to expire. The problem there is that they wanted to be able to roll out the new token to all of their services over time, which meant the system had to be able to support both the old and new token for a period of time. And you know exactly how they handled that.
private bool IsValidToken(string? token) { if (string.Equals("xxxxxxxx-xxxxxx+xxxxxxx+xxxxxx-xxxxxx-xxxxxx+xxxxx", token)) return true; else if (string.Equals("yyyyyyy-yyyyyy+yyyyy+yyyyy-yyyyy-yyyyy+yyyy", token)) return true; return false; }For a change, I'm more mad about this insecurity than the if(cond) return true pattern, but boy, I hate that pattern.
[Advertisement] Utilize BuildMaster to release your software with confidence, at the pace your business demands. Download today!Visa and Mastercard Are Getting Overwhelmed By Gamer Fury Over Censorship
Read more of this story at Slashdot.
Claude Code Users Hit With Weekly Rate Limits
Read more of this story at Slashdot.
Bankrupt Futurehome Suddenly Makes Its Smart Home Hub a Subscription Service
Read more of this story at Slashdot.
A Second Tea Breach Reveals Users' DMs About Abortions and Cheating
Read more of this story at Slashdot.
Anker Is No Longer Selling 3D Printers
Read more of this story at Slashdot.
OpenAI's ChatGPT Agent Casually Clicks Through 'I Am Not a Robot' Verification Test
Read more of this story at Slashdot.
Say Goodbye To Your Custom ROMs As Samsung's One UI 8 Kills Bootloader Unlock
Read more of this story at Slashdot.
Cyberattack Cripples Russian Airline Aeroflot
Read more of this story at Slashdot.
Tesla Signs $16.5 Billion Contract With Samsung To Make AI Chips
Read more of this story at Slashdot.