×

Announcing: Slashdot Deals - Explore geek apps, games, gadgets and more. (what is this?)

Thank you!

We are sorry to see you leave - Beta is different and we value the time you took to try it out. Before you decide to go, please take a look at some value-adds for Beta and learn more about it. Thank you for reading Slashdot, and for making the site better!

Comments

top

Security Researchers Threatened With US Cybercrime Laws

bbroerman See... (156 comments)

This is why we can't have nice things. Companies won't audit themselves, and they get bent out of shape if others do it for them...

about 7 months ago
top

Court: Oracle Entitled To Copyright Protection Over Some Parts of Java

bbroerman Re:Legally correct decision with awful results (303 comments)

I pray, in the name of developers everywhere, that Google wins. If not, our industry is screwed!

about 7 months ago
top

Ask Slashdot: Preparing For Windows XP EOL?

bbroerman Re:The usual suspects (423 comments)

I've worked for companies like that. Sometimes it happens. They don't have the time or money to invest in writing all new software. I'm still writing web apps that have to support IE 6 due to a partner using an older version of Developer Studio where the embedded browser widget renders as IE6. They don't have the money to re-tool and rewrite it all, and we have to support them...

about 9 months ago
top

Ask Slashdot: Preparing For Windows XP EOL?

bbroerman Re: The usual suspects (423 comments)

Don't have a choice. I don't have hundreds of dollars for new copies of Windows, and the time to spend days reinstalling all the apps for everyone in the house...

about 9 months ago
top

Ask Slashdot: Preparing For Windows XP EOL?

bbroerman Re: The usual suspects (423 comments)

I do that anyway when I get a machine or when I upgrade it.

about 9 months ago
top

Ask Slashdot: Preparing For Windows XP EOL?

bbroerman The usual suspects (423 comments)

Load all patches, install a good antivirus, have a second or third one that you run occasionally manually (not all anti-virus packages get everything), use an updated chrome or Firefox browser. For Firefox, I'd suggest using noscript and web of trust as well. Keep Java in medium or high security mode, only go to reputable sites, and only enable JavaScript when needed.

about 9 months ago
top

Irish Politician Calls For Crackdown On Open Source Internet Browsers

bbroerman Huh? (335 comments)

Obviously, this person has no clue as to how the internet, or software works...

about a year ago
top

How To Develop Unmaintainable Software

bbroerman Sounds familiar (211 comments)

Sounds like most of the projects at my last job. As well as some at my current.

about a year ago
top

Should Developers Be Sued For Security Holes?

bbroerman The company should be sued (550 comments)

The company should be sued, not the developers. Its usually company management that tells the developers what to code, gives them too tight a deadline, changes requirements mid-stream, and prioritizes fixes and defects based on the percieve d cost vs. benefits. (i.e. how much a lawsuit costs vs. the cost of fixing it) Usually the poor developers are struggling to keep up, and most aren't trained in security... Most are barely trained, as the companies want to get people cheap. Its really the companies fault.. This coming from a developer with 20 years of professional experience in companies large and small...

more than 2 years ago
top

OAuth 2.0 Standard Editor Quits, Takes Name Off Spec

bbroerman OAuth (101 comments)

Having implemented OAuth1.0 and 2.0 services for communicating with various platforms, I was amazed at the lack of any security in Oauth 2.0. As mentioned by others, it completely relies on SSL/TLS, which is itself somewhat broken. From what I have gathered, it's simpler. That's about it. Actually, I prefer OAuth 1.0 and have modeled many of my own APIs after it.

more than 2 years ago
top

Ruling Prohibits Kaleidescape From Selling, Supporting Movie Servers

bbroerman Total BS (136 comments)

But, it wasn't removing the copy protection, and it wasn't sharing outside of the home... so I think this finding is BS... Still, it doesn't keep us from building our own. It's very simple, actually...

more than 2 years ago
top

Astronauts As Alien Life Hunters?

bbroerman Well, if we dont, someone else will... (172 comments)

At least there are other countries out there that have the will and the means. The US doesn't have to be the biggest and best any longer, and won't be for much longer anyway... China, India, and who knows who else will be out there long before we go back... Pretty soon, all the big announcements, advancements, etc. will be coming from them. Who knows, maybe one day we will be humbly asking China if they'll take us along, or let us spend time on their moon base.

more than 3 years ago
top

Women Arrested For Refusing TSA Search of Children

bbroerman Good for her (1017 comments)

This is why I refuse to fly, and will not take my family on a vacation where we would have to.

more than 3 years ago
top

Promotion Or Job Change: Which Is the Best Way To Advance In IT?

bbroerman Change (247 comments)

In almost 20 years as a developer, I've noticed that the best means of obtaining a promotion and pay increase has been to change companies. This also seems constant between small companies and fortune 500 companies...

more than 3 years ago
top

Why Doesn't Every Website Use HTTPS?

bbroerman thats why i use my own solution... (665 comments)

that's why I wrote a security framework that runs over HTTP and Ajax but is, as far as I can tell with my testing so far, as secure as HTTPS... with no need for expensive certs... It doesn't give you the nice blue / green address bar or the lock icon, but it's very secure when used properly. Decided not to go the patent route with this project, with all the changes and uncertainty in the patent landscape here in the US... but I would still like to get something out of all of my work and effort... so... I'm willing to give it to a few small companies for free as beta testers (with some consulting services) if they want to do an NDA... also, if there are any security experts out there who want a look-see... just send me an email... NDA there too... I'm going the trade-secret and copyright route on this, but hopefully it'll pay off. Anyone interested, let me know... (check email address on my profile)

more than 3 years ago
top

What 2D GUI Foundation Do You Use?

bbroerman My choice (331 comments)

If you want to run on different platforms, my choice would be Java and Eclipse SWT... you have a platform dependent library to send out with your app, but your app code itself is platform independent.

about 4 years ago
top

Government Could Forge SSL Certificates

bbroerman Re:I call bullsh*t (168 comments)

Well, I've got a year to see. If I don't get anything in that time, I've already planned on releasing it as FOSS. Who knows, maybe a company will see it, like it, and buy the rights. Oh, and I already do consulting. Have been for years.

more than 4 years ago
top

Government Could Forge SSL Certificates

bbroerman Re:SSL / HTTPS (168 comments)

That's the key part that led to the patent app. and no, it doesn't use https or prayer. And... the basic principal can be applied to other applications and protocols as well. Once I get the latest version of this library tested, optimized, and done, I'm going to start writing other apps that use the basic protocol, starting with FTP, POP3, and Telnet. Sorry I can't get more into it here, but I am waiting on the patent for the base protocol first.

more than 4 years ago
top

Government Could Forge SSL Certificates

bbroerman Re:SSL / HTTPS (168 comments)

That's taken into account. I spent many months working through that. Again, that was a key factor in the initial design of the initialization protocol.

more than 4 years ago
top

Government Could Forge SSL Certificates

bbroerman Re:SSL / HTTPS (168 comments)

Possibly, but time will tell. I've been working on this for 2 years now. I've got some close friends who are long time software experts looking at it. I would love it if I could find some security experts who would review it free, or low cost. In the mean-time, I have been reading every security book I can find. And, like I do with all of my other software testing, I have been going through it looking for different ways to "hack" it and then going back and tweaking the design.

more than 4 years ago

Submissions

bbroerman hasn't submitted any stories.

Journals

bbroerman has no journal entries.

Slashdot Login

Need an Account?

Forgot your password?