But in order to burn disks, I need to take it out.
I could just plug in a USB hard drive and start copying stuff too, or I could delete partitions, squeeze the Windows partition, and install on the half that's not being used...
It's just my wife's crappy old laptop. I'm just trying to do some forensics to see what happened. Best I've done so far is find ./ -used 2, and I'm not familiar enough with Windows to know where to look
Not sure how to recover it, I can't find it in Recycle Bin (though I think I'm looking in the right place), and she said she didn't shift-delete, just right-clicked and selected delete.
@AaronHall Just the usual stuff: format the computer, change password to whatever service they might have gotten. I'd say it's very unlikely that they managed to reflash the BIOS.
@TerryChia heh. I came back to look at JS again after a few years, and it was like "whoooaaa". All this stuff I had to write manually, now exists in a function call.
anyway I wouldnt be working in them, I would wear them only for excercise.
@RоryMcCune yeah, and it sounds like its not even that - its "features" they can use to upsell OTHER products.
since its clear that there is no way the built in role management system could actually scal above 2 dozen users, so you would need the big expensive enterprise IAM systems.
hehe @RоryMcCune just spotted another Oracle gem: "It does not make sense to validate all user input fields against SQL injection".
on the other hand, for XSS they are pushing input validation. Wat.
oh okay, I see the intended difference.
Input validation to prevent XSS, and not SQL injection, makes sense, because for XSS the validation should be done in client-side Javascript. Wait what?
and then we wonder why so much software security sucks.
its because we have these ostensible giants in the field, like Big Brother Oracle, who ostensibly know so much better than "regular" programmers, feeding them incoherent shit like that.
catch this actual quote:
> Data input validation is key when it comes to preventing cross-site scripting. In Oracle ADF, input validation can be handled with JavaScript on the browser client
"Buuuut it's okay, we have role management Security features!"
hmm, later on they do kinda mention that javascript cant be used to block SQLi / XSS. but still.
I think there must have been more than one author for this doc. Typical oracle style.
goddamit I hate whinging so much
next time I agree to take an oracle project I will have to add a special "Whinging Fee" to the proposal.
I have very little time for them. Their CISO seems to take the attitude of "just trust us to do all the right things" "3rd party reviews are a waste and external researchers shouldn't be disclosing issues with our products"
@AviD Yea, they are indeed fuckwits. I remember having to make some website for internal use for them, it had to be IE6 compliant. Because they still used that. In the second half of 2014.
@Arperum hey, dont be mean. @RoryAlsop's workplace also has that.
crap how the hell am I supposed to give code examples in this doc, for something that you have to do in the GUI - because Oracle's brilliant developer tools do not expose this functionality in code or configuration??
