I think I`ve had enough of it. The report says that the programmers failed the risk analysis and a simple byte count forces us to change all our online passwords. Also, a few years ago I was force to change my password on ubuntu forums, since their commercial(!) forum platform was compromized. Its still a problem to me cause Iḿ confusing the new pass with the old one and their variations.
Why did they screw up that big? Its because they hold a computer science major.
Programming -despite common believe- is not for everyone. If you just pick a book for a language e.g. c++ for idiots, you can put the lines of code together but that does not make you a programmer. Although you`ll be telling your frends that you are. Programming is a special place in the braine thats called logic. You have to break everylittle thing of every aspect in tiny little blocks (like the molecules and atoms, even protons and neutrons or sometimes quarks) and build your software from there up.
Nowdays programming is done with the method of mongollian clusterfuck from people that are nowhere near the hardware and the operating system. Nobody cares about the hardware and they have no idea how the operating system affects their programm or performance. Design analysis is done at the level of molecules, whereas the heartbleed is at the level of atoms (as mentioned above) and at this point people use libraries. I hate using libraries. I understand that is cost effective, but you have to review the source before using it.
Anyway our problem was error checking. My programs (before I turn to systems and give up programming) were eg 30 lines of code, that did the job and then I would add another 120 for error checking. Design and analysis should have caught that. Its such a typical mistake that should never have happen. It did. And they want me to change my online passwords.
Its another reason I do not trust for me or my clients online/ on-the-net services. I am pure linux on my machines (desktop and servers) since 2008. I shall not switch back. But I wish that the programmers be engineers -at heart- and control the cs applicationist that are infesting the programming.
Its not the heartbleed and their team, Its just the excuse for this post.
Iḿ just sick and tired all these years, fighting buffer overflows and non existing error checking that do make my daily life miserable and for some people disasterous. I found a listing at the undernet the other day, of someone selling hundreds of certified paypal accounts. Who got them and how? Someone is responcible for that. 99% is malware from an M$ machine. I can go as far as ban M$ from consumer machines until ´they become ready for use by the public´ cause untill now they are not. And thats proven. If you must use Unix or OS2 or VMS and be safe, then thats what we must do.
But please, when you program, dont just throw code in there. Do it right.
ps needs a lot more pages to describe all that I mean, but its sunny and Iḿ going by the beach for coffee with friends.
