News for hackers. Stuff that matters.
Re:Race conditions on the web by et1337 on Tuesday July 12, 2016 @09:59PM (#12083492)
I would love to hear how these were all patched. Wrap everything in a transaction? Use some kind of MQ? Make sure these critical DB calls are not cached in any way? I'm sure it's different for each case.
Re:Race conditions on the web by ejcx on Wednesday July 13, 2016 @12:12AM (#12083840)
Having patched one of this researchers race conditions, while I was at lastpass, I did exactly that.

This only applies to coupon redemption

Re:Race conditions on the web by corobo on Wednesday July 13, 2016 @08:44AM (#12085690)
Which one?
Re:Race conditions on the web by EGreg on Tuesday July 12, 2016 @10:03PM (#12083504)
Um, simply generate a new code for every time an email is attached. Why not?
Re:Race conditions on the web by simplify on Tuesday July 12, 2016 @11:08PM (#12083672)
Instead of downvoting this comment, why not explain why they're wrong, both for the benefit of them and other readers?
Re:Race conditions on the web by sbuttgereit on Tuesday July 12, 2016 @11:40PM (#12083756)
Staying off topic for a moment... I bet there's an interesting study in this. Something along the lines of neurochemical or psychological rewards when one does something like "downvote" in self-regulating forum like this; seems like it would be narrowly focused enough an as compared to say, trolling, that you might be able discern something in from that sort of behavior. (I'm clearly no scientist :-) )

For the record I agree with you. I think when someone says something that is silly, naive, or somehow just wrong in a forum like this... it seems like it would be far more productive to both participants and observers to have someone just point out what's wrong (yes, that takes time, but you cared enough to down vote, right?) Some part of the time you'll just uncover a misunderstanding or actually find out the person that would otherwise be down voted may have had a point.

Oh well... back to work.