nion's blog

There are a lot of discussions out there whether functions like strcpy are dangerous and shouldn't be used in C programs.
But Heise security made my day:

The problem is caused by the use of the unsafe C function printf in crypto_recv in ntpd/ntp_crypto.c.

Beware of the evil printf!

Im rather disappointed by the overall quality of the heise security news anyway but of course they seem to have misread the original advisory and the bug report. They mean sprintf

EDIT: they fixed it

Ok I talked to the heise guys and they really don't want you to use their news different than described on http://www.heise.de/news-extern/.

So use the script in private, find it on: http://nion.modprobe.de/heise.sh

No I am not proud about my shell scripting skills that why I didn't publish it first ;-P

Have fun!

The famous German news site Heise is not able to provide a sane RSS feed for ages.
Well, http://www.heise.de/newsticker/heise.rdf exists but it only provides the headlines, I guess the reason is the advertising on the site.

I knew about some heise2email script which puts the content of the site into an email and sends it to you but it was not working anymore and I am not a Perl programmer so I didn't want to debug it. I also wondere
d that there is no sane RSS feed for Heise yet (at least I didn't find one in 5 minutes).

I wrote a small shell script to provide a full-content RSS feed for Heise and here is the result (updates every 30 minutes):
UPDATE: I removed the URL until legal stuff is clear, write me a mail (signed) if you want the script

I haven't tested this very much so if you notice any problems with it (for example if heise changes their website there will be problems), something is broken or
you are from Heise and want me to shut down this service because of legal issues (hey I am not a lawyer) mail me at: heise+rssREMOVE@REMOVEngoldeREMOVE.REMOVEde