Close Menu
    DevStackTipsDevStackTips
    • Home
    • News & Updates
      1. Tech & Work
      2. View All

      Never Stop Exploring (July 2025 Wallpapers Edition)

      June 30, 2025

      How AI further empowers value stream management

      June 27, 2025

      12 Top ReactJS Development Companies in 2025

      June 27, 2025

      Not sure where to go with AI? Here’s your roadmap.

      June 27, 2025

      I never thought I’d praise a kickstand power bank – until I tried this one

      June 30, 2025

      I replaced my work PC with this Alienware laptop – now I’m wondering why I hadn’t done this sooner

      June 30, 2025

      How to set up Alexa to receive notifications on Prime Day deals you want

      June 30, 2025

      How proxy servers actually work, and why they’re so valuable

      June 30, 2025
    • Development
      1. Algorithms & Data Structures
      2. Artificial Intelligence
      3. Back-End Development
      4. Databases
      5. Front-End Development
      6. Libraries & Frameworks
      7. Machine Learning
      8. Security
      9. Software Engineering
      10. Tools & IDEs
      11. Web Design
      12. Web Development
      13. Web Security
      14. Programming Languages
        • PHP
        • JavaScript
      Featured

      What’s the difference between named functions and arrow functions in JavaScript?

      June 30, 2025
      Recent

      What’s the difference between named functions and arrow functions in JavaScript?

      June 30, 2025

      Spring Boot + Swagger: A Complete Guide to API Documentation

      June 30, 2025

      Wire Room Math: AI + SME = (Less Compensation Paid) X (Headline Risk + Payment Errors)^2

      June 30, 2025
    • Operating Systems
      1. Windows
      2. Linux
      3. macOS
      Featured

      Artix Linux: Introduzione di XLibre nelle Build Sperimentali

      June 30, 2025
      Recent

      Artix Linux: Introduzione di XLibre nelle Build Sperimentali

      June 30, 2025

      Orange Pi R2S Single Board Computer Running Linux: Introduction

      June 30, 2025

      vmstat – reports virtual memory statistics

      June 30, 2025
    • Learning Resources
      • Books
      • Cheatsheets
      • Tutorials & Guides
    Home»News & Updates»CodeSOD: A Highly Paid Field

    CodeSOD: A Highly Paid Field

    June 30, 2025

    In ancient times, Rob‘s employer didn’t have its own computer; it rented time on a mid-range computer and ran all its jobs using batch processing in COBOL. And in those ancient times, these stone tools were just fine.

    But computing got more and more important, and the costs for renting time kept going up and up, so they eventually bought their own AS/400. And that meant someone needed to migrate all of their COBOL to RPG. And management knew what you do for those kinds of conversions: higher a Highly Paid Consultant.

    On one hand, the results weren’t great. On the other, the code is still in use, though has been through many updates and modernizations and migrations in that time. Still, the HPC’s effects can be felt, like this block, which hasn’t been touched since she was last here:

    // CHECK FOR VALID FIELD
    IF FIELD1 <> *BLANKS AND FIELD1 < '1' AND FIELD1 > '5';
        BadField1 = *ON;
        LEAVESR;
    ENDIF;     
    

    This is a validation check on a field (anonymized by Rob), but the key thing I want you to note is that what the field stores are numbers, but it stores those numbers as text– note the quotes. And the greater-than/less-than operators will do lexical comparisons on text, which means '21' < '5' is true.

    The goal of this comparison was to require the values to be between 1 and 5. But that’s not what it’s enforcing. The only good(?) news is that this field also isn’t used. There’s one screen where users can set the value, but no one has– it’s currently blank everywhere- and nothing else in the system references the value. Which raises the question of why it’s there at all.

    But those kinds of questions are par for the course for the HPC. When they migrated a bunch of reports and the users compared the results with the original versions, the results didn’t balance. The HPC’s explanation? “The users are changing the data to make me look bad.”

    [Advertisement]
    BuildMaster allows you to create a self-service release management platform that allows different teams to manage their applications. Explore how!

    Source: Read More 

    Facebook Twitter Reddit Email Copy Link
    Previous Articleminicom – serial communication program
    Next Article Relive the Golden Era: 5 Tools to Get Retro Feel on Linux

    Related Posts

    News & Updates

    I never thought I’d praise a kickstand power bank – until I tried this one

    June 30, 2025
    News & Updates

    I replaced my work PC with this Alienware laptop – now I’m wondering why I hadn’t done this sooner

    June 30, 2025
    Leave A Reply Cancel Reply

    For security, use of Google's reCAPTCHA service is required which is subject to the Google Privacy Policy and Terms of Use.

    Continue Reading

    CVE-2025-29828 – Windows Cryptographic Services Double Free Vulnerability

    Common Vulnerabilities and Exposures (CVEs)

    CVE-2025-30680 – Trend Micro Apex Central SSRF Vulnerability

    Common Vulnerabilities and Exposures (CVEs)

    CVE-2025-5019 – Hive Support WordPress Cross-Site Request Forgery Vulnerability

    Common Vulnerabilities and Exposures (CVEs)

    CVE-2025-25265 – Apache Controller File Disclosure

    Common Vulnerabilities and Exposures (CVEs)

    Highlights

    CVE-2025-45237 – DBSyncer Unsecured Configuration File Access Vulnerability

    May 5, 2025

    CVE ID : CVE-2025-45237

    Published : May 5, 2025, 6:15 p.m. | 36 minutes ago

    Description : Incorrect access control in the component /config/download of DBSyncer v2.0.6 allows attackers to access the JSON file containing sensitive account information, including the encrypted password.

    Severity: 0.0 | NA

    Visit the link for more details, such as CVSS details, affected products, timeline, and more…

    CVE-2025-6512 – BRAIN2 Remote Command Execution Vulnerability

    June 23, 2025

    CVE-2025-49587 – XWiki XSS Through Unvalidated HTML in Notification Displayer

    June 13, 2025

    CVE-2025-45388 – Wagtail CMS Stored XSS

    May 7, 2025
    © DevStackTips 2025. All rights reserved.
    • Contact
    • Privacy Policy

    Type above and press Enter to search. Press Esc to cancel.