3,448 karma · joined March 4, 2008
1) Input validation - programmer - validates_* and attr_accessible in the models
2) Output validation - programmer - HTML::Sanitize
3) SQL injection - rails - use ? or named_scope to construct complex queries
4) XSS - programmer - do not forget <%= h
5) Command injection - programmer - do not do it
6) Cleartext - programmer - requires_ssl module
7) CSRF - rails - uses authentication_token in all forms
8) Race conditions - rails - single threaded
9) Error info leaks - rails - use production mode
10) Memory - ruby - safe language
The rest are all on programmer - just do not do it.
http://finance.google.com/finance?q=iso (up 100,067.23%)
http://finance.google.com/finance?q=jdo (up 81,870.14%)
http://stockpickr.com http://alphaclone.com http://zecco.com, that's not counting virtual stock market games where you can sell you strategies to others.
Funny how people pile on these "top pickers" and create a self-fulfilling prophecy bubble and then wonder where all the money went.
Here's the text of lawsuit (08-CV-9595) [PDF] http://people.bakersfield.com/file/document/339038/2/0/
Earnings are a lot easier to fake than dividends that's why some consider dividend rate more reliable indicator than P/E (esp. when comparing with other asset classes). Last time S&P returned more than treasuries was in 1950's.
The overall market is down more than 30%, and technology companies are a lot more sensitive to the market direction than others. This is how Salesforce looks adjusted for market trends: http://whomovedmystock.com/CRM (disclaimer: this is my startup)