Slashdot Mirror

As per request I'll refrain from saying "that's not what you need" but still. They wont be able to "enumerate" if you have a firewall, you don't need NAT to block incoming ports. I prepared these diagrams and post links whenever this is discussed on slashdot:

IPv4 NAT : http://cyclomedia.co.uk/blog/media/nat.png

IPv6 Firewall : http://cyclomedia.co.uk/blog/media/ipv6.png

Note the devices in the house that don't have any incoming ports. Not even ping? Note how it's the same in both diagrams? Do you get it yet?

As per request I'll refrain from saying "that's not what you need" but still. They wont be able to "enumerate" if you have a firewall, you don't need NAT to block incoming ports. I prepared these diagrams and post links whenever this is discussed on slashdot:

IPv4 NAT : http://cyclomedia.co.uk/blog/media/nat.png

IPv6 Firewall : http://cyclomedia.co.uk/blog/media/ipv6.png

Note the devices in the house that don't have any incoming ports. Not even ping? Note how it's the same in both diagrams? Do you get it yet?

This is a lot easier to follow http://cyclomedia.co.uk/blog/media/primer_primer_2400.png

If it was so bad why is the 21st century's biggest game franchise heavily inspired by it? http://cyclomedia.co.uk/blog/?Halo_is_Tron

Having rewatched it recently in anticipation of seeing Legacy tomorrow night one thing that stood out for me (apart from how much Halo looked like it, see: http://cyclomedia.co.uk/blog/?Halo_is_Tron ) were some of the mirror shots. Shots in the real world that reflected the computer world, bridging the gap to it from our side. One was in the office with cubicles spreading off to infinity in a grid pattern, another was a tall building, which looked like a large server. Clever.

MOD PARENT UP Re: "just because they're public addresses doesn't mean they're publicly accessible".

Just to be clear, here is how your home network works at the moment, with port 80 forwarded to some server box in your house:
http://cyclomedia.co.uk/blog/media/NAT.png

And here is the same situation without NAT but with firewall rules so that ONLY inbound port 80 is allowed to not one, but two boxes in the LAN, a server geekbox and a tv set top box with a web interface for recording and streaming.
http://cyclomedia.co.uk/blog/media/IPv6.png

In both setups you'd still need authentication on your web servers to keep bad people out, but it's not like in IPv6 land anyone can ping the tablet or laptop, they have no ports exposed through the firewall

MOD PARENT UP Re: "just because they're public addresses doesn't mean they're publicly accessible".

Just to be clear, here is how your home network works at the moment, with port 80 forwarded to some server box in your house:
http://cyclomedia.co.uk/blog/media/NAT.png

And here is the same situation without NAT but with firewall rules so that ONLY inbound port 80 is allowed to not one, but two boxes in the LAN, a server geekbox and a tv set top box with a web interface for recording and streaming.
http://cyclomedia.co.uk/blog/media/IPv6.png

In both setups you'd still need authentication on your web servers to keep bad people out, but it's not like in IPv6 land anyone can ping the tablet or laptop, they have no ports exposed through the firewall

Mine was mashing up the way that Visual Studio and SQL Management Studio work so that instead of viewing a whole source file in one go you'd have individual functions (etc) in individual windows. If you unmaximised the code window/tab in my mockup i'm not THAT far off:

http://cyclomedia.co.uk/blog/media/VisualStudioIDEConcept.png

It's work in progress* at the moment but i have a basic AJAX Library up at http://cyclomedia.co.uk/projects/ajax/

all it does is encapsulate the request/response with a couple of handy additions:

1. ability to pass any custom object through to the callback function

2. built-in response codes, so a response that starts "200\n" is a "Good" response, you can also return error codes

2.1. this means a http error wont botch up your nicely formatted site and

2.2. it's immune to the cross-site <script src=...> attack, even if you're sending a raw JSON object because the response code botches up the compiler

There's also a bitchin 2d-array library too with like a zillion functions and a new secret project too that'll revolutionise the interweb, probably.

Each of which do NOT use prototyping, instead taking the c-style approach of passing your object in as the first argument to the function, which means it's very easy to reduce the script size by just chopping out the functions you dont use.

* which means rather embarrasingly that the manual is a little sparse out of date, but there are working examples up there you can rip the source from

i agree. i've written my own wrapper in my own uber hacky way and it's about 500 times smaller and simpler than the frameworks i've seen out there. as anything i've done via AJAX so far (aside from a top secret spreadsheet type app i'm working on, oops, now it's not so top secret, dammit!) is of the form

"get content and put it in this div"

and via the cunning use of innerHTML instead of XML/DOM parsing all i need to do with my basic ajax framework is

fAJAXRequest( sTargetID , sURL , sPost , sWait , sError );

where

sTargetID is the id of the div (or whatever) to dump the returned html into
sURL is the url to call (e.g. ajax_randomthumbnail.asp)
sPost is the form data to, er, post
sWait is innerHTML to show whilst waiting for response
sError is friendly error message to show in case of, um, an error

so all ajax_randomthumbnail.asp would return is something like:

<a href="bigphoto.jpg"><img src="thumbnail.jpg"></a>

like i said, check the response header, and dump it into the target div with innerHTML. bish bash bosh. nice

---
http://www.cyclomedia.co.uk/ - ASP, CSS and AJAX demos, examples and tutorials with free source code download

what i reckon it needs is a versioning system, so there would be a JFK assasination article version 1.0, which is what you see when you go there, and a 1.1 beta version alongside it, and a 1.2 alpha next to that, which you can contribute edits to. an article would get from alpha to beta to "current" (old versions would still be available in a way similar to the page history) via some kind of revision voting system.

i havent thought this through properly, i just thought of it just now

also, you could then, when citing references for your essay, permalink to the article you're referencing by specifying the "released" version number you used in your research

---

http://www.cyclomedia.co.uk/ - ASP, CSS and AJAX demos, examples and tutorials with source code

there's a lot you can do to degrade gracefully, such as posting a form back to the user with missing fields highlighted using html+css. unfortunatley all the AJAX example code i've seen use try()catch blocks, which will break pre javascript 1.5 browsers, which may be rare (IE4), but if you want to use SOME javascript and not just have it go bang in said circumstances you need a little sideways thinking ... i.e. use if()else instead

here's my attempt:

http://www.cyclomedia.co.uk/ajax_degrade.asp