Slashdot Mirror

The only problem with e-books and e-readers is that they're clearly not made by readers.

Books, the good ones at least and most of the bad ones too, pay attention to typography. Paragraph-optimized justification, hyphenation, hanging punctuation, ligatures, etc. All these little things that you take for granted with a dead-tree book, but without them it's a significantly poorer experience.

You find books with left-aligned text, an ugly and jagged right edge carving out a large chunk of empty space on the right. Or worse, you get one that is justified. This is bottom-of-the-barrel justification, without hyphenation and very commonly leaving huge spaces between words.

I've owned a Nook since launch day. I've read a large number of books on it, and I love it. But there is still a lot of room for improvement. I shouldn't need to import my ebooks into Adobe InDesign to make a PDF with proper typography.

(13) Has proper typography—kerning, ligatures, hanging puncutation, and paragraph-optimized justification.

(14) Is easier to read having a higher DPI, better contrast ratio, and less reflectivity.

(15) Has cheaper books.

(16) Can't be taken away from you at the flip of a switch.

(17) Requires a trip to a store, or a lengthy ship time.

(18) Can only contain a limited number of pages.

I own a Nook and love it, but am waiting very excitedly for this tech to evolve.

Good to note that this is no longer the case in FF4 and IE9 if you're using Vista or Win7 -- they both use the new Direct2D/DirectWrite APIs, which support both sub-pixel positioning and a new hybrid ClearType/grayscale antialiasing that makes large fonts less aliased.

Windows still tweaks glyphs to be more legible on low-DPI displays like most LCDs out there, but the glyph positioning is correct now, which makes for much nicer text when you've got tiny fonts or kerning.

You dont understand the problem. HTML injections are from users like me posting busted HTML as a comment to slashdot.

You're right. I don't understand why this should be a problem. Tidy the tainted HTML, so you end up with clean, reliable XHTML.

The comment injects evil bits of javascript into the output when the page gets displayed.

So remove the bits of javascript. Script tags and event handlers are easy to find, and links can be cleaned up.

Using XHTML and having the browser choke and die on the output is just another security loophole as far as i'm concerned. Being able to get the end browser to choke on XHTML errors is a DOS. Imagine how much trolls would like it if they could get firefox to not even display this page because their evil XHTML caused this page to no longer validate?

Exactly. So clean it up! Do not trust user input. Use Tidy or JTidy. It's really not hard to find. Hell, there's even a web-based version! This is all extremely standard stuff. Use it!

And on top of those, make sure you run PeerGuardian Lite to block all internet police-wannabees IP address ranges.

We are still cleaning up and testing to ensure that the infection does not return. We did discover that we had several machines throughout the organization that had various spyware and other downloaded games and programs. One that stands out and may well have been the entry point for the worm is the ARES P2P program.

Sounds like p2p is only one of many potential culprits in this case. From prior experience, I'd be more inclined to blame spyware programs which are deliberately designed to socially-engineer users into compromising their own systems.

Once you've got spyware running, the security of your system becomes dependent on the integrity of spyware creators who have already passed the ethical brightline of coercing users to install their product through either dishonesty or direct exploits.

The content that can be reached via P2P software poses some degree of security risk in untrained hands, but that risk is miniscule compared to the mind-boggling insanity of discounting the danger of spyware which has gained access to your network without necessarily even being intentionally placed there by a user. If spyware is running, the system is compromised. End of story.

...and that's why I run PeerGuardian Lite with the malware/evil only blocklist and Spybot S&D in active-protect mode on my system and anywhere else I have access to. You should too.