Domain: mozdev.org
Stories and comments across the archive that link to mozdev.org.
Comments · 2,936
-
Re:lame summary
They assumed you would know to use super soaker outside, and they were just pointing out that with indoor lazer tag, you can pretty much just shoot into a doorway and hit everyone in the room.
---
A guy walks up to his friend and sees him hitting himself on the head with a hammer. "Why are you doing that!?", he asks. "Because it feels so good when I stop.", was the reply.
Generated by SlashdotRndSig via GreaseMonkey -
Re:The next messge in the thread is worrisome
Computers connected to the internet are "protected computers" under the statute. Crippling the software under the guise of an "update" is illegal.
Like when Microsoft released Windows XP SP2 and broke everybody's internet applications?
---
Light is filtering down from above. Would you like to use DIVE?
Generated by SlashdotRndSig via GreaseMonkey -
Re:no, Time to stop browsing as root!
Guess it can't access "all" the files on my system then, can it?
It can access your home directory.
And anything else on your system that is even readable by you. Go browse the directory tree for a moment, and see all the fun places you can poke around in... /etc/rc.d/rc.firewall, things like that.
---
I'm not a very effective viral sig. Please help me spread.
Generated by SlashdotRndSig via GreaseMonkey -
Re:More details on the exploit...
And then they'll get hold of the contents of your home directory!
blah markov_chain other users spiff
And then your directory! .bash_login .bash_logout .gaim .gnucash .kde .kde2 .mozilla bin doc
What next? Your buddy list from Gaim? Your bank account from GnuCash? Your address book from Thunderbird? What other security holes you have in Firefox, from extensions? Something you wanted to keep secret in your documents?
Linux is not always safe.
---
A guy walks up to his friend and sees him hitting himself on the head with a hammer. "Why are you doing that!?", he asks. "Because it feels so good when I stop.", was the reply.
Generated by SlashdotRndSig via GreaseMonkey -
Re:The next messge in the thread is worrisome
From http://greasemonkey.mozdev.org/changes/0.3.5.html
:
"Note that this Greasemonkey disables all GM* APIs, which means that it will break many user scripts. This is a temporary measure for people who want to continue using Greasemonkey without those features. A future version will re-enable the APIs."
-
Re:What should be done.
The point of my instructions were so that right after you allow that site (I assumed you did it by clicking the button on the little bar that pops up) you could go and disable it.
You're right, it would be infinitely better if we could do a one-time allow, but that functionality isn't currently there. There might be an extension, though :)
---
I'm not a very effective viral sig. Please help me spread.
Generated by SlashdotRndSig via GreaseMonkey -
Re:More details on the exploit...
Running a Greasemonkey script with "@include *" (which, BTW, is the default if no parameter is specified) can expose the contents of every file on your local hard drive to every site you visit.
So don't let your scripts use that include. Just set it to only the trusted sites it was intended for, it probably doesn't work anything else anyways. Also don't use any scripts that do net-wide things like adblocking, use a separate extension for those because it's more customizeable and it doesn't have problems like this.
---
If nobody notices, it's not illegal.
Generated by SlashdotRndSig via GreaseMonkey -
Re:What should be done.
Open up the options/preferences menu. Windows, I think it's Tools - Options, for Linux, I think it's Edit - Preferences. Click on the "Web Features" icon on the left. There'll be a line that says "Allow sites to install software" or something similar. Click the "Allowed Sites" button on the right to access the whitelist. You can add/remove sites from there.
---
I started with nothing and I still have most of it left.
Generated by SlashdotRndSig via GreaseMonkey -
Re:Why Uninstall?Advice from the person who discovered the bug:
Uninstall Greasemonkey altogether. At this point, I don't trust having it on my computer at all. I would think that whoever is in charge of addons.mozilla.org should immediately remove the Greasemonkey XPI and post a large warning in its place advising people to uninstall it.
The original message where he found and wrote about the bug is here. -
Re:Why Uninstall?Advice from the person who discovered the bug:
Uninstall Greasemonkey altogether. At this point, I don't trust having it on my computer at all. I would think that whoever is in charge of addons.mozilla.org should immediately remove the Greasemonkey XPI and post a large warning in its place advising people to uninstall it.
The original message where he found and wrote about the bug is here. -
More details on the exploit...
Here are some more details from the posting thread, which explains why the exploit is so bad...
This particular exploit is much, much worse than I thought. GM_xmlhttpRequest can successfully "GET" any world-readable file on your local computer.
http://diveintogreasemonkey.org/experiments/localf ile-leak.html returns the contents of c:\boot.ini, which exists on most modern Windows systems.
But wait, it gets worse. An attacker doesn't even need to know the exact filename, since "GET"ting a URL like "file:///c:/" will return a parseable directory listing. (And Mac users don't get to gloat either; you're just as vulnerable, starting with a different root URL.)
In other words, running a Greasemonkey script on a site can expose the contents of every file on your local hard drive to that site. Running a Greasemonkey script with "@include *" (which, BTW, is the default if no parameter is specified) can expose the contents of every file on your local hard drive to every site you visit. And, because GM_xmlhttpRequest can use POST as well as GET, an attacker can quietly send this information anywhere in the world.The above information posted originally by Mark Pilgrim
-
Re:It doesn't have to be that complicated
Would be funny if it was applicable in this case, in which it is most surely not. The guy breathes javascript.
-
Exactly
I use Sage for my reader, so I really don't care what format feeds are in.
Actually, I never researched the differences, so every time I had a choice between Atom and RSS feeds from the same source, I always chose RSS, because I thought Atom was an older style, and also thought that if I ever switched to another reader, it'd be easier to move my feeds if they were all RSS. -
Re:What would be really badass...
It's annoying to have to move both hands to the keys just to fill in a form or something.
Then just type with one hand.
I haven't tried that out, but it looks awesome. Expensive though.
---
LEEROY JENKINS!!!
Generated by SlashdotRndSig via GreaseMonkey -
Re:What would be really badass...
Well, they're halfway there.
---
The only thing I hate more than a hypocrite is a person who hates hypocrites.
Generated by SlashdotRndSig via GreaseMonkey -
Re:Wow that's great but...
you must be new around here
...said the person with the higher UID.
Yes, I know. ;)
---
LEEROY JENKINS!!!
Generated by SlashdotRndSig via GreaseMonkey -
In a word: NO!
This is definitely a bad idea, for a whole lot of reasons.
Firstly, as other posters have mentioned, this is illegal in most nations. Let's not stoop down to the criminal level.
Secondly, in conjunction with the first point, why should we all collectively bend down to play dirty to beat the spammers? Shouldn't we spend our energy and effort on something less destructive and low-brow? I honestly believe that someone (or someones) will eventually come up with a system to more or less replace the current email standard with equal user-friendliness (at least to the end-user, which ends up being the driving force, but user-friendly at the admin level would be great too) but also with built-in security mechanisms that make spamming unprofitable while keeping regular usage cheap.
Whether this system emerges from the current examples of hash-cash or somewhere else, I would say it is our best chance to stop the problem without stooping to criminality with what is basically a path-work solution.
And yes, I am aware that all systems have vulnerabilities, but to just throw up our hands in despair and say, "But the spammers will get into the new system eventually!" is to give up. We shouldn't just sit idly by and collectively play poor-me; we should be thinking of some new system and how to seamlessly get it into place (yes, Virginia, there'll be a time lag, it took about 25 years for email to become mainstream). Then, whenever the spammers figure out a way in (I'm hoping for never), we'll already have had time to think about, research, and develop a further system.
Let's apply a little brain-power to the problem instead of using what is essentially crude and criminalistic tactics. I, for one, am fully willing to devote my time and knowledge to solving the problem.
---
You can use any kind of HTML formatting that Slashdot accepts.
Generated by SlashdotRndSig via GreaseMonkey -
Sounds familiar
This sounds very very similiar to this. http://www.aeonflux.com/
Charlize Theron is the new Natalie Portman.
---
When you want to type a double-quote use " instead
Generated by SlashdotRndSig via GreaseMonkey -
Re:Amazon
pay a consultant for 3 moneys to improve the UI for their most visited page
Just three moneys? Ha! No way I'd take that job.
---
If nobody notices, it's not illegal.
Generated by SlashdotRndSig via GreaseMonkey -
Re:Look, the fact is
If Slackware and Gentoo combined, I wouldn't feel guilty about wanting to move away from Slackware to Gentoo after using Slack since I was about three.
---
I'm actually just a script.
Generated by SlashdotRndSig via GreaseMonkey -
If your house has wheels...
...then YOUUUU might be a green-neck!
---
I started with nothing and I still have most of it left.
Generated by SlashdotRndSig via GreaseMonkey -
Re:Oh great, another Microsoft bug story
Apparently, you miss all of the Firefox articles and don't look in the Linux section.
---
I'm not a very effective viral sig. Please help me spread.
Generated by SlashdotRndSig via GreaseMonkey -
Re:A fix from our friends in Germany
As my sig (sometimes) says, "It's not illegal if nobody notices."
---
"Man, when the day comes, count me in with the robot smashers." - Anonymous Coward
Generated by SlashdotRndSig via GreaseMonkey -
Re:Trying to plug the "analog" hole...
how many people run computer kit from 1995 now?
I've got a few. Thousand.
---
Light is filtering down from above. Would you like to use DIVE?
Generated by SlashdotRndSig via GreaseMonkey -
Re:Microsoft making a spectacle of us.
No, man. You totally missed the reference. He was talking (singing?) about The Who, not Twisted Sister.
---
LEEROY JENKINS!!!
Generated by SlashdotRndSig via GreaseMonkey -
Re:Microsoft making a spectacle of us.
The WHO!!! The WHO!!!
---
I'm not a very effective viral sig. Please help me spread.
Generated by SlashdotRndSig via GreaseMonkey -
Re:Are the passwords saved as plain text?
I thought MD5 was irreversible?
---
I started with nothing and I still have most of it left.
Generated by SlashdotRndSig via GreaseMonkey -
tired
just tired of this. Is it possible to somehow shut SCO up for good? I think I express the feelings of most of the readers of this forum, when I say: Enough. I would like to see SCO disappear, gone from the face of the earth.
Naq vg jbhyq ernyyl tvir zr terng cyrnfher gb frr Qney unatvat sebz n gerr bs fbzr fbeg. Ol uvf qvpx.
QW5kIGl0IHdvdWxkIHJlYWxseSBnaXZlIG1lIGdyZWF0IHBs ZW FzdXJlIHRvIHNlZSBEYXJsIGhh
bmdpbmcgZnJvbSBhIHRyZW Ugb2Ygc29tZSBzb3J0LiAgQnkgaG lzIGRpY2su
(use this FF extension to read the rest of the comment ;) -
Re:in related news
Actually, aalib is pretty good. http://aa-project.sourceforge.net/gallery/ I remember seeing a demo video from them. And it was an actual video, their renderer displayed it in ASCII art. With sound.
---
I'm actually just a script.
Generated by SlashdotRndSig via GreaseMonkey -
IGN/GameSpy Sites
The problem with IGN/GameSpy sites is that there is too little content for too much advertisements (I'd say the content to advertisement ratio would be about 1:2, without hesitating). They force a full-screen advertisement down your throat, often several times per day, and once you have bypassed that, you still have advertisement banners of considerable size (thank God for Adblock!).
I much prefer sites such as Eurogamer and its sister site GamesIndustry.biz which don't attempt to have you eat their advertisements, yet provide satisfactory content nevertheless.
-
Re:NO!!
That being said, I don't know what the OP was planning to do with a compass for mapping villages anyway: a compass doesn't tell you where you are, it only tells you what direction you're facing.
Obviously, you were never a boy scout. You can use a compass and a contour map of the area to determine almost exactly where you are. And since every inch of the planet (well, maybe square mile) has had a heightmap or at least an image made of the terrain by satellite, it shouldn't be hard to find one less than 40 years old for the location he will be in. He can use a compass to triangulate from two or more landmarks (mountain tops, clearings, lakes, etc tend not to change within 40 years) and then estimate where he is on the map, and take lat & longe from there.
Of course, if the resolution is high enough, the villages are probably visible from satellite too.
---
If nobody notices, it's not illegal.
Generated by SlashdotRndSig via GreaseMonkey -
Re:Please explain...
Isn't there a Firefox extension that lets you disable Flash ads?
I use the Flashblock extension. It substitutes any Flash object for a button you can press if you want to see it. You can also whitelist sites. I highly recommend it. -
Re:Hydrogen is a red herring
Considering that other great jokes that anybody could recognize get modded down, I'm surprised that this is already +5 Funny. Good job, mods!
---
I'm actually just a script.
Generated by SlashdotRndSig via GreaseMonkey -
Re:Shipping hydrogen
Nazis for teh boom.
---
LEEROY JENKINS!!!
Generated by SlashdotRndSig via GreaseMonkey -
Re:Great...How could you justify keeping analog signals around, and for how long? You seem to be implying that they should be kept around forever (what if I never want to buy a new TV?), which seems to defeat the purpose of progress.
True, it sounds like I am saying that. But, what I am really saying is that there are millions of people in the United States that can't even afford the lousy $50 that it will take to purchase an analog-to-digital converter (remember, there are millions of people that can barely afford to make it to the next paycheck). And, there are tens of millions of TVs that will require that converter.
What I am really saying is that government is dictating the change to us. And, to "help out", they are giving additional tax breaks to help pay for the $50 converters. I don't think the taxpayer cost is worth the conversion effort. Maybe if the FCC simply forced Best Buy to stop selling Analog TV's, then, over the course of a decade or so, the switch would occur naturally. If the FCC had forced the Analog TV issue four years ago, then the 2009 conversion would be less costly today.
But, that is clearly not the case. There is a clear justification for the digital switch.And what is that justification? To allow the FCC to open up the bidding for the spectrum? If some of that money went to pay for the $50 converter tax break I discussed above, it would make some sense. Otherwise, there is no point that I have heard that makes sense.
What is the purpose of the Windows analogy?Yeah, that was a bit obtuse. I was wasting work time with my postings yesterday, and I was in a bit of a hurry. I should have waited until last night. The point of the Windows Analogy is that Microsoft is a private company. They own their software. They can force users to upgrade whenever they feel the need to increase profits. The FCC is NOT a private company. You and I "Own" the radio spectrum. But, in this case, the FCC is acting like a private company and forcing us to make a change.
--
Random Signature #1
Generated by SlashdotRndSig via GreaseMonkey
--
Random Signature #2
Generated by SlashdotRndSig via GreaseMonkey -
Re:Great...How could you justify keeping analog signals around, and for how long? You seem to be implying that they should be kept around forever (what if I never want to buy a new TV?), which seems to defeat the purpose of progress.
True, it sounds like I am saying that. But, what I am really saying is that there are millions of people in the United States that can't even afford the lousy $50 that it will take to purchase an analog-to-digital converter (remember, there are millions of people that can barely afford to make it to the next paycheck). And, there are tens of millions of TVs that will require that converter.
What I am really saying is that government is dictating the change to us. And, to "help out", they are giving additional tax breaks to help pay for the $50 converters. I don't think the taxpayer cost is worth the conversion effort. Maybe if the FCC simply forced Best Buy to stop selling Analog TV's, then, over the course of a decade or so, the switch would occur naturally. If the FCC had forced the Analog TV issue four years ago, then the 2009 conversion would be less costly today.
But, that is clearly not the case. There is a clear justification for the digital switch.And what is that justification? To allow the FCC to open up the bidding for the spectrum? If some of that money went to pay for the $50 converter tax break I discussed above, it would make some sense. Otherwise, there is no point that I have heard that makes sense.
What is the purpose of the Windows analogy?Yeah, that was a bit obtuse. I was wasting work time with my postings yesterday, and I was in a bit of a hurry. I should have waited until last night. The point of the Windows Analogy is that Microsoft is a private company. They own their software. They can force users to upgrade whenever they feel the need to increase profits. The FCC is NOT a private company. You and I "Own" the radio spectrum. But, in this case, the FCC is acting like a private company and forcing us to make a change.
--
Random Signature #1
Generated by SlashdotRndSig via GreaseMonkey
--
Random Signature #2
Generated by SlashdotRndSig via GreaseMonkey -
Re:Lets ask Beethoven
A bit of light comedy hurts the government how? Look at the dearth of critical news / documentaries. Hutton had the bonus of the public seeing "evidence" published online, as such we could see that the judgement made was dubious, given that although there might have been a few errors, general thrust of Gilligans accusation was correct. Total capitulation of BBC news afterwards, and subsequent steering away from contentious issues is striking. For recent evidence, compare minimal and biased G8 protest coverage with what actually happened (speak to someone who was there, or look at the likes of indymedia for reports from observers).
--
Dave
Generated by SlashdotRndSig via GreaseMonkey -
Piggy Bank: Greasemonkey for web data
Piggy Bank promises to turn Firefox into a semantic web browser by providing a means to mine data from web sites and then use that data on other web sites. It's like Greasemonkey for data on the web.
-
Re:Greasemap
Sorry the server is slashdotted already. For people who asked "what's the point", it was to add maps to the many pages which contain addresses and/or Lat+Long geocoded coordinates but which don't yet have maps.
And you need a whole new extension for this? Sounds like something the Greasemonkey could do with relative ease and a little bit of javascript munging.
-
Re:I wouldn't throw them out quite yet
Not all computers can to boot off CD, some only boot off the floppy. Like ones at my school.
---
What subliminal message?
Generated by SlashdotRndSig via GreaseMonkey -
I wouldn't throw them out quite yet
I've got an old laptop that doesn't have a USB port, and a few of my other computers don't have them either, some of the computers at my school either don't have ports or (for the newer ones) can't recognize USB drives correctly without a few reboots, and if there's no convenient USB port on the front you have to turn it around and look at the ports on the back to find it. Anyways, floppys are great for "rescue" disks if you can't get into the BIOS (passworded, can't flash it, whatever). I don't think you can boot off USB. There are so many things you can't do with USB, especially if you work with older computers or organizations that refuse to upgrade (It was good in 1995, it's good now!)
---
(_/)
(O.o) This is Bunny. Please help him
(> <) spread and take over the world.
Generated by SlashdotRndSig via GreaseMonkey -
Re:Floating Webserver
I highly recommend Greasemonkey and the Slashdot: Add Cache Links script to add Coral Cache and MirrorDot links at the end each slashdot linked page.
Of course, it might lower the flow of karma to those who merely post Coral Cache links. Might slashdot a few less servers though.
-
Re:Lets ask Beethoven
You over rate the public... as long as theres a strong diet of soaps and similar dross lots of people are happy. Millions on the streets on stop the war protests a couple of years ago had zero effect on the govt stance on Iraq. As a UK citizen I can say that, in recent years, the influence of govt on the BBC appears to have increased. Effect does not have to be direct, quite easy to envisage a line of least resistance culture developing in the BBC where its easiest not to strongly push stuff that may get a frosty response from govt and effect future funding.
--
Dave
Generated by SlashdotRndSig via GreaseMonkey -
Re:Quality Journalism
Oooops?
---
A guy walks up to his friend and sees him hitting himself on the head with a hammer. "Why are you doing that!?", he asks. "Because it feels so good when I stop.", was the reply.
Generated by SlashdotRndSig via GreaseMonkey -
Re:FTUA
Wow. The only things not linked in that post are the hyphen and the period.
---
What subliminal message?
Generated by SlashdotRndSig via GreaseMonkey -
Not on Google yet ???Got to this
/. post via Bloglines, so I decided to try the Conquery-Google extension http://conquery.mozdev.org/plugins.html on the Slate article title instead of linking back via /.Conquery didn't match any documents. Modified the search to [ "filtered future" site:slate.com ]. Still nothing on Google.
Hmmm. Have they just not crawled it yet, or are they avoiding an unpleasant truth? Ah. There's exactly 1 link from the search on Google News; but its not back to the Slate site. Again, hmmm. - InfoGeek
-
Re:I agree. The very idea of such a penalty is evi
How much does a good healthy meal with vegetables cost vs. McDonald's. You do the math.
It's actually a lot cheaper, McDonald's is just quicker. I'd do the math now, but I don't have the last grocery reciept with me.
---
"I hate quotations." - Ralph Waldo Emerson
Generated by SlashdotRndSig via GreaseMonkey -
Re:Mirror?
1.) Use Firefox
2.) Install GreaseMonkey
3.) Install the "Add Cache Links" user script from here. You now have links to Mirrordot and the Coral cache in every /. story
4.) Stop worrying about slashdotted sites. -
Leet Key
You can use Leet Key FireFox extension to type in DVORAK.
-
Re:Er?
It'd be like trying to sell a tamagotchi or some pogs.
Those were so fun. I wish I hadn't given mine away.
---
What subliminal message?
Generated by SlashdotRndSig via GreaseMonkey