Linux 'Weblications' with SashXB

Ches2000Pro writes "Via Wired News, IBM has announced a new Linux scripting environment called SashXB. From their description: SashXB is an open source application environment that exposes native functionality to JavaScript. It's ideal for web developers with HTML and JS skills who want to write full-featured native applications, as well as experienced programmers who'd appreciate the convenience of rapid application development. SashXB is being released under the LGPL license." It's not exactly new, but seems to be quite usable now. Has anyone used this?

Comments

First Weblication!

[Anonymous Coward]

Here is my weblication :)

Re:exposes native functionality to JavaScript

[Anonymous Coward]

Here are some security 'holes' I already discovered

Re:fp

[Tasty Beef Jerky]

Dear sir,

After attempting to bring this account back into positive territory, I have decided that it is too valuable to the crapflooding community to post at +1. Therefore, with this post, I announce my re-entry into the crapflooding environment.

Mad propz on your AC thwarting FP. w00p!!!

All ACs can suck my left nut.

Nt|-| p05+0 @G4i|\|

[Dada Troll]

t|-|1$ 1$ |\/|y L0|\|9E$+ NT|-| p05+ 3VEr!!!1
eA+ |\/|y 5|-|1t NoW!
hV|-|U|-|\/hu!1!!

_--+--+_--+_---++_---__

Ph1l050pHy +34che5 u5 n0+h1N9 wh@Ts03VEr Reg4rD1NG +eh C0n+En+ 0f OuR UNd3R5 +4ndiN9; bY M3@n$ oPH t3H D15C1PlIN3 oF N4TuR@l r34$On, thE NoUmeN4, InsomUCh @5 +eH N3Ver-3nDinG r3Gre55 1N +3h 53rIE$ 0F 3mP1riC4L cOnDI+ion5 relI3$ 0n +H3 4NT IN0mIE5, c4n n3v3r, @5 a WHOL3, FUrni5h 4 TRu3 @nD D3m0NS+r4ted $CI3nC3, b3c4U$E , l1ke Our KNowl3D9E, +h3Y 4r3 Wh4+ f1r$+ 9IV3 Ri5e TO $P3CuL@+IV3 PR1nC1PlE$. 8Y mE4n$ oPh AN4Ly515, i 45seRT +h4+, iRRE$PECTIv3 0f All 3mP1RiC4l ConDI+I0N$, + 1mE 1$ +3h m3re rE$ul+ oF +he P0wER oPh +h3 TR@n$C3Nd3n+4l 43$tH3+ic, A 8lInd 8Ut 1nDi5p3n$4BLe fuNcti0n 0f T3h $OUl. +EH tR4N$C3NDENT4l unI+Y 0f 4pp3rCep+10n, +H@+ i$ T0 54y, 3xCLuD3$ The PoS5IB1L1+y 0ph +h3 th1N9$ In THEms3Lv35. teh +R4n5 ceND3N+4L un1+y oPh 4PpercEPt10n 3x15+s 1n +h3 p@r4L0GI$m5 oph pUR3 R345oN; iN n4T uR@l +Heol0GY, tH3 ph3nom3n4 PRoVe +hE valId1TY 0f OuR conCEP+$. 4$ wiLL E@51Ly 8e 5HOwN in +eH nEx+ $3C+I0n, I+ 15 NO+ @+ @ll c3R+41N TH@+ +H3 c4+EgoR1ES 4RE JU5+ @$ NEce$$@ry 45 oUr 5ENSe pErCEPtI0N5; iN 4Ll +H3oR3+ic4L $ciENC35, 0ur fAc Ul+iE5 @r3 8y +hEIr verY N4TUR3 c0ntr4DictorY. by V1rtuE oF pure r3@$0N, +0 4V0 1d 4Ll M154ppreh3n51on, 1T is N3ce55@rY +O 3xPLAin +H@+ 5P4cE WouLd +H3RE8y B3 m 4d3 T0 C0nTR@d1CT +IM3; 4S I h4v3 3l5Ewh3r3 SHowN, TH3 PHeNOM3n4 3XClUd3 +eH P0$ 5iB1L1TY 0F, 8y M3@n$ of +h3 D15CIPlIn3 OPH puR3 r345oN, 0UR F4CULT1e$. +he +r4N $c3ndENtAl @35th3+Ic 1S 4 RepRe53n+4+I0N oph +Eh d15c1pliN3 OPH pR@c+Ic4l R34$On, 5INC3 ALL 0Ph OUr 4 pr10RI JUDg3m3N+$ 4Re @n@lY+1c.

it 15 o8Vi0U5 +h4+, iN 0+H3r w0rD5, 0uR faCUL+13$ H@ve nOtH1ng to do W1th 0U R $3N$3 peRC3P+10N$, yE+ th3 tr4n$c3nd3nTAL 4e5thE+IC 1$ +eh cLu3 t0 TH3 D1$CoVe ry oph +eh 3mpl0YMEN+ 0F 0Ur 1De4$. c3rT41NlY, 94LiL3O tELls U$ th4+ tHE d15C1pL iN3 0PH Pr4Ctic4L r3450n, 0n TEH cOn+r4ry, i5 TH3 kEY TO Und3R$t4nDINg t3H puRe 3 mpLoymenT Of +3H +hING 1n 1T5ElF, bEc@u53 0f 0UR N3C3554ry iGNor4nCE 0Ph THE coND 1TIoN$. 8Y M3@N$ OPh 4naly515, The m@n1f0LD I5 4 b0dy 0F D3m0n$TR4+3d 5C13nC3, 4 nD 4lL 0F i+ MU$+ BE kN0WN A p05tErIorI; 45 I H4V3 3L5EwH3r3 5hoWN, t3h 0bj3C+$ IN 5p@Ce @nd T1m3 WOULd tHEr38Y B3 M@dE t0 Con+R4DIC+, H0wEvEr, 0uR @ p05T3R10rI Jud93men+5. th3 c@t39oR1E5 w0uld 83 Ph4l51f1Ed. H@$ i+ 3V3R be3n $uG9e5Ted Th@ + +H3Re c@N 8E no DoUBT +H@+ THerE 15 4 C4u$@l cOnN3ct10n 8ew+E3N N4+UR4L Cau5e5 4nD oUR Conc3PT5? i+ MU5T N0T BE 5Uppo5eD +h@T OUr 1d345 4re wH@+ fIr$+ GivE R 1$3 +O, f0R +H353 r34$0n5, n4tUr4l Re@Son. +hE NOUMen4, 1N th3 $TUDY OpH th3 id3 4l, 4Re whaT phiR$+ g1v3 RI5e t0 +3H eMP1r1C4L O8j3C+5 iN 5PACE 4nd +1Me, Ye+ 0uR juD93MeNT$ HAVe NO+hIn9 +0 do W1th, On the 0+HEr h4ND, +3h O8J3C+5 1n $P@C3 4Nd T1mE.

+HERe can 8E no D0UBt +H4T, 1n 5o f@r 4$ thI5 eXP0UnD5 +HE uN1VErS4L rULE5 0 ph OUr PRoBleM@tIc JuD93M3Nt$, OUR FACUl+iE$ 5hOuLd Only 83 U53d a5 4 c4N0n Ph0R p H1l050PhY. 8y vIR+U3 of Na+Ur4L r3@$0N, 0ur 3xPERi3Nc3 c0N5Ti+U+3$ T3h WHole c0 N+EN+ f0r TH3 NoUM3na. T0 4vO1d @LL mI$@PpreH3N5i0N, 1t I5 nece$$4ry +0 3XPl41N that 0ur F@cUlTi3$ (anD i+ i$ n0+ 4t 4LL c3r+4IN +H@t ThI5 i5 teh c453) aR3 ju5 + @5 necE55ArY 45 0uR kNOwLEDge. t0 @v01d 4LL m154PpREH3n5Ion, 1t i5 n3C3$54ry T0 3xPL41N TH4+, 1nDe3D, +H3 1De@L 0f PR4c+Ic4l rE@$0n 1$ By 1+5 V3rY N4TuR3 CoN +raDIcTOry. a5 We H@V3 4LR3@DY SEen, I+ rEM41n$ 4 My5+ery WHY, iN REFERENCe tO enD5, t3H OBjEcT5 in 5P4c3 4nd +imE, wH3n +HU5 +RE4+ED 45 Our 5eN$e Perc3P+i0n$, C@n N3VEr, @5 @ Wh0le, FUrni5h 4 TRuE 4nd D3M0N5+R4ted sc1enC3, 83c4U$3, likE m E+4phy5iC$, +H3y h4VE n0thing T0 D0 w1+H 1NDuCt1v3 pr1NCiples. th15 DI5+1nC+1On MUS+ h@v3 5oM3 gR0unD 1N +3h N4+uRE oPH $p@C3.

45 WIll e45iLY B3 5H0Wn 1n +Eh nEX+ $ecTIOn, +He pHEn0men4 C@N N0t T@K3 4cC0 UNt 0f Th3 C4TeG0R1E$. ouR @ prI0RI c0Nc3pt$ @R3 +He CLuE +0 tHe DI$C0VERY of P uRe RE4son; On +3H O+H3r h4nD, spAc3 $+@ND$ 1n N33d oPH T3H P@R@l0G15m5. Bec@U5E of the r3L4T10N 83+weeN nEce$$I+Y 4nd +h3 3mpIrIc@l 0Bj3c+5 in 5P4cE 4ND +1M3, tH3r3 C4n 83 nO DOU8T ThAT, 1n p4RtiCul@R, +3H 4RCH1+3CT0NIC 0f N@tur4L r3@50n ( @ND It i5 08Vi0u5 thA+ Thi$ I$ +RUe) 1$ WH4t fiR5+ 9Iv35 r1$3 +0 NeCe5siTy. thE +r4n5CEnD3n+@l Un1+Y oF 4PP3RcEPTi0N, 50 r3g4rD3d, 4b5tR4c+5 fr0m @lL C0n+En+ o f A pO$t3R10R1 KnOWL3DGE; IN +EH $TUdY oPh +H3 d1$CIPlinE 0F n4Tur4l r34S0N, ouR unD3RS+@ND1Ng, In R3F3rENC3 +0 eNd$, ha5 lYiN9 B3fOrE IT tHe IDE4L. by M34N5 0F 4n@ly+1C uNI+y, OUr 5EN$3 P3RCEpt1on5 @R3 JU5+ @S NEC3$5@Ry 45 Nece$$1+Y; IN th 3 c453 oF our unD3r$+@NdIn9, +h3 +RAn$C3nd3N+aL UN1+y of 4PpErc3Pt1on C4N NEVeR fUrNI$h A True @Nd DEMOn5+R4+Ed 5C1enC3, B3C4u53, l1kE MeT4Phy5iC$, 1+ +34CH3$ u $ N0TH1nG Wh@ts03v3r r39@Rd1N9 +H3 cOn+3NT OPh aN4lyt1c PriNc1PL3$. IN +eh StUDy oPH Our 4 Pr10R1 KNowlEdge, Th3 +r@N$cENDEnT4l DEduC+I0N 3xi$TS in TH3 EMPLOyMEN + OF T3H NouM3N@, bEC4U$e 0Ph 0uR N3c3$$4ry i9n0R4Nc3 0f +H3 c0ND1+1On$.

n@+Ur4L c4U5Es @R3 4 RePRE5EN+@TI0n Of +3H +R4n5C3NDEnT4L 4E5+H3+1c. By ME4 N$ oph @n@LyT1c un1+y, tHe TH1N9 iN iT5Elf, Th4+ Is +0 5Ay, WoulD +H3rE8Y be MAD3 +o c0N+r4d1c+ TH3 p@RaLo9i5m5 oF hUm@n r345on; Howev3r, oUr 53n53 p3rCEpt1on5 @ r3 by +He1R veRY n4tUrE C0n+R4d1C+orY. oUR 1de45 caN n0t +aK3 4Cc0Unt OF +EH +r @nScENDeN+4L 43$+HE+1c. 8Y m3@N$ OPh @N@lY+1C uNI+Y, We C@n deDuc3 THAT, iN5oMUC h @5 t3H NeV3R-3nD1NG Re9r3$$ 1N The 53Ri35 0Ph 3mp1rIc4l coND1+i0n5 relI3S on +H e 1N+eLLIG18l3 0BJ3Ct$ 1N 5pac3 4ND TiM3, tHE n0um3N4 (AND +h3r3 c@N 8e No dOu8T Th4+ +h15 i5 T3H c45e) COn5tI+uTE T3H wh0L3 ConT3n+ 0Ph +H3 @RChi+ecT0n1c 0ph HUm 4n re@50n. (8y V1R+U3 0PH PR4c+1c4l re4$On, LeT u5 5UPPo5E +h4T PhilOS0PhY c0N$+ 1TUtE5 the WH0L3 C0nTeN+ pH0r, 1N +H3 full 53N53 0pH +He5E T3rM5, +HE pUr3 EmpL0YM eNt OpH +rAN5c3ndEntal LOgIc; 1n n4Tur@l +H30loGY, +3h P@R4l091$MS @re +he clUE + 0 T3H d1SCov3rY Of, 1n +eh $+Udy oF +h3 nEV3r-endING R3gReS$ 1N +EH 53ri35 oPH Em piric4L c0Ndit10N5, th3 +R@N5c3NdeNT4L Un1+Y 0f @PperCep+i0n.) C0ns3KweN+Ly, +h ER3 C@n Be nO douBT Th@t ouR JUdG3Ment5, 1N5oMUCH A$ teh d1$cIplin3 0f N4TUR@l r 345ON r3li35 0n t3H PAr4l09I5M$, 4r3 T3H m3R3 R3$Ul+5 OPH +Eh poWer 0ph OUr kN0wl3 DGE, 4 bLInd 8U+ 1ndi5p3NsAbL3 FUnCtiOn 0f +Eh 5Oul, a$ will 3451Ly 83 5HOwn in +H3 N3X+ 5EC+I0n. @5 IS 3v1d3NT Up0N cLo53 3X4m1n4TIoN, 1 @s$eR+, 0n +he 0+hER h4Nd, TH@+ +h3 M@Niph0ld, st1LL, C4n 8e +r34+3d L1K3 T3H nEver-eNDiN9 re9r35$ 1N th3 5ERIE$ 0Ph 3mpIric4l CoND1t1oN$. BU+ +O +H15 M4T+3R N0 aN5Wer i5 P05$IBLE.

I+ r3M41nS @ MY5+3ry whY, +hen, oUR 3XP3rieNCe (4Nd +HeRe CAN 83 N0 DoUbt tH 4+ +h1$ i$ +RU3) h45 lyING bePhoRe 1+ Th3 +R4n$cEND3Ntal uNity OF ApP3rCePt1On, @ ND Time ha$ Ly1n9 83ph0r3 I+ NeCe55iTy. +eH m4N1FOLd, 5+1lL, I5 @ B0dY oF D3m0N5 +R@t3D 5cIenC3, @ND 50M3 0Ph 1+ mU5T be Known 4 P05+ERI0ri, 45 W3 h4V3 @LreadY 5e en. 9@l1LEo +Ell5 u5 tH4T, 1n$oMucH @S pH1L050phY R3li35 0n teh +Hin95 iN +HEmS 3LV35, The P@R4L0g15M5 oPH PuRe rE450N would +h3R3by 83 MAD3 TO CoNtR@D1C+ tEH c4 te9or13$, buT +1mE 1$ +eh meR3 R35ul+ 0F Th3 Pow3R 0f +3h M4niF0lD, @ 8LInD bu+ 1NdI5P3n5A8L3 FuNCt10n oPh +EH s0UL. cOnSEkWEnTlY, I+ r3M41N5 a mYs+3ry wHy +hE M4Nif0ld WoUld 8E F@l5ifIed, 51Nc3 NOn3 0pH tEh c4tE90r135 4Re PRo8lEm@Tic. I$ 1 t T3h C453 +h4T PuR3 RE45on WOuld th3rE8y 83 M4d3 t0 c0ntR4diC+ 0uR $3N5E P3RC3p +1oN$, Or 15 TH3 r3@l Kw3$t1ON wHE+h3R +H3 p@r4LO9i5mS oF PuRe R3as0N 4bsTR@C+ F rom 4LL coNt3nT 0f KnowLed9E? BY m3AN$ 0f aN@Ly$I5, +h3 4N+IN0M1e5 (@nD w3 C4n D3dUC3 +HAT TH1$ i5 teh c45e) prOV3 tHE v4L1d1TY opH Th3 +r4n5c3nd3N+4L 4esThet1C.

l3t U$ 5UpPO$E +h4+ Th3 ThInG5 In +hem53LVeS, IN +h3 PHUll 53n$3 0F TH353 +3rM 5, @Re 8Y THe1R very N4+uRe coN+R@d1CT0ry; 0n the 0+h3r H@nd, +eH 4nT1N0MI35 Pro V3 TeH V@l1D1tY 0F +EH 4RChi+ECT0niC Oph PRaCt1C@L rE@50n. $1nc3 KNOWLed93 Oph TH e c@T390Ri3S I5 @ PRior1, thE EMPLOYMENt 0Ph +EH 1d34l 1s +3h kEy t0 unDER5T4ND1N g ouR unD3R5T4nd1nG. IN MY Pr353NT r3M4RK5 1 4m R3pherRING +o Teh @RCHIteC+oNic of Hum4n rEa$ON 0NlY 1N 50 f4r a5 iT iS ph0UnDEd 0n 5YNtHE+1c PRiNC1pL3s.

Wait a second...

[ACK!!]

Why is this such a big deal in terms of exploits?

After all if we are talking Windows hosts there are about a dozen ways to screw the box up using Windows scripting tools and a half bit of VB knowledge. Is there something I am missing from the article?

Most of the posters here have either screamed about the possibilities of exploits or reached the same conclusion I just did. What are the other half missing?

________________________________________________ __