Slashdot Mirror
New Firefox Standard Aims to Combat Cross-Site Scripting
Al writes "The Mozilla foundation is to adopt a new standard to help web sites prevent cross site scripting attacks (XSS). The standard, called Content Security Policy, will let a website specify what Internet domains are allowed to host the scripts that run on its pages. This breaks with Web browsers' tradition of treating all scripts the same way by requiring that websites put their scripts in separate files and explicitly state which domains are allowed to run the scripts. The Mozilla Foundation selected the implementation because it allows sites to choose whether to adopt the restrictions. 'The severity of the XSS problem in the wild and the cost of implementing CSP as a mitigation are open to interpretation by individual sites,' Brandon Sterne, security program manager for Mozilla, wrote on the Mozilla Security Blog. 'If the cost versus benefit doesn't make sense for some site, they're free to keep doing business as usual.'"
So does this mean we can't hack anti piracy organizations any more? http://torrentfreak.com/mpaa-website-now-with-torrents-090502/ http://torrentfreak.com/riaa-site-features-torrentfreaks-latest-news-090504/
A Magic the Gathering Article and Forum Aggregator
First, there was a plan: how to bring together the two different development groups at work? My boss said there was a sort of tension he thought could be eased by some social interaction. Not easy. Both the different development groups despised one another, each thinking its "art" was more important and eloquent than the others'.
First there was the XML group. They worked on our website, documentation and formatting, and simple configuration apps and some front-ends to Java stuff. They also did our web sites. They used CSS, HTML, XSL, JavaScript, and a bit of Java. They typically dressed casually, drank coffee and tea, and liked to work straight from the spec: no "Learn XSL in 30 Days" books were to be found in their cubicle farm.
Then we had the Linux developers. They worked "special hours," coming in at one and staying late, supposedly, until seven or eight at night. They enjoyed Bawls and had a penchant for ThinkGeek t-shirts and cracking jokes about Win32 API calls and the dreaded Blue Screen of Death. They all had beards or mullets or long, unwashed hair. Some had penguin or C code tattoos. Their cubicle farm was known for the bleating laughter that exploded when one of them found a silly bug on someone else's code, and for the rotten, fetid stench that could only be compared to three-day-old shit reeking from inside a rotting corpse's abdominal cavity.
So, in order to get the guys to get to know each other, my boss had asked me to organize a during-hours, alcohol-friendly party. My ideas ranged from a keg or two to live entertainment, AKA strippers. But as to what to get them to actually talk to each other in a human manner I had no clue. So I let it go til the last minute and decided to let my inherent creativity mull it over in the back of my head.
When the day of the party had arrived, the catering company brought in a few trays of lunch meat, chicken, pizza, and side dishes, I had picked up the four kegs from the local brewery, and the big-screen TV and DVD were set up ready to blast the Matrix into the eyes and ears of my co-workers. The eagerness in the the air was encouraging and I thought that loosening up and smiles going on even now were a good sign. I even saw some of the guys who'd known each other previously begin to bunch up, bringing along the co-workers they knew from everyday work.
The first thing everyone did was hit the food line, loading up their plates and grabbing a cup for beer to wash it down with. A few approached me and thanked me for the food; it seems appeasing the belly really did tame the beast. After a few minutes of silence and eating and a few second and third courses, they guys were ready to sit down and be entertained. After asking if anyone needed anything else before the movie started, the lights went out and the Matrix began playing. I heard a few enthusiastic comments and jokes being told.
About half-way through the movie I noticed a lot of the Linux guys getting up and presumably going to the restroom. No suprise, as the second keg was history by now and the third was probably half-way gone. I also noticed some of the guys bumping into things and stumbling. Alcohol's the social lubricant, eh? Well, not long after, my bladder beckoned and I answered. As I made my way to the restroom, I had a self-satisfied smile on my face: my little plan was working, my boss would be happy, and it might even a Christmas bonus or a promotion (even if in title only).
Well, as soon as I pushed the restroom door open, I knew something was wrong. The smell of vomit was pretty strong and I hoped that it'd only been the work of one guy. But the smell was so pungent! After standing at the urinal, waiting for the golden flow to commence, I stood in silence. It was then that I heard grunting. Listening intently for a few seconds, I hoped whoever was upchucking their beer and munchies wasn't leaving a huge mess for the cleanup crew. After pissing and still hearing the noise, I approached the stal