But here's the idea. Let the browser perform the one-way hashing. You enter your password, the browser hashes it, and the hashed value is sent to the site.
It's called "Digest Auth" and has been in browsers for quite some time now. In fact, even non browser http-using tools like wget or subversion or basically and file manager using WebDAV support it. I know of no web server that doesn't support it, too.
It's not supported in html forms, though, and as everybody has to have nifty login forms instead of http auth, which is so web 1.0, we all fall back to plain text passwords, even here on slashdot, a geek site.:-(. I once saw a site that encrypted the password with RSA in JavaScript before sending it, the first security enhancing use of JS I saw to that day. They had a little sleep call in there, too, to make it feel more secure to the user ("Ugh, encrypting... please wait... oh, this is hard work... ugh...")
There certainly have to be ways to "append [...] matter to the time-traveling package", because else you couldn't really travel back at all - or you had to don a space suit, complete with oxygen tank.
Another interesting scenario - would you travel back in time to rescue some scrolls if it meant your death?
Small correction: Bush probably *had* an IQ of ~130, but then he started drinking, and to keep your IQ as you grow older you actually have to work for it even under ideal circumstances, which alcoholism isn't one of.
Then there is the question what IQ has to do with your ability to be a good president.
Uhm, I don't see how you infer from the link appearing in a quote that the linked article is meant to be the quotes source. This is not a convention followed here; normally, though, links to related articles go to a slashdot entry, so it's clear they're not meant to be sources for claims made or quotes cited, but additional reads.
If you are arguing that it should be a convention, that's something different of course.
Exactly. The only people I hear constantly bickering about Googles metrics and pagerank, are those who have sites that no one would miss if they were gone tomorrow. If you really put social networking spam links on your page to up your pagerank, you're just an attention whore. That's not bad per se in a attention economy, but don't complain if I just laugh in your face if bad bad evil google sorts your petty site to the bottom of search results for "witty blog". Create something unique, needed. Like, say, a good search engine.
Insightful? While the great Java Development Plugin made Eclipse famous, the C/C++ Tools are now in a state that make Eclipse one of the best C++ IDEs around. They get released the same time as new versions of eclipse, and together with other plugins (Bugzilla Integration etc.) you get a very very powerful dev tool.
In particular, Unreal Tournament's initial anti-copying measures are little more than perfunctory, and are later dropped entirely.
Yeah, because they have the ultimate copy protection: you need a valid CD key for online play, Unreal without online play is basically useless, playing on cracked servers is possible but a hassle and you have far fewer other players there. It's the only copy protection I've ever seen that really works; people won't share their valid CD key even among friends - much less post it on the internet.
So, McSmarty, how do I
- position an image on page 4 of my document?
- add footnotes?
- embed fields (date, last editor...)?
- mark the embedded TOC as TOC so that it gets regenerated on reload? etc.
And on the CSS side, there are quite a lot of shortcomings, too.
Of course, all of this would work with custom XML tags or special id/class conventions, BUT then you'd have to specify those. And getting this below 700 pages won't be easy.
So repeat after me:
HTML is *not* a description language suitable for word processing in its current state, and it is unclear it can be made so without sacrificing device indepence.
Slashdot Mirror
But here's the idea. Let the browser perform the one-way hashing. You enter your password, the browser hashes it, and the hashed value is sent to the site.
It's called "Digest Auth" and has been in browsers for quite some time now. In fact, even non browser http-using tools like wget or subversion or basically and file manager using WebDAV support it. I know of no web server that doesn't support it, too.
It's not supported in html forms, though, and as everybody has to have nifty login forms instead of http auth, which is so web 1.0, we all fall back to plain text passwords, even here on slashdot, a geek site. :-(. I once saw a site that encrypted the password with RSA in JavaScript before sending it, the first security enhancing use of JS I saw to that day. They had a little sleep call in there, too, to make it feel more secure to the user ("Ugh, encrypting... please wait... oh, this is hard work... ugh...")
There certainly have to be ways to "append [...] matter to the time-traveling package", because else you couldn't really travel back at all - or you had to don a space suit, complete with oxygen tank. Another interesting scenario - would you travel back in time to rescue some scrolls if it meant your death?
Small correction: Bush probably *had* an IQ of ~130, but then he started drinking, and to keep your IQ as you grow older you actually have to work for it even under ideal circumstances, which alcoholism isn't one of. Then there is the question what IQ has to do with your ability to be a good president.
Uhm, I don't see how you infer from the link appearing in a quote that the linked article is meant to be the quotes source. This is not a convention followed here; normally, though, links to related articles go to a slashdot entry, so it's clear they're not meant to be sources for claims made or quotes cited, but additional reads.
If you are arguing that it should be a convention, that's something different of course.
Exactly. The only people I hear constantly bickering about Googles metrics and pagerank, are those who have sites that no one would miss if they were gone tomorrow. If you really put social networking spam links on your page to up your pagerank, you're just an attention whore. That's not bad per se in a attention economy, but don't complain if I just laugh in your face if bad bad evil google sorts your petty site to the bottom of search results for "witty blog". Create something unique, needed. Like, say, a good search engine.
Insightful? While the great Java Development Plugin made Eclipse famous, the C/C++ Tools are now in a state that make Eclipse one of the best C++ IDEs around. They get released the same time as new versions of eclipse, and together with other plugins (Bugzilla Integration etc.) you get a very very powerful dev tool.
In particular, Unreal Tournament's initial anti-copying measures are little more than perfunctory, and are later dropped entirely.
Yeah, because they have the ultimate copy protection: you need a valid CD key for online play, Unreal without online play is basically useless, playing on cracked servers is possible but a hassle and you have far fewer other players there. It's the only copy protection I've ever seen that really works; people won't share their valid CD key even among friends - much less post it on the internet.
Aye, there's the rub: for in that sleep, what dreams may come?
So, McSmarty, how do I
- position an image on page 4 of my document?
- add footnotes?
- embed fields (date, last editor...)?
- mark the embedded TOC as TOC so that it gets regenerated on reload?
etc.
And on the CSS side, there are quite a lot of shortcomings, too.
Of course, all of this would work with custom XML tags or special id/class conventions, BUT then you'd have to specify those. And getting this below 700 pages won't be easy.
So repeat after me:
HTML is *not* a description language suitable for word processing in its current state, and it is unclear it can be made so without sacrificing device indepence.