... the new features for DEVELOPERS are so we developers can give more features to you USERS...
You get better stuff when we get the features instead of you.
No, it does not.
Some inexperienced "security researcher" posted an invalid PDF document placing the fault on WebSockets for a vulnerability in other software.
And some Mozilla exec blindly skimmed the document and accepted it as fact and had websockets disabled.
But in reality, there fault has absolutely nothing to do with WebSockets, and the fault CAN NOT be fixed in WebSockets. Mozillas suggestion to the problem simply removes the ability to use WebSockets as a vector for the attack, but the attack is still doable by every language on the internet that can create a TCP connection. In other words the exploit is doable on Flash or Java.
WebSockets need to be re-enabled ASAP and Mozilla needs to apologize for blindly accepting a document without verifying its credibility.
It seriously took me 15 minutes to read the document in full and fully understand the underlying vulnerability and realize it has absolutely nothing to do with WebSockets.
Its sad an exec spent less time than that and set their browser back a few years on false grounds.
Note: Google was smart and has not disabled WebSockets, maybe cause they RTFD
I think the article title is incorrect.
There shouldn't be anything that applications themselves do over API.
Twitter would simply rewrite all URL's tweeted to their router on page view. so when ever tweets are viewed all url's bounce through an exit node.
many sites do this
so they are just going to randomly lie about this? for what gain?
My phone signal surely has been affected by this. I usually have a solid full bars at work and i'm roaming atm.
Wrong
For one, google only saves QUERIES as the "trends" etc for auto complete.
When you type http://slashdot.com/ the browser realizes this is a real address and goes straight to it...
now if you type plain 'slashdot' into the url bar, it will then query google,
I hate to tell you guys a little secret, Firefox does the EXACT SAME THING!
I guess I feel lucky, I didn't even meet anyone from HR until my first day.
My managers of our group is the ones who interviewed me. And at a previous job before this job, all the developers were in the interview too.
But some tips on how I landed this job, show commitment. Show them your the kind of guy that rather be programming some personal project at midnight on a Friday night instead of clubbing.
Show them quality and quickness is your goals. And as I really like to break it down, show them you are NOT a career developers.
I really boil devs down to 2 classifications, career developers and real developers. Career being the ones who went to college for it just to get a nice job. they don't care about doing an excellent job, they just want to do the bare minimum, and when they leave the office, never touch programming again until they are back in the office.
Show them you are NOT one of those kind of people. Show passion for what you do.
The link in the Slashdot abstract, to http://ostatic.com/ causes Norton Security to throw a fit about no fewer than _164_ drive-by downloads on that site.
What an unfriendly link to provide. Serves me right for attempting to actually read the article.
You're PC is infected with multiple malware/viruses.
1 of the viruses is called Norton.
So first remove that Norton virus by going to Add Remove programs, then go to http://avast.com/ to install a virus scanner, and scan for viruses.
The ostatic website is clean.
Hotmail the biggest web service?
Just cause you have 5 billion spam email accounts doesnt make it the biggest, Id say its one the biggest used for disposable email spam accounts.
Id say gmail is trumping Hotmail.
Slashdot Mirror
damn you beat me to it cause I had to login :(
You wouldn't want to get a new browser that still runs the same old kind of websites would you?
... the new features for DEVELOPERS are so we developers can give more features to you USERS... You get better stuff when we get the features instead of you.
No, it does not. Some inexperienced "security researcher" posted an invalid PDF document placing the fault on WebSockets for a vulnerability in other software. And some Mozilla exec blindly skimmed the document and accepted it as fact and had websockets disabled. But in reality, there fault has absolutely nothing to do with WebSockets, and the fault CAN NOT be fixed in WebSockets. Mozillas suggestion to the problem simply removes the ability to use WebSockets as a vector for the attack, but the attack is still doable by every language on the internet that can create a TCP connection. In other words the exploit is doable on Flash or Java. WebSockets need to be re-enabled ASAP and Mozilla needs to apologize for blindly accepting a document without verifying its credibility. It seriously took me 15 minutes to read the document in full and fully understand the underlying vulnerability and realize it has absolutely nothing to do with WebSockets. Its sad an exec spent less time than that and set their browser back a few years on false grounds. Note: Google was smart and has not disabled WebSockets, maybe cause they RTFD
I think the article title is incorrect. There shouldn't be anything that applications themselves do over API. Twitter would simply rewrite all URL's tweeted to their router on page view. so when ever tweets are viewed all url's bounce through an exit node. many sites do this
so they are just going to randomly lie about this? for what gain? My phone signal surely has been affected by this. I usually have a solid full bars at work and i'm roaming atm.
Wrong For one, google only saves QUERIES as the "trends" etc for auto complete. When you type http://slashdot.com/ the browser realizes this is a real address and goes straight to it... now if you type plain 'slashdot' into the url bar, it will then query google, I hate to tell you guys a little secret, Firefox does the EXACT SAME THING!
And don't zombie write like I just did half asleep ._. Geezus I screwed up typing that post and didn't even realize it.
I guess I feel lucky, I didn't even meet anyone from HR until my first day. My managers of our group is the ones who interviewed me. And at a previous job before this job, all the developers were in the interview too. But some tips on how I landed this job, show commitment. Show them your the kind of guy that rather be programming some personal project at midnight on a Friday night instead of clubbing. Show them quality and quickness is your goals. And as I really like to break it down, show them you are NOT a career developers. I really boil devs down to 2 classifications, career developers and real developers. Career being the ones who went to college for it just to get a nice job. they don't care about doing an excellent job, they just want to do the bare minimum, and when they leave the office, never touch programming again until they are back in the office. Show them you are NOT one of those kind of people. Show passion for what you do.
The link in the Slashdot abstract, to http://ostatic.com/ causes Norton Security to throw a fit about no fewer than _164_ drive-by downloads on that site. What an unfriendly link to provide. Serves me right for attempting to actually read the article.
You're PC is infected with multiple malware/viruses. 1 of the viruses is called Norton. So first remove that Norton virus by going to Add Remove programs, then go to http://avast.com/ to install a virus scanner, and scan for viruses. The ostatic website is clean.
Hotmail the biggest web service? Just cause you have 5 billion spam email accounts doesnt make it the biggest, Id say its one the biggest used for disposable email spam accounts. Id say gmail is trumping Hotmail.