W3 decided just to bring what-wg HTML5 into the fold, not give up on xhtml. The browsers relative level of eventual support will declare the winner after buch blood sweat and tears.
Not if you use an XSS vulnerability. I already know 1 popular site I could use. HINT: XSS filters sometimes don't check for just the javascript: version.
I think https would sort most of this problem out. Cheap certs really are a must !
Slashdot has javascript? Can't say I've noticed any loss of functionality, but then I wouldn't, would I. I run in LightHTML mode with Web Developer's "Disable Page Colours" enabled.
Re:Anybody else notice its .php files that get ...
on
MSN Censors Your IM
·
· Score: 1
Also the php files are in the document_root directory (or whatever you want to call it). Write access to document_root should be off but it usually isn't.
Perl and other CGI stuff is usually script aliased out of document_root and run from there/www/public_html # document root/www/public_html/index.php # shitty PHP script/www/cgi-bin/www/cgi-bin/dirty_perl.pl # Long tooth Larry's stuff
And pl files also need chmod +x ing whereas php files will just run.
Those crazy "easy to set up" routes get you owned, but they always want to learn the hard way.
Plan 9 from User Space (aka plan9port) is a port of many Plan 9 programs from their native Plan 9 environment to Unix-like operating systems. supported systems
Linux (x86, x86-64, PowerPC, and ARM), FreeBSD (x86), Mac OS X (x86 and Power PC), NetBSD (x86 and PowerPC), OpenBSD (x86 and PowerPC), SunOS (Sparc).
That "only from people you know" is bollocks. Your bozo friends are likely to get infected and the result of the infection is sending you infected files.
Who's going to suspect a PDF from their friend contains an unscanned virus payload.
curl 'http://slashdot.org/comments.pl?sid=25[595-611][1 -9]&cid=20000000' -o 'sd#1_#2.html each one contains : We can't find a comment with that ID (20000000)
Security Alert Applications handling URL protocols must be robust in the face of malicious data. Because handler applications receive data from untrusted sources, the URL and other parameter values passed to the application may contain malicious data attempting to exploit the handling application. For this reason, handling applications that could initiate unwanted actions based on external data must first confirm those actions with the user. Note In addition, handling applications should robustly handle URLs that are overly long or contain unexpected (or undesirable) character sequences. For more information, please see Writing Secure Code World Wide Web link.
Slashdot Mirror
W3 decided just to bring what-wg HTML5 into the fold, not give up on xhtml.
The browsers relative level of eventual support will declare the winner after buch blood sweat and tears.
The widespread use of http only cookies is coming upon us
. aspx
n ts-httponly-and-is-vulnerable-to-xmlhttprequest/
http://msdn2.microsoft.com/en-us/library/ms533046
http://www.petefreitag.com/item/644.cfm
of course, new rushed in features open nice juicy vectors :
http://ha.ckers.org/blog/20070719/firefox-impleme
bah slashcode ate my comment, I'll do it in BBCode seeing as that's usually the place to exploit it
[img]vbscript:msgbox("xss js 0wns j00")[/img]
use the vbscript of your choice, I'd pop an XMLHttpRequest out, eval the returned javascript and off you go
Not if you use an XSS vulnerability. I already know 1 popular site I could use.
HINT: XSS filters sometimes don't check for just the javascript: version.
I think https would sort most of this problem out. Cheap certs really are a must !
1) run your own nameserver
2) use a new subdomain for every request
3) ???
4) profit
Slashdot has javascript?
Can't say I've noticed any loss of functionality, but then I wouldn't, would I.
I run in LightHTML mode with Web Developer's "Disable Page Colours" enabled.
Black & White for me baby!
> This runs counter to what Tim Berners Lee intended
He never thought of the Host: header either, perhaps we should go back to 1 IP per domain.
What is this '3"' of which you speak?
It's ok so long as one wears one's hacking jacket.
Also the php files are in the document_root directory (or whatever you want to call it). Write access to document_root should be off but it usually isn't.
/www/public_html # document root /www/public_html/index.php # shitty PHP script /www/cgi-bin /www/cgi-bin/dirty_perl.pl # Long tooth Larry's stuff
Perl and other CGI stuff is usually script aliased out of document_root and run from there
And pl files also need chmod +x ing whereas php files will just run.
Those crazy "easy to set up" routes get you owned, but they always want to learn the hard way.
EQ already has an in-game mini-game but single player
and Eric's been running Plan 9 From Bell Labs and Inferno on the one he has access to at IBM.
http://graverobbers.blogspot.com/
Average is an almost useless figure.
This may help Programmers Need To Learn Statistics Or I Will Kill Them All.
That is, indeed, one form of binary encoding. There are more.
Try it with the columns having 5,3,1,1 as their values instead of 8,4,2,1
Plan 9 from User Space (aka plan9port) is a port of many Plan 9 programs from their native Plan 9 environment to Unix-like operating systems.
supported systems
Linux (x86, x86-64, PowerPC, and ARM), FreeBSD (x86), Mac OS X (x86 and Power PC), NetBSD (x86 and PowerPC), OpenBSD (x86 and PowerPC), SunOS (Sparc).
http://swtch.com/plan9port/
If you used a proper OS with incremental backup, you'd have the peace of mind that files never die.
it's in the Linux kernel : v9fs
it's in Plan 9 From Bell labs (obviously)
it's in Unix clone userlands : plan9ports
it's in Inferno
it's in wmii
That "only from people you know" is bollocks. Your bozo friends are likely to get infected and the result of the infection is sending you infected files.
Who's going to suspect a PDF from their friend contains an unscanned virus payload.
Javascript in PDF, great idea!
If only my turds were made of paper, I could write on them.
curl 'http://slashdot.org/comments.pl?sid=25[595-611][1 -9]&cid=20000000' -o 'sd#1_#2.html
each one contains :
We can't find a comment with that ID (20000000)
i'm too lazy to keep looking
IBM's Blue Gene still uses Ethernet. Eric's added Jumbo Frame support to Plan 9 From Bell Labs which boots on the cpu and I/O nodes now.
In that case the network has it's own dedicated nodes, so yes, the network is the computer!
ntl: got 128k officially recognised as broadband for advertising purposes here in the uk.
Nah, drug dealers face stiff competition these days. Witness the street prices of most drugs falling dramatically the last 10 years or so.
RTFM losers :
. aspx
http://msdn2.microsoft.com/en-us/library/aa767914
Security Alert
Applications handling URL protocols must be robust in the face of malicious data. Because handler applications receive data from untrusted sources, the URL and other parameter values passed to the application may contain malicious data attempting to exploit the handling application. For this reason, handling applications that could initiate unwanted actions based on external data must first confirm those actions with the user.
Note In addition, handling applications should robustly handle URLs that are overly long or contain unexpected (or undesirable) character sequences. For more information, please see Writing Secure Code World Wide Web link.
Yeah, I think I remember reading it the last time I was reading "The Laws of The People's Republic Of China" in Mandarin in the coffee shop.