Actually, since most people don't get a proper philosophy class, I disagree. Even if it's just once at the beginning of the year, it helps to teach what science is and what it is not. Science makes logical conclusions from observable phenomena. It cannot make any statements regarding the nature of the supernatural, because doing so violates the very premise of science. You may believe in a supernatural explanation for something you observe, and I can't scientifically disprove that. In this class, we'll be learning science.
And put that on a pamphlet to hand to the angry parents. It can't really be said much better than that.
common physiology among animals doesn't make evolution relevant to every study. I'm tired of EVERYTHING being connected to evolution. At a certain grade level, especially, oversimplifying evolution is worse than not mentioning it all. I can't believe the number of people who think of evolution as a practically sentient event, because the last time they had it explained it depth, it was oversimplified. If someone doesn't understand that these are selections of random mutations, what's the point in knowing it by name at all?
I suspect you answered your own question. It took time to figure all this stuff out, going through records and such, and that's why it's only now being reported on.
It's a script tag pointing to an image at Google INSTEAD of a script file: <script type="text/javascript" onerror="logged_in()" onload="logged_in()" src="http://someimageatgoogle"></script>
It was returning successful when the content loaded, regardless of the actual content-type returned. Even though, instead of text/javascript, it actually returns image/gif and binary data, the event handlers return based on the HTTP status code rather than the success of actually loading Javascript code.
Furthermore, if those pictures are already public - as they'd better be if they're going to be shared by someone who only knows a username, they're being indexed by search engines. Just match up the photo with a search for similar images.
You idealist, you. Until Windows 7, every version of Windows pretty well required a fixed "DPI" setting that assumed a particular screen size. Getting a more pixel dense screen changed the size of a point as far as Windows was concerned - unless you set a manual DPI setting that breaks half the poorly written applications out there.
I really can't believe this hasn't been solved for Firefox. The fix is really simple - if the content-type of the request is not javascript, then fire the onerror condition as well.
The other worrying thing is that you can perform actions that impersonate the user as long as they use GET requests. For example, I can log you out of Slashdot by putting the logout URL as the javascript source. I don't really see a way around that other than using HEAD requests for 3rd-party domains.
Even if they only advertise on ad networks that disallow pop-unders, there are still web site owners that ignore those restrictions and get away with it.
The studios ARE doing that (not with Netflix). Just at such a HIGH cost that we go for what's cheapest - physical media. Netflix can buy a DVD for $30, and rent it out several hundred times, paying only for the postage. If it weren't for the little legal loophole that allows for the renting of physical media, we'd be paying $5-10 each viewing to rent any movie over a streaming service.
Netflix made it so convenient, that online streaming is only an afterthought for many people. The studios are probably just begging to be allowed in, but then they don't want to put up with the prices Netflix is demanding - so they give their lowest value titles in return for some profits - but are still trying to negotiate higher prices for their A-list titles. Netflix isn't going to double their subscription costs just to give the studios the amount they're asking.
Netflix has the upper hand. They already have a sustainable business model for snail mail. If the studios want their cut of the profit, they have to beat the price of disc acquisition and distribution. I like the convenience of streamed movies, but that's not why I subscribe to Netflix. I'm their customer because I can get just about any movie ever made by one means or another. Sometimes Netflix can stream what I want, and other times, I can just stream something while I wait on another physical disc. My life doesn't revolve around TV/movies, though, so I can get by just fine with the wait.
That doesn't make it any less funny to me as a joke. I have fairly conservative views, but if you can't laugh at society, you're just left with being disappointed with society.
I want Osama Bin Laden to see the error of his ways and find happiness and then live a long and happy life. If that won't happen I'd really not wish for him to continue living. He's preventing thousands of others from having a long and happy life. And that overrules any worries I have for him.
How can the attacker buy during a DOS - even if he is the person behind the attack? Aren't his odds about the same? And since were dealing with drastically larger time scales it would have to be a DDOS or he'd be blocked during the trade window.
Yes, I realize that with today's botnets-for-hire that any attack could easily be very spread out.
Slashdot Mirror
Except that the dedicated speed is 0/0. Best effort delivery means that you'll very likely get something above 0/0, but it's not guaranteed at all.
Actually, since most people don't get a proper philosophy class, I disagree. Even if it's just once at the beginning of the year, it helps to teach what science is and what it is not. Science makes logical conclusions from observable phenomena. It cannot make any statements regarding the nature of the supernatural, because doing so violates the very premise of science. You may believe in a supernatural explanation for something you observe, and I can't scientifically disprove that. In this class, we'll be learning science.
And put that on a pamphlet to hand to the angry parents. It can't really be said much better than that.
common physiology among animals doesn't make evolution relevant to every study. I'm tired of EVERYTHING being connected to evolution. At a certain grade level, especially, oversimplifying evolution is worse than not mentioning it all. I can't believe the number of people who think of evolution as a practically sentient event, because the last time they had it explained it depth, it was oversimplified. If someone doesn't understand that these are selections of random mutations, what's the point in knowing it by name at all?
I suspect you answered your own question. It took time to figure all this stuff out, going through records and such, and that's why it's only now being reported on.
Sorry - one of those logged_in() should have read not_logged_in()
I believe you didn't read it clearly.
It's a script tag pointing to an image at Google INSTEAD of a script file:
<script type="text/javascript" onerror="logged_in()" onload="logged_in()" src="http://someimageatgoogle"></script>
It was returning successful when the content loaded, regardless of the actual content-type returned. Even though, instead of text/javascript, it actually returns image/gif and binary data, the event handlers return based on the HTTP status code rather than the success of actually loading Javascript code.
Furthermore, if those pictures are already public - as they'd better be if they're going to be shared by someone who only knows a username, they're being indexed by search engines. Just match up the photo with a search for similar images.
You idealist, you. Until Windows 7, every version of Windows pretty well required a fixed "DPI" setting that assumed a particular screen size. Getting a more pixel dense screen changed the size of a point as far as Windows was concerned - unless you set a manual DPI setting that breaks half the poorly written applications out there.
Posting one here.
I really can't believe this hasn't been solved for Firefox. The fix is really simple - if the content-type of the request is not javascript, then fire the onerror condition as well.
The other worrying thing is that you can perform actions that impersonate the user as long as they use GET requests. For example, I can log you out of Slashdot by putting the logout URL as the javascript source. I don't really see a way around that other than using HEAD requests for 3rd-party domains.
Even if they only advertise on ad networks that disallow pop-unders, there are still web site owners that ignore those restrictions and get away with it.
Netflix streams at the average non-HD quality starts at 700kbps.
The studios ARE doing that (not with Netflix). Just at such a HIGH cost that we go for what's cheapest - physical media. Netflix can buy a DVD for $30, and rent it out several hundred times, paying only for the postage. If it weren't for the little legal loophole that allows for the renting of physical media, we'd be paying $5-10 each viewing to rent any movie over a streaming service.
Netflix made it so convenient, that online streaming is only an afterthought for many people. The studios are probably just begging to be allowed in, but then they don't want to put up with the prices Netflix is demanding - so they give their lowest value titles in return for some profits - but are still trying to negotiate higher prices for their A-list titles. Netflix isn't going to double their subscription costs just to give the studios the amount they're asking.
Netflix has the upper hand. They already have a sustainable business model for snail mail. If the studios want their cut of the profit, they have to beat the price of disc acquisition and distribution. I like the convenience of streamed movies, but that's not why I subscribe to Netflix. I'm their customer because I can get just about any movie ever made by one means or another. Sometimes Netflix can stream what I want, and other times, I can just stream something while I wait on another physical disc. My life doesn't revolve around TV/movies, though, so I can get by just fine with the wait.
They have all 5 seasons of LOST ;-)
I'm sure it's just a web "app." Not available in the app store. With HTML5 offline storage, you can even download content and read on the go.
That doesn't make it any less funny to me as a joke. I have fairly conservative views, but if you can't laugh at society, you're just left with being disappointed with society.
Obama != Osama, unless you're Republican.
I want Osama Bin Laden to see the error of his ways and find happiness and then live a long and happy life. If that won't happen I'd really not wish for him to continue living. He's preventing thousands of others from having a long and happy life. And that overrules any worries I have for him.
I, for one, wish I had mod points!
Sounds like a paging issue. You need more RAM.
What first-world nation gassed millions of Jews in 1984?
How can the attacker buy during a DOS - even if he is the person behind the attack? Aren't his odds about the same? And since were dealing with drastically larger time scales it would have to be a DDOS or he'd be blocked during the trade window.
Yes, I realize that with today's botnets-for-hire that any attack could easily be very spread out.
Then you're actually making investments, and not gaming the system. I don't really care if it puts an end to that.
Yes. That's exactly what I meant. The temptation of a +anything first post was just too great for me to remember the right word.