There's no Ajax involved in Heise's thing.
The Facebook like button is not directly put into the webpage, because that could cause issues with the cross-origin policy in browsers (a browser lets only pages on facebook.com to make Ajax requests to facebook.com).
Instead, the like button is in an iframe, which is a different webpage stored in a frame in another webpage. Those don't require any sort of Ajax at all. Instead, clicking the gray icon uses JavaScript (which is definitely NOT Ajax) to replace their grayed-out like button with an iframe containing the actual one.
FTR, in case you didn't guess already, the iframe points to a webpage on facebook.com that contains the webpage for the like button.
It won't be able to record without the user's permission.
And before you mention clickjacking, that's been done with Flash too, of course.
Also, in Google Chrome, there's a JavaScript function to query the user for permission to enable notifications for a particular site, but in my experience it seems it can be triggered only by the user clicking a button.
Why would anyone enter a password with copy and paste?
1) Just typing the password is far easier
2) If you'd have to copy and paste it, you'd have to have it in a text file
3) Storing that text file unencrypted would be incredibly stupid
4) What's the point of encrypting it when you'd have to enter a password to get to it?
z0mg let's pass a law that banz all c00kiez!!1!
and c0mplain wh3never any w3bs1t3 uses js.
b3c4use, of course, only JS can read/write cookies.
There's no way PHP, JSP, ASP.NET, etc can do that!
-- MatDegathronThude
IMHO, the game is fun, but the coding style sucks.
Braces shouldn't get their own lines.
Also, properties of objects shouldn't have "my"
in front of them. "g_ship.myVelocity"? Ugh.
Yeah, you're right.
My parents, who are both biologists, were raised as Christians but now they aren't religious.
They neither care about religion at all nor give it any thought.
Slashdot Mirror
SCP is pretty limited and useless compared to SFTP.
There's no Ajax involved in Heise's thing.
The Facebook like button is not directly put into the webpage, because that could cause issues with the cross-origin policy in browsers (a browser lets only pages on facebook.com to make Ajax requests to facebook.com).
Instead, the like button is in an iframe, which is a different webpage stored in a frame in another webpage. Those don't require any sort of Ajax at all. Instead, clicking the gray icon uses JavaScript (which is definitely NOT Ajax) to replace their grayed-out like button with an iframe containing the actual one.
FTR, in case you didn't guess already, the iframe points to a webpage on facebook.com that contains the webpage for the like button.
That. These. Those. Can we stop listing demonstratives now?
It won't be able to record without the user's permission. And before you mention clickjacking, that's been done with Flash too, of course. Also, in Google Chrome, there's a JavaScript function to query the user for permission to enable notifications for a particular site, but in my experience it seems it can be triggered only by the user clicking a button.
Your entire post is wrong.
Yes, it was indeed literal, because you did indeed contract cholera, tuberculosis and chronic insomnia from reading this story.
their*
Why would anyone enter a password with copy and paste?
1) Just typing the password is far easier
2) If you'd have to copy and paste it, you'd have to have it in a text file
3) Storing that text file unencrypted would be incredibly stupid
4) What's the point of encrypting it when you'd have to enter a password to get to it?
o______o
Why do they even store that data on a laptop? That guarantees a disaster.
Yes, you're right.
Why do people treat genetic data as though it's the most confidential document in history? It's just a long string of base pairs, amirite?
No, not really.
Surprisingly, there's too little clutter. :P
z0mg let's pass a law that banz all c00kiez!!1! and c0mplain wh3never any w3bs1t3 uses js. b3c4use, of course, only JS can read/write cookies. There's no way PHP, JSP, ASP.NET, etc can do that! -- MatDegathronThude
Talking about it != an actual implementation.
Moar liek centripets, amirite? http://xkcd.com/123/
z0mg!
*whoosh*
Incorrect use of whom. Epic fail.
They shouldn't burn it either.
Perl is actually quite readable for those who are intelligent enough to understand it, unlike you.
Not peer-reviewed and not published = why the fuck is this on Slashdot?!
IMHO, the game is fun, but the coding style sucks. Braces shouldn't get their own lines. Also, properties of objects shouldn't have "my" in front of them. "g_ship.myVelocity"? Ugh.
They probably did it just to torture the person from whom they leeched money.
Yeah, you're right. My parents, who are both biologists, were raised as Christians but now they aren't religious. They neither care about religion at all nor give it any thought.