Not sure, but I think that's why the OP included a winky.. ";)"
Obviously, that's not an exploit because it's just loading a local file for the user viewing the page (But I wonder if the iframe content could be accessed through a little cross-frame scripting? Decent browsers should disallow that though..)
Sometimes I wonder if I'm reading reports from Bizarro world....
Perhaps each browser is simply quicker at different operations. I admit, sites like suprnova.org which are almost entirely Javascript take a few seconds to render under Moz (and even longer under Konq). But I'm not lying, in my example IE showed about 500ms lag between clicking the button and the action taking place, whereas Moz had maybe 100ms lag for the same operation. Not a big deal, but I noticed it.
I'd like to see some independant testing and benchmarking done for the JS engines of the major browsers, I think the results could be quite interesting.
Although I've found IE for Windows to be incredibly slow with Javascript.
I'll back that up with a little anecdote: Just this week, I was writing a Javascript-based, object-oriented bubble sort routine to move options in a select box, and when I tested it in IE (my development browser is Moz), some slowdown was really noticable. IE definately takes a back seat in the Javascript speed department. (probably due in part to their 'everything to everybody' object model)
Because, using the record industry's own reasoning against them, you're not buying property, you're buying a license. If you've paid the license fee to listen to a song, it's probably legal to listen to it in whatever form you wish, even if it's from a digital file you downloaded off the intarweb.
Ah, my favorite Mozilla-on-Linux "feature". Argued about it on bugzilla to no avail. It's incredibly annoying loading a URL when middle-clicking the fscking TAB if you ask me.. Now, clicking on the URL box, fine. That almost makes sense.
And all because historic versions of Netscape had behavior something like this, HOWEVER, old versions of Netscape didn't have fucking tabs, now did they?
I'm currently taking a business law course, and found trademark protection an interesting topic. While make people are aware that 'thermos' and 'aspirin' were once trademarked names that now refer to a generic product, it was surprising to learn that other examples include 'escalator', 'trampoline', 'rasin bran', 'dry ice', 'lanolin', 'linoleum', 'nylon', and 'corn flakes'.
Yes, but consider that evolution only works properly when the incompetant/invalid are removed from the gene pool. Humanity has slowed it's own evolution by treating the ill, making prosthetic limbs, creating welfare systems, etc. Not that I'm suggesting we'd be better off without them, of course.
Re:Wow, only 64 MB of RAM?
on
Mozilla's Mini-Me
·
· Score: 2, Insightful
I browsed the internet with Windows 3.1, trumpet Winsock, and Netscape on my 486 DX/66 that had a screaming 16 megs of ram.
So what, I have the capability to browse the Internet with my Commodore 64, RR-Net adaptor, and Contiki OS. However, it's a definate case of, "It's not the quality of his speech, it's the fact the dog speaks at all". Sure, you can access the Internet on a 286/386/C64 but you're probably not going to have niceties like Flash, CSS, Javascript, graphics, etc..
Granted, it took a little while for the actors to settle into their roles, but by "The Parliment of Dreams", things were moving along quite well. One of my favorite things about B5 were the well developed characters.. Londo, G'Kar, Vir, Ivanova, Garibaldi, Sheridan.. it would not have been the same without them. The science fiction was the backdrop to the story, not the story itself. As it should be.
Doh, that should have been "include $_REQUEST['action'];", which allows the user to "include" any file they desire by manipulating the query string ala "insecure.php?action=/etc/passwd"
Really Now..
on
Hardened PHP
·
· Score: 4, Interesting
From one of "Hardened PHP's" examples:
include $_REQUEST[$action];
Which is certainly a good example of what not to do; but if somebody's dumb enough to do something like this, likely no amount of engine protection is going to help them.
Do Our Uncles Offer Smiling Ventures At Vintage Vermont Men?
Re:Software freedom is worth supporting.
on
Suse 9.1 Reviews?
·
· Score: 1
That's a very good point, running Closed software is an unknown, whether it's on an Open or a Closed platform. At least with an Open OS, you know (or can verify) that the base is trustworthy. Personally, once I recognized the true value of Free software, there was no way I could accept a Closed OS again, be it Windoze, Amiga, Be, or any other.
When properly set up, it simply works. I don't have to mess with setting up Java, I don't have any problems with unstable drivers, my system never ever hangs up, has not been reinstalled since the first installation... What do I need more? It, well, just works.
That's funny, those are some of the same reasons I prefer Linux on the desktop (at the moment, Mandrake 9.1). But hey -- use whatever works for you, and I'll do the same.
I'm talking about Gecko's (Mozilla, Firefox, etc) XPI installer, which will prompt the user if they really want to install the software. What are you on about?
Slashdot Mirror
What can I say, the future isn't what it used to be.
Not sure, but I think that's why the OP included a winky.. ";)"
Obviously, that's not an exploit because it's just loading a local file for the user viewing the page (But I wonder if the iframe content could be accessed through a little cross-frame scripting? Decent browsers should disallow that though..)
Sometimes I wonder if I'm reading reports from Bizarro world....
Perhaps each browser is simply quicker at different operations. I admit, sites like suprnova.org which are almost entirely Javascript take a few seconds to render under Moz (and even longer under Konq). But I'm not lying, in my example IE showed about 500ms lag between clicking the button and the action taking place, whereas Moz had maybe 100ms lag for the same operation. Not a big deal, but I noticed it.
I'd like to see some independant testing and benchmarking done for the JS engines of the major browsers, I think the results could be quite interesting.
Although I've found IE for Windows to be incredibly slow with Javascript.
I'll back that up with a little anecdote: Just this week, I was writing a Javascript-based, object-oriented bubble sort routine to move options in a select box, and when I tested it in IE (my development browser is Moz), some slowdown was really noticable. IE definately takes a back seat in the Javascript speed department. (probably due in part to their 'everything to everybody' object model)
Because, using the record industry's own reasoning against them, you're not buying property, you're buying a license. If you've paid the license fee to listen to a song, it's probably legal to listen to it in whatever form you wish, even if it's from a digital file you downloaded off the intarweb.
Who keeps re-electing this jackass? I say we just kick Utah out of the union on general principal..
Ah, my favorite Mozilla-on-Linux "feature". Argued about it on bugzilla to no avail. It's incredibly annoying loading a URL when middle-clicking the fscking TAB if you ask me.. Now, clicking on the URL box, fine. That almost makes sense.
And all because historic versions of Netscape had behavior something like this, HOWEVER, old versions of Netscape didn't have fucking tabs, now did they?
I'm currently taking a business law course, and found trademark protection an interesting topic. While make people are aware that 'thermos' and 'aspirin' were once trademarked names that now refer to a generic product, it was surprising to learn that other examples include 'escalator', 'trampoline', 'rasin bran', 'dry ice', 'lanolin', 'linoleum', 'nylon', and 'corn flakes'.
Yes, but consider that evolution only works properly when the incompetant/invalid are removed from the gene pool. Humanity has slowed it's own evolution by treating the ill, making prosthetic limbs, creating welfare systems, etc. Not that I'm suggesting we'd be better off without them, of course.
You don't have to join Mandrake Club to get the good stuff. (Powerpack 10.0 currently retails for $85 on mandrakesoft.com)
Euch. Some of us prefer the command line.
I browsed the internet with Windows 3.1, trumpet Winsock, and Netscape on my 486 DX/66 that had a screaming 16 megs of ram.
So what, I have the capability to browse the Internet with my Commodore 64, RR-Net adaptor, and Contiki OS. However, it's a definate case of, "It's not the quality of his speech, it's the fact the dog speaks at all". Sure, you can access the Internet on a 286/386/C64 but you're probably not going to have niceties like Flash, CSS, Javascript, graphics, etc..
I'd hit it.
Mmmm, SMEAT!!!
Granted, it took a little while for the actors to settle into their roles, but by "The Parliment of Dreams", things were moving along quite well. One of my favorite things about B5 were the well developed characters.. Londo, G'Kar, Vir, Ivanova, Garibaldi, Sheridan.. it would not have been the same without them. The science fiction was the backdrop to the story, not the story itself. As it should be.
Now now, there's nothing noble about Microsoft! ;)
Rush fans everywhere rejoice!
Which is much closer to an exploit than including a /etc/passwd
An excellent point. Please don't think too poorly of me, I was simply using a brief example. :)
Doh, that should have been "include $_REQUEST['action'];", which allows the user to "include" any file they desire by manipulating the query string ala "insecure.php?action=/etc/passwd"
From one of "Hardened PHP's" examples:
Which is certainly a good example of what not to do; but if somebody's dumb enough to do something like this, likely no amount of engine protection is going to help them.Do Our Uncles Offer Smiling Ventures At Vintage Vermont Men?
That's a very good point, running Closed software is an unknown, whether it's on an Open or a Closed platform. At least with an Open OS, you know (or can verify) that the base is trustworthy. Personally, once I recognized the true value of Free software, there was no way I could accept a Closed OS again, be it Windoze, Amiga, Be, or any other.
When properly set up, it simply works. I don't have to mess with setting up Java, I don't have any problems with unstable drivers, my system never ever hangs up, has not been reinstalled since the first installation... What do I need more? It, well, just works.
That's funny, those are some of the same reasons I prefer Linux on the desktop (at the moment, Mandrake 9.1). But hey -- use whatever works for you, and I'll do the same.
Why the hell should Congress be voting on bills which they don't have access to? That doesn't even make sense..
I'm talking about Gecko's (Mozilla, Firefox, etc) XPI installer, which will prompt the user if they really want to install the software. What are you on about?