the sad part is, these exploit paths are pretty much everywhere... my coworkers and i used to have contests about who could get javascript executing on some arbitrary domain first while we had lunch... only stumped maybe a few times... almost never, with dozens and dozens of successes. of course our own domains were bulletproof. i'm still convinced perhaps we were the only developers at the time that respected the potential of the problem. now people are arguing against HTML5 because it does nothing to remove this very same potential for cross site attacks... and idiot developers would have you belief that is "an issue", when the real issue is idiot developers not doing anything to not be idiot developers.
is your inability to not cower behind anonymity or provide any factual insight to any conversation some sort of hypocritical idiot thing, or are you genuinely ignorant?
wrong again, idiot. no meds, ever. no allergies. no illnesses. no disorders. none of the nonsense you idiots create to justify your ignorance and lack of potential.
is ur mum's face as presumptuous and historically inaccurate as you?
you're wrong. you can't even make your recommendation with a misspelling... i believe you meant "debug once" as your next sentence was "test once"... but i guess i'll have to wait for your ever powerful regression testing engineers to finish their test case implementations before i can test my assertion.
you just created a job! perhaps an entire department! great idea! well, for people that need jobs... not for people that need to pay to get something implemented correctly done for a price, or developers that take pride in the the perfection of their work and require no such additional external verification or confirmation.
Slashdot Mirror
the sad part is, these exploit paths are pretty much everywhere... my coworkers and i used to have contests about who could get javascript executing on some arbitrary domain first while we had lunch... only stumped maybe a few times... almost never, with dozens and dozens of successes. of course our own domains were bulletproof. i'm still convinced perhaps we were the only developers at the time that respected the potential of the problem. now people are arguing against HTML5 because it does nothing to remove this very same potential for cross site attacks... and idiot developers would have you belief that is "an issue", when the real issue is idiot developers not doing anything to not be idiot developers.
when you reveal yourself, i will kill you.
you are NOTHING
is ur mum's face as presumptuous and historically inaccurate as you?
you are NOTHING
you just created a job! perhaps an entire department! great idea! well, for people that need jobs... not for people that need to pay to get something implemented correctly done for a price, or developers that take pride in the the perfection of their work and require no such additional external verification or confirmation.
it was michael kristopeit. i don't cower behind anonymity, as many others choose to do so.
you are NOTHING
i'm going to kill you