actualy you have to go to hack.ru first, let hack.ru open a browser window as a child, and have javascript shut off becuase if the targeted site has this code in it,
// this page should never load inside of another frame
if (top.location != self.location)
{
top.location = self.location;
}
like MSN does, the vulnerability doesn't work, additionaly the 'vulnerability' is also reported in IE6.0
going back to secondia.com and clicking the test links supposedly causes the browser window that secondia.com Created to be changed to content that the parent window directs. I'm not sure that I'd consider a parent window having control ofver a child window a security violation, in fact because the supposed security problem doesn't work in my firefox I might consider that an unexpected behaviour; but i expect that microsoft's javascript code
// this page should never load inside of another frame
if (top.location != self.location)
{
top.location = self.location;
}
is really whats is making secondia look like a bunch of morrons. Perhaps MS has a function in their ASP code called
makeSecondiaLookStupid
that fires when the referrer is secondia.com and the IP address of the requester doesn't belong to secondia.com!
Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.8) Gecko/20050512 Firefox/1.0.4
and it does not demonstrate the supposed vulnerability; maybe what mozilla should do is not start coding from scratch as you suggest but stop trying to shoe-horn good linux code onto the windows platform. First time through I read click so I centerclicked and tried the exercise in a tab, then went back and centerclicked the test, it opened a new browser window with the secondia page; so to be fair I went back and re-did the demo by left-clicking and still nothing.
You have to learn to think in partial pressures, Air is 20% O2, 80% 2 so; 14.7 psi @ 20% O2 = 2.94 psi O2, 11.76 psi N2; surface, 29.4 psi @ 20% O2 = 5.88 psi O2, 23.5 psi N2, 33ft below surface, 44.1 psi @ 20% O2 = 8.82 psi O2 35.28 psi N2, 66 ft below surface (this concentration causes blindness in newborn infants), 73.5 psi @ 20% O2 = 14.7 psi O2, 58.8 psi N2, 165 ft below surface ( the O2 is toxic here), now if you change things a bit go to 165 ft and breath 68.5 psi of He2 and and a nice comfortable 5 psi O2, your joining to get as much oxygen as you would a 33 Ft and the smaller lighter easier to difuse helium molecules will not make your blood fuss up like a warm shaken bottle of soda pop. I think our Apollo spacecraft run at 100% O2 and vented down to 5 psi in orbit, which is why a fire on the launch pad was so fierce, they were at 14.7 psi O2 there.
One of my neighbors had to put ten rounds into a man's chest during a drug-bust, he did have a weapon, just refused to fall down when shot. It's very hard on the officer to have to do this, not to mention the wife and children of the perp who saw the whole thing. So my advice is when they kick your door down, just sit down on the floor with your hands on your head and let the lawyers do the fighting it's just plain easier on everybody.
I think I'm going to go walk into a bank with an axe. Three cheers for Canadian Gun Control, Banks get robbed with axes, rifles, shotguns, bazookas and cannons, but never a hand gun!
I would suggest that what you are really ranting about is more a derivative of feudalism than capitalism. Also the fore-runners of our unions were created to insure a degree of upward mobility to the serfs under the feudal system.
Feudalism is better for the haves, because insures they'll always have, that why the successfull tend to gravitate back towards a feudal system. Capitalism on the other hand insures the possibility of upward mobility based on merit rather than position, so the have-not's tend to gravitate towards it.
Feudalism tends to self-destruct, especialy when the "annoiting" runs out, just as european feudalism self-destructed when people finaly rejected the churches "annointing" of rulers as the will of god, our present industrial feudalism will self destruct as the "annointing" of government protection of patents and copyrights run out.
x86 hardware is really not the best design (any more) Was it ever, at least 6809 - m68k was understandable by mere mortals and had a certain elegance. x86, ( hell even the 4004-8080) has always seemed kludgey, inelegant and incomprehensable.
The time of the $2000 home computer is over. The margins are fading. There's been a $2000 dollar home computer for the last 20 years, although most home computers have been $1200 for the last 20. The recent $600.00 'puter might be an short term aberation, time will tell. My first store bought computer was a bundle with cpu, monitor and printer for $~1200.00 (I still use the printer and keyboard, man do I love that keyboard ) and had a 80286 @ 8MHz, the latest store bought, totaled out to $~1200.00 and had a P4@1.8GHz. The time of the $2000.00 computer has always been over, yet they are still around! What Microsoft really fears is getting cornered into a commodity market, like the hardware guys mostly opperate in, that's why everything they do has a goal of brand differetiation. They're care that any errors are on the monopoly side rather than the commodity side. To really worry the Gates crew start saying "yeah windows is easier if you have an MCSE, but for the average joe they're both about the same"
Ellison?, he had to send in a corporate SWAT team to one of his Canadian Data Center's to enforce that they dump Windows. Oracle, uses Linux, they program apps to run on Linux, it's in their best interest to encourage enterprises use linux, so they can get the share of software budget that previously went to Microsoft.
A freind of mine was crossing into Canada, and had forgotten about a porn tape in the car, of course Canadian Customs found it and the agent said "Well we'll just have to confiscate this for the Queen". My friend couldn't resist telling the Canadian "I don't think she'll be amused".
The Well Known Ports are those from 0 through 1023. Well Known Ports are assigned by the IANA and on most systems can only be used by system (or root) processes or by programs executed by privileged users. The Registered Ports are those from 1024 through 49151 UNASSIGNED PORT NUMBERS SHOULD NOT BE USED. THE IANA WILL ASSIGN * * THE NUMBER FOR THE PORT AFTER YOUR APPLICATION HAS BEEN APPROVED.
The Dynamic and/or Private Ports are those from 49152 through 65535
so in reality only 16384 or 16K can be actualy used for NATing
The transaction houses don't help, I spent a couple hundred hours programming, programming around missing functions (everybody has a different idea of which functions are a security hazard) in the host's php for a website, only to get everything working so I did not have to store anything related to the CC info on my server, then the transaction house turns off the API i was using.
Next time around everything goes into a database with a good password, and if it gets cracked I play stupid; doing things wrong is on a par with state-of-the-art anyways.
I've heard of porn sites just sending numbers at random hoping for a hit; which given the high amount of charge-backs, and false numbers they are send by lusers, it's not that far-fetched.
There is something seriously wrong if your credit report shows nothing, but your getting turned down everytime. Weird stuff can get into your report, there is a lady with the same name as my wife, ssn one digit different, license number one digit different who like to get tax liens on her property, bounce checks ect., how do I know about this? It's because it ended up in our credit report, the state had a lien on our property instead of her's, and along the way we've probably paid a couple of her hospital bills too.
DUDE I refuse to do household tech support from the bathroom throne; if it's not smoking, it can wait. I also intensely dislike talking on the phone while using the toilet. If your wife can't wait until your done, she, like mine has serious people skills problem (Don't tell either of them I said that either).
NATing has some limitation, such as only have 64K connections. While that seems like a lot, when browsers start making multiple connections to fetch images, pre-cacheing next pages, DNS requests it can dry up alarmingly fast. It would be hard for an ISP connection provider to anticipate how many addresses they'd actualy need; one new technology could catch fire and blow a year of planning out the window.
We had an application like that, Command Dental running on SCO openserver, all they were doing was sending the print files to a seperate print spool, and running a awk script against the files to extract the data, a little tweeking and validated is all that's really required. I'll bet they're using the same technique and maybe a little visualBasic. If your in the US try beating them with the HIPPA stick about security.
But I agree with the idea that a lot of windows "developers" got fat and lazy in the era of no security on windows, and can't cope with even rudimentary security today.
I have to agree, the real differences between most major Linux distros is in the hardware auto-detect, some admin tools, and the filesystem lay-out. The latter is increasingly becoming the same with the new standards. I'm not even sure if the mac's OSX based on BSD base is really that much different, I suspect the biggest differences between OSX and BSD is in the windowing system and window manager.
I rescently change from an older suse distro to arch linux, a slackware based distro. Arch I thought would be a bear to admin because a lot of the automated suse tools wouldn't be there, but other than getting php to work (took a bit of reading to remember that php.ini uses ; for a comment ala windows style) and getting cups to work with the network printer (just seemed to mysteriously start working) I had no problems. I suspect that any reasonably astute windows user could do the same.
maybe the best first step would be to enter all of the original laws into a batch of text files; then log them in ala CVS, then edit them as you come across amendments ala patches, generate changelogs referencing which amendments change which laws and when then finally when done compare the latest generated version against the published law. At that point you could do text searches generate glossaries of the legal terms, and finaly if you chose to make value judgments about the laws.
Games today take upwards of 50 people to make.
check out
Overdrive is a futuristic, team-based, multiplayer bike combat game, set in a post-apocalyptic Paris. It was developed over the last year by 7 computer science students from Paris, France, at EPITECH (an IT school), and artwork is by students and professors of Creapole.
or even,
The Featured Projects area has a new addition in the form of '9th Life' from Divide By Zero, a 10-student team from the Quantm multimedia institute in Brisbane, Australia. Incredibly, they too built this in a very short time - just 13 weeks - clearly it's been a busy quarter for the Aussies!
I'm not sure if they are commercial quality, but we're talking students and weeks here, a little open source can leverage a lot of output.
Oh the horror, oh the humanity, that's like saying the DOD has plans to invade every country on the earth, 50 or 60 that don't even exist and even a planet or two hidden in the bowels of the pentagon!
Seriously Gates and company "grew up" in the early days of computing, back when being dependent on a "single-source" or "sole-provider" was a bad thing so I'm not surprise that things he makes aren't designed to be a bit more platform independent than they let on.
"Levie's conviction was based on the in-person testimony of the girl who said she was paid to pose nude, coupled with the history of searches for "Lolitas" in Levie's Web browser."
The reality is that he is convicted, and apparently based solely on the word of one 9 year old, and search history on his browser for a uncommon name. Given the current political climate, if a underage person says your guilty of being a pedophile, unless you have the resources of Jacko, you might as well just kiss your ass goodbye, no physical evidence required, no resonably consistant story from the victim, no corroborative testimony, just a possible life imprisonment, and if you do manage to get released, your name on the sex-offenders list forever.
At least Cotton Mather isn't burn them at the stake anymore.
Slashdot Mirror
You have to learn to think in partial pressures,
Air is 20% O2, 80% 2 so;
14.7 psi @ 20% O2 = 2.94 psi O2, 11.76 psi N2; surface,
29.4 psi @ 20% O2 = 5.88 psi O2, 23.5 psi N2, 33ft below surface,
44.1 psi @ 20% O2 = 8.82 psi O2 35.28 psi N2, 66 ft below surface (this concentration causes blindness in newborn infants),
73.5 psi @ 20% O2 = 14.7 psi O2, 58.8 psi N2, 165 ft below surface ( the O2 is toxic here),
now if you change things a bit go to 165 ft and breath 68.5 psi of He2 and and a nice comfortable 5 psi O2, your joining to get as much oxygen as you would a 33 Ft and the smaller lighter easier to difuse helium molecules will not make your blood fuss up like a warm shaken bottle of soda pop. I think our Apollo spacecraft run at 100% O2 and vented down to 5 psi in orbit, which is why a fire on the launch pad was so fierce, they were at 14.7 psi O2 there.
One of my neighbors had to put ten rounds into a man's chest during a drug-bust, he did have a weapon, just refused to fall down when shot. It's very hard on the officer to have to do this, not to mention the wife and children of the perp who saw the whole thing.
So my advice is when they kick your door down, just sit down on the floor with your hands on your head and let the lawyers do the fighting it's just plain easier on everybody.
I think I'm going to go walk into a bank with an axe.
Three cheers for Canadian Gun Control, Banks get robbed with axes, rifles, shotguns, bazookas and cannons, but never a hand gun!
I would suggest that what you are really ranting about is more a derivative of feudalism than capitalism. Also the fore-runners of our unions were created to insure a degree of upward mobility to the serfs under the feudal system.
Feudalism is better for the haves, because insures they'll always have, that why the successfull tend to gravitate back towards a feudal system. Capitalism on the other hand insures the possibility of upward mobility based on merit rather than position, so the have-not's tend to gravitate towards it.
Feudalism tends to self-destruct, especialy when the "annoiting" runs out, just as european feudalism self-destructed when people finaly rejected the churches "annointing" of rulers as the will of god, our present industrial feudalism will self destruct as the "annointing" of government protection of patents and copyrights run out.
x86 hardware is really not the best design (any more)
Was it ever, at least 6809 - m68k was understandable by mere mortals and had a certain elegance. x86, ( hell even the 4004-8080) has always seemed kludgey, inelegant and incomprehensable.
The time of the $2000 home computer is over. The margins are fading.
There's been a $2000 dollar home computer for the last 20 years, although most home computers have been $1200 for the last 20. The recent $600.00 'puter might be an short term aberation, time will tell. My first store bought computer was a bundle with cpu, monitor and printer for $~1200.00 (I still use the printer and keyboard, man do I love that keyboard ) and had a 80286 @ 8MHz, the latest store bought, totaled out to $~1200.00 and had a P4@1.8GHz. The time of the $2000.00 computer has always been over, yet they are still around!
What Microsoft really fears is getting cornered into a commodity market, like the hardware guys mostly opperate in, that's why everything they do has a goal of brand differetiation. They're care that any errors are on the monopoly side rather than the commodity side. To really worry the Gates crew start saying "yeah windows is easier if you have an MCSE, but for the average joe they're both about the same"
Ellison?, he had to send in a corporate SWAT team to one of his Canadian Data Center's to enforce that they dump Windows. Oracle, uses Linux, they program apps to run on Linux, it's in their best interest to encourage enterprises use linux, so they can get the share of software budget that previously went to Microsoft.
A freind of mine was crossing into Canada, and had forgotten about a porn tape in the car, of course Canadian Customs found it and the agent said "Well we'll just have to confiscate this for the Queen". My friend couldn't resist telling the Canadian "I don't think she'll be amused".
so in reality only 16384 or 16K can be actualy used for NATing
The transaction houses don't help, I spent a couple hundred hours programming, programming around missing functions (everybody has a different idea of which functions are a security hazard) in the host's php for a website, only to get everything working so I did not have to store anything related to the CC info on my server, then the transaction house turns off the API i was using.
Next time around everything goes into a database with a good password, and if it gets cracked I play stupid; doing things wrong is on a par with state-of-the-art anyways.
I've heard of porn sites just sending numbers at random hoping for a hit; which given the high amount of charge-backs, and false numbers they are send by lusers, it's not that far-fetched.
There is something seriously wrong if your credit report shows nothing, but your getting turned down everytime. Weird stuff can get into your report, there is a lady with the same name as my wife, ssn one digit different, license number one digit different who like to get tax liens on her property, bounce checks ect., how do I know about this? It's because it ended up in our credit report, the state had a lien on our property instead of her's, and along the way we've probably paid a couple of her hospital bills too.
DUDE I refuse to do household tech support from the bathroom throne; if it's not smoking, it can wait. I also intensely dislike talking on the phone while using the toilet. If your wife can't wait until your done, she, like mine has serious people skills problem (Don't tell either of them I said that either).
NATing has some limitation, such as only have 64K connections. While that seems like a lot, when browsers start making multiple connections to fetch images, pre-cacheing next pages, DNS requests it can dry up alarmingly fast. It would be hard for an ISP connection provider to anticipate how many addresses they'd actualy need; one new technology could catch fire and blow a year of planning out the window.
We had an application like that, Command Dental running on SCO openserver, all they were doing was sending the print files to a seperate print spool, and running a awk script against the files to extract the data, a little tweeking and validated is all that's really required. I'll bet they're using the same technique and maybe a little visualBasic. If your in the US try beating them with the HIPPA stick about security.
But I agree with the idea that a lot of windows "developers" got fat and lazy in the era of no security on windows, and can't cope with even rudimentary security today.
I have to agree, the real differences between most major Linux distros is in the hardware auto-detect, some admin tools, and the filesystem lay-out. The latter is increasingly becoming the same with the new standards. I'm not even sure if the mac's OSX based on BSD base is really that much different, I suspect the biggest differences between OSX and BSD is in the windowing system and window manager.
I rescently change from an older suse distro to arch linux, a slackware based distro. Arch I thought would be a bear to admin because a lot of the automated suse tools wouldn't be there, but other than getting php to work (took a bit of reading to remember that php.ini uses ; for a comment ala windows style) and getting cups to work with the network printer (just seemed to mysteriously start working) I had no problems. I suspect that any reasonably astute windows user could do the same.
maybe the best first step would be to enter all of the original laws into a batch of text files; then log them in ala CVS, then edit them as you come across amendments ala patches, generate changelogs referencing which amendments change which laws and when then finally when done compare the latest generated version against the published law.
At that point you could do text searches generate glossaries of the legal terms, and finaly if you chose to make value judgments about the laws.
check out
or even,
I'm not sure if they are commercial quality, but we're talking students and weeks here, a little open source can leverage a lot of output.
I've got a copy of PS essentials on my wife's windowsXP machine that came bundled with our digital camera, and I still use The GIMP on that machine.
Oh the horror, oh the humanity, that's like saying the DOD has plans to invade every country on the earth, 50 or 60 that don't even exist and even a planet or two hidden in the bowels of the pentagon!
Seriously Gates and company "grew up" in the early days of computing, back when being dependent on a "single-source" or "sole-provider" was a bad thing so I'm not surprise that things he makes aren't designed to be a bit more platform independent than they let on.
If the first hop doesn't match, and the second hop does; then you've got an open-relay!
The reality is that he is convicted, and apparently based solely on the word of one 9 year old, and search history on his browser for a uncommon name. Given the current political climate, if a underage person says your guilty of being a pedophile, unless you have the resources of Jacko, you might as well just kiss your ass goodbye,
no physical evidence required,
no resonably consistant story from the victim,
no corroborative testimony,
just a possible life imprisonment, and if you do manage to get released, your name on the sex-offenders list forever.
At least Cotton Mather isn't burn them at the stake anymore.