No coding is a craft or maybe engineering, not an art. An artist's objective is to produce something that has an aesthetic quality. An engineer's or craftsman's objective is to produce something that performs a function. "Aesthetically pleasing" is secondary. e.g. the function of a bridge is to get people or things across a river without them getting their feet wet
Craftsmen are artists, a lot of the time. Certainly you wouldn't say things like for example a table to always consider function over form. You might prefer a table that has been designed to be useful over it's appearance, but others might not.
Similarly, you might write code with esthetics a secondary concern, but others may not, witch would make their code art.
Certainly, not all code is art. And certainly some is.
First of all: Test what? Details of the bug have not been released. So only your own arrogance validates your "test" of this bug.
What details are you talking about. They are all spelled out clearly in the article. Change the mime type of an EXE and it gets run. Only it doesn't. I've tried it both ways (having an.exe with some other mime type with an external viewer, and having an.exe renamed named to.txt and sent as an executable). The program never ran.
sent an EXE as an audio file. It was automaticaly downloaded and I got an error message saying that it was an invalid audio file.
Sending an.txt file with a win32 program file in it (renamed.exe) and it will ask you if you want to open or save or whatever. If you click 'open' it opens in notepad. Weirdly, a regular text file sent with a mime type saying that it's an exicutable will just show up as a regular text file.
I'm using IE6, though. And some comments seem to be saying this only affects IE5. So who knows. I've posted URLs for my expirements on slashdot,here, here, and here
That's true, but implied warranties make the assumption that the product is going to be as good as others on the market. And we all know, or at least have our stereotypes about the software market.
So in the end, software has no implied warranties, because no one can reasonably expect that it won't be bug/security issue free.
3. Believe the "It's legal to download ROMs if you delete them within 24 hours" type rumors that get spread around the internet by the legally ignorant.
It's legal to download ROMs and keep them for as long as you want, mp3s or any other copyrighted content as well. What you can't do is give them to other people (so the site you nabbed it off is breaking the law, disclaimer or no)
The problem here arises from the fact that Windows allows more than one '.' in a filename, but will only display one. Therefore, a malicious webmaster can name a file "foo.pdf.exe" and Windows Open/Save dialog will only display foo.pdf.
Windows, by default, does not show the actual file extension. The 'actual' file extension is the last one. You can have as many '.'s in your file name, and the last one won't be shown if file extensions are turned off (not 'just one')
If you turn file extensions on its not a problem.
*sigh* is it to much to ask that people actually know what they're talking about?
URL: http://autopr0n.com/random.txt.
Mime type: application/octet-stream
Actual type: text file
Action: shows up in IE as a regular text file.
Now, when you take a real.exe file, rename it to.txt, and then send it as application/octet-stream IE will prompt to download/open, and if you click open it will open it in notepad. For example
URL: http://autopr0n.com/random.txt.
Mime type: application/octet-stream
Actual type: win32 executable (shows you how long your computer has been running, actually)
What happens if, you send an.exe file with an audio/x-wav mime type is that IE will handel it like any other.exe file it runs across. it'll give you the option to save or run it, as an EXE. in other words, the mime type is pretty much ignored.
This article is complete crap. I tested it, myself, and it simply isn't true.
A quick edit of my mime.types file in apache, and.exe files are now sent as text/plain. When I type in the URL http://autopr0n.com/cliplay.exe. Internet Explorer does indeed handle it the same way it would handle executable content. It asks if i would like to download or execute it Hardly much of a fucking security issue if you ask me, especially considering the fact that it would behave in the exact same manner if the mime type was application/octet-stream or whatever the default value was.
In other words, the meme type has no effect on how IE handles executable content. But if this were a problem, it would mean that IE automatically ran all executable content it received, including stuff with the proper mime header. You would know this two if you stopped to think about it for half a second.
Oh, and mozilla does the exact same thing (well, it doesn't give you the option to execute from the cache like IE does). At least in the somewhat older version I have.
You guys couldn't take five fucking minutes to test this before posting this crap story?
Oh wait, it was from michael... nevermind. Anyone else remember the united devices fiasco a while back where michael attacked some anti-cancer distributed software because it was being funded by 'corporations' (Intel) who would of course patent everything and make money off everyone's spare cycles (despite the fact that it was clearly stated on the site that it wouldn't be). Couldn't be bothered to check sources or verify anything before posting a story to millions. And it's the same here. Way to fucking go Mr. 'journalist'
Please, Microsoft may have used some competitive pressure, by making IE easier to come by then anything else. But I have trouble blaming Netscape's demise on anyone but Netscape. 4.7 was a complete piece of shit, and Netscape put out some of the buggiest, crash prone, shit ever. That's why people switched to IE, that's why I switched to IE. Because Netscape, comparatively, was a piece of crap.
Since when does everything need to make someone lots of money?
In a true peer-to-peer system, the costs would be transparently distributed among the users in the form of their internet-connectivity bills. Since they are paying for those anyway, it wouldn't even be noticeable.
I'd like to share a revelation I've had during my time here. It's that you humans aren't actually mammals. You see, every mammal instinctively reaches a natural equilibrium with the surrounding environment, but you humans do not. You multiply and multiply until every last resource is consumed, and the only way you can survive is to spread to another area. There is another being on this planet that follows the same pattern. Do you know what it is?
A virus. You humans are a disease, a cancer on the planet. And we? We are the cure.
From what I understand, EFnet is a real mess because they don't use things like ChanServs/nickservs, etc, so stupid script kiddies will try to DDoS servers and users in attempts to take over channels (yes, extremely stupid)
I wonder why the colorado.edu people didn't just move to another network? Undernet, I believe, supports more advance authentication methods. There's slashnet:) and some others. They could also have tried going it alone, as a server for the local university.
I don't really think IRC is dying per-se, but these big networks are really becoming untenable. In my experience, it seems to be dividing up into niche community networks like slashnet, espernet (RPG stuff) with a few major rooms -- such as #slashdot and #kuro5hin on slashnet -- where most people hang out.
Also, in all this time I never knew what Efnet stood for, just finding that out was worth clicking the story:P
Slashdot Mirror
"Parse::Perl. Just as the name says, its goal will be to provide a pure Perl parser that parses Perl itself."
This could actually be useful for things like self-modifying code and the sort.
Of course, writing anything in Perl in the first place is a bad idea, but beyond that, self parsing could actually be useful.
now, if the had had a self-interpreter...
No coding is a craft or maybe engineering, not an art. An artist's objective is to produce something that has an aesthetic quality. An engineer's or craftsman's objective is to produce something that performs a function. "Aesthetically pleasing" is secondary. e.g. the function of a bridge is to get people or things across a river without them getting their feet wet
Craftsmen are artists, a lot of the time. Certainly you wouldn't say things like for example a table to always consider function over form. You might prefer a table that has been designed to be useful over it's appearance, but others might not.
Similarly, you might write code with esthetics a secondary concern, but others may not, witch would make their code art.
Certainly, not all code is art. And certainly some is.
First of all: Test what? Details of the bug have not been released. So only your own arrogance validates your "test" of this bug.
.exe with some other mime type with an external viewer, and having an .exe renamed named to .txt and sent as an executable). The program never ran.
What details are you talking about. They are all spelled out clearly in the article. Change the mime type of an EXE and it gets run. Only it doesn't. I've tried it both ways (having an
sent an EXE as an audio file. It was automaticaly downloaded and I got an error message saying that it was an invalid audio file.
.txt file with a win32 program file in it (renamed .exe) and it will ask you if you want to open or save or whatever. If you click 'open' it opens in notepad. Weirdly, a regular text file sent with a mime type saying that it's an exicutable will just show up as a regular text file.
Sending an
I'm using IE6, though. And some comments seem to be saying this only affects IE5. So who knows. I've posted URLs for my expirements on slashdot,here, here, and here
That's true, but implied warranties make the assumption that the product is going to be as good as others on the market. And we all know, or at least have our stereotypes about the software market.
So in the end, software has no implied warranties, because no one can reasonably expect that it won't be bug/security issue free.
3. Believe the "It's legal to download ROMs if you delete them within 24 hours" type rumors that get spread around the internet by the legally ignorant.
It's legal to download ROMs and keep them for as long as you want, mp3s or any other copyrighted content as well. What you can't do is give them to other people (so the site you nabbed it off is breaking the law, disclaimer or no)
The problem here arises from the fact that Windows allows more than one '.' in a filename, but will only display one. Therefore, a malicious webmaster can name a file "foo.pdf.exe" and Windows Open/Save dialog will only display foo.pdf.
Windows, by default, does not show the actual file extension. The 'actual' file extension is the last one. You can have as many '.'s in your file name, and the last one won't be shown if file extensions are turned off (not 'just one')
If you turn file extensions on its not a problem.
*sigh* is it to much to ask that people actually know what they're talking about?
I don't really think the EEF is going to go around lobbying for more restrictions on programmers.
Sorry, the second URL should be http://autopr0n.com/uptime.txt
URL: http://autopr0n.com/random.txt.
.exe file, rename it to .txt, and then send it as application/octet-stream IE will prompt to download/open, and if you click open it will open it in notepad. For example
Mime type: application/octet-stream
Actual type: text file
Action: shows up in IE as a regular text file.
Now, when you take a real
URL: http://autopr0n.com/random.txt.
Mime type: application/octet-stream
Actual type: win32 executable (shows you how long your computer has been running, actually)
URL: http://autopr0n.com/cliplay.exe
Mime type: audio/x-wav
Action: Opens up media player and says "cannot play back, format not supported"
In other words, you're completely full of shit. And so is the person who posted this bogus artical in the first place.
If you try that on a windows machine, make sure you don't have .bat files set as server side exicutables.
you'd be just as likely to kill your server's hard drive while the user got a nice web page that said "please wait, unpacking..."
What happens if, you send an .exe file with an audio/x-wav mime type is that IE will handel it like any other .exe file it runs across. it'll give you the option to save or run it, as an EXE. in other words, the mime type is pretty much ignored.
This article is complete crap. I tested it, myself, and it simply isn't true.
.exe files are now sent as text/plain. When I type in the URL http://autopr0n.com/cliplay.exe. Internet Explorer does indeed handle it the same way it would handle executable content. It asks if i would like to download or execute it Hardly much of a fucking security issue if you ask me, especially considering the fact that it would behave in the exact same manner if the mime type was application/octet-stream or whatever the default value was.
A quick edit of my mime.types file in apache, and
In other words, the meme type has no effect on how IE handles executable content. But if this were a problem, it would mean that IE automatically ran all executable content it received, including stuff with the proper mime header. You would know this two if you stopped to think about it for half a second.
Oh, and mozilla does the exact same thing (well, it doesn't give you the option to execute from the cache like IE does). At least in the somewhat older version I have.
You guys couldn't take five fucking minutes to test this before posting this crap story?
Oh wait, it was from michael... nevermind. Anyone else remember the united devices fiasco a while back where michael attacked some anti-cancer distributed software because it was being funded by 'corporations' (Intel) who would of course patent everything and make money off everyone's spare cycles (despite the fact that it was clearly stated on the site that it wouldn't be). Couldn't be bothered to check sources or verify anything before posting a story to millions. And it's the same here. Way to fucking go Mr. 'journalist'
MDI annoys the hell out of me, to be honest.
Please, Microsoft may have used some competitive pressure, by making IE easier to come by then anything else. But I have trouble blaming Netscape's demise on anyone but Netscape. 4.7 was a complete piece of shit, and Netscape put out some of the buggiest, crash prone, shit ever. That's why people switched to IE, that's why I switched to IE. Because Netscape, comparatively, was a piece of crap.
I'm glad you told me all of this. Because your oppinion really matters to me. It really does.
Strange. You'd think google would be able to just do a select min() from their DB, though.
A settelment is when two sides agree on something. If microsoft dosn't have a say, then it isn't a settlement.....
I'm not sure how P2P can make money.
Since when does everything need to make someone lots of money?
In a true peer-to-peer system, the costs would be transparently distributed among the users in the form of their internet-connectivity bills. Since they are paying for those anyway, it wouldn't even be noticeable.
Yes, it does. Everything from .doc to .htm to photoCD files.
My internal CD-ROM drive turns itself off when not in use.
Cheap things are good!
I'd like to share a revelation I've had during my time here. It's that you humans aren't actually mammals. You see, every mammal instinctively reaches a natural equilibrium with the surrounding environment, but you humans do not. You multiply and multiply until every last resource is consumed, and the only way you can survive is to spread to another area. There is another being on this planet that follows the same pattern. Do you know what it is?
A virus. You humans are a disease, a cancer on the planet. And we? We are the cure.
From what I understand, EFnet is a real mess because they don't use things like ChanServs/nickservs, etc, so stupid script kiddies will try to DDoS servers and users in attempts to take over channels (yes, extremely stupid)
:) and some others. They could also have tried going it alone, as a server for the local university.
:P
I wonder why the colorado.edu people didn't just move to another network? Undernet, I believe, supports more advance authentication methods. There's slashnet
I don't really think IRC is dying per-se, but these big networks are really becoming untenable. In my experience, it seems to be dividing up into niche community networks like slashnet, espernet (RPG stuff) with a few major rooms -- such as #slashdot and #kuro5hin on slashnet -- where most people hang out.
Also, in all this time I never knew what Efnet stood for, just finding that out was worth clicking the story