Slashdot Mirror


User: kowalski1971

kowalski1971's activity in the archive.

Stories
0
Comments
5
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 5

  1. Simple way to keep up to date on Techies Working for Peanuts · · Score: 4, Interesting

    Whilst I couldn't see myself managing for long without regular compensation, if I was out of work I would definitely consider voluntary/low-paid work simply to keep up to date. There is no easier way of keeping up to date with standards and new technologies than working in your area of expertise (xml/xsl + related in my case). I realize this is only applicable to those who work with technologies that change (I guess most of us here ?) but is still valid for others as its a great way of keeping the brain ticking and looks pretty good on the CV/resume too. Gareth.

  2. Text of NTK now article on A Medireview Approach To Stopping E-Mail Attacks · · Score: 2, Informative

    Appears to have been /.'ed, here's the relevant bit:

    Nice to see, in the midst of all these scandals, Yahoo turning a healthy profit. But as other companies fiddle the figures, Yahoo's been busy instead with fiddling its own users' private correspondence. In a fantastically clumsy attempt to prevent cross-site scripting attacks, the free e-mail wing of the sprawling giant has long been replacing complete English words in the text of HTML mail sent to its users. Mention "mocha" in an HTML mail to a friend with a @yahoo.com account, and your choice in coffee will be silently switched to "espresso". Talk about "free expression", and your recipient will think you said "free statement". Here's the full list of swaperoos:
    http://www.ntk.net/2002/07/12/yahoo.txt
    - try not to mail it to your friends

    This fiddling has been going on now for over a year year (the ever vigilant RISKS digest noted it back in March 2001). But because of Yahoo's underhand methods, very few people have spotted the turnabout - certainly far fewer than if Yahoo had done the sensible thing and, say, "**"'ed out the vowels in the word, or, God forbid, written a smarter parser. But the sneakier you are, the wider the damage spreads. The word "medieval" (since it contains the javascript command "eval") is converted in Yahoo mail to "medireview". Google now shows over 640 sites (and 1,150 separate instances) of the word "medireview" being used as a synonym for medieval. University papers, bibliographies and book reviews, Indian newspaper columnists, and endless enthusiast sites drop it unseen into texts. People have begun to ask where it originally came from, and does it have a subtler meaning beyond "medieval"? Is Yahoo ever going to fix its filters? Or is it time we pushed to get the first regexp-obfuscated word into the Oxford English Dictionary? http://catless.ncl.ac.uk/Risks/21.34.html - does anyone still at Yahoo even know how to turn it off?
    http://www.google.com/search?q=medireview
    - NTK now entirely filled with google links

  3. Re:Can someone please explain... on A Medireview Approach To Stopping E-Mail Attacks · · Score: 2, Informative

    if the email contained embedded javascript, replacing key parts of the javascript syntax would render it useless. javascript like any other (programming) language relies on the syntax of the code being precise... in the English language 'eval' and 'review' have similar meanings but in javascript 'review' means nothing.

  4. Re:But what does it LOOK like? on GM's Billion-Dollar Fuel-Cell Bet · · Score: 1

    There was a few rather nice looking Lexus's in Minority Report... apparently Speilberg researched the film in quite a lot of depth (consulting scientists, technofiles/phobes etc)... anyone know if they were running on alternative fuels ?

  5. Re: WinME on QuickTime 6 Is Out · · Score: 1

    ME is XP without the security flaws, the NT kernel, and the bloat.

    ...ME is actually the worst bits of 95/98 (the kernel, the crashes) combined with the unfinished worst bits from XP (the media player integration, the pretty pictures etc). It also has the same unecessary upgrade path... ME over 98 release 2... XP over 2000.