[They] want a new computer that will be incredibly easy to use and come with a great suite of software out of the box for internet, email, photos, and multimedia (which make up 99% of my computer use), then you want a Mac. And Linux does not come with great software for internet (Firefox), email (Evolution/Thunderbird), photos (Gimp/GimpShop/Krita), and multimedia (Totem/Amarok/RhythmBox)? That blows...:(
Wow. as a gay young adult myself, I agree with you, but nevertheless I find it a rather bit... shall we say... queer that you have somehow managed to make an apt and useful analogy between using linux and being gay.
What I find perhaps the most interesting social phenomena, is that in this may be the highest signal to noise ratio discussion in any slashdot article, ever.
Sorry, I didn't realise that you could shrink the downward pull of gravity. I am fairly certain that it stays at about 9.81 m/s^2... Oh! you mean that with less mass, the required lift generated by the wings can be reduced relative against forward velocity and surface area, thus requiring less forward thrust to maintain speed/altitude. Delightful.
I'm sure the girl that just got molested will be happy to know that you are disgusted by her because she didn't get the person who raped her to wear a condom.
Not really, Are you making damn sure, all the time, without fail that if a user changes view.php?id=32 to view.php?id=33 that they are not getting access to content they shouldn't be?
What about cookies? Assuming the malicious user can (and will) build cookies of their choosing and content, are you making sure that this cannot somehow be used to hijack another users account?
Are you 100% certain, that every time you read get/post/put data that it has been marked as tainted, validated, and only after it has made it through some very harsh sanity checks it is allowed any where/close/ to a DB insert/query?
It gets even more muddeled in the world of XmlHttprequests when you have to validate against a plethora of other constraints...
I really havn't even begun to list possible attack vectors. Simply checking form data is almost 99% of the time not enough.
For a non-trivial web app, even the above is not easy to do unless you pay attention to it every step of development. And even if you do that, you will probabaly miss something.
As a web developer myself, I try dillagently to kill off any XSS attacks by writing good secure code, but there will always be a few corner cases in any non-trivial application that one does not count for. This is doubly so when dealing with web services that have to pump out huge amounts of data over an insecure medium.
What is most showing is how fast it will be till Yahoo fixes this vunerability as a sign of their metal.
Heh, if you ever need a competant web/systems developer, you can count me in. Hell, I would do it for free.
I think that you invision something like Group Hug but even more open to free speach. 95% of what is on that site is meaningless drivel, but the 5% that digs deep is... well I will trust it to you to know what I am talking about.
One interesting way of presenting it could be something like a persistant slashdot-esq system, except by default new posts go to the top of the page, root 'comments' would be treated more like a forum topic and have all the 'topics' merged together in one grandious discourse with a threaded discussion under it. A sprinkle of Ajax and it could be pretty sweet, not to mention could be the heart of a new forum paridigm.
As for hosting, you may want to (quite seriously) ask existing sites like piratebay or allofmp3 that are 'on the edge' for suggestions.
Anyways, I really do wish you all the best on your idea.
And if this "JavaFX" takes off (for better or for worse) then we would all be seeing a lot more applets, and then like I said, only the first init would be bothersome (on windows at least). I know on my linux box, Java applets load virtually instantly, so it would be no inconvenience to me.
Also, a bit of a discaimer, I am a little bit in love with the Dojo project, so I see this as being potentially disruptive to it, but nevertheless, If it really is a decent tool for pushing out good, usable, and accessible web apps, I would be all for it.
Java 5 and (even more so) 6 have really helped curb the init time of applets. Plus on windows, IIRC it stays resident so after the first instantiation of the Java VM, load up times are very small. This is not including the time required to download the required classes for the applet, but it would probably be no worse than waiting for a heavy javascript laden page to load up.
As a Canadian, I can confirm this. I once tried to set up a little home brew theater in my igloo, but the projector melted in the roof. A fire started briefly, but fortunately the melting ice quickly snuffed it out. It goes without saying that the projector was toasted in the incident. Whats worse though is that my igloo insurance policy did not cover the damages.
But, more importantly, a number of countries look to the US for a model of what it means to be free.
Living in the neighboring country to the north of the States, we have a log running tendency to blindly follow in their example. Thus, anything being introduced or changed there, will generally always have a direct impact on our laws and society, and when this isn't the case, the big U.S. corps generally see to it that our parliament gets lobbied into submission.
a communication tool used the world over where people can come together to bitch about movies - Ben Affleck - Dogma (1999) Speaking of bitching about movies...
That qoute was from Jay and Silent Bob.
Any links? google mews shows nothing. (at the moment)
If this is true, God Speed Stephen King. I hope your journey into the unknown is exciting as the stories you have told.
No, Really. Drop on somethign easy to use like ubuntu, set up a single, very limited user account, and have the students login to a fileshare that requires login. Have a link on the Desktop that asks for username and password and uses sshfs if you want simplicity.
Slashdot Mirror
And Linux does not come with great software for internet (Firefox), email (Evolution/Thunderbird), photos (Gimp/GimpShop/Krita), and multimedia (Totem/Amarok/RhythmBox)? That blows...
Wow. as a gay young adult myself, I agree with you, but nevertheless I find it a rather bit... shall we say... queer that you have somehow managed to make an apt and useful analogy between using linux and being gay.
What I find perhaps the most interesting social phenomena, is that in this may be the highest signal to noise ratio discussion in any slashdot article, ever.
Sorry, I didn't realise that you could shrink the downward pull of gravity. I am fairly certain that it stays at about 9.81 m/s^2... Oh! you mean that with less mass, the required lift generated by the wings can be reduced relative against forward velocity and surface area, thus requiring less forward thrust to maintain speed/altitude. Delightful.
I wonder what the argument for 'not' testing these wings up to breakage point?
And also, quite possibly, the first ever apt analogy ever seen on /. !
I'm sure the girl that just got molested will be happy to know that you are disgusted by her because she didn't get the person who raped her to wear a condom.
You disgust me.
A link to the source document would probably have been a lot more helpfull. It's no longer cute to act dumb.
Not really, Are you making damn sure, all the time, without fail that if a user changes view.php?id=32 to view.php?id=33 that they are not getting access to content they shouldn't be? What about cookies? Assuming the malicious user can (and will) build cookies of their choosing and content, are you making sure that this cannot somehow be used to hijack another users account? Are you 100% certain, that every time you read get/post/put data that it has been marked as tainted, validated, and only after it has made it through some very harsh sanity checks it is allowed any where /close/ to a DB insert/query?
It gets even more muddeled in the world of XmlHttprequests when you have to validate against a plethora of other constraints...
I really havn't even begun to list possible attack vectors. Simply checking form data is almost 99% of the time not enough.
For a non-trivial web app, even the above is not easy to do unless you pay attention to it every step of development. And even if you do that, you will probabaly miss something.
more correctly (If I read the overly pink article right), it is the reliance that someone will click on something like this:
a rch.yahoo.com/search?p=french+military+victories$l t;/a>
----
OMG! Check out this funny search!
"French military victories"
<a href='evilsite.com/haxzoryouryahoo.cgi'>http://se
HAHAHA! Couldn't stop laughing...
----
As a web developer myself, I try dillagently to kill off any XSS attacks by writing good secure code, but there will always be a few corner cases in any non-trivial application that one does not count for. This is doubly so when dealing with web services that have to pump out huge amounts of data over an insecure medium.
What is most showing is how fast it will be till Yahoo fixes this vunerability as a sign of their metal.
imho...
Heh, if you ever need a competant web/systems developer, you can count me in. Hell, I would do it for free.
I think that you invision something like Group Hug but even more open to free speach. 95% of what is on that site is meaningless drivel, but the 5% that digs deep is... well I will trust it to you to know what I am talking about.
One interesting way of presenting it could be something like a persistant slashdot-esq system, except by default new posts go to the top of the page, root 'comments' would be treated more like a forum topic and have all the 'topics' merged together in one grandious discourse with a threaded discussion under it. A sprinkle of Ajax and it could be pretty sweet, not to mention could be the heart of a new forum paridigm.
As for hosting, you may want to (quite seriously) ask existing sites like piratebay or allofmp3 that are 'on the edge' for suggestions.
Anyways, I really do wish you all the best on your idea.
The Cross-platform bit is nice too.
And if this "JavaFX" takes off (for better or for worse) then we would all be seeing a lot more applets, and then like I said, only the first init would be bothersome (on windows at least). I know on my linux box, Java applets load virtually instantly, so it would be no inconvenience to me. Also, a bit of a discaimer, I am a little bit in love with the Dojo project, so I see this as being potentially disruptive to it, but nevertheless, If it really is a decent tool for pushing out good, usable, and accessible web apps, I would be all for it.
Java 5 and (even more so) 6 have really helped curb the init time of applets. Plus on windows, IIRC it stays resident so after the first instantiation of the Java VM, load up times are very small. This is not including the time required to download the required classes for the applet, but it would probably be no worse than waiting for a heavy javascript laden page to load up.
As a Canadian, I can confirm this. I once tried to set up a little home brew theater in my igloo, but the projector melted in the roof. A fire started briefly, but fortunately the melting ice quickly snuffed it out. It goes without saying that the projector was toasted in the incident. Whats worse though is that my igloo insurance policy did not cover the damages.
Living in the neighboring country to the north of the States, we have a log running tendency to blindly follow in their example. Thus, anything being introduced or changed there, will generally always have a direct impact on our laws and society, and when this isn't the case, the big U.S. corps generally see to it that our parliament gets lobbied into submission.
So that is why it matters to us.
Dojo 0.4.2 has been out for a while now, and is vastly superior to any of the 0.3.x releases. Why did they pick such an old revision of the toolkit?
So is this why there is not yet a pill that will let me do without sleep?
Any links? google mews shows nothing. (at the moment) If this is true, God Speed Stephen King. I hope your journey into the unknown is exciting as the stories you have told.
No, Really. Drop on somethign easy to use like ubuntu, set up a single, very limited user account, and have the students login to a fileshare that requires login. Have a link on the Desktop that asks for username and password and uses sshfs if you want simplicity.
I would just like to state for the record that I have google-earth running just fine on my Dapper AMD64 system. It installed and works like a charm.