The same is true of a multi-user whiteboard, which needs to know when another user has drawn a stroke. In addition, server-side image map doesn't support drag input, only click input.
Use frames and meta refresh, done.
That has three drawbacks:
Sending the entire image every time using "frames and meta refresh" is wasteful of bandwidth, particularly over satellite or cellular which tends to be fairly strictly metered.
Sending causes the screen to become blank for a moment between when the new document's HTML loads and when the current revision of the whiteboard image loads.
I don't see how combining image maps with meta refresh is going to let the user drag over an image to add a stroke to a multi-user whiteboard. The server-side image map submits only on a click, not on a drag. If no client-side script is active, the browser instead treats a drag as an attempt to copy the link to the computer's local file system as a URL file or the image as a JPEG or PNG file.
You do know this link doesn't work if client-side script is turned off, correct? Without client-side script, the server cannot see the fragment identifier (the part after the #, in this case q=IRC), and the document behaves as if you had navigated to https://f-droid.org/packages/ itself.
What you're describing are fully featured web-hosted apps.
Many users of tech forums like Slashdot and SoylentNews have concluded that "fully featured web-hosted apps" ought never to have existed in the first place.
If a CPU can't be "exhausted", then why does a desktop PC have an "exhaust" fan?
Nor is the CPU the only component of a computer system that can be exhausted. A laptop, tablet, or smartphone has a battery that is discharged more quickly when Coinhive is running.
The price of electric power depends on where you live. And in a lot of places, people have to pay twice for electric power: once to run the computer and once to run the air conditioner that moves the heat generated by the computer to the outside.
nevermind that [viewers] got their cut when they consumed the content on the site
There are plenty of native IRC clients available for basically every operating system.
For one thing, you generally need to be an administrator to install such a program, and if you're borrowing the use of a friend's or library's computer, you're likely to lack permission to permanently install software. In addition, the web-based IRC clones (such as Skype, Slack, and Discord) tend to integrate retrieval of older messages, images, attachments, and other things that the IRC protocol itself does not standardize.
And which multi-user whiteboard protocol do the native multi-user whiteboard clients use?
If people still knew how to write HTML, almost no web site would need to use any "JavaScript" or other "active content"
How would, say, a web-based front-end to an IRC server work without script? It needs to know when messages have arrived in order to display them. The same is true of a multi-user whiteboard, which needs to know when another user has drawn a stroke. In addition, server-side image map doesn't support drag input, only click input.
Or should those instead be native executables that a user can download, install, and use? If so, then because native executables are generally specific to one operating system, Murphy's law holds that such an application will inevitably be designed for an operating system other than the one your device regularly runs. And it's still "software [manually] downloaded from arbitrary foreign sources".
Or should real-time interactive applications instead be written for the Java Virtual Machine or the.NET Common Language Runtime? Even though one such executable can run on multiple desktop operating systems, it still generally excludes iOS and Android, and it's stlil "software [manually] downloaded from arbitrary foreign sources".
But practically, what power would the maintainer of an application distributed as free software have to deter misuse of the application to infringe third parties' copyrights?
If you unlock the bootloader and replace the stock ROM (which has GMS) with a build of AOSP (which lacks GMS), then Google Play Store won't be installed in the first place.
AMP is Accelerated Mobile Pages, an HTML dialect that's processed by JavaScript hosted by Google. Google claims that AMP is quicker for at least three reasons:
1. The AMP script is less heavy than some of the ad, responsive image, and video display scripts on popular sites. 2. Elements far above and far below the viewport are removed from the DOM. This makes it less likely that the browser will have to purge other tabs from RAM, nor the operating system other applications. 3. Documents are mirrored by the www.google.com host, to which the user already holds a TCP connection.
I'd love to see OOTS animated, in more or less the same style as the webcomic is drawn. Great story, great humour, and absolutely no need to get at all fancy with the art.
last I checked [slashdot.org], your application wasn't free software either for fear of malicious forks.
My software is 100% free no cost
Your application is available without charge; I'm not disputing this. I'm disputing that it's "free" in one sense commonly used on Slashdot over the past 20 years. As you wrote in #55453837:
NO FORKS OF MY APP DONE BY OTHERS AS MALICIOUS DOPPLEGANGERS EXIST!
Even if a defense to copyright infringement is successful, downloading a permanent copy of the video from YouTube's server without permission from YouTube is still a violation of YouTube's terms of use and therefore of the Computer Fraud and Abuse Act and foreign counterparts.
Email addresses either work or not (that's what the verification mail is for). Why software bothers to "parse" these at all I never quite understood
It's to reduce the fraction of verification emails that bounce. Some email smarthosts penalize senders for excessive bounces.
it is a piece of text that when fed to an SMTP program may or may not result in a mail to whoever is filling in your form.
It's also to ensure that the user didn't inject command-line options or other security-compromising garbage into the address that the form's action code is about to feed to the MSA.
It's about as stupid as asking to "retype" your email address
You'd be surprised at how many non-technical users fat-finger their email addresses, causing the chosen username to be unavailable because the verification mail was never received.
Wouldn't it be nice if you planned to watch a lot of video to say, yes for $4.99/month don't count that against my data allowance? How is tha in any way a bad thing to let the consumer have more flexible access and payment?
What criteria does a video provider not on the list, such as your cousin's MediaGoblin server, need to meet in order to be added to the list?
Can Pi-Hole speed you up like resolving like a FASTER remote DNS via hardcoded favorite sites
Yes. Pi-hole can integrate somewhat with your proprietary application to protect an entire network. The administrator of a Pi-hole installation can generate a blacklist and upload it, and Pi-hole will apply it to all machines using it for DNS.
Let's see: From a LOGICAL standpoint, you have to buy a Raspberry Pi board right?
Pi-hole is DNS resolver software that can run on any rooted Linux box on your network. Some might buy a Raspberry Pi SBC and dedicate it to Internet filtering, but it isn't strictly necessary. If you're running custom Linux firmware on your existing router, for example, you may be able to put Pi-hole on that. It can also run in a Docker container on a Windows laptop for protection on the go, though I would advise putting a hosts file in front of Pi-hole in that situation because Docker slows things down.
NATIVE & FREE
If ad networks start using random subdomains, and the "NATIVE & FREE" product can't block random subdomains, then the "NATIVE & FREE" product is NATIVE & FREE & USELESS.
Oh, and last I checked, your application wasn't free software either for fear of malicious forks.
Putting an access filter into a school is the last thing you'd witness around here. Especially when it comes to universities.
Non-profit universities don't have unlimited bandwidth. Nor do they want to contribute to Internet access patterns that are more likely than not to disrupt instruction in the classroom. Toward this, many universities tend to block access to certain Internet resources from classrooms while allowing it from dormitories.
After all, playing the video locally requires downloading the data anyway
Both U.S. copyright law and the YouTube terms of use distinguish an ephemeral copy of a few seconds of a work at a time from a permanent copy of its entirety. And even in the case where the caching mechanism ends up keeping an ephemeral copy of (say) the entirety of a short film in order to reduce the latency of seeking, U.S. copyright law (17 USC 512(b)(2)(B)) distinguishes a copy under control of a user agent that respects Cache-Control from a copy under control of a program that does not.
You mention buying DGA domains, presumably before the author of a piece of client-side malware does. This is a tactic that some law enforcement organizations have used to fight client-side malware. This tactic costs money for each domain, as you correctly mention.
But I was not referring to this tactic. I was referring to a hosts-evasion technique that can be executed for the price of one domain. An advertisement network operator buys one domain and creates a practically unbounded number of subdomains under this domain. This costs the price of one domain and has absolutely nothing to do with a DGA, nor with "SPENDING MONEY YOU DON'T NEED TO SPEND".
The reason the author of client-side malware registers multiple domains in the first place instead of registering one domain and creating subdomains is that law enforcement can more easily seize one domain than multiple domains. But because tracking users from site to site with a third-party cookie is not (currently) a crime, the ad network operators are not concerned about domain seizure. Therefore, the ad network operators save money by registering one domain and creating subdomains.
Do you require a live proof of concept using wildcard DNS and subdomain generation?
Unless you're targeting a system with 32KB of RAM or less, or you have very strict realtime guarantees (and so aren't even using malloc) there's rarely a good reason to use C these days.
I would dispute this 32 KiB figure.
Several years ago, I wrote a program for Game Boy Advance homebrew that used a single std::ostringstream once, and even after enabling -Wl,--gc-sections, the statically linked executable was 180,032 bytes. It turned out that the constructor for a std::ostringstream in GNU libstdc++ would call the constructors for date, time, and currency formatting aspects of the locale even if I never output a date, time, or currency object. For a scale reference, the GBA's RAM is 32 KiB of fast RAM, 256 KiB of slow RAM, and 96 KiB of video RAM. Although up to 32 MiB of execute-in-place ROM in the cartridge is available for a single-player game, no cartridge is inserted into the systems of players 2, 3, and 4. Thus the program has to fit completely into the 256 KiB of slow RAM, as the fast RAM is used for the stack and BSS.
Slashdot Mirror
The same is true of a multi-user whiteboard, which needs to know when another user has drawn a stroke. In addition, server-side image map doesn't support drag input, only click input.
Use frames and meta refresh, done.
That has three drawbacks:
https://f-droid.org/packages/#q=IRC
You do know this link doesn't work if client-side script is turned off, correct? Without client-side script, the server cannot see the fragment identifier (the part after the #, in this case q=IRC), and the document behaves as if you had navigated to https://f-droid.org/packages/ itself.
What you're describing are fully featured web-hosted apps.
Many users of tech forums like Slashdot and SoylentNews have concluded that "fully featured web-hosted apps" ought never to have existed in the first place.
If a CPU can't be "exhausted", then why does a desktop PC have an "exhaust" fan?
Nor is the CPU the only component of a computer system that can be exhausted. A laptop, tablet, or smartphone has a battery that is discharged more quickly when Coinhive is running.
The electricity cost is negligible too.
The price of electric power depends on where you live. And in a lot of places, people have to pay twice for electric power: once to run the computer and once to run the air conditioner that moves the heat generated by the computer to the outside.
nevermind that [viewers] got their cut when they consumed the content on the site
Why do people keep referring to viewing works created by others as "consuming" them? A work isn't "consumed", or used up, in the act of viewing it.
There are plenty of native IRC clients available for basically every operating system.
For one thing, you generally need to be an administrator to install such a program, and if you're borrowing the use of a friend's or library's computer, you're likely to lack permission to permanently install software. In addition, the web-based IRC clones (such as Skype, Slack, and Discord) tend to integrate retrieval of older messages, images, attachments, and other things that the IRC protocol itself does not standardize.
And which multi-user whiteboard protocol do the native multi-user whiteboard clients use?
If people still knew how to write HTML, almost no web site would need to use any "JavaScript" or other "active content"
How would, say, a web-based front-end to an IRC server work without script? It needs to know when messages have arrived in order to display them. The same is true of a multi-user whiteboard, which needs to know when another user has drawn a stroke. In addition, server-side image map doesn't support drag input, only click input.
Or should those instead be native executables that a user can download, install, and use? If so, then because native executables are generally specific to one operating system, Murphy's law holds that such an application will inevitably be designed for an operating system other than the one your device regularly runs. And it's still "software [manually] downloaded from arbitrary foreign sources".
Or should real-time interactive applications instead be written for the Java Virtual Machine or the .NET Common Language Runtime? Even though one such executable can run on multiple desktop operating systems, it still generally excludes iOS and Android, and it's stlil "software [manually] downloaded from arbitrary foreign sources".
links to pirated content are not piracy themselves.
That depends on the country. One district court in Slashdot's home country ruled in 2000 that linking to an infringing copy is contributory infringement. Intellectual Reserve, Inc. v. Utah Lighthouse Ministry, Inc.
But practically, what power would the maintainer of an application distributed as free software have to deter misuse of the application to infringe third parties' copyrights?
Tap Uninstall Updates, then tap Disable.
If you unlock the bootloader and replace the stock ROM (which has GMS) with a build of AOSP (which lacks GMS), then Google Play Store won't be installed in the first place.
Yes, inefficiently displayed ads make the web suck. That said, not all ads are inefficiently displayed.
Google Play Services keeps reinstalling itself on my phone unbidden.
It's "bidden" all right, by Google Play Store. Remove that and Google Play Services will stop trying to reinstall itself.
A Windows license is not zero cost.
AMP is Accelerated Mobile Pages, an HTML dialect that's processed by JavaScript hosted by Google. Google claims that AMP is quicker for at least three reasons:
1. The AMP script is less heavy than some of the ad, responsive image, and video display scripts on popular sites.
2. Elements far above and far below the viewport are removed from the DOM. This makes it less likely that the browser will have to purge other tabs from RAM, nor the operating system other applications.
3. Documents are mirrored by the www.google.com host, to which the user already holds a TCP connection.
That's still close to the "switch to previous tab" shortcut (Ctrl+Shift+Tab) on a non-French keyboard.
I'd love to see OOTS animated, in more or less the same style as the webcomic is drawn. Great story, great humour, and absolutely no need to get at all fancy with the art.
Would it look something like the Cyanide & Happiness shorts?
last I checked [slashdot.org], your application wasn't free software either for fear of malicious forks.
My software is 100% free no cost
Your application is available without charge; I'm not disputing this. I'm disputing that it's "free" in one sense commonly used on Slashdot over the past 20 years. As you wrote in #55453837:
This attitude toward forks contradicts how the GNU project and the Debian project define "free software". See "What is free software?" and "Debian Free Software Guidelines".
RaspberryPI's & Linux boxes COST MONEY
So does a Windows license for running your application. Or do you consider Wine a fully supported platform?
Even if a defense to copyright infringement is successful, downloading a permanent copy of the video from YouTube's server without permission from YouTube is still a violation of YouTube's terms of use and therefore of the Computer Fraud and Abuse Act and foreign counterparts.
Email addresses either work or not (that's what the verification mail is for). Why software bothers to "parse" these at all I never quite understood
It's to reduce the fraction of verification emails that bounce. Some email smarthosts penalize senders for excessive bounces.
it is a piece of text that when fed to an SMTP program may or may not result in a mail to whoever is filling in your form.
It's also to ensure that the user didn't inject command-line options or other security-compromising garbage into the address that the form's action code is about to feed to the MSA.
It's about as stupid as asking to "retype" your email address
You'd be surprised at how many non-technical users fat-finger their email addresses, causing the chosen username to be unavailable because the verification mail was never received.
Wouldn't it be nice if you planned to watch a lot of video to say, yes for $4.99/month don't count that against my data allowance? How is tha in any way a bad thing to let the consumer have more flexible access and payment?
What criteria does a video provider not on the list, such as your cousin's MediaGoblin server, need to meet in order to be added to the list?
If there's a PSP inside a PlayStation 4's AMD Jaguar CPU, then why can't it play PSP games?
Last I checked, there was no Preview button in Slashdot's mobile view.
Can Pi-Hole speed you up like resolving like a FASTER remote DNS via hardcoded favorite sites
Yes. Pi-hole can integrate somewhat with your proprietary application to protect an entire network. The administrator of a Pi-hole installation can generate a blacklist and upload it, and Pi-hole will apply it to all machines using it for DNS.
Let's see: From a LOGICAL standpoint, you have to buy a Raspberry Pi board right?
Pi-hole is DNS resolver software that can run on any rooted Linux box on your network. Some might buy a Raspberry Pi SBC and dedicate it to Internet filtering, but it isn't strictly necessary. If you're running custom Linux firmware on your existing router, for example, you may be able to put Pi-hole on that. It can also run in a Docker container on a Windows laptop for protection on the go, though I would advise putting a hosts file in front of Pi-hole in that situation because Docker slows things down.
NATIVE & FREE
If ad networks start using random subdomains, and the "NATIVE & FREE" product can't block random subdomains, then the "NATIVE & FREE" product is NATIVE & FREE & USELESS.
Oh, and last I checked, your application wasn't free software either for fear of malicious forks.
Putting an access filter into a school is the last thing you'd witness around here. Especially when it comes to universities.
Non-profit universities don't have unlimited bandwidth. Nor do they want to contribute to Internet access patterns that are more likely than not to disrupt instruction in the classroom. Toward this, many universities tend to block access to certain Internet resources from classrooms while allowing it from dormitories.
After all, playing the video locally requires downloading the data anyway
Both U.S. copyright law and the YouTube terms of use distinguish an ephemeral copy of a few seconds of a work at a time from a permanent copy of its entirety. And even in the case where the caching mechanism ends up keeping an ephemeral copy of (say) the entirety of a short film in order to reduce the latency of seeking, U.S. copyright law (17 USC 512(b)(2)(B)) distinguishes a copy under control of a user agent that respects Cache-Control from a copy under control of a program that does not.
You appear confused.
You mention buying DGA domains, presumably before the author of a piece of client-side malware does. This is a tactic that some law enforcement organizations have used to fight client-side malware. This tactic costs money for each domain, as you correctly mention.
But I was not referring to this tactic. I was referring to a hosts-evasion technique that can be executed for the price of one domain. An advertisement network operator buys one domain and creates a practically unbounded number of subdomains under this domain. This costs the price of one domain and has absolutely nothing to do with a DGA, nor with "SPENDING MONEY YOU DON'T NEED TO SPEND".
The reason the author of client-side malware registers multiple domains in the first place instead of registering one domain and creating subdomains is that law enforcement can more easily seize one domain than multiple domains. But because tracking users from site to site with a third-party cookie is not (currently) a crime, the ad network operators are not concerned about domain seizure. Therefore, the ad network operators save money by registering one domain and creating subdomains.
Do you require a live proof of concept using wildcard DNS and subdomain generation?
Unless you're targeting a system with 32KB of RAM or less, or you have very strict realtime guarantees (and so aren't even using malloc) there's rarely a good reason to use C these days.
I would dispute this 32 KiB figure.
Several years ago, I wrote a program for Game Boy Advance homebrew that used a single std::ostringstream once, and even after enabling -Wl,--gc-sections, the statically linked executable was 180,032 bytes. It turned out that the constructor for a std::ostringstream in GNU libstdc++ would call the constructors for date, time, and currency formatting aspects of the locale even if I never output a date, time, or currency object. For a scale reference, the GBA's RAM is 32 KiB of fast RAM, 256 KiB of slow RAM, and 96 KiB of video RAM. Although up to 32 MiB of execute-in-place ROM in the cartridge is available for a single-player game, no cartridge is inserted into the systems of players 2, 3, and 4. Thus the program has to fit completely into the 256 KiB of slow RAM, as the fast RAM is used for the stack and BSS.