Slashdot Mirror


User: aymanh

aymanh's activity in the archive.

Stories
0
Comments
85
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 85

  1. Re:CSS = ACID? on Internet Explorer 7 RC1 Released · · Score: 4, Informative

    Web developers can use conditional comments to target a specific version of IE, and here is an article that goes into the details of what hacks are "supported" by IE7.

    Supporting IE7 will require some extra work by webdevs, but it's doable even if code already contains hacks for previous versions of IE.

  2. Re:Blink Support? on Internet Explorer 7 RC1 Released · · Score: 1

    Yeah, poor IE users will never be able to see The Page of The Damned in all its glory.

    Source

  3. Re:Really? on Internet Explorer 7 RC1 Released · · Score: 1

    I agree, IE7 market share will be mainly previous IE6 users, when IE6 was released, its market share climbed up and IE5's dropped down at approximately the same rate. IE7 market share will be mainly previous IE6 users. Firefox users will usually stick to it, even that IE7 features tabs support, Firefox still has a lot to offer, mainly the wide range of extensions available.

  4. CSS Changes for IE7 on Internet Explorer 7 RC1 Released · · Score: 4, Informative

    I couldn't find links to this page in the summary or IE7 blog entry, so I'm posting it here as I believe many would be interested in it: List of CSS changes in IE7.

    It's mostly bug fixes, notable new features are enabling :hover for all elements, implementing position: fixed, PNG transparency support, and min/max width/height.

  5. Re:The Counter-Measure for Cookies on Google to Continue Storing Search Requests · · Score: 1
    Thus google forces you to allow google.com cookies in order to use gmail. That same cookie is read when you make searches. Thus you must:

    a) allow cookies @ the 'mail.google.com' && 'google.com' domains.
    b) deny cookie read requests when requested when loading a url that contains: 'google.com/search*' ... and that is not trivial

    Here is how I handle this:
    1. Make sure all cookies from google.com are cleared.
    2. Log in to Gmail at https://mail.google.com/ (with "remember me" checked).
    3. Block all cookies from www.google.com, images.google.com, ...

    Two weeks later when my Gmail cookie expires, I:
    0. Temporarily allow www.google.com to read/write cookies.
    Repeat the process above.

    Not exactly hassle-free, and doesn't work if you don't want to check "remember me", but otherwise, it's working fine for me, and doesn't require any special software setup, Firefox cookie manager does the job.
  6. Re:Funny someone notices this PR on When Doing PR For Anti-Spam Firm... Don't Spam · · Score: 1
    My favorite piece of comment spam is this one:
    Name: keyword
    E-mail: user@example.com
    Homepage: http://www.example.com/page.html
    Comment:
    Personally, I never use more than a single link in the comment I post because doing so can trigger spam catchers if the user has that plugin activated, whereas a single link will not.


    Obviously, I replaced email and domain links.
  7. Re:Two problems on Dvorak Rants on CSS · · Score: 1
    ("Two problems" "Three, Sire!") When someone characterizes something as "extremely funny", I'd like to think the article will at least make me grin once. I'll admit to a moderate anti-Dvorak prejudice, but it came off closer to the neighborhood of "extremely stupid" than "extremely funny".
    It's funny because of the stupidity of the article, or so I found it.
  8. Re:How difficult is it. on SQL Injection Attacks Increasing · · Score: 2, Informative

    PDO is built into PHP 5.1. PEAR::DB is part of PEAR which is often installed by web hosts, and it's compatible with both PHP 4 and PHP 5.

    However, I agree with you, PHP should have had a DB layer from the start, another problem with PHP is that it attracts uneducated users who read a couple of PHP/MySQL tutorials before writing their first vulnerable query, that's why I believe one should read Essential PHP Security (Or a similar book/online reference) before using PHP, otherwise there is a very good chance they'd end up with vulnerable code.

  9. Re:Interesting... on SQL Injection Attacks Increasing · · Score: 1

    Well, you can still roll your own layer, or manually install one that is implemented in pure PHP, check Drupal's DB layer for example.

  10. Re:How difficult is it. on SQL Injection Attacks Increasing · · Score: 4, Informative
    PHP doesn't force you to do that by hand, you can make use of the numerous database abstraction layers for PHP, like PDO or PEAR::DB.

    Here is an example, taken straight from PDO's page:
    $stmt = $dbh->prepare("INSERT INTO REGISTRY (name, value) VALUES (:name, :value)");
    $stmt->bindParam(':name', $name);
    $stmt->bindParam(':value', $value);
     
    $name = 'one';
    $value = 1;
    $stmt->execute();
    The framework is there, PHP developers need to make use of it, but sadly things like the following are still common:
    mysql_query('SELECT value FROM REGISTRY WHERE name = "' . $name . '"');
  11. Interesting... on SQL Injection Attacks Increasing · · Score: 1

    Interesting, given that SQL injection is one of the easiest attacks to protect against, by making all database access through an abstraction layer that escapes input, many web frameworks have support for database abstraction layers and prepared statements, like PEAR::DB for PHP, developers just need to make use of them.

  12. Re:Mistake? on Windows Vista still Rife with Insecure Code · · Score: 2, Interesting

    I was going to moderate but after reading your comment, I decided to reply. Why are you assuming that it's not possible to write secure code from the start? The networking stack is a vital part of an OS's security, can't MS fork enough resources to create a relatively secure networking stack for Vista?

    Crackers will become familiar with Vista's net stack soon or later, either by reverse-engineering the new not-so-secure stack, or by utilizing their familiarity with the XP stack (in case MS didn't replace it), it's a cat and mouse game, just like how they found exploits in the first one, they will find ones in Vista's stack, the solution is to write a secure networking stack, not to replace it with another vulnerable one that hasn't been reverse-engineered yet.

  13. Re:Or on Daily Exploit Releases Irk Both Vendors and Crooks · · Score: 1

    FYI, Firefox 2.0 will include a session manager, and there is the session saver extension for previous versions.

  14. Re:Ah. balance on Debian Locks Out Developers · · Score: 4, Informative
    Talking about openssh's security, here's a vital patch:
    -PermitRootLogin yes
    +PermitRootLogin no

    A couple more:

    Protocol 2
    PermitEmptyPasswords no
    LoginGraceTime 2m
    MaxAuthTries 6

    And it's always a good idea to restrict SSH access to trusted IP addresses in /etc/hosts.allow.
  15. It's a two-part series on Web Development with TurboGears and Python · · Score: 4, Informative

    Excellent! For those who (like me) can't decide which Python web framework to pick and learn, this is a two-part series on both Django and TurboGears from IBM, one can learn the basics of each one and decide.

  16. Re:Too late? on ReactOS Reviewed in Depth · · Score: 2, Insightful

    It's never too late, NES emulators are still being used to this day for example. Even after the release of Vista, many will still need to run legacy Win32 apps, and when ReactOS matures, I think some users will prefer an actively-developed OS over one at the end of its life cycle.

    Just a thought.

  17. Re:Lies, damn lies, and statistics on Microsoft, Yahoo Finally Merge IM Networks · · Score: 1
    Except for the firm's name, the article doesn't specifically mention that those numbers are US-only, perhaps this is why I missed the US part, this explains it.
    Looks like I glanced over the firm's name part and didn't notice it implied the statistics are US-only.

    Can we be done with the please? The point of the comment is that statistics can sometimes be manipulated to prove different things.
  18. Re:Lies, damn lies, and statistics on Microsoft, Yahoo Finally Merge IM Networks · · Score: 1

    Ah, thanks for pointing this out, I think you are right. Except for the firm's name, the article doesn't specifically mention that those numbers are US-only, perhaps this is why I missed the US part, this explains it.

    And by the way I'm not American, so I do know that other parts of the world exist :p

  19. Lies, damn lies, and statistics on Microsoft, Yahoo Finally Merge IM Networks · · Score: 1
    the companies say that the resulting user community will be the world's largest, at around 350 million accounts
    Those are the companies' numbers, but according to a survey done by another firm in June (mentioned in this Reuters article), the estimated unduplicated audience of Windows Live and Yahoo messengers was 43.5 million U.S. users. Perhaps Yahoo and MS are counting all Yahoo and Passport accounts? Personally I have several Yahoo accounts and only use one for IM, and I'm sure many other accounts aren't used for IM as well.

    Quoting the Reuters article:
    U.S. Internet traffic measurement firm Nielsen//NetRatings data shows AIM with 47.2 million users in June, compared with 28.0 million MSN/Windows Live users and 22.5 million Yahoo Messenger users. The unduplicated audience of Microsoft and Yahoo was 43.5 million U.S. users, the survey showed.

    Yahoo and Microsoft took issue with these numbers, citing comScore Networks's global figures which showed that Microsoft IM had 204 million users and Yahoo IM had 78 million users world-wide. AIM had 34 million users, the comScore data showed.

  20. Re:Solution? on Microsoft, Yahoo Finally Merge IM Networks · · Score: 5, Insightful

    The difference, however, is that you need a separate account for each protocol when using Gaim. This merge means that one Yahoo or MSN account is enough to access both networks.

    Gaim user here by the way, I haven't tried to contact an MSN user through my Yahoo account yet, and I wonder if it is (or will be) possible.

  21. Re:wHAAAAA? on Microsoft's Open XML Project A Short-Term Fix · · Score: 3, Informative

    Huh? Many Open Source projects or 3rd party companies offer paid technical support for the project. For example, both Sun and a variety of consultants provide paid support for OpenOffice, including its support for ODF.

    In short, OO.o natively supports ODF and has technical support, MS Office has an ODF plugin in development, but MS won't offer tech support for it.

  22. No Technical Support For The Plugin on Microsoft's Open XML Project A Short-Term Fix · · Score: 5, Informative
    [...] a stopgap measure that will probably not be acceptable to government's around the world over the long term.
    According to this blog entry at ZDNet, the author did an interview with MS representatives, and seems like MS doesn't plan to offer technical support for the plugin, and it will forward bug reports to the original authors. This plugin doesn't look different from a 3rd party plugin, so no, I seriously doubt any government will accept it as ODF support in MS Office.

    Quoting the blog entry:
    Microsoft is on the record as saying it will not be offering technical support to end-users for this translator. In fact, as far as I know, no one will officially be offering support (perhaps one of the three companies involved will, for a fee). As said earlier, Microsoft will accept bug reports and forward them on to the project's developers.
  23. Re:Implications of Google as a verb? on Tech Buzzwords Added to Dictionaries · · Score: 1
    Here is the definition:

    to use the Google search engine to obtain information about (as a person) on the World Wide Web.

    Taken from the WP coverage of this news item.

    So no, the definition seems specific to Google.
  24. Re:buzzwords on Tech Buzzwords Added to Dictionaries · · Score: 1
    Troll (v) already has an entry Merriam-Webster, and one of the attached meanings is close enough:

    to fish by trailing a lure or baited hook from a moving boat
  25. Re:'Texting' is a Noun? on Tech Buzzwords Added to Dictionaries · · Score: 2, Informative

    I was going to post the same thing as well, Oxford dictionary added "text message" as a verb (as in "I just got an $1800 ticket for text messaging while driving"), but "text" itself wasn't added as verb from what I found in the article.