inicio mail me! sindicaci;ón

Archive for October, 2005

When will people learn? “Escaping” is the devil!

So MySpace.com gets knocked down by some Javascript hacking. XSS.

Here is the technical description of the exploit: link.

Here is the interview with the author of the code that took down the site: link

How did this happen? HTML and the tags with Javascript create a complex environment where it is difficult to prevent user generated input (which has security issues) from seeping into the system. The guy used simple escaping hacks to work around their security attempts.

Escaping is the devil.

When a system is so complex that there are 3 different ways to escape something, you will find that not everyone has the same level of compliance or security.

(as a side note, is it just me, or do the years before all computers became connected as one, The Internets… do those years appear as a blur of darkness? I mean, here is an interview with the guy who took down a site. I barely exerted any effort to achieve this information. In the dark times, this was not possible.)

Its an Illusion!

color shading illusion

The colors of box A and box B — are the same!

Go here for the proof and details.

Million Dollar Homepage

Here is a link to a genius idea.

Why didn’t any of us think of this :-)

– dru

Going to get a camera…

canon powershot s80

I’m going to get a new digital camera soon. My old Olympus CAMEDIA is on its last legs as a AA powered camera. A friend at work, Bill Tani, recomended this site called dpreview. He’s right, it’s excellent.

I’m going to try and get a point-and-shoot or bridge camera. I need great photos, but I don’t need all the bells and whistles of an SLR. One friend got a Nikon Coolpix 8700 the others have the Canon EOS SLR cameras.

I’m excited to get a decent camera again, and take some great shots of the family!

Tunnels of Doom!

tunnels of doom

Cool link to one of Ed Burns favorite games, Tunnels of Doom for the TI-99/4a. Steve and I went with Ed to California Extreme a few years back and it was a great time.

How JK Rowling wrote Harry Potter

harry potter

(Yeah, I like Harry Potter, and this is overly simplistic, but it is a good ‘jest’)

via Kiruba

Is the bubble back?

There is so much going on in terms of announcements and acquisitions these days. I suspect that the actual number of people affected is smaller than the last big bubble of the late 1990’s.

Still, I think I have some good rules of thumb to help detect it.

If you start going to parties/recruiting events and receive free iPod shuffles… you know the bubble is back.

If they start giving out iPod nano’s, then you know the bubble is about to burst :-)

Dr. Who Night in the SF

Saw the new Dr. Who last night! Steve invited me to a cool Dr. Who get-together up in the SF. I don’t have a TV anymore, and I’m still happy about that. However, I do miss a good Dr. Who show (and decent Sci-Fi in general).

Overall, I really liked it. Sure, there are some great aspects of the old series that probably aren’t very marketable in todays media, and therefore not present. But the original spirit is still there! So, I would recommend checking out the new Dr. Who.

side note: It was nice being up in the city. I can’t do it all the time. But every now and then, it is fun to cruise around the big metropolis at night. With those dim brown lights (sodium?), and the chilly air, it does have a special feeling that is different from the valley.

« Previous entries · Next entries »