Please create an account to participate in the Slashdot moderation system

 


Forgot your password?
Close
typodupeerror
×

Comment Re:Can you say, HUGE SECURITY HOLE (Score 1) 91

by oever (#47373927) Attached to: WebODF: JavaScript Open Document Format Editor Deemed Stable

The WebODF developers take security very seriously. WebODF runs in a browser and web browsers are the most battle hardened sandboxes available.

WebODF has no more access to your hard drive than any unprivileged website. If you press the icon to open a file, WebODF asks the browser to let the user pick one file. That file, and only that file that the user chose, is then passed to WebODF so it can open it. This is no different from an HTML form for uploading files. The difference is that WebODF does not need to even pass the file to a server. It is a client-side library that can parse a file purely in the browser without any network access.

If you use WebODF with a CMS, you can let the CMS decide which files WebODF has access to. When WebODF loads a document, it checks for any JavaScript present and prevents it from being executed.

WebODF is set up such that you only need a few files to run it and all those files can be hosted on your own server or placed in your own application. There is no need for any reliance on any 3rd party.

Submission + - WebODF: An ODF text editor in pure client-side JavaScript (themukt.com)

Submitted by oever
oever writes: TheMukt chides Google for not supporting OpenDocument Format well and claims that the newly released WebODF 0.5.0 in combination with ownCloud is the answer to this deficiency.

A WebODF developer blog highlights all the goodies in the first WebODF release where the text editor is considered stable and made available as an easy to use component. These include extensive benchmarking, unit testing, and advanced HTML5 techniques to give the editor a native feel.

Submission + - KDE runs fundraiser to fund Randa Meetings 2014 (kde.org)

Submitted by Anonymous Coward
An anonymous reader writes: KDE is looking for donations to fund Randa Meetings 2014. The biggest hackaton sprint of KDE with more than 50 people working on more than 7 different projects.

Comment Re:In before Fuck Beta (Score 1, Interesting) 164

by Kell Bengal (#46194533) Attached to: German Domain Registrar Liable For Copyright Infringement
Serious question: is this a feasible approach? If we can cash them out on a firesale and restore the site back to the ownership of someone who gives a damn, is it worth the psychic damage of giving these fuckers our money? I know Hackaday tried to go private with a kickstarter but failed... could Slashdot have more success?

Submission + - Slashdot Beta: Because They Hate You 3

Submitted by boolithium
boolithium writes: People on here are missing the point of the Beta roll out. The elimination of the existing user base is not a side effect, it is a feature. Slashdot as a brand has value, but as a site has limited commercial appeal. The users are the kids at the lunch table, where not even the foreign exchange students want to sit. Nobody ever got laid from installing NetBSD.

Once they are finished with their nerd cleansing, they can build a new Slashdot. A sexier Slashdot. A Slashdot the kids can dance to.

They aren't ignoring you. They are exterminating you.

Submission + - If we Buck Feta and leave, where should we go? 17

Submitted by Covalent
Covalent writes: I am a long-time slashdot reader (don't let the UID fool you), and I agree with most of you that the Beta is a disaster. Dice has promised a fix, but what if this garbage is the new reality? Is there a suitable alternative to slashdot that members would find equally (or more) fulfilling? Is someone going to fork slashdot and start it anew (Taco can you hear me?) Or is this just the end of an era?

Submission + - Slashdot Beta Sucks Elephant Penis 2

Submitted by ShaunC
ShaunC writes: Hugh Pickens DOT Com writes:

Have you even seen an elephant penis? Because I have, and the colors align to Slashdot. The beta is so bad, Roland Piquepaille is surrendering his account (as the French do). The GNAA has reorganized to post fake job offerings on Dice.com with an emphasis on affirmative action. Profane Motherfucker has come out of retirement simply to say: "fuck this shit."
Cellphones

California Bill Proposes Mandatory Kill-Switch On Phones and Tablets 341

Posted by Soulskill from the they-forgot-pagers dept.
alphadogg writes "Politicians and law enforcement officials in California will introduce a bill on Friday that requires all smartphones and tablet PCs sold in the state be equipped with a digital 'kill-switch' that would make the devices useless if stolen. The bill is a response to a rise in thefts of portable electronics devices, often at knife or gunpoint, being seen across the state. Already half of all robberies in San Francisco and 75 percent of those in Oakland involve a mobile device and the number is rising in Los Angeles, according to police figures. The trend is the same in major cities across the U.S. and the California bill, if it passes, could usher in kill-switch technology nationwide if phone makers choose not to produce custom devices for California. California Senate bill 962 says all smartphones and tablet PCs sold from Jan. 1, 2015, should have 'a technological solution that can render the essential features of the device inoperable when the device is not in possession of the rightful owner.'"
HP

Not Just Healthcare.gov: NASA Has 'Significant Problems' With $2.5B IT Contract 176

Posted by Soulskill from the moving-at-the-speed-of-government dept.
schwit1 writes "According to the Inspector General, NASA and HP Enterprise Services have encountered significant problems implementing the $2.5 billion Agency Consolidated End-User Services (ACES) contract, which provides desktops, laptops, computer equipment and end-user services such as help desk and data backup. Those problems include 'a failed effort to replace most NASA employees' computers within the first six months and low customer satisfaction,' the report states (PDF). It adds that NASA lacked the technical and cultural readiness for an agencywide IT delivery model and did not offer clear contract requirements, while HP failed to deliver on multiple promises."

Slashdot Top Deals

Top Ten Things Overheard At The ANSI C Draft Committee Meetings: (5) All right, who's the wiseguy who stuck this trigraph stuff in here?

Close