Catch up on stories from the past week (and beyond) at the Slashdot story archive

 



Forgot your password?
typodupeerror
×

Comment Re:haven't we learned from the last 25 exploits? (Score 1) 68

How does one embed "JavaScript URLs" in CSS?

Very easily, and because so few people know it is possible, it's a rather nasty vector for cross-site scripting attacks.

Also you seem to have no idea about where the web is headed or have heard about responsive design and SPA.

I'm well aware of responsive design. I think it's an abomination, because all it does is make it take two page loads to view your site instead of one, by ensuring that I have to first load your broken mobile site, then click the "full version" link. Every single freaking time I end up on a "responsive" mobile version of a website, I find myself locked out of features that I regularly use, and end up having to switch to the full desktop version of the site.

If you need much more than a couple lines of JavaScript and a custom stylesheet to support mobile devices, it invariably means that your site is badly designed (too complex) to begin with, and as soon as you release the mobile version of your site, you're almost certainly going to make me hate your guts and curse your name.

And SPA is even worse. If your site loads significantly faster as a web app, there's something wrong with your site. 99% of the time, most of the resources should be shared across pages, and only the text of the page should be changing. There's usually not an appreciable difference between the "load the full page" case and the "load the body of the page" case from a performance perspective unless something is very, very wrong. There are exceptions, such as storefronts that use precisely the same page layout for every page, but these are exceptions, not the rule, and even then, the extra savings in initial page load time just result in a customer sitting there wondering why there's no data on the page, and thinking your site is broken. The real problem is that every web engineer thinks their site is the exception to this rule, but most of those engineers are wrong.

More to the point, if I'm accessing your site often enough to care about performance, I'm going to download your native app instead of using your mobile site, because it will always be much, much more functional, with fewer limitations, more features, and better performance. If I'm going to your website, it's either because I don't care about performance or, more commonly, it is because your native app is missing features that are only on the full version of your site. Giving me a mobile version won't help with the second case, and the first case is largely unimportant for everybody but the site designers who are trying desperately to shave off a few bytes from their data bill.

BTW, it's possible to do a manifested web app (giving you all the advantages of heavy-duty caching of shared content) without using JavaScript for all your navigation. You just specify the base path of the content directory as an external URL (I forget the details) in the web app manifest. This approach is much, much more user-friendly than a SPA in my experience.

Comment Re:Already Happened (Score 4, Insightful) 86

Yeah, I'm a bit confused because I thought this had become common practice. For a few years now, I've seen a bunch of games where you get some special content (a different outfit, or starting the game with some bonus or special gear) when you pre-order from a specific store. Since it's different "special content" for different stores, you'd have to buy multiple copies of the game to get all of the content. Then, after some period of time, the game releases all of the special gear as "DLC", and then it's also is included in the GoTY edition (or whatever they feel like calling the edition that includes all the updates and DLC).

Is there a difference between that and what we're talking about? I'm not sure I really see the problem. These bit of "special content" are usually kind of stupid, like maybe you start with a extra bit of body armor and some shotgun shells or something.

Plus, honestly, I usually wait until the "extra special edition" is on sale on Steam before I buy games these days. Not that I would expect everyone to wait, but it's kind of great. I avoid the hype machine and get to see what people think after the hype has died down, you get all the DLC, additional content, and bug fixes all at once, and you get it for 40% off or something.

Comment Re:Property Tax? (Score 1) 76

But the cost of providing those services isn't the same. First, the probability of a forest fire is roughly proportional to the area of land, because lightning doesn't care.

You are missing a key point. the land does not disappear if one person owns 50 acres or if 50 people own 1 acre each right next to each other. It is still there and still costs the same. Like you said, lightning doesn't care.

No, you are missing a key point. If it costs a million dollars to protect a city block that contains 50 homes, the cost per home is $20,000 per home. If it costs a million dollars to protect a city block that contains only one home, the cost per home is a million bucks. It is only fair that a homeowner in the second block should pay more, because the cost of defending his or her home is 50 times as much as the cost of defending a home in the first block. The more people that bear the burden, the less the burden for each person. This is just common sense.

Also, from a fire management perspective, the land does disappear if nobody builds on it. So that first house in a rural area imposes a much bigger burden on the system than subsequent homes. Unless there are homes that could eventually be at risk, modern fire management policies typically recommend letting forest fires burn themselves out. The reason fires get out of control is that we've spent decades over-managing forest fires, and we really need to stop doing that, or else they're just going to be worse the next time around.

Not really. Expensive homes are more likely to have high dollar security systems, cameras, and serial numbers recorded. Middle class homes would be a more probable target. Slums of course are still there as opportunity remains and according to the data, people with income of 7.500 or less are victims of theft and violent crimes like assault more than people with incomes over 75k.

Serial numbers don't make much difference if the person pawns it before you detect the theft. And security cameras don't help if the burglar knows they exist, because they'll just wear a mask to hide their faces, and park their car a block away or cover their plate.

Even things like utilities cost more for larger pieces of land, because the utility companies have to run their cables past your property to get to the next potential customer, and the longer your property is, the more it costs to do so. They only get one customer per property, so larger properties effectively raise the installation cost for everyone on your block.

They must do it different where you live. In my neck of the woods, the utility company will come a maximum of 25 feet into the property for their demarcation point. Anything after that and it is up to the property owner to run.

I'm talking about the length of the property, not the depth. And even for the depth, that's only true if there isn't a street behind you. Otherwise, at some point, they're going to have to make at least one run the entire depth of the piece of land to connect over to the next street. The cost to wire an area is proportional to the area. There's just no way to get around that. :-)

Only if you start with incorrect assumptions in the first place. But please tell me, how likely is it that someone would have a million dollar home on 50 acres of land with a falling down shack that someone thinks is stuffed full of goodies? The falling down shack is more likely on less expensive property or maintained. You see, rich people don't like looking at the trash we regular people have to put up with. The shack would likely either be repaired, removed, or replaced before it appears falling down.

Come again? As I said, house fires are inversely proportional to the cost of the home, which is precisely what you said while arguing with me....

Comment Re:Windows 7 end of life... (Score 1) 681

I think that the examples you cite are bad decisions on Microsoft's part, not because of what they did, but because they simply did it too soon.

I'm not saying that you can't drop backwards compatibility. It just seems like Microsoft sometimes screws up compatibility with older versions of their software to force you onto the upgrade treadmill, which is what was originally being discussed.

Comment Re:haven't we learned from the last 25 exploits? (Score 1) 68

Nobody minds CSS much, so long as you don't allow embedding JavaScript URLs in it (which, unfortunately, browsers do).

The problem is not JavaScript, per se, so much as the fact that it is massively overused, breaking links, breaking back buttons, etc. Your documentation viewing experience does not demand a web app. It might benefit from some intelligent links that do special stuff if JS is enabled, but if you cannot make your site work with JS disabled, you're abusing JavaScript.

There are exceptions, mind you—sites where the core functionality is unavoidably tied to JavaScript (e.g. Google Docs). And I can even accept JavaScript for other content on that site that isn't tied to JavaScript, because after all, you can't avoid JS on such a site. The farther you get away from that scenario, the more annoying it is. And even on those sites, I expect the developers to have taken the time to ensure a good user experience—effort that, sadly, most web developers don't put in.

And yes, I've developed some pretty complex sites that use lots of JS code, but I've always made sure that at least the basic stuff doesn't require it, to the maximum extent practical.

Comment Today, I would never have learned programming (Score 5, Insightful) 608

I got my first computer in 1986; I was 13, and it was a ZX Spectrum with a build-in BASIC interpreter. When you switched on, you could start away programming. In fact, the computer came with a little book with programming examples and little games. I spend countless hours typing in listings that I found in newspapers. To even load a simple game you had to enter a command.

Since then, I learned C, tcsh, C++, bash, Perl, much later also Python and R. It was a step by step process, and I would never have started it (and became what I am now, that is, computational biologist) if not for this one computer with the BASIC interpreter.

I have kids now, and they have Android tablets. The sheer power, their parameters and their capabilities are overwhelming. I don't know how many instances of a ZX Spectrum emulator I could run on one of these, a thousand?

But even though they run on a system that is related to the system I am using every day, I would not know how to write a program for them to save my life. In theory, I know how I would approach it, I even set up once an Eclipse environment once, but I never got to even start a Hello world program. If I were 13, I would not even know that I can write a program myself.

It is amazing, but I think that actually, my kids will have a much harder time to learn programming than I had, and they will get much less fun in return...

Comment Re:Windows 7 end of life... (Score 1) 681

BTW, when has MS ever created incompatibilities with old versions for no reason? I assume you're talking old versions of software?

I don't remember what I had in mind when writing that, but the first thing that comes to mind is Microsoft Office formats. There were a few years where they would release a new version of Office with incompatible versions of their Office file formats, which meant that if one person in the company upgraded, every file they touched suddenly became unreadable in older versions. That was a few years ago, but they've gotten so much flack for it that they've stabilized the formats after Office 2007.

IIRC they did similar shenanigans at some point with WMA/WMV files, where they released a new version of Windows Media Player that automatically used the new version of their codec, which was unsupported on older versions of Windows Media Player. That would be fine, since Windows Media Player was free, except that they didn't allow you to install the new version of Windows Media Player on older versions of Windows. They've done similar things with DirectX and IE.

Submission + - Business Lessons from Mario and Donkey Kong

Esther Schindler writes: As of July 9, it’s been 23 years since Mario and the bellicose King Kong clone appeared in gaming arcades and then spread to our home consoles like kudzu. Since Donkey Kong (the first Mario game) appeared, writes Carol Pinschefsky, we’ve go-carted, golfed, and liberated oppressed princesses in over 250 games. You know what else we did when were saving a damsel in distress from a large, barrel-tossing ape? We learned some honest-to-goodness business lessons.

Yes, it's silly and funny. And then you think, "Wait. That's good advice!"

Comment Re:A better list than expected (Score 4, Funny) 285

It doesn't happen very often anymore, but for many years I kept hearing people say things like, "The story of Bill Gates shows what's so great about our country. The guy started out poor, he had absolutely nothing, but he was pretty much the best programmer in the world. Using nothing but his programming skills, he managed to become the richest guy in the world. It's a great success story."

Yeah, Bill Gates got rich by being a brilliant programmer, and Steve Jobs got rich by being a really nice guy. Meanwhile, Ballmer just skated by on his good looks, social graces, and beautiful head of hair.

Comment Re:They failed to realize... (Score 1) 249

Even if they used it now, I'm not sure they'd sue. It would make them look pretty crappy. As it is, they got a request to use their logo on a statue of a murdered child, and they were like, "Eh... we'd rather not." It's really not that hard to understand why DC wouldn't want to be strongly linked to child abuse and murder in such a potentially long-lasting medium, given the choice. How much trouble they'd go through to stop it, though, is another issue.

Part of the question, I'd imagine, is whether they're denying the use of the logo via copyright protection or trademark protection. I'm not sure it makes sense for them to claim trademark protection here, but if so, there are some legal requirements for them to protect their trademark, so they might need to at least send a cease and desist letter. I'm not a lawyer, but that's my understanding.

Comment Re:It's not just the refund (Score 1) 137

This. And while the government is at it, please fine the bajeezus out of Amazon for having a "disable" switch on one-click that doesn't actually disable one-click in large parts of their website (e.g. Amazon Instant Video). I complained about this, and they said to set a PIN on the account to prevent purchases. Unfortunately, that also prevents streaming viewing, and there's no way whatsoever to prevent purchases or streaming of G-rated material, because there's no setting lower than "G".

Amazon has a lot of 'splainin' to do.

Slashdot Top Deals

HELP!!!! I'm being held prisoner in /usr/games/lib!

Working...