Dude, just jump ship already. I just read Slashdot these days for the perverse pleasure of silly stories. :-)

P.S. This article hit front page YC and Proggit several hours before Slashdot.

You may be interested to know that AFS has implemented a variant of this feature. The conceit is that filenames can contain a magic string @sys, which gets substituted with the "sysname" of a particular system. This means if someone publishing software over AFS wants to have multi-platform support, they merely have to setup a directory divided by sysname and have compiled versions of the software for each system type they wish to support.

The first trap you will fall into thinking about this is that it should be the end-all security policy, and will solve our problems. It won't. That's not the intent, and also impossible given our diverse browser ecosystem.

The ability to tell the browser, via out-of-band, non XSS-able information, that certain scripts should not be executed, however, is a very powerful defense in depth measure, and makes it one step harder for attackers to make an attack work.

Security is a war of attrition. Bring it on.

That's because there is none; we agree. :-P

Don't use it, company I work for doesn't use it, don't care.

Why would Microsoft ever want to hire a cadre of Linux kernel developers? It's more likely that Microsoft would find some-odd patent in its catalog and sue them. :-)

As a typical geek, I don't care much about AIX's concurrent updates. If I were a corporate dude, I probably wouldn't care too much about AIX's concurrent updates (I'd have to have a lot of other good reasons for switching to AIX). As a geek who runs Jaunty, I care a lot about Ksplice. It's awesome. I can run it on all of my boxen. If I were a geek who runs another distro, I don't care much about Ksplice, except maybe for the fact that we're starting to get rebootless updates into mainstream. But if I were a corporate dude, I care a lot about Ksplice: if I pay these dudes, I can get these updates for *any* system. I don't need no special kernel. I don't need no complex process. I just fork over money and these guys make the magic happen. That's powerful.