Catch up on stories from the past week (and beyond) at the Slashdot story archive

 



Forgot your password?
typodupeerror

Comment: Content Security Policy (Score 2) 41

by Njovich (#48439567) Attached to: Critical XSS Flaws Patched In WordPress and Popular Plug-In

One highly underused technology is the Content Security Policy. It is supported in all major browsers, including IE10+.

With simple headers you can prevent anyone from using inline javascript or including scripts from non-whitelisted domains. For instance, the following headers would make inline scripts not execute, and only execute javascript from the whitelisted domains:

Content-Security-Policy: script-src 'self' www.google-analytics.com ajax.googleapis.com;
X-Content-Security-Policy: script-src 'self' www.google-analytics.com ajax.googleapis.com;

If projects like Wordpress would pick this up, it would make it very difficult to do XSS attacks.

Comment: As intended (Score 1) 282

by Njovich (#48128531) Attached to: Four Dutch Uberpop Taxi Drivers Arrested, Fined

It was very obvious this was going to happen. Authorities even announced they would take action, and Uber has been very public about going to start this service and that they would pay any fines.

I don't know what the playbook of Uber and the transport inspection services are, but it is obvious that for both sides have these fines as part of it.

This makes it possible for Uber to fight it out in the courts, and will likely trigger discussion in the parliament that may lead to changes in the laws.

Comment: Re:Tegra based! (Score 1) 74

by Njovich (#47971653) Attached to: Google Partners With HTC For Latest Nexus Tablet

I'm fairly certain the people of Taiwan consider Taiwan a different place than China -- enough so that they have the whole Taiwan name and all.

New Mexico and Mexico are not the same thing, but they are both in the Americas. North and South Korea are not the same thing, yet both people are Koreans.

So how is that possible, if they have their own name too?

Please ask any Taiwanese person about this, and you will hear the same thing. Taiwanese people consider themselves Chinese. You can try all you want to claim that 'China' is only the mainland part. But that doesn't make it true, and in fact is insulting to both Taiwanese and mainland chinese people.

Comment: Re:Tegra based! (Score 1) 74

by Njovich (#47971637) Attached to: Google Partners With HTC For Latest Nexus Tablet

Are French and German people both European? Are North and South Koreans both Korean people?

Well, DPRK != ROK, yet they are both Koreans. The fact is that both the mainland and taiwanese people consider Taiwanese people as Chinese people. You may want to consider that 'Chinese' is a bigger term than just PRC.

Comment: This again? (Score 2) 184

by Njovich (#47953321) Attached to: KDE's UI To Bend Toward Simplicity

Do you really have to rip all of the features out of KMail for this?

How about you make your own mail client, hell, even use the KMail source. Then you will see how much the KDE userbase will love your 'retarded-people-interface' that is only an improvement for people who don't need advanced features like deleting an email. I'm not kidding, look at the mockup in the article.

I really don't get how you can see Metro and Gnome fail completely trying to force a more 'simple' user interface on people, and then want to make the same mistake.

Comment: Red Cross is non-political (Score 5, Insightful) 300

by Njovich (#47748091) Attached to: Put A Red Cross PSA In Front Of the ISIS Beheading Video

The Red Cross is non-political for a reason.

If they pick a side they will endanger countless of workers from the Red Cross. The goal of the Red Cross is to provide humanitarian aid and emergency relief.

ISIS may be a bunch of evil maniacs, but let the judging be done by other organisations that don't have to help civilians in the frontlines.

Comment: Re:Should be interesting RE- Nato (Score 2) 375

by Njovich (#47728067) Attached to: Would Scottish Independence Mean the End of UK's Nuclear Arsenal?

Spain will veto their EU plans (over their own want-to-breakaway regions doing the same thing in the future).

Only England wants to play dirty games against the Scottish, the rest of the EU really doesn't care that much. Spain has already stated they will not veto Scotland. Why would other countries like Netherlands or Germany be interested in keeping Scotland out of the EU? It is a wealthy area, there are many business interest, and the people are *already* EU citizens.

Comment: Re:Tiny bumps in JPEG performance (Score 1) 129

by Njovich (#47465447) Attached to: Mozilla Doubles Down on JPEG Encoding with mozjpeg 2.0

so we know a much better format than WebP is technically available *now*. [...] It doesn't seem like a good idea to try to move to WebP when we know a better format is coming fairly soon (probably within a couple of years).

So what you are saying is that for the next few years (plus the past 4 years), WebP was available for you to use, better than mozjpeg is even now (and having a bunch of extra features like lossless compression, animations, alpha channel), but you will not use it because you are waiting for some hypothetical file format that may exist in a few year and will provide better compression?

Can we please have the old Mozilla back that was more interested in building a great browser than having petty conflicts over formats?

Just go with the flow control, roll with the crunches, and, when you get a prompt, type like hell.

Working...