Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror
Check out the new SourceForge HTML5 internet speed test! No Flash necessary and runs on all devices. Also, Slashdot's Facebook page has a chat bot now. Message it for stories and more. ×

Comment XML external entities (Score 1) 18

I think it's a flaw in some XML or XSLT libraries that DTD expansion and external entity resolution is either on by default, or in some cases, cannot be turned off. It also opens up attack vectors for XML injection using xsl:include, where if an attacker can provide the XSLT he can also read arbitrary file contents. It would make more sense for the default XML mode to not allow fetching any external content, and you have to set a 'trusted' flag in the API to turn on the magic.

Comment Re: Not "continuously" in the geek sense of the wo (Score 2) 137

"an old microchannel PC" - so relatively fancy in fact. The quality and reliability of IBM's Micro Channel machines (and their small number of licensees) was a notch or two above the typical AT clones of the time. In particular they were designed with some attention to airflow and cooling, rather than just a box with a fan in it, so would be more likely to survive a dust-covered existence.

Comment Bad Summary (Score 1) 98

The summary leaves out several very important limits on this new law:

1. It does not apply to business that don't sell directly in interstate commerce. (This is narrower than the usual "affecting commerce" language Congress likes to use.) So your local lawn-care service for example may be exempt.

2. It only applies to businesses that use "form" contracts.

3. It only applies to those "form" contracts if the customer does not have a meaningful opportunity to negotiate.

Comment Re: Unfortunately no and I have a reason (Score 1) 381

It reminds me of Anthony Burgess's novel A Clockwork Orange. He realized that any real-world slang would soon become out of date so he invented his own slang language, Nadsat, for the characters to speak. Of course, this can be taken too far, where the made-up language comes to dominate the work with the story being an afterthought. Like some of JRR Tokien's works, for example. In fact you could say that TAOCP is the LOTR of computer science.

Comment Re: Unfortunately no and I have a reason (Score 1) 381

See what Joel Spolsky wrote:

If you show a nonprogrammer a screen which has a user interface which is 100% beautiful, they will think the program is almost done.

People who aren't programmers are just looking at the screen and seeing some pixels. And if the pixels look like they make up a program which does something, they think "oh, gosh, how much harder could it be to make it actually work?"

Slashdot Top Deals

HOST SYSTEM NOT RESPONDING, PROBABLY DOWN. DO YOU WANT TO WAIT? (Y/N)

Working...