blahpro

To highlight the ridiculousness of this vulnerability: you don't even need to use `fireEvent("onmousemove")` to gain access to this information. You can use events that have absolutely nothing to do with the mouse, such as onbounce* on a hidden <marquee> element (seriously).

* "Fires when the behavior property of the marquee object is set to "alternate" and the contents of the marquee reach one side of the window." -- http://msdn.microsoft.com/en-us/library/ie/ms536910(v=vs.85)...

Just to point out how ridiculous this is: you can get mouse position information from any event (fired programatically using fireEvent or otherwise). You can even get it from the "onbounce" event on <marquee> elements, for goodness’ sake.

This is probably related to the YouTube video embed on the demo page, which I believe uses Flash. The mouse tracking itself is entirely JavaScript.

Edit: I am one of the authors of the demo code included in the disclosure.

s-c-o-t-t-y-7-9-<tab>-p-a-s-s-w-o-r-d

Also, I think there might be a typo on your "Guide" page. Did you mean to have "Customer name and address" and "Invoice items" at the end of the "me" and "customer" addresses, respectively?

Looks awesome! Congratulations. Feature requests:

1) the ability to set some kind of reference/invoice ID

2) the ability to set (grey/faint) footer text for legal bumpf (company number, VAT registration number, legal name etc etc)

Perhaps this could be implemented using a general-purpose comments/notes field?

That closing line is a bit optimistic: “Which means that practical quantum routers and the quantum internet that relies on them are just around the corner.”

I’d be really interested to see iOS 6 adoption stats compared against previous releases of iOS. Does anyone know if there’s anything published on this?

My understanding is that the benefit is the consolidation of various agency websites into a single site, initially replacing DirectGov and Business Link.

...unless there’s an external screen and keyboard connected.

This is undoubtedly a design flaw, although one solution (albeit extremely inelegant) could be to remove the power button key from the keyboard. If the Retina Display models are anything like their predecessors, they keys should be fairly easy to remove.

It left?

Related: http://www.quora.com/How-would-you-programmatically-parse-a-...

It’s not that much different from flying with them. The cabin is laden with ads: http://en.wikipedia.org/wiki/File:Ryanair_B737-800_Cabin.jpg

That does sound pretty steep.

It’s shocking that this document refers to "classes". JavaScript doesn’t even have classes.

Web Workers?

If Skype is "punching holes big in your network security", you’re doing it wrong.

I’m surprised that no–one is using Linode.

I find it laughable that they’re arguing this from the "don’t abuse exceptions as control flow" angle considering that PHP 5.3 introduced goto.

Is it possible to make video full–screen in this version of Skype? I can’t for the life of me figure out how.

Classy.

I’m a web developer. Much of my recent work has utilised Python/Django and JavaScript, although I have experience with a wide range of (mostly open–source) technologies.

I just checked out CoderStack. I’m looking forward to your launch :)

As a recent CS grad, this article stuck a chord with me. I wrote the following reply to the author:

--

Hey Dominic,

I’m a recent CS grad (2009) from ECS at the University of Southampton. Full disclosure: it goes against my humility to say it, but I would probably consider myself to have been a student who hacked around with a lot of technologies and concepts not touched by my course (and I think I’m considerably better off for it).

Not to blame the course, though — the course at ECS was amazing. We had our fair share of "ethics" and "IT industry" modules, although everyone admitted (lecturers included) that these existed mostly to appease the professional bodies. We were subjected to modules that sought to teach us Java, requirements gathering, HCI and project management, although these only made up a small part of the course as a whole. A sizeable portion of my time at Southampton was spent deep in the mathematics that vitally underpin the "softer" CS subjects, and the course was delightfully broad. We built compilers to parse abstract languages, learned LISP (much to the initial mindfuckery of my peers and I) and we all implemented a FAT12 filesystem in C from scratch. The latter required two 12–hour sessions in the lab, and I’m pretty sure that the vending machine was completely drained of coffee somewhere around 6 hours into the second day. We were taught and examined in gratuitous (but stimulating) detail on computational complexity, data structures, formal methods and the properties of fundamental algorithms, and the officially sanctioned languages used throughout the course spanned Java, C(++), C#, PHP, Scheme, Python, JavaScript, Perl and a handful of UNIX shells.

I don’t think the problem is the courses, I think it’s the learning style of many students and the sheer number of students that are encouraged to go to university just because it’s what they are "supposed" to do to get a job. Group work always frustrated me, as many of my peers simple wanted to learn the course notes verbatim so that they could regurgitate them in an exam.

Although it concerned me that many of my peers would one day be released into the wild firmly clutching their Java IDEs, there were a lot of really bright students on my course.

The thing that stops large companies hiring me is probably the abundance of truly awful recruitment agencies. Myself and many of the ECS–ers that I’ve kept in touch with are bombarded by 5–10 poorly written, unprofessional LinkedIn messages from recruiters every week. Today I received such a message that opened with "Hi Darcey". Classy. They all seem to want Java/C# developers and none of them seem to care about other technologies, or deem them irrelevant, or think that this sort of "playing around" detracts from your skill in some other proprietary technology on their checklist. It’s getting to the point where I’m only "working" (for money) around 40%-50% of the time. The rest of the time, I’m just sitting at home working on side projects to keep myself amused.

Many of my most talented coursemates are either now working on their PhDs, or working 10 hours a day on a soul–destroying graduate program for some faceless city financial institution so that they can retire at the age of 45, burnt out and sick of technology.

Sometimes I feel like I should just move to Mountain View or Palo Alto or somewhere else with a little Silicon Valley sunshine, but I don’t want to move away from my family, and my girlfriend is very happy here working for a physics startup. It bothers me how grey and soul–less the prospects appear to be for passionate British software geeks.

Perhaps I’m missing something crucial (or maybe I haven’t been hanging out with enough of the cool–kids at Silicon Roundabout) but where can I find great tech jobs in this country?

Ben

It’s slightly concerning that Apple use the word "class" in this document. JavaScript has no concept of "class".

Interesting, but they're still two fields conceptually AFAICT. They just happen to be within a single box that makes them look like one "field".

I think you might have misread kbob’s comment. I think he was talking about upgrading from one SSD to another newer SSD — not from HDD to SSD.

I used to use Slicehost, but moved to Linode once they launched their backup service. The admin UI isn't as pretty, but IMO the service is better (and they have VPS hosts in London, which shaves a few milliseconds off for me).

At Fantastic, we recently moved from Slicehost to The Rackspace Cloud. We're pretty impressed with them so far.

My favourite is probably Barry Schwartz on the paradox of choice: http://www.ted.com/talks/lang/eng/barry_schwartz_on_the_para...