ws page 26 - Dave's Blog

Search
My timeline on Mastodon

Bookmarklet of death: Domain hijacking without 0days | GNUCITIZEN

2009 Sep 23, 7:56"I do understand that it would be annoying to warn users every time they run a bookmarklet, but I think it would be sensible to show a warning at least the first time a given bookmarklet is executed. If you work for a popular web browser vendor such as Microsoft or Mozilla, you can think of this as my wish for the day! I'd love to hear your feedback if you are reading this!"PermalinkCommentstechnical bookmarklet bookmarklets security web webbrowser javascript

Brier Dudley's blog | More on Comcast digital: TiVos, Media Centers, HD ...

2009 Sep 20, 10:44Grumble grumble...PermalinkCommentscomcast digital cable windows mediacenter tv television tivo

Javascript Nintendo emulator

2009 Sep 17, 11:12This Javascript Nintendo emulator works amazingly well in Google Chrome. You can play Dr. Mario, Super Mario Bros., Tetris, The Legend of Zelda, etc.PermalinkCommentsbrowser javascript nintendo nes game videogame google tetris emulator

Internet Archive News

2009 Sep 14, 4:58PermalinkCommentsblog internet history library archive daily technical

ginger's thoughts » URI fragments vs URI queries for media fragment addressing

2009 Sep 11, 8:39"In the W3C Media Fragment Working Group (MFWG) we have had long discussions about the use of the URI query (”?”) or the URI fragment (”#”) addressing approach for addressing directly into media fragments, and the diverse new HTTP headers required to serve such URI requests, considering such side conditions as the stripping-off of fragment parameters from a URI by Web browsers, or the existence of caching Web proxies."PermalinkCommentsfragment uri via:connolly media url query http http-header

The first Windows 7 commercial airs - Ars Technica

2009 Sep 11, 8:31Win7 commercial featuring ponies and bunnies and pink and the final countdown...PermalinkCommentshumor video windows win7 ad youtube microsoft

CableCARD now a go for homebrew home theater PCs - Ars Technica

2009 Sep 10, 5:52Just in time for Comcast switching channels above 30 to digital only. My current Windows Media Center setup will not function soon. How much do you think I'm going to have to spend to get it working now...PermalinkCommentscablecard cable tv windows mediacenter media technical

A library without the books - The Boston Globe

2009 Sep 10, 5:02Makes sense to me. Its the content not the transmission medium.
PermalinkCommentsbook library education literature news

Time/Date Conversion Tool

2009 Aug 28, 3:39

I built timestamp.exe, a Windows command line tool to convert between computer and human readable date/time formats mostly for working on the first run wizard for IE8. We commonly write out our dates in binary form to the registry and in order to test and debug my work it became useful to be able to determine to what date the binary value of a FILETIME or SYSTEMTIME corresponded or to produce my own binary value of a FILETIME and insert it into the registry.

For instance, to convert to a binary value:

[PS C:\] timestamp -inString 2009/08/28:10:18 -outHexValue -convert filetime
2009/08/28:10:18 as FILETIME: 00 7c c8 d1 c8 27 ca 01

Converting in the other direction, if you don't know what format the bytes are in, just feed them in and timestamp will try all conversions and list only the valid ones:

[PS C:\] timestamp -inHexValue  "40 52 1c 3b"
40 52 1c 3b as FILETIME: 1601-01-01:00:01:39.171
40 52 1c 3b as Unix Time: 2001-06-05:03:30:08.000
40 52 1c 3b as DOS Time: 2009-08-28:10:18:00.000
(it also supports OLE Dates, and SYSTEMTIME which aren't listed there because the hex value isn't valid for those types). Or use the guess option to get timestamp's best guess:
[PS C:\] timestamp -inHexValue  "40 52 1c 3b" -convert guess
40 52 1c 3b as DOS Time: 2009-08-28:10:18:00.000

When I first wrote this I had a bug in my function that parses the date-time value string in which I could parse 2009-07-02:10:18 just fine, but I wouldn't be able to parse 2009-09-02:10:18 correctly. This was my code:

success = swscanf_s(timeString, L"%hi%*[\\/- ,]%hi%*[\\/- ,]%hi%*[\\/- ,Tt:.]%hi%*[:.]%hi%*[:.]%hi%*[:.]%hi", 
&systemTime->wYear,
&systemTime->wMonth,
&systemTime->wDay,
&systemTime->wHour,
&systemTime->wMinute,
&systemTime->wSecond,
&systemTime->wMilliseconds) > 1;
See the problem?

To convert between these various forms yourself read The Old New Thing date conversion article or Josh Poley's date time article. I previously wrote about date formats I like and dislike.

PermalinkCommentsdate date-time technical time windows tool

YouTube - AtYourLibraryOrg's Channel - Cory Doctorow Interview

2009 Aug 24, 9:56AtYourLibraryOrg interviews Cory Doctorow on library and librarian related Cory Doctorow topics, then breaks up his answers into short videos. Easy to watch and interesting.
PermalinkCommentsvideo cory-doctorow library information drm literature business economics

Bookmarklet Directory - Marklets.com

2009 Aug 24, 8:23PermalinkCommentsweb browser javascript bookmarklet technical

Dynamic CSRF White Paper Posted — Portal

2009 Aug 21, 3:13"At Black Hat USA 2009 and Defcon 17 Nathan Hamiel and Shawn Moyer introduced an attack called Dynamic Cross-Site Request Forgery (CSRF). This white paper discusses the attack and discusses several Dynamic CSRF attack vectors." Seems to require sites trying to secure CSRF scenarios using session IDs in their URLs.PermalinkCommentssecurity csrf research browser web technical

Creating Accelerators for Other People's Web Services

2009 Aug 18, 4:19

Before we shipped IE8 there were no Accelerators, so we had some fun making our own for our favorite web services. I've got a small set of tips for creating Accelerators for other people's web services. I was planning on writing this up as an IE blog post, but Jon wrote a post covering a similar area so rather than write a full and coherent blog post I'll just list a few points:

PermalinkCommentstechnical accelerator ie8 ie

You Deleted Your Cookies? Think Again | Epicenter | Wired.com

2009 Aug 17, 8:37Info on Flash cookies, US Govt websites cookie use, possible US Govt regulations on privacy/tracking users, plus a great zombie photo.PermalinkCommentszombie flash cookie wired privacy internet web browser politics government advertising google technical

payyattention / a social network of micropatronage

2009 Aug 14, 10:17Micropayment service for bloggers -- "per article micropatronage". Supports levels of benefits for readers - pay X or more and get the ad-less version of my blog. Link to your fav. article through payyattention and payyattention will count how much money your reference generated. Some neat features in there. Too bad its not a distributed protocol.PermalinkCommentsvia:sambrook video money micropayment patronage journalism economics newspaper business

IEBlog : Engineering POV: IE6

2009 Aug 12, 4:55"As a browser supplier, we want people to switch to the latest version of IE...", "Dropping support for IE6 is not an option because we committed to supporting the IE included with Windows for the lifespan of the product.", followed by a large number of comments from irate webdevs who missed the point.PermalinkCommentsblog microsoft ie ie6 dean-hachamovitch technical

YouTube - Mugshot Fail

2009 Aug 11, 9:39PermalinkCommentshumor video mugshot news

If It's Hip, It's Here: Craftsquatch Geeky Pillows & My Suite Stuff Adobe CS Pillows

2009 Aug 11, 7:36Its like favicons on pillows.
PermalinkCommentscute internet geek pillow favicon social shopping

The Longest Way 1.0 - one year walk/beard grow time lapse on Vimeo

2009 Aug 6, 8:06"Man shaves head, walks across China for a year, grows beard & crazy hair, and takes daily photos and short videos of himself along the way". Like the hair and the ska!PermalinkCommentsvia:kottke hair photo video timelapse china travel ska

Cambridge Cop Accidentally Arrests Henry Louis Gates Again During White House Meeting | The Onion - America's Finest News Source

2009 Aug 4, 7:19"Witnesses said that Sgt. Crowley, failing to recognize Gates on their flight to Logan Airport, arrested the tenured professor in midair, once again at the baggage claim, and twice during their shared cab ride back to Cambridge"PermalinkCommentshumor onion politics
Older EntriesNewer Entries Creative Commons License Some rights reserved.