Goodies to Go ™
December 2, 2002–Newsletter #209
This newsletter is part of the internet.com network.
http://www.internet.com
Featured
this week:
* Goodies Thoughts
– Tighten Up and Fill Those Holes
* Q & A Goodies
* News Goodies
* Feedback Goodies
* And Remember This…
Goodies Announcement
Just in case you missed
it before, the new Beyond HTML Goodies book is now available!
Go beyond the basics
and learn how the pros add and use dynamic HTML features and advanced
JavaScript techniques. Beyond HTML Goodies demonstrates dozens of new and
different features readers can add to their existing Web pages using HTML and
JavaScript. The book starts with simple text and image tips, such as adding a
clock to a Web page or causing text to appear when the mouse moves over an
image. It gradually builds to more complex tricks, including manipulating forms
or working with cookies behind the scenes. Throughout the book, readers enjoy
Joe’s snappy style and “to the point” discussion of each “goody” in the book.
http://books.internet.com/books/0789727803
| Goodies Thoughts – | Tighten Up and Fill Those Holes |
|---|
I talked a little bit last week
about an annoyance from which most of have suffered
at one time or another. This week I’ll be discussing
another plague. This plague, represented by two
variants, originates with miscreants who have
nothing (or not enough) constructive to do with
their lives. I am of course, talking about hacker
attacks and viruses.
When we think about hackers these days, we are
usually thinking of the folk who try to break into a
computer system. That’s not what the word
traditionally meant. I dug out my 1979 Webster’s
Dictionary to see what it had to say about hacking.
The book predates the common use of the Internet and
although it gives no less than thirty-six different
meaning for "hack", organized into nine categories,
not one of them mentions a computer or anything
related to it. How quickly things change! One
meaning struck me in particular: "to chop or cut in
a clumsy or unskillful way."
In the world of computers, hacking used to refer to
the manner in which programmers would sit for hours
on end at a console on a big old mainframe computer
and work and work, foregoing sleep and food (but
never foregoing coffee!) until a problem that had
reared its ugly head was solved and the machine was
humming along nicely once again. I was once just
such a programmer and I know from experience that if
anybody asked me how it was going, or what I was
doing to solve the problem, I would invariably
answer with something like "I don’t know. Now leave
me alone!" It wasn’t that I actually didn’t know, or
that I was being anti-social; it was simply that I
couldn’t afford to have my concentration broken.
Nevertheless, it created the impression of
"unskillful chopping" at the problem, groping for a
solution. If they eventually came to the conclusion
that I was a hero for averting the crisis, I
wouldn’t know — I was home sleeping!
These days, the impressions are just the opposite.
Hackers are seen as using skill, but to ruin
systems, not to solve problems. To my way of
thinking, skill is something used in a creative
process. When the objective is destruction, not
creation, there can be no "skill" involved. What
knowledge there may be involved in the task, loses
all value because of its objective, and consequently
loses its right to be called skill. I don’t consider
a burglar to be a "skilled home protection
engineer".
I apply the same thinking to the so-called skills of
the programmer who writes viruses (viri – !!) We
have used the medical or biological analogy because
of the manner in which the code can replicate
itself, but I take it further. A disease is a
disease. The programmer who writes a virus has
diseased "skills". The only thing to be done is to
correct the situation — remove or disable the
disease.
Corporations around the world spend huge amounts of
money to protect themselves from the plague of these
two diseases. When you connect to the Internet, you
also need protection. Do not fall into the trap of
thinking that since you turn off the computer most
of the time, never bring in diskettes or CDs that
were recorded on someone else’s computer and are
careful not to open email attachments, that you are
immune. It only takes a moment for something to find
its way through an open hole. You have got to close
them up. A hole, by the way, in this context is any
mechanism by which a feature of the software
(including the operating system) in a computer
system can be exploited for other than its
originally intended use.
Make no mistake — there is no complete block; no
sure fire protection. With the number of people
having destructive intent working on finding holes
and communicating with each other over the net,
there will be new holes discovered every hour of
every day. What you can do, is to harden your system
as much as possible; make it as difficult as
possible to exploit and provide the most up-to-date
virus protection you reasonably can.
Windows XP offers a much higher degree of protection
than earlier versions, incorporating file security
options and a built-in firewall. If you’re using XP,
check out "firewall" in help and make sure it’s
active in your system. For other systems I suggest
you get a commercial firewall program such as
Symantec’s Norton Internet Security/Norton Personal
Firewall (Windows/Mac) or McAfee’s Personal Firewall
Plus (Windows). There are also some pretty good
products from smaller vendors such as BlackIce
Defender (Windows). Symantec and McAfee are also
vendors of the most popular antivirus products.
Another is Panda Software. For both firewall
products and anti-virus products I think there is
value in using products from large vendors. They
have sophisticated, automated update mechanisms and
a lot of people involved in keeping the updates
up-to-date. Also, the larger the user base, the
quicker any problem in the product itself will be
discovered (and hopefully, fixed!) All of the above
mentioned vendors fit this category. Pay the
(relatively small and definitely worth it) license
fee and use the automatic update features to keep
your products in fighting fit form. I do not
recommend using any shareware products for security.
(!!)
Once you rid yourself of disease, all that is left
is ease!
Thanks for Reading!
– Vince Barnes
Top
Q
& A Goodies
Questions are taken
from submissions to our Community Mentors. You can ask a Mentor a question by
going to https://www.htmlgoodies.com/mentors/.
Q. I have a page with thumbnails which
are linked to the full size images. I want the
full size images to open in a in-line frame on a
seperate html page. How do I get it to load a
new page and then have the image load in the
in-line frame of this new page?
A. The new page that loads needs to itself
be a frameset page. With an inline frame, that
means building a unique page for each image.
However, you can use server side includes for
code you reuse. This tutorial will explain that:
https://www.htmlgoodies.com/beyond/ssi.html
Q. I’m trying to format a page with tabs
or something similar and I can’t find anything
that works just right. I’ve tried using
JavaScript,
tag. Noneof these gave me just what I want. Any ideas????A. There are a few ways to do that. Oneway is the tag, which adds anindent each time but indents both left andright. The and tags indent to make alist, but you can use them just to indent andnot get bullets or numbers unless you add tags. You can also use a stylesheet to specifythe amount of indentation: https://www.htmlgoodies.com/design/css-html-text-color/Q. I need to learn how to pass avariable(s) from web page to web page. Do I usea cookie? Do I use a file and perl? Can it besimply done with the hidden fields in a form?A. There’s a tutorial on just thatsubject: https://www.htmlgoodies.com/beyond/jspass.htmlQ. I have a question regarding the "onclick" command, which I’ve used successfully inthe past with form buttons, but how can I usethe same command to work with a image in placeof the form button?A. To use it with an image you would usethe onClick like this: src="mypic.gif">If you want to use an image to submit a formthen you can just specify thetype as image like this:Also with the first example you can simulate theonClick this way:The above is preferable because of a bug inIE5.0 version browsers with thevoid "#" character in the HREF causing an error.Q. I would really like to make a passwordcode that remembers once someone has logged onand does not ask them for their password again,via cookies. I attempted to construct one fromthe Javascript tutorial on cookies, but as yet,I am unable to. Ideally, it would reset thecookie once the user returns to index, so thatafter that, the user would again have to enterthe password for the specific section.A. To keep your pages secure you shoulduse a Server Side script written in Perl, PHP orsome other Server Side language. With JavaScriptall they would have to do is look at the sourceto get the password. There are no foolproofpassword scripts written in JavaScript. TopNews GoodiesGet Ready, Get Set, Shop![December 2, 2002] Black Friday was a nice boost foronline sales as lots of consumers avoided mallmadness and simply shopped the Web; one estimateshows a 61 percent spike in online sales.Clickhere to read the articleAdobe Jumps Gun on Microsoft’s Xdocs[December 2, 2002] Adobe rolls out two server-sideproducts in a bid to get a headstart on Microsoft inthe market for XML-based network publishing.Clickhere to read the articleJury Selection Begins in ElcomSoft Case[December 2, 2002] U.S. prosecutors bring firstcriminal case in four-year history of DMCA (DigitalMillenium Copyright Act) against Russian-basedsoftware developer.Clickhere to read the article Nokia Phones Cover Cingular’s GSM Strategy[November 27, 2002] Hoping to advance its strategyto support GSM/GPRS networks in the United States,Nokia Tuesday took the wraps off of three newhandsets, two of which target business users.Clickhere to read the articleSpammed For The Holidays[November 27, 2002] It’s the holidays, whichmeans no rest for weary retailers — or forconsumers deluged by spam. In fact, the holidayscould actually prompt an increase in unwantedcommercial e-mail, according to several anti-spamoperations.Clickhere to read the article TopFeedbackGoodiesDid you ever wish your newsletter was an easy two way communications medium?Ploof! It now is!If you would like to comment on the newsletter or expand/improve on somethingyou have seen in here, you can now send your input to:mailto:nlfeedback@htmlgoodies.comWe already receive a lot of email every day. This address will help us sort outthose relating specifically to this newsletter from all the rest. When you sendemail to this address it may wind up being included in this section of thenewsletter, to be shared with your fellow readers.Thanks for all the feedback about pop-ups. Clearlythis was a problem that many of you dislike. Therewere a few suggestions for additional Pop-up adpreventer software products, including notes thatsome Norton and McAfee products offer protection ofthis sort. I had mentioned that Panicware (http://www.panicware.com ) was the onlycompany specializing is this kind of software that Ihad found. Specializing is a key word here! Even ifyou have NIS or McAfee, you might want to check outPanicware anyway, because their products have somevery interesting additional features that I’m sureyou’ll see the value of when you look at them!!You’ll see what I mean! Thanks also to Mayra Labriefor pointing outhttp://www.thiefware.com which is a sitededicated to educating folk about "unethical"software or "scumware".Philippe Lhoste, a programmer in France, pointed outthat the Q&A example for linking to a specificscripture within a web page was missing a closing tag. Absolutely correct, Phillipe. Merci! Thecode should have read: is placed around the word.Robert Mortimer also made an interesting point.There was a Q&A question about concealing passwordsbeing typed on a web page. Robert points out that"unless the user establishes a https connection thepassword will go in clear text across the internet."This is certainly something to bear in mind. Thesolution provided protects against an "over theshoulder" snoop, Robert’s suggestion providesprotection from an "on the wire" snoop. TopAndRemember This . . .On this day in…1954: Senate Condemns McCarthyBy a vote of 65 to 22 the US Senate condemnedSenator Joseph R. McCarthy (R. Wisconsin) forconduct "unbecoming a Senator" and "contrary tosenatorial traditions" in his investigations of"communists" in the USA. What started as a publicitystunt in Wheeling, West Virginia, and grew to becomeknown as "McCarthyism", was at first a claim byMcCarthy that he had a list of 205 communists whohad "infiltrated the US State Department." A seriesof allegations over the next three years fired upthe public until in 1953, when the Republican Partygained control of Congress, McCarthy was appointedchairman of the Committee on Government Operationsand its Subcommittee on Investigations. Hundreds ofofficials, members of the public, famouspersonalities had their careers and reputationsdestroyed by the heavy handed and illegal badgeringof McCarthy’s committee. People being investigatedfound no relief until they named friends andacquaintances who were "members of the communistparty". President Eisenhower pushed for televisedhearings which led to the public realization thatMcCarthy was reckless and tyrannical, and that henever produced substantiation for his claims.McCarthy attacked a member of the law firm whichalso included Joseph Welch, the special attorney forthe army. On June 9th Welch faced McCarthy saying"Until this moment, senator, I think I never reallygauged your cruelty or your recklessness. Let us notassassinate this lad further, senator. You have doneenough. Have you no sense of decency, sir? At longlast, have you no sense of decency?" The crowdapplauded and Congress debated, often heatedly,until the December 2nd condemnation. Thanks for readingGoodies to Go! ArchiveHome Page. 