Will Ajax get another bad rap? Yahoo worm
Just like the Sammy worm attacked MySpace last October another JavaScript flaw in Yahoo email is using the good ole XHR object to grab a users address book and use another technique to send the list of emails to another remote server. Want to see the code look here and you will see the famous lines that look for 4 and 200 with the XHR object!
Now this is why I stress in every single one of my talks about making sure your code does not allow JavaScript injection if you are displaying user input! I even have had interviews (one example) where I stress that you need to do checks. If something this big can affect a company like yahoo, imagine what it can do to your site.
Eric Pascarello
Coauthor of Ajax In Action
Moderator of HTML/JavaScript at www.JavaRanch.com
Author of: JavaScript: Your Visual Blueprint for building Dynamic Web Pages
pacsnet talk in philly
My talk in Philly (http://www.pacsnet.org/) on Saturday went very well. I have not heard a group laugh so much before. My wife says that I am not funny, but this group thought I was. LOL
For anyone that is looking for the files of the presentation, I will try to post them tonight or tomorrow. Thanks for attending the two sessions I did there. I enjoyed talking and answering your questions. It was the first time I did my general overview on Ajax talk and you guys made it easy for me to cover the material.
Eric Pascarello
Coauthor of Ajax In Action
Moderator of HTML/JavaScript at www.JavaRanch.com
Author of: JavaScript: Your Visual Blueprint for Dynamic Web Pages
Just thought I would mention that I have two talks doing up in case you do not have Manning's calendar (http://manning.com/calendar/#Jun) as your homepage.
Tomorrow (06/10/2006) I will be speaking in Philadelphia. I will be talking in two different times. The first talk will be a general overview on what Ajax is, benefits, and other information. Basically it is what I would say to a non technical manager to get them interested. The second talk is my 2 hour look into what makes up the XMLHttpRequest Object (low level approach) and a breif intro to OO JavaScript with Ajax. Site: http://www.pacsnet.org/
On Tuesday Evening of next week (06/13/2006) I will be speaking in Reston, Virgina at NOVAJUG. There I will be doing my long talk into what makes up the XMLHttpRequest Object and a breif intro to OO JavaScript. This is the normal low level look into Ajax. Site: http://www.novajug.com:8080/
If you know of any other user groups in the area, I am always looking to talk. Far drives require it to be on the weekend since this guy is running out of vacation days!
Eric Pascarello
Coauthor of Ajax In Action
Moderator of HTML/JavaScript at www.JavaRanch.com
Author of: JavaScript: Your Visual Blueprint for Dynamic Web Pages