Re: Re: Re: A Little Something.

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



I'm sure Stut (and others) have said enough, but I can no longer resist...

On May 21, 2008, at 8:08 AM, Michelle Konzack wrote:

Am 2008-05-12 15:40:54, schrieb Stut:
CSS, but I may not be understanding what you mean by blunt. Javascript
can be written such that it eats CPU and/or memory but this is of no
benefit to anyone so unless you're running on a prehistoric machine I
can't see that being an issue. And it's worth noting that even if a
script starts hammering the machine most browsers these days will
notice that, suspend it and offer to kill it.

About yu "prehistoric machine" :

My Devel-Station is a "AMD Phenom Quad 9800", running Debian GNU/ Linux Unstable, Testing and Stable in Xen-DomU and I know a couple of Websites where Mozilla/Iceape locks up to one minute, consuming 100% of CPU- Time and then showing a Message Box, that a Script is consuming very much
esources and if I continue, my Computer would not more responsive...

WTF?

It is causing the error since it has blocked loading the external file
but not the call to the code it contains. This, to me at least, seems
half-arsed. The error only exists on the page if you deny it something
that it needs to run correctly. IMHO the assumption that if the call

So forcing peoples to do things they do not want to do?

By holding a gun to your head?


I do not know, what this urchinTacker() does, but since it is named "Tracker", I asume it is a tool, which collect infos about Websiteusers.
A thing I do not like since it is violation of my privacy.

This statement appears to be one of ignorance. You claim that because you don't know what it does and it has a certain name, it MUST be a violation of your privacy. A violation of your privacy would be gaining *personally-identifiable* information w/o your knowledge - G.A. can't tell a web admin my first, middle, last names and DOB from my browser. Do some reading about the product and then make an educated statement.


to the urchinTracker function can run then so can the script tag to
pull in that code is pretty reasonable. In fact I make it all the time
in the code I write and I think the same would go for 99.999% of
developers using Javascript.

Ehm you mean, that I am one of those 0.001%?

Hmmm, I do not know a singel JavaScript Developer here in Strasbourg who
use it...

Either you're really popular to know lots of JS developers, or this is just another statement based on little or no facts. Asking the 3 guys next to you doesn't accurately summarize a city.


Urchin Tracker is a simple(!) analytics package and poses no danger to
you or your computer. In fact I would suggest it's anti-productive to
block it since it prevents the sites you visit from using the data it
provides to modify their site to make the experience better for you.

So collecting privacy infos about me?  --  No thanks!

Again, no personally-identifiable information being sent...


That error is caused by your use of selective Javascript-blocking
technology, and while I work very hard to ensure the sites I develop
work as well as possible without Javascript I think it's unreasonable
to expect them to work with selective blocking.

Selective because urchinTacker() tracker is collecting infos about me
which I do not want to give out!  --  Privacy violation!

If you use such tools, you have to warn users of your website, that you
are collecting data otherwise you could be run into trouble...

These statements are what really made me want to respond. From this statement, you are basically saying that a majority of the sites out there would have to have disclaimers. I know! Why don't we just require web developers to reveal the secrets!(TM) of their sites and give the source code so we can verify that they're not trying to find the name of my cat when I was 8? I mean, come on. "[W]arn users of your website"?? Don't get me wrong - I am all about security, but this appears to be taking it a bit far. As a web surfer, one should be aware of the potential risks and prepare reasonably!(TM) However, I must question if you should even be on the web... how do you sleep at night with all those javascript functions and cookies just parading around the 'net?!


Well, some of his pages do but that's complicating the issue. As far
as I can tell the only bit of Javascript common to all Tedd's pages is
the Google Analytics code which is not required for you to use the
site, it just enhances the ability for Tedd to analyse how people are
using it.

Ahh, -- urchinTracker() is from Google.  :-)

And if used without informing users, it is definitivly a privacy
violation.  At least in most EU countries like Germany and France.

I must say that I can't speak for other countries (non-US), but I don't see how this is a privacy violation - no personally-identifiable information is being transmitted. If you consider an IP or web browser as personally-identifiable, then I say you're wrong.

If we informed users about every tool we used to develop a site, I guarantee we'd lose their interest very quickly and they would go on to the next page that is not going to bombard them with information they could care less about.


It can and I care greatly about security, but Javascript is very well
locked down these days, and it's fairly difficult to get it to do
anything malicious. Can it do annoying things, yes (but rarely these
days, and usually only on 'special' sites), but I've not come across
anything malicious for quite some time.

Since I am working mobile with my ThinkPad, I do not like to be tracked by this urchinTracker() crap since this mean, Google will track ANY of
my customers where I am working if I use the Internet...

...and provide them a better experience on the web.


This is not only a privacy violation, it is spionage...

Prove it.


This is HOW secret services (the NSA is using Google) are working.

Oh neat. You worked for Secret Services before you worked for the French Ministry of Defense. You must be quite the security-guru. ;)


In summary I can understand where you're coming from, and it's totally
your choice to use something that modifies your browsing experience,
but to then complain that it's causing errors on the sites you visit
is, to me, beyond ridiculous. That's all I was trying to point out.

I do not know in which country you are, but all peoples worldwide should
block such shit coming from at least the USA/GB/IL.

If you used Google Analytics, you could find where I'm typing this email... =P

Ok, enough said from me - must get back to writing malicious code that will tell me what IP you're ISP has given you!

~Philip


Note:  I am working for the french Ministry of Defense.


Thanks, Greetings and nice Day
   Michelle Konzack
   Systemadministrator
   24V Electronic Engineer
   Tamay Dogan Network
   Debian GNU/Linux Consultant

"Personally, most of my web applications do not have to factor 13.7 billion years of space drift in to the calculations, so PHP's rand function has been great for me..." ~S. Johnson


--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php


[Index of Archives]     [PHP Home]     [Apache Users]     [PHP on Windows]     [Kernel Newbies]     [PHP Install]     [PHP Classes]     [Pear]     [Postgresql]     [Postgresql PHP]     [PHP on Windows]     [PHP Database Programming]     [PHP SOAP]

  Powered by Linux