<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" media="screen" href="/App_Themes/default/rss.xslt"?><rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:trackback="http://madskills.com/public/xml/rss/module/trackback/" xmlns:wfw="http://wellformedweb.org/CommentAPI/" xmlns:slash="http://purl.org/rss/1.0/modules/slash/" xmlns:media="http://search.yahoo.com/mrss/" xmlns:evnet="http://www.mscommunities.com/rssmodule/"><channel><title>Comment Feed for David finally took down Goliath (Coffeehouse on Channel 9)</title><atom:link rel="self" type="application/rss+xml" href="http://channel9.msdn.com/forums/coffeehouse/476931-david-finally-took-down-goliath/rss/default.aspx" /><image><url>http://mschnlnine.vo.llnwd.net/d1/Dev/App_Themes/C9/images/feedimage.png</url><title>Comment Feed for David finally took down Goliath (Coffeehouse on Channel 9)</title><link>http://channel9.msdn.com/forums/Coffeehouse/476931-David-finally-took-down-Goliath/</link></image><description>David finally took down Goliath</description><link>http://channel9.msdn.com/forums/Coffeehouse/476931-David-finally-took-down-Goliath/</link><language>en-us</language><pubDate>Thu, 09 Jul 2009 00:51:12 GMT</pubDate><lastBuildDate>Thu, 09 Jul 2009 00:51:12 GMT</lastBuildDate><generator>EvNet (EvNet, Version=1.0.3608.3122, Culture=neutral, PublicKeyToken=null)</generator><item><title>Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: David finally took down Goliath</title><description>&lt;p&gt;Sounds great. What does that exactly do? Does that mean when I unlock the ActiveX control on IE8, the virus still can't attack my machine while using my Admin account?&lt;/p&gt;</description><comments></comments><link>http://channel9.msdn.com/forums/Coffeehouse/476931-David-finally-took-down-Goliath/?CommentID=477561</link><pubDate>Thu, 09 Jul 2009 00:51:12 GMT</pubDate><guid isPermaLink="false">http://channel9.msdn.com/forums/Coffeehouse/476931-David-finally-took-down-Goliath/?CommentID=477561</guid><evnet:views>0</evnet:views><evnet:viewtrackingurl>http://channel9.msdn.com/477561/WebViewBug.aspx?EVT=0</evnet:viewtrackingurl><evnet:previewtext>Sounds great. What does that exactly do? Does that mean when I unlock the ActiveX control on IE8, the virus still can't attack my machine while using my Admin account?</evnet:previewtext><dc:creator>magicalclick</dc:creator><slash:comments>0</slash:comments><wfw:commentRss></wfw:commentRss><trackback:ping>http://channel9.msdn.com/477561/Trackback.aspx</trackback:ping></item><item><title>Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: David finally took down Goliath</title><description>&lt;p&gt;The &amp;lt;button /&amp;gt; element is incompatible with the HtmlButton control class and you cannot respond to server-side events for it.&lt;/p&gt;
&lt;p&gt;So you can &lt;em&gt;use&lt;/em&gt; it, but you can't take full advantage of WebForms with it.&lt;/p&gt;</description><comments></comments><link>http://channel9.msdn.com/forums/Coffeehouse/476931-David-finally-took-down-Goliath/?CommentID=477557</link><pubDate>Thu, 09 Jul 2009 00:41:52 GMT</pubDate><guid isPermaLink="false">http://channel9.msdn.com/forums/Coffeehouse/476931-David-finally-took-down-Goliath/?CommentID=477557</guid><evnet:views>0</evnet:views><evnet:viewtrackingurl>http://channel9.msdn.com/477557/WebViewBug.aspx?EVT=0</evnet:viewtrackingurl><evnet:previewtext>The &amp;lt;button /&amp;gt; element is incompatible with the HtmlButton control class and you cannot respond to server-side events for it.
So you can use it, but you can't take full advantage of WebForms with it.</evnet:previewtext><dc:creator>W3bbo</dc:creator><slash:comments>0</slash:comments><wfw:commentRss></wfw:commentRss><trackback:ping>http://channel9.msdn.com/477557/Trackback.aspx</trackback:ping></item><item><title>Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: David finally took down Goliath</title><description>&lt;p&gt;The whole IE process&amp;nbsp;with ActiveX&amp;nbsp;controls&amp;nbsp;is running with Vista's super-low privilege&amp;nbsp;mode and doesn't have write access even to the user profile.&lt;/p&gt;</description><comments></comments><link>http://channel9.msdn.com/forums/Coffeehouse/476931-David-finally-took-down-Goliath/?CommentID=477540</link><pubDate>Wed, 08 Jul 2009 22:24:23 GMT</pubDate><guid isPermaLink="false">http://channel9.msdn.com/forums/Coffeehouse/476931-David-finally-took-down-Goliath/?CommentID=477540</guid><evnet:views>0</evnet:views><evnet:viewtrackingurl>http://channel9.msdn.com/477540/WebViewBug.aspx?EVT=0</evnet:viewtrackingurl><evnet:previewtext>The whole IE process&amp;nbsp;with ActiveX&amp;nbsp;controls&amp;nbsp;is running with Vista's super-low privilege&amp;nbsp;mode and doesn't have write access even to the user profile.</evnet:previewtext><dc:creator>CreamFilling512</dc:creator><slash:comments>0</slash:comments><wfw:commentRss></wfw:commentRss><trackback:ping>http://channel9.msdn.com/477540/Trackback.aspx</trackback:ping></item><item><title>Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: David finally took down Goliath</title><description>&lt;p&gt;All binary extensions are susceptible to such problems and they really aren't going to go away. You can put more barriers in the way, but you can't really get total mitigation without crippling the whole purpose of extensions in the first place. Ultimately browser plugins need to be developed with security as their #1 priority. And sadly few are.&lt;/p&gt;</description><comments></comments><link>http://channel9.msdn.com/forums/Coffeehouse/476931-David-finally-took-down-Goliath/?CommentID=477539</link><pubDate>Wed, 08 Jul 2009 22:22:14 GMT</pubDate><guid isPermaLink="false">http://channel9.msdn.com/forums/Coffeehouse/476931-David-finally-took-down-Goliath/?CommentID=477539</guid><evnet:views>0</evnet:views><evnet:viewtrackingurl>http://channel9.msdn.com/477539/WebViewBug.aspx?EVT=0</evnet:viewtrackingurl><evnet:previewtext>All binary extensions are susceptible to such problems and they really aren't going to go away. You can put more barriers in the way, but you can't really get total mitigation without crippling the whole purpose of extensions in the first place. Ultimately browser plugins need to be developed with&amp;#8230;</evnet:previewtext><dc:creator>AndyC</dc:creator><slash:comments>0</slash:comments><wfw:commentRss></wfw:commentRss><trackback:ping>http://channel9.msdn.com/477539/Trackback.aspx</trackback:ping></item><item><title>Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: David finally took down Goliath</title><description>&lt;p&gt;While that Vista and Win7 is protected someone, that doesn't change the fact that ActiveX open to other attacks. To cover all the possibilities are hard. I think it is more important to move to a new design wtih security in mind. ActiveX is simply a dirty man's trick to make something happen, but just like C++, too much freedom comes with a price, and&amp;nbsp;in our current computer era, this is not somehting we should cheat as old days.&lt;/p&gt;
&lt;p&gt;As for backward compatibility, I am sure you can reenable the old style dirty ActiveX.&lt;/p&gt;
&lt;p&gt;&amp;nbsp;&lt;/p&gt;</description><comments></comments><link>http://channel9.msdn.com/forums/Coffeehouse/476931-David-finally-took-down-Goliath/?CommentID=477535</link><pubDate>Wed, 08 Jul 2009 21:49:32 GMT</pubDate><guid isPermaLink="false">http://channel9.msdn.com/forums/Coffeehouse/476931-David-finally-took-down-Goliath/?CommentID=477535</guid><evnet:views>0</evnet:views><evnet:viewtrackingurl>http://channel9.msdn.com/477535/WebViewBug.aspx?EVT=0</evnet:viewtrackingurl><evnet:previewtext>While that Vista and Win7 is protected someone, that doesn't change the fact that ActiveX open to other attacks. To cover all the possibilities are hard. I think it is more important to move to a new design wtih security in mind. ActiveX is simply a dirty man's trick to make something happen, but&amp;#8230;</evnet:previewtext><dc:creator>magicalclick</dc:creator><slash:comments>0</slash:comments><wfw:commentRss></wfw:commentRss><trackback:ping>http://channel9.msdn.com/477535/Trackback.aspx</trackback:ping></item><item><title>Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: David finally took down Goliath</title><description>&lt;p&gt;&lt;blockquote&gt;&lt;div&gt;W3bbo said:&lt;/div&gt;&lt;div&gt;you can't use it in ASP.NET without some hackery.&lt;/div&gt;&lt;/blockquote&gt;&lt;/p&gt;
&lt;p&gt;How so? I've run and used ASP.NET with IE6, even including AJAX, with no problems. Care to clarify?&lt;/p&gt;</description><comments></comments><link>http://channel9.msdn.com/forums/Coffeehouse/476931-David-finally-took-down-Goliath/?CommentID=477533</link><pubDate>Wed, 08 Jul 2009 21:30:31 GMT</pubDate><guid isPermaLink="false">http://channel9.msdn.com/forums/Coffeehouse/476931-David-finally-took-down-Goliath/?CommentID=477533</guid><evnet:views>0</evnet:views><evnet:viewtrackingurl>http://channel9.msdn.com/477533/WebViewBug.aspx?EVT=0</evnet:viewtrackingurl><evnet:previewtext>W3bbo said:you can't use it in ASP.NET without some hackery.
How so? I've run and used ASP.NET with IE6, even including AJAX, with no problems. Care to clarify?</evnet:previewtext><dc:creator>SlackmasterK</dc:creator><slash:comments>0</slash:comments><wfw:commentRss></wfw:commentRss><trackback:ping>http://channel9.msdn.com/477533/Trackback.aspx</trackback:ping></item><item><title>Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: David finally took down Goliath</title><description>&lt;p&gt;text-decoration:; works fine on &amp;lt;button /&amp;gt; but I don't know about &amp;lt;input type="button/submit" /&amp;gt;. But that's a very minor thing, why would you want underlined or strike-through on text on a button anyway?&lt;/p&gt;
&lt;p&gt;Little tidbit: &amp;lt;button type="submit" /&amp;gt; isn't correctly implemented in IE6 so you can't use it in ASP.NET without some hackery. Also PocketIE doesn't support it at all, despite being finalised over 10 years ago.&lt;/p&gt;</description><comments></comments><link>http://channel9.msdn.com/forums/Coffeehouse/476931-David-finally-took-down-Goliath/?CommentID=477445</link><pubDate>Wed, 08 Jul 2009 12:49:15 GMT</pubDate><guid isPermaLink="false">http://channel9.msdn.com/forums/Coffeehouse/476931-David-finally-took-down-Goliath/?CommentID=477445</guid><evnet:views>0</evnet:views><evnet:viewtrackingurl>http://channel9.msdn.com/477445/WebViewBug.aspx?EVT=0</evnet:viewtrackingurl><evnet:previewtext>text-decoration:; works fine on &amp;lt;button /&amp;gt; but I don't know about &amp;lt;input type="button/submit" /&amp;gt;. But that's a very minor thing, why would you want underlined or strike-through on text on a button anyway?
Little tidbit: &amp;lt;button type="submit" /&amp;gt; isn't correctly implemented in IE6 so&amp;#8230;</evnet:previewtext><dc:creator>W3bbo</dc:creator><slash:comments>0</slash:comments><wfw:commentRss></wfw:commentRss><trackback:ping>http://channel9.msdn.com/477445/Trackback.aspx</trackback:ping></item><item><title>Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: David finally took down Goliath</title><description>&lt;p&gt;Short of pushing out an update disabling ActiveX under IE and XP, which would make loads of business software and numerous websites all of a sudden non-functional, what else should they do (other than patch whatever needs to be patched, of course)?&lt;/p&gt;
&lt;p&gt;Seeing as the latest vulnerability is mitigated completely in Windows Vista and Windows 7 due to it's improved security, I would say they've done what they needed to do as far as ActiveX without breaking existing applications that depend on it. &amp;nbsp;&lt;/p&gt;
&lt;p&gt;If a seven year old operating system and web browser is as much a security problem as it's perceived to be and there's evidence that Vista and Windows 7 solve those, I'm pretty confident as to what the logical answer is.&lt;/p&gt;
&lt;p&gt;&amp;nbsp;&lt;/p&gt;</description><comments></comments><link>http://channel9.msdn.com/forums/Coffeehouse/476931-David-finally-took-down-Goliath/?CommentID=477404</link><pubDate>Wed, 08 Jul 2009 04:19:44 GMT</pubDate><guid isPermaLink="false">http://channel9.msdn.com/forums/Coffeehouse/476931-David-finally-took-down-Goliath/?CommentID=477404</guid><evnet:views>0</evnet:views><evnet:viewtrackingurl>http://channel9.msdn.com/477404/WebViewBug.aspx?EVT=0</evnet:viewtrackingurl><evnet:previewtext>Short of pushing out an update disabling ActiveX under IE and XP, which would make loads of business software and numerous websites all of a sudden non-functional, what else should they do (other than patch whatever needs to be patched, of course)?
Seeing as the latest vulnerability is mitigated&amp;#8230;</evnet:previewtext><dc:creator>fknight</dc:creator><slash:comments>0</slash:comments><wfw:commentRss></wfw:commentRss><trackback:ping>http://channel9.msdn.com/477404/Trackback.aspx</trackback:ping></item><item><title>Re: Re: Re: Re: Re: David finally took down Goliath</title><description>&lt;p&gt;I somewhat agree with your opinion that Microsoft needs to make a move and be more active. But implementing the standard partially is also not a good solution. IE had been non standard in the past and have bad reputations, even now after IE is fully standard. You&amp;nbsp;definitely do not want&amp;nbsp;make those people to come back and start pointing fingers at IE anymore.&lt;/p&gt;
&lt;p&gt;What I think Microsoft needs to do is to have some kind of a fork from ie for community review. Whatever they call this product, this will completely for review only and will never see an official release. The product may only consist of the trident engine without any bells and whistles on it. That way Microsoft can&amp;nbsp;get community reviews while contributing to the standardization process. Microsoft can even put a proof of concept on new suggestions there and noone will probably complains about it.&lt;/p&gt;</description><comments></comments><link>http://channel9.msdn.com/forums/Coffeehouse/476931-David-finally-took-down-Goliath/?CommentID=477391</link><pubDate>Wed, 08 Jul 2009 01:00:09 GMT</pubDate><guid isPermaLink="false">http://channel9.msdn.com/forums/Coffeehouse/476931-David-finally-took-down-Goliath/?CommentID=477391</guid><evnet:views>0</evnet:views><evnet:viewtrackingurl>http://channel9.msdn.com/477391/WebViewBug.aspx?EVT=0</evnet:viewtrackingurl><evnet:previewtext>I somewhat agree with your opinion that Microsoft needs to make a move and be more active. But implementing the standard partially is also not a good solution. IE had been non standard in the past and have bad reputations, even now after IE is fully standard. You&amp;nbsp;definitely do not&amp;#8230;</evnet:previewtext><dc:creator>punkouter</dc:creator><slash:comments>0</slash:comments><wfw:commentRss></wfw:commentRss><trackback:ping>http://channel9.msdn.com/477391/Trackback.aspx</trackback:ping></item><item><title>Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: David finally took down Goliath</title><description>&lt;p&gt;I've found FF is good for using ABC's crappy video player. For some reason they don't recognize the IE8 user agent.&lt;/p&gt;</description><comments></comments><link>http://channel9.msdn.com/forums/Coffeehouse/476931-David-finally-took-down-Goliath/?CommentID=477389</link><pubDate>Wed, 08 Jul 2009 00:12:41 GMT</pubDate><guid isPermaLink="false">http://channel9.msdn.com/forums/Coffeehouse/476931-David-finally-took-down-Goliath/?CommentID=477389</guid><evnet:views>0</evnet:views><evnet:viewtrackingurl>http://channel9.msdn.com/477389/WebViewBug.aspx?EVT=0</evnet:viewtrackingurl><evnet:previewtext>I've found FF is good for using ABC's crappy video player. For some reason they don't recognize the IE8 user agent.</evnet:previewtext><dc:creator>SlackmasterK</dc:creator><slash:comments>0</slash:comments><wfw:commentRss></wfw:commentRss><trackback:ping>http://channel9.msdn.com/477389/Trackback.aspx</trackback:ping></item><item><title>Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: David finally took down Goliath</title><description>&lt;p&gt;PS. I removed the Skype add-in for FF 3.5 and life is good w/ FF 3.5 + Netbook again. Nothing near FF 3.5 on OSX but I'm happy.&lt;/p&gt;
&lt;p&gt;PSS. wrt NSAPI... the security note says that the ActiveX control has no business being instantiated by the browser... so if you look at the potential target for NSAPI exploits, it'd be shoddy components interfacing w/ NSAPI. Whereas, exploits targeting ActiveX controls can aim for EVERY ActiveX control written... even if they never were meant for the web.&lt;/p&gt;
&lt;p&gt;At least that's my limited knowledge of NSAPI...&lt;/p&gt;</description><comments></comments><link>http://channel9.msdn.com/forums/Coffeehouse/476931-David-finally-took-down-Goliath/?CommentID=477388</link><pubDate>Wed, 08 Jul 2009 00:01:56 GMT</pubDate><guid isPermaLink="false">http://channel9.msdn.com/forums/Coffeehouse/476931-David-finally-took-down-Goliath/?CommentID=477388</guid><evnet:views>0</evnet:views><evnet:viewtrackingurl>http://channel9.msdn.com/477388/WebViewBug.aspx?EVT=0</evnet:viewtrackingurl><evnet:previewtext>PS. I removed the Skype add-in for FF 3.5 and life is good w/ FF 3.5 + Netbook again. Nothing near FF 3.5 on OSX but I'm happy.
PSS. wrt NSAPI... the security note says that the ActiveX control has no business being instantiated by the browser... so if you look at the potential target for NSAPI&amp;#8230;</evnet:previewtext><dc:creator>Minh</dc:creator><slash:comments>0</slash:comments><wfw:commentRss></wfw:commentRss><trackback:ping>http://channel9.msdn.com/477388/Trackback.aspx</trackback:ping></item><item><title>Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: David finally took down Goliath</title><description>&lt;p&gt;I didn't think about NSAPI. This is not about comparing who is worse, but to think about a safer way to the same stuff as ActiveX. Something like ReadOnly ActiveX, and then, you have special user granted WriteToMyDocumentOnly ActiveX, and then, the finally Admin granted nasty ActiveX. I think it is better to kill ActiveX and think of something with security in mind.&lt;/p&gt;
&lt;p&gt;&amp;nbsp;&lt;/p&gt;</description><comments></comments><link>http://channel9.msdn.com/forums/Coffeehouse/476931-David-finally-took-down-Goliath/?CommentID=477382</link><pubDate>Tue, 07 Jul 2009 23:10:26 GMT</pubDate><guid isPermaLink="false">http://channel9.msdn.com/forums/Coffeehouse/476931-David-finally-took-down-Goliath/?CommentID=477382</guid><evnet:views>0</evnet:views><evnet:viewtrackingurl>http://channel9.msdn.com/477382/WebViewBug.aspx?EVT=0</evnet:viewtrackingurl><evnet:previewtext>I didn't think about NSAPI. This is not about comparing who is worse, but to think about a safer way to the same stuff as ActiveX. Something like ReadOnly ActiveX, and then, you have special user granted WriteToMyDocumentOnly ActiveX, and then, the finally Admin granted nasty ActiveX. I think it is&amp;#8230;</evnet:previewtext><dc:creator>magicalclick</dc:creator><slash:comments>0</slash:comments><wfw:commentRss></wfw:commentRss><trackback:ping>http://channel9.msdn.com/477382/Trackback.aspx</trackback:ping></item><item><title>Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: David finally took down Goliath</title><description>&lt;p&gt;I'm no web expert, I merely hear the swears from across the office. A quick perusal of Twitter feeds apparently reveals that "setting text-decoration on buttons doesn't work" was the latest. Whatever that means?&lt;/p&gt;</description><comments></comments><link>http://channel9.msdn.com/forums/Coffeehouse/476931-David-finally-took-down-Goliath/?CommentID=477378</link><pubDate>Tue, 07 Jul 2009 23:04:35 GMT</pubDate><guid isPermaLink="false">http://channel9.msdn.com/forums/Coffeehouse/476931-David-finally-took-down-Goliath/?CommentID=477378</guid><evnet:views>0</evnet:views><evnet:viewtrackingurl>http://channel9.msdn.com/477378/WebViewBug.aspx?EVT=0</evnet:viewtrackingurl><evnet:previewtext>I'm no web expert, I merely hear the swears from across the office. A quick perusal of Twitter feeds apparently reveals that "setting text-decoration on buttons doesn't work" was the latest. Whatever that means?</evnet:previewtext><dc:creator>AndyC</dc:creator><slash:comments>0</slash:comments><wfw:commentRss></wfw:commentRss><trackback:ping>http://channel9.msdn.com/477378/Trackback.aspx</trackback:ping></item><item><title>Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: David finally took down Goliath</title><description>&lt;p&gt;Fair enough. Might be a bug triggered by pages I don't view or something.&lt;/p&gt;
&lt;p&gt;&amp;nbsp;&lt;/p&gt;</description><comments></comments><link>http://channel9.msdn.com/forums/Coffeehouse/476931-David-finally-took-down-Goliath/?CommentID=477368</link><pubDate>Tue, 07 Jul 2009 22:00:33 GMT</pubDate><guid isPermaLink="false">http://channel9.msdn.com/forums/Coffeehouse/476931-David-finally-took-down-Goliath/?CommentID=477368</guid><evnet:views>0</evnet:views><evnet:viewtrackingurl>http://channel9.msdn.com/477368/WebViewBug.aspx?EVT=0</evnet:viewtrackingurl><evnet:previewtext>Fair enough. Might be a bug triggered by pages I don't view or something.
&amp;nbsp;</evnet:previewtext><dc:creator>LeoDavidson</dc:creator><slash:comments>0</slash:comments><wfw:commentRss></wfw:commentRss><trackback:ping>http://channel9.msdn.com/477368/Trackback.aspx</trackback:ping></item><item><title>Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: David finally took down Goliath</title><description>&lt;p&gt;In my experience cases where Firefox's rendering has differed from WebKit is when it's within the specification, like the default typeface and line-height settings which can be easily overridden in the stylesheet.&lt;/p&gt;
&lt;p&gt;Do you have any examples where Firefox has gone against the spec?&lt;/p&gt;</description><comments></comments><link>http://channel9.msdn.com/forums/Coffeehouse/476931-David-finally-took-down-Goliath/?CommentID=477367</link><pubDate>Tue, 07 Jul 2009 21:30:48 GMT</pubDate><guid isPermaLink="false">http://channel9.msdn.com/forums/Coffeehouse/476931-David-finally-took-down-Goliath/?CommentID=477367</guid><evnet:views>0</evnet:views><evnet:viewtrackingurl>http://channel9.msdn.com/477367/WebViewBug.aspx?EVT=0</evnet:viewtrackingurl><evnet:previewtext>In my experience cases where Firefox's rendering has differed from WebKit is when it's within the specification, like the default typeface and line-height settings which can be easily overridden in the stylesheet.
Do you have any examples where Firefox has gone against the spec?</evnet:previewtext><dc:creator>W3bbo</dc:creator><slash:comments>0</slash:comments><wfw:commentRss></wfw:commentRss><trackback:ping>http://channel9.msdn.com/477367/Trackback.aspx</trackback:ping></item><item><title>Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: David finally took down Goliath</title><description>&lt;p&gt;I have no extensions, because I don't use the browser. You aren't pinning the blame for crappy software on the user this time. :P&lt;/p&gt;</description><comments></comments><link>http://channel9.msdn.com/forums/Coffeehouse/476931-David-finally-took-down-Goliath/?CommentID=477359</link><pubDate>Tue, 07 Jul 2009 21:02:40 GMT</pubDate><guid isPermaLink="false">http://channel9.msdn.com/forums/Coffeehouse/476931-David-finally-took-down-Goliath/?CommentID=477359</guid><evnet:views>0</evnet:views><evnet:viewtrackingurl>http://channel9.msdn.com/477359/WebViewBug.aspx?EVT=0</evnet:viewtrackingurl><evnet:previewtext>I have no extensions, because I don't use the browser. You aren't pinning the blame for crappy software on the user this time. :P</evnet:previewtext><dc:creator>kettch</dc:creator><slash:comments>0</slash:comments><wfw:commentRss></wfw:commentRss><trackback:ping>http://channel9.msdn.com/477359/Trackback.aspx</trackback:ping></item><item><title>Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: David finally took down Goliath</title><description>&lt;p&gt;If you've getting a lot of FF crashes, try removing your extensions. If you still get them then you might need to clear our your Firefox profile (probably due to some junk in it created by an extension).&lt;/p&gt;
&lt;p&gt;Extensions are a huge blessing, and the main reason I use Firefox, but they can also cause things to go catastrophically wrong due to being so intertwined with the browser's code.&lt;/p&gt;
&lt;p&gt;Firefox 2 and 3 have been very stable for me, FWIW, and when people have a lot of crashes it usually seems to be due to extensions gone wrong. (Of course, it can also be because different people visit different sites and some sites trigger bugs.)&lt;/p&gt;
&lt;p&gt;It's like Windows Explorer: If it crashes then 99% of the time it's because of a bad shell extension (and there are a lot of them!). Problem is that Explorer.exe still gets the blame and looks bad.&lt;/p&gt;
&lt;p&gt;&amp;nbsp;&lt;/p&gt;</description><comments></comments><link>http://channel9.msdn.com/forums/Coffeehouse/476931-David-finally-took-down-Goliath/?CommentID=477216</link><pubDate>Tue, 07 Jul 2009 11:33:53 GMT</pubDate><guid isPermaLink="false">http://channel9.msdn.com/forums/Coffeehouse/476931-David-finally-took-down-Goliath/?CommentID=477216</guid><evnet:views>0</evnet:views><evnet:viewtrackingurl>http://channel9.msdn.com/477216/WebViewBug.aspx?EVT=0</evnet:viewtrackingurl><evnet:previewtext>If you've getting a lot of FF crashes, try removing your extensions. If you still get them then you might need to clear our your Firefox profile (probably due to some junk in it created by an extension).
Extensions are a huge blessing, and the main reason I use Firefox, but they can also cause&amp;#8230;</evnet:previewtext><dc:creator>LeoDavidson</dc:creator><slash:comments>0</slash:comments><wfw:commentRss></wfw:commentRss><trackback:ping>http://channel9.msdn.com/477216/Trackback.aspx</trackback:ping></item><item><title>Re: Re: Re: Re: Re: Re: Re: Re: Re: David finally took down Goliath</title><description>&lt;p&gt;WTF does how much I'm paid have to do with anything?&lt;/p&gt;
&lt;p&gt;Everyone has  better things to do than fight with poorly designed technology (HTML + CSS).&lt;/p&gt;
&lt;p&gt;I could be paid $1,000,000 per second I still wouldn't want to waste time fighting with bad tech when I could be getting on with something else. Web design isn't my job or my hobby; it's just a chore I go through to get things on the web. Even if it was my job, and I was paid by the hour rather than by the site, I'd much rather get on with another site instead of have each one take longer over fiddly details which, if CSS wasn't so awful, should be trivial. There's satisfaction in finishing and delivering things and it's more interesting to get something done and move to the next thing than it is to spend forever on boring, tedious work.&lt;/p&gt;
&lt;p&gt;I suppose if I was super rich I could pay someone else to do that, but I don't see how that validates your argument.&lt;/p&gt;
&lt;p&gt;HTML + CSS suck; end of story. Things don't stop sucking if you're paid a lot for the time they make you waste or if you can pay someone else to hide them from you.&lt;/p&gt;
&lt;p&gt;Time is worth more than money.&lt;/p&gt;
&lt;p&gt;(And FYI, my last salary was enough that, after resigning for other reasons, I've been able to spend most of the last two years working on pet projects which pay me zero.)&lt;/p&gt;</description><comments></comments><link>http://channel9.msdn.com/forums/Coffeehouse/476931-David-finally-took-down-Goliath/?CommentID=477215</link><pubDate>Tue, 07 Jul 2009 11:28:07 GMT</pubDate><guid isPermaLink="false">http://channel9.msdn.com/forums/Coffeehouse/476931-David-finally-took-down-Goliath/?CommentID=477215</guid><evnet:views>0</evnet:views><evnet:viewtrackingurl>http://channel9.msdn.com/477215/WebViewBug.aspx?EVT=0</evnet:viewtrackingurl><evnet:previewtext>WTF does how much I'm paid have to do with anything?
Everyone has  better things to do than fight with poorly designed technology (HTML + CSS).
I could be paid $1,000,000 per second I still wouldn't want to waste time fighting with bad tech when I could be getting on with something else. Web design&amp;#8230;</evnet:previewtext><dc:creator>LeoDavidson</dc:creator><slash:comments>0</slash:comments><wfw:commentRss></wfw:commentRss><trackback:ping>http://channel9.msdn.com/477215/Trackback.aspx</trackback:ping></item><item><title>Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: David finally took down Goliath</title><description>&lt;p&gt;"At this point I don't care if the browser renders everything with pixel perfect precision. I just want it to work! This is why I've relegated FF to being the (red headed) stepchild who gets drug out once in a while for a beating and stuffed back in the closet."&lt;/p&gt;
&lt;p&gt;It's a fair point. It would almost be forgivable if the HTML rendering &lt;em&gt;was&lt;/em&gt; perfect, at least it would make for a good reference renderer. It's not though, it has its own share of unique HTML rendering bugs too.&lt;/p&gt;</description><comments></comments><link>http://channel9.msdn.com/forums/Coffeehouse/476931-David-finally-took-down-Goliath/?CommentID=477183</link><pubDate>Tue, 07 Jul 2009 08:11:47 GMT</pubDate><guid isPermaLink="false">http://channel9.msdn.com/forums/Coffeehouse/476931-David-finally-took-down-Goliath/?CommentID=477183</guid><evnet:views>0</evnet:views><evnet:viewtrackingurl>http://channel9.msdn.com/477183/WebViewBug.aspx?EVT=0</evnet:viewtrackingurl><evnet:previewtext>"At this point I don't care if the browser renders everything with pixel perfect precision. I just want it to work! This is why I've relegated FF to being the (red headed) stepchild who gets drug out once in a while for a beating and stuffed back in the closet."
It's a fair point. It would almost be&amp;#8230;</evnet:previewtext><dc:creator>AndyC</dc:creator><slash:comments>0</slash:comments><wfw:commentRss></wfw:commentRss><trackback:ping>http://channel9.msdn.com/477183/Trackback.aspx</trackback:ping></item><item><title>Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: David finally took down Goliath</title><description>&lt;p&gt;How is it anymore open to attacks than NSAPI?&lt;/p&gt;</description><comments></comments><link>http://channel9.msdn.com/forums/Coffeehouse/476931-David-finally-took-down-Goliath/?CommentID=477179</link><pubDate>Tue, 07 Jul 2009 07:06:11 GMT</pubDate><guid isPermaLink="false">http://channel9.msdn.com/forums/Coffeehouse/476931-David-finally-took-down-Goliath/?CommentID=477179</guid><evnet:views>0</evnet:views><evnet:viewtrackingurl>http://channel9.msdn.com/477179/WebViewBug.aspx?EVT=0</evnet:viewtrackingurl><evnet:previewtext>How is it anymore open to attacks than NSAPI?</evnet:previewtext><dc:creator>CreamFilling512</dc:creator><slash:comments>0</slash:comments><wfw:commentRss></wfw:commentRss><trackback:ping>http://channel9.msdn.com/477179/Trackback.aspx</trackback:ping></item><item><title>Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: David finally took down Goliath</title><description>&lt;p&gt;If Flash, PDF, Silverlight, QuickTime, Mesh, and Windows Media, were ported over to a new plugin architecture then I would probably be 95%+ covered.&lt;/p&gt;
&lt;p&gt;The remaining cases are all either miscellaneous Microsoft plugins or specialized stuff like WebEx, which I've only used once.&lt;/p&gt;</description><comments></comments><link>http://channel9.msdn.com/forums/Coffeehouse/476931-David-finally-took-down-Goliath/?CommentID=477173</link><pubDate>Tue, 07 Jul 2009 05:46:18 GMT</pubDate><guid isPermaLink="false">http://channel9.msdn.com/forums/Coffeehouse/476931-David-finally-took-down-Goliath/?CommentID=477173</guid><evnet:views>0</evnet:views><evnet:viewtrackingurl>http://channel9.msdn.com/477173/WebViewBug.aspx?EVT=0</evnet:viewtrackingurl><evnet:previewtext>If Flash, PDF, Silverlight, QuickTime, Mesh, and Windows Media, were ported over to a new plugin architecture then I would probably be 95%+ covered.
The remaining cases are all either miscellaneous Microsoft plugins or specialized stuff like WebEx, which I've only used once.</evnet:previewtext><dc:creator>kettch</dc:creator><slash:comments>0</slash:comments><wfw:commentRss></wfw:commentRss><trackback:ping>http://channel9.msdn.com/477173/Trackback.aspx</trackback:ping></item><item><title>Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: David finally took down Goliath</title><description>&lt;p&gt;The thing is when are we going to kill ActiveX? The whole system&amp;nbsp;seems to have too&amp;nbsp;much freedom for attacks. Why not making something much more protected, like read only or something.&lt;/p&gt;</description><comments></comments><link>http://channel9.msdn.com/forums/Coffeehouse/476931-David-finally-took-down-Goliath/?CommentID=477168</link><pubDate>Tue, 07 Jul 2009 05:26:17 GMT</pubDate><guid isPermaLink="false">http://channel9.msdn.com/forums/Coffeehouse/476931-David-finally-took-down-Goliath/?CommentID=477168</guid><evnet:views>0</evnet:views><evnet:viewtrackingurl>http://channel9.msdn.com/477168/WebViewBug.aspx?EVT=0</evnet:viewtrackingurl><evnet:previewtext>The thing is when are we going to kill ActiveX? The whole system&amp;nbsp;seems to have too&amp;nbsp;much freedom for attacks. Why not making something much more protected, like read only or something.</evnet:previewtext><dc:creator>magicalclick</dc:creator><slash:comments>0</slash:comments><wfw:commentRss></wfw:commentRss><trackback:ping>http://channel9.msdn.com/477168/Trackback.aspx</trackback:ping></item><item><title>Re: David finally took down Goliath</title><description>&lt;p&gt;Perhaps ZF is not a suitable&amp;nbsp;development envirnment for IE platform? But, if you want to go Chorm exclusively, go ahead. Like I always said, if you don't like USA, move to somewhere else. If you don't like the product, don't buy it. Your lack of support may one day be enough to convince MS's&amp;nbsp;policies. If less and less website support IE, I am sure MS will starts to get worried.&lt;/p&gt;
&lt;p&gt;I am sure everyone has their own crappy story about other platforms. We are the developers, shits happens, and we debug. That's not going to happen. Just like those HTML5 standards, assume you get 40% FF3 and 25% FF2 markets, you still need to code HTML4 for that 25% of FF2. Develope backward compatible software is always difficult. And * just happens. If you are so frustrated by web developement, try a software development, at least now you only have to fix your own mess or your teamates' mess.&lt;/p&gt;
&lt;p&gt;&amp;nbsp;&lt;/p&gt;</description><comments></comments><link>http://channel9.msdn.com/forums/Coffeehouse/476931-David-finally-took-down-Goliath/?CommentID=477167</link><pubDate>Tue, 07 Jul 2009 05:24:20 GMT</pubDate><guid isPermaLink="false">http://channel9.msdn.com/forums/Coffeehouse/476931-David-finally-took-down-Goliath/?CommentID=477167</guid><evnet:views>0</evnet:views><evnet:viewtrackingurl>http://channel9.msdn.com/477167/WebViewBug.aspx?EVT=0</evnet:viewtrackingurl><evnet:previewtext>Perhaps ZF is not a suitable&amp;nbsp;development envirnment for IE platform? But, if you want to go Chorm exclusively, go ahead. Like I always said, if you don't like USA, move to somewhere else. If you don't like the product, don't buy it. Your lack of support may one day be enough to convince&amp;#8230;</evnet:previewtext><dc:creator>magicalclick</dc:creator><slash:comments>0</slash:comments><wfw:commentRss></wfw:commentRss><trackback:ping>http://channel9.msdn.com/477167/Trackback.aspx</trackback:ping></item><item><title>Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: David finally took down Goliath</title><description>&lt;p&gt;That's not an IE vulnerability, but an vulnerability with a particular ActiveX control.&lt;/p&gt;
&lt;p&gt;Of course ActiveX is IE only... but still it's not a problem with the IE code.&lt;/p&gt;
&lt;p&gt;&amp;nbsp;&lt;/p&gt;</description><comments></comments><link>http://channel9.msdn.com/forums/Coffeehouse/476931-David-finally-took-down-Goliath/?CommentID=477165</link><pubDate>Tue, 07 Jul 2009 05:13:17 GMT</pubDate><guid isPermaLink="false">http://channel9.msdn.com/forums/Coffeehouse/476931-David-finally-took-down-Goliath/?CommentID=477165</guid><evnet:views>0</evnet:views><evnet:viewtrackingurl>http://channel9.msdn.com/477165/WebViewBug.aspx?EVT=0</evnet:viewtrackingurl><evnet:previewtext>That's not an IE vulnerability, but an vulnerability with a particular ActiveX control.
Of course ActiveX is IE only... but still it's not a problem with the IE code.
&amp;nbsp;</evnet:previewtext><dc:creator>blowdart</dc:creator><slash:comments>0</slash:comments><wfw:commentRss></wfw:commentRss><trackback:ping>http://channel9.msdn.com/477165/Trackback.aspx</trackback:ping></item><item><title>Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: David finally took down Goliath</title><description>&lt;p&gt;&lt;blockquote&gt;&lt;div&gt;You sound lazy. The framework features are documented in a table of contents that I so nicely linked in my last post. You need to RTFM or STFU. I mean that in the nicest way.&lt;/div&gt;&lt;/blockquote&gt;&lt;/p&gt;
&lt;p&gt;I can see you getting very quickly on the path of your predecessors...&lt;/p&gt;
&lt;p&gt;Be corteous, polite and respectful. Don't assume you know more than anyone else (because you don't) and don't insult other niners.&lt;/p&gt;</description><comments></comments><link>http://channel9.msdn.com/forums/Coffeehouse/476931-David-finally-took-down-Goliath/?CommentID=477163</link><pubDate>Tue, 07 Jul 2009 04:24:52 GMT</pubDate><guid isPermaLink="false">http://channel9.msdn.com/forums/Coffeehouse/476931-David-finally-took-down-Goliath/?CommentID=477163</guid><evnet:views>0</evnet:views><evnet:viewtrackingurl>http://channel9.msdn.com/477163/WebViewBug.aspx?EVT=0</evnet:viewtrackingurl><evnet:previewtext>You sound lazy. The framework features are documented in a table of contents that I so nicely linked in my last post. You need to RTFM or STFU. I mean that in the nicest way.
I can see you getting very quickly on the path of your predecessors...
Be corteous, polite and respectful. Don't assume you&amp;#8230;</evnet:previewtext><dc:creator>PaoloM</dc:creator><slash:comments>0</slash:comments><wfw:commentRss></wfw:commentRss><trackback:ping>http://channel9.msdn.com/477163/Trackback.aspx</trackback:ping></item></channel></rss>