RE: HTTP Server's jobs for CGI applications

[boldt@xxxxxxxxxx]

Brad wrote:
>> We're talking two different things:  JavaScript and Cookies.
>Some programmers only use Javascript for cookies (reading/writing, etc..),
>so I don't believe we are.

OK, if you want, let's talk about the two in combination:

Some people can use the combination to access files on a
client system.  A Google search just turned up the page
<http://www.peacefire.org/security/jscookies/> which
describes how the combination of JavaScript and Cookies
can compromise a client systems integrity.  Cute, huh?


>Well, it seems we disagree on how important it is if someone finds out if
I
>have an account on deja.com, yahoo, etc.  No one said the web was 100%
>secure, but I feel more comfortable giving my credit card number over a
SSL
>connection on the net than giving it to the waiter at a restaurant to take
>into the back room for 10 minutes.

Well, I've read somewhere that there's been no documented
case of a credit card stolen by a hacker listening in to
IP packets.  I've even given my own credit card number in
e-mail safely.  (But then, in an e-mail you can always
format the number in such a way as to make it difficult
for a "sniffer" to recognize.)


>If you're that worried about personal privacy and liberty, you could
exhaust
>your energy towards a lot better causes that cookie tracking on the net,
>that's for sure.

Disabling cookies is no great effort.

Look, I know the advertisers already have a lot of profile
information about my buying habits.  I just don't want to
make it too easy for them.  (I really don't have a lot of
confidence that privacy laws on this side of the Atlantic
will ever match those in EU.)


>I hate to say this, but this shows a slight bit of ignorance.  A lot of
>pages use flash for nagivation bars.

I've never come across any.  (And I believe I do have
Flash installed on my home system, BTW.)  Mybe I just
don't bother with THOSE web pages!


>Where's the URL?  And only post it if you're doing some real web stuff,
not
>just showing pictures of your dog and truck and listing your
certifications,
>etc.  e-commerce requires interaction.

You know, there are these things called "search engines".
(Leslie found my web pages.)  Here's a hint:  Bring up
Google (<http://www.google.com/>), type my name in the
search field, and see if you're feeling lucky.

OK, you'll find a lot of the usual personal web page
stuff, such as genealogy information (including how I'm
related to two Nobel Prize winners in Physics), family
photos, photos of Toronto and our neighborhood, vacation
photos, etc.  Even pictures of our cats!  (But no mention
of anything work related.)  Relatively straight-forward
stuff, but there is at least a bit of CGI involved in
every single page.

Professionally, you know I belong to the RPG development
team here in the lab.  What you probably don't know is
that currently I'm on loan to another department involved
in one particular web development tool.  (I believe Jon
mentioned its name in a posting yesterday.)  So, although
I haven't personally written an "e-commerce" application,
I certainly am aware of the issues involved.

Cheers!  Hans

Hans Boldt, ILE RPG Development, IBM Toronto Lab, boldt@ca.ibm.com


+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---