Future requests?

[chalsall]

Originally Posted by James Heinrich

I'll still need to tweak a number of things, like axis labels and so forth. But it's a start.

Looking great James!

One thing I found I had to do was make the bars relatively thin (on both axis), so you could see all of the ones behind. Also, I had the higher factored bars in front as there are often fewer of those than lower factored.

[alpertron]

Another suggestion would be to add the bit size of the exponents at the right of the image so the meaning is more clear.

For example: for http://www.mersenne.ca/status/tf/0/0/3/0 you should write 62, 63, 64, ... at the right.

[LaurV]

Originally Posted by chalsall

Looking great James!

+1! B-e-a-utiful! We love the on/off checkboxes on the right!
Still waiting for the movies (just kidding, man, you did a wonderful job!)

[Dubslow]

Originally Posted by alpertron

I think it is OK to use JavaScript, which is a Web standard and supported by all browsers. Of course if someone wants to disable JavaScript, he will not be able to see the graph, but this is a problem of the person who does not want to see Web pages as they were designed. In the same way, if you want to disable CSS, you will see Web pages incorrectly.

CSS can't (at least not that I know of) be used against the person viewing the website. JS very easily can, retina has nothing against the authors or the websites themselves, he is only in the self protection game.

Edit: The imgur zero-day exploit yesterday was an excellent example.

[alpertron]

It always depends on the type of Web sites you visit. In general you will not find these problems on mathematical or other "boring" (for most people) stuff. Hackers like to attack sites that are visited by most people.

I have visited Web sites for 18 years with JavaScript enabled, and I have never had any incident.

[Madpoo]

Originally Posted by Dubslow

CSS can't (at least not that I know of) be used against the person viewing the website. JS very easily can, retina has nothing against the authors or the websites themselves, he is only in the self protection game.

Edit: The imgur zero-day exploit yesterday was an excellent example.

I thought there was some exploit a while back that used some CSS maneuvering to put itself over a logon box (for example) and make it seem like you're typing in there, but it's going into an iframe.

Of course there was more to it than that, like the iframe had to be able to interact with the main site, so it really only affected certain sites that were setup poorly, but still...

I may have the details on that wrong, but I recall something like that affecting Facebook?

Okay, I admit, I skimmed the article. But I figured since CSS can position things and a poor iframe implementation could let outside code do something like interact with the parent frame, then maybe, just maybe?

[chris2be8]

Originally Posted by alpertron

I have visited Web sites for 18 years with JavaScript enabled, and I have never had any incident.

That's any incident you know of. Security specialists tend to be slightly paranoid, which is generally considered a virtue in the field.

And avoiding "dangerous" web sites is harder than you think. At least skip any site with advertising on it (you can't rely on AdBlock+ to stop all advertising).

Chris

[alpertron]

Originally Posted by chris2be8

That's any incident you know of. Security specialists tend to be slightly paranoid, which is generally considered a virtue in the field.

And avoiding "dangerous" web sites is harder than you think. At least skip any site with advertising on it (you can't rely on AdBlock+ to stop all advertising).

Chris

There is no problem with ads. With time people acquire "ad blindness", so ads are automatically ignored by the brain, and you can concentrate in the Web page subject without even knowing what is the advertisement about.

[chalsall]

Originally Posted by alpertron

There is no problem with ads.

Incorrect. Ads can come with malicious Javascript.

[Madpoo]

Originally Posted by chalsall

Incorrect. Ads can come with malicious Javascript.

And often do.

The websites I manage run ads. Some come from Google Adsense, some are direct buys, and they all get checked to make sure they're cool.

The problem comes about when an advertiser buys a placement using some benign looking stuff, and then once it's approved, they change up what they serve from their own system. The old bait and switch.

End result is someone visits our site and gets one of those bogus "you've got a virus!" things that takes over the window and can't be closed using conventional means. It's annoying, we hate it, our customers hate it, Google hates it, and they do end up getting banned for life, but these are sock puppets and show up again somewhere else.

I just got my first Chrome on Android "you've got a virus" pop-up... super annoying. I normally root my phones and install an ad-blocker, but in this case I haven't done that yet, and sure enough, the darn thing pops up and even made my phone vibrate at max intensity... super annoying.

Of course the idiot who gets these and then says "oh noes, I better click on that shiny flashy button and type in my credit card #" really only has himself to blame at that point. Worst case is when the malicious ad has zero-day stuff or redirects you somewhere that does.

[LaurV]

Originally Posted by Madpoo

and can't be closed using conventional means

One more reasons to love Firefox. We used to go endless roundabouts to avoid clicking on popping stuff like (when you click the red x) "this page asks you to confirm that you want to close it". One can do strange stuff with those popups, if you allow it (by clicking on it, because you don't know what you are clicking on, they can overpose pictures over the real popups)... Sometime using escape key closes the popup but you still could not close the page, because when clicking the red x, you get the popup again. With the old FF we could drag the tab on the desktop, where another instance of FF would open (move the current tab to new browser window) and we closed the other instance from the task manager, this way avoiding to close all open tabs. Since people claimed to the company and suggested patches - advantages of having an open source browser - they changed last year: now you just click once more on the red x and the bad tab, together with all malefic popups, is gone. We hate when a site asks us "are you sure you want to close me?" after we click the red x, forcing us to click an "yes" on an uncertain popup window.