FromTheRafters wrote:
> "~BD~" <~BD~@nomail.afraid.org> wrote in message
> news:j6jfm5$cbc$1@dont-email.me...
>> Dustin wrote:
>>> ~BD~<~BD~@nomail.afraid.org> wrote in
>>> news:j6h3cj$m4d$2@dont-email.me:
>>>
>>>> Dustin wrote:
>>>>> FromTheRafters<erratic@nomail.afraid.org> wrote in
>>>>> news:j65csr$e9e$1@dont-email.me:
>>>>>
>>>>>> Beauregard T. Shagnasty wrote:
>>>>>>> FromTheRafters wrote:
>>>>>>>
>>>>>>>> "Beauregard T. Shagnasty" wrote:
>>>>>>>>> Dustin wrote:
>>>>>>>>>> That's not a cookie issue. It's an OLD vulnerability I think?
>>>>>>>>>> in the css. Any website can ask your browser for a dump of
>>>>>>>>>> it's entire history.
>>>>>>>>>
>>>>>>>>> It *is* the cookies. CSS is benign text that controls the
>>>>>>>>> display of the page you are viewing. It can't do anything at
>>>>>>>>> all to track you.
>>>>>>>>
>>>>>>>> Yes, Dustin may be using an older no longer used abbreviation
>>>>>>>> for Cross Site Scripting (CSS) which now means Cascading Style
>>>>>>>> Sheets.
>>>>>>>>
>>>>>>>> Cross Site Scripting is XSS now.
>>>>>>>
>>>>>>> Okay. CSS has been Cascading Style Sheets since .. somewhere
>>>>>>> into the last millennium<g>.
>>>>>>>
>>>>>> Even though there is no confusion over CSRF/XSRF like there was
>>>>>> over CSS/XSS, XSRF is often used anyway apparently in keeping
>>>>>> with XSS and XMAS. )
>>>>>>
>>>>>
>>>>> My bad my bad.
>>>>
>>>> Thank you, Dustin! :-)
>>>>
>>>>
>>>
>>> for?
>>>
>>>
>>
>> Accepting that you were wrong on this occasion.
>
> He wasn't. He was using the older terminology correctly. Like "SysOp"
> and "coder" he was using terminology that he knows, in the correct
> way, while others were misunderstanding him due to newer terminology
> usurping the older.
>
> Cross-Site Scripting was being discussed around 1990 or so, and the
> CSS-1 specification (Cascading Style Sheets) was being drafted around
> 1997 and was almost fully implemented in browsers by the time Windows
> 2000 came out. CSS came to mean Cascading Style Sheets by website
> "coders" and "SysOps" everywhere. The security folks have now adopted
> XSS as the new terminology.
> BTW, that *was* the last millennium. D

It's nice that you have come around to my way of thinking. :-) {{you have
been assimilated}}

--
Jenn