Long titles for Firefox

Mozillan browsers (SeaMonkey, Firefox, Flock, …) cut off tooltips after 80 chars, including tooltips from HTML TITLE attributes: bug 45375, bug 218223.

After the bug has been open for six and a half years (opened 2000-07-13), it has finally been resolved – on the Seamonkey trunk, which means the change will not make it into the popular browser before version 3.0.

Long Titles (amo, home page) is an extension for Mozilla, Firefox and Netscape that fixes this annoying behaviour. It prevents tooltips from being cut off, and also enables line breaks within TITLE attributes.

Another little step on making Firefox more useful…

TWAINgle

Twaingle is a tool that allows you to search for images on flickr or yahoo and insert them directly into an application.

Where ‘application’ means ‘anything TWAIN-aware’. TWAINgle installs itself into the system (Windows XP only at the moment) as a TWAIN driver. Thus, all applications that have an option to “scan” images via TWAIN become web-enabled instantly. And how!

Do follow, please

[lang_de]
Dieses Blog ist seit jetzt wieder frei von rel="nofollow". Das nofollow-Attribut hat in meinen Augen nichts gebracht – der Linkspam hat nicht abgenommen, die Suchergebnisse wurden nicht merklich besser. Statt dessen wird auch den legitimen Links (in Posts oder Kommentaren) der Google-Juice(tm?) genommen.

Also, back to the (web)roots: Do follow!
[/lang_de]
[lang_en]
This blog is once again free from rel="nofollow". The nofollow attribute hasn’t done any good as far as I can see – the link spam has, if anything, grown, search engine’s results haven’t become noticeably better. Instead, even legitimate links (in posts or comments) are stripped of their Google juice.

Thus, back to the (web) roots: Do follow!
[/lang_en]

Blogger Beta Captchas broken?

I’m trying to comment on a blogger.com blog using a beta.blogger.com account, but I can’t see the Captcha image because the image URL returns only a 404 Not Found. Is anyone else having problems?

Update: It’s fixed. thomy, in the articles you linked from on your blog, it is made pretty clear that Santa Claus is *not* a Coca-Cola invention and that the red-white dress was in use over ten years before the first Coke Santa.

And in reply to [Cigarette Machine](http://saarbrueckendailyphoto.blogspot.com/2006/12/cigarette-machine.html):

> It’s not about EC-Cards, but about the GeldKarte. These are often combined, but not always. You can even see the GeldKarte (but no EC) logo on the low-res preview image!
>
> Also, the legal age for smoking in Germany is indeed 16, which means that people aged 16 and 17 need to ask their banks to specifically store their birthdate on the card. By default, only ages 18+ get that.

Here’s hope that trackbacks/pingbacks will work 🙂

–>

StudiVZ: “Erfolg” ist Definitionssache

“studiVZ hat heute um 12 Uhr einen Phishing-Angriff bemerkt und erfolgreich abgewehrt” – wobei “erfolgreich abgewehrt” bedeutet, dass man erst mal alles runtergefahren hat und dann für knapp acht Stunden down war. Der “Phishing-Angriff” (eigentlich ein XSS-Wurm, aber wer wird sich denn mit Details aufhalten wollen) hatte in der Zwischenzeit schon ordentliche Kreise gezogen und Unmengen von Benutzerdaten (Login und Passwort) ausgespäht. Kommt halt alles darauf an, wie man “Erfolg” definiert…

Wer könnte auch ahnen, dass man Benutzereingaben im ‘Web 2.0’ irgendwie filtern müsste.

Firefox 2.0 Password Manager Bug

Mozilla today made bug #360493 public. It describes an attack using cross-site forms and a security flaw in the Firefox Password Manager to read stored passwords for a different site. There is a proof of concept that demonstrates that the bug can even be abused without any hint to the user – the form need not be visible for the auto-fill of the credentials to work, and Firefox does not even give a warning.

The type of attack has been coined a Reverse Cross-Site Request (RCSR).

As of the time of this post, there is no fix available. However, a possible workaround is to set a Master Password and use the Master Password Timeout extension with a very short timeout. One can also disable the password manager altogether.

The bug existed since at least Firefox 1.5. Also, similar bugs seem to exist in at least IE 6 and 7, but Microsoft say they’re working on a fix.

Gravatars borked

Gravatars are borked at the moment, because:Because:

Warning: mysql_connect(): Host '192.168.2.7' is blocked because of many connection errors.
Unblock with 'mysqladmin flush-hosts' in /home/gravatar-admin/public_html/common.php on line 45

(at gravatar.com)

Windows updates want to destroy your work

Windows Update does this annoying “you absolutely must restart now, or later, by which I mean that I’ll keep nagging you every 5 minutes” thing. It’s a pain in the ass since the popup usually occurs only after you have just settled in to work – once all your programs are open and the windows arranged, WU pops up in the middle of your screen with a default button of “Restart now”, which is also mapped to “N” (like “No”). I can see what Microsoft are hoping to do, but honestly? I think this behaviour is completely unacceptable.

Luckily, there are several ways to fix it. The simplest solution to stop the nagging for the remainder of your login session is to just stop the Windows Update Automatic Updates Service, either per GUI or just by running

net stop wuauserv

You can also use a registry setting to disable automatic rebooting when there is a user logged on, plus set a high ‘respawn timer’ for the nag screen:

Run regedit
Open HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU
Create a DWORD value named ‘NoAutoRebootWithLoggedOnUsers’ and set it to 1
Create a DWORD value named ‘RebootRelaunchTimeoutEnabled’ and set it to 1
Create a DWORD value named ‘RebootRelaunchTimeout’ and set it to 600

If you’re on Windows XP Professional or any Server OS, you can also use the Group Policy Editor to do the same thing:

Run gpedit.msc
Navigate to Local Computer Policy > Computer Configuration > Administrative Templates > Windows Components > Windows Update
Activate No auto-restart for schedule Automatic Updates installations, AND
Set Re-prompt for restart with scheduled installations to a high number.

WordPress Official Comments

If you are using the Official Comments plugin with a recent WordPress version, you might be getting Database errors when you post a comment on your own blog. To fix these, open the official-comments.php file and change:

  • in line 27: $tableusers -> $wpdb->users
  • in line 40: $tablecomments -> $wpdb->comments