<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Paco Hope &#187; Web Stuff</title>
	<atom:link href="http://paco.to/category/web-stuff/feed" rel="self" type="application/rss+xml" />
	<link>http://paco.to</link>
	<description>My Random Musings and Rants</description>
	<lastBuildDate>Mon, 06 Feb 2012 13:11:24 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.2.1</generator>
		<item>
		<title>Comparison Christmas Shopping: Amazon versus Tesco</title>
		<link>http://paco.to/2011/comparison-christmas-shopping-amazon-versus-tesco</link>
		<comments>http://paco.to/2011/comparison-christmas-shopping-amazon-versus-tesco#comments</comments>
		<pubDate>Sun, 04 Dec 2011 22:59:02 +0000</pubDate>
		<dc:creator>paco</dc:creator>
				<category><![CDATA[News]]></category>
		<category><![CDATA[Personal]]></category>
		<category><![CDATA[Web Stuff]]></category>
		<category><![CDATA[amazon]]></category>
		<category><![CDATA[christmas]]></category>
		<category><![CDATA[shopping]]></category>
		<category><![CDATA[tesco]]></category>

		<guid isPermaLink="false">http://paco.to/?p=552</guid>
		<description><![CDATA[This isn't a post advertising one thing or another, but I was really surprised at the difference in prices when doing some Christmas shopping online today. Here's four of the toys we were considering and the prices offered at Amazon.co.uk versus tesco.com. You figure that prices do vary from site to site, but I've never [...]]]></description>
			<content:encoded><![CDATA[<p>This isn't a post advertising one thing or another, but I was really surprised at the difference in prices when doing some Christmas shopping online today. Here's four of the toys we were considering and the prices offered at Amazon.co.uk versus tesco.com. You figure that prices do vary from site to site, but I've never seen them vary enough that it mattered. Today, anyways, it mattered plenty.</p>
<p><span id="more-552"></span></p>
<table border="0" cellspacing="0" cellpadding="0">
<colgroup>
<col />
<col span="3" /> </colgroup>
<tbody>
<tr>
<td>Toy</td>
<td>Amazon</td>
<td>Tesco</td>
<td>Difference</td>
</tr>
<tr>
<td>Super Mario 3D Land - Nintendo 3DS</td>
<td align="right">37.93</td>
<td align="right">32.70</td>
<td align="right">5.23</td>
</tr>
<tr>
<td>Octonauts Octopod Play Set</td>
<td align="right">39.99</td>
<td align="right">34.24</td>
<td align="right">5.75</td>
</tr>
<tr>
<td>Cars 2 Secret Spy Finn McMissile</td>
<td align="right">34.78</td>
<td align="right">25.96</td>
<td align="right">8.82</td>
</tr>
<tr>
<td>LEGO Hero Factory Rocka Xl</td>
<td align="right">14.99</td>
<td align="right">21.97</td>
<td align="right">6.98</td>
</tr>
<tr>
<td style="text-align: right;" height="15"> Total</td>
<td></td>
<td></td>
<td align="right">26.78</td>
</tr>
</tbody>
</table>
<p>In the end, we made two orders: one from Amazon and one from Tesco. We saved a non-trivial amount of money. This is in pounds. So at today's rates, £26.78 is worth about $41.79. Worth the effort we spent.</p>
<p>The only other question is stuff like shipping. Shipping was free in both cases. Amazon was also better on price in the 3D Land game, but they're shipping time on the cheap one was 2-4 weeks, which wouldn't make it for Christmas. So the price I show above is for an Amazon retailer who had it in stock and could ship this week.</p>
]]></content:encoded>
			<wfw:commentRss>http://paco.to/2011/comparison-christmas-shopping-amazon-versus-tesco/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Reader in Safari is quite cool</title>
		<link>http://paco.to/2011/reader-in-safari-is-quite-cool</link>
		<comments>http://paco.to/2011/reader-in-safari-is-quite-cool#comments</comments>
		<pubDate>Fri, 21 Oct 2011 08:06:09 +0000</pubDate>
		<dc:creator>paco</dc:creator>
				<category><![CDATA[iPad]]></category>
		<category><![CDATA[iPhone]]></category>
		<category><![CDATA[Technical]]></category>
		<category><![CDATA[Web Stuff]]></category>
		<category><![CDATA[iOS]]></category>
		<category><![CDATA[safari]]></category>
		<category><![CDATA[web]]></category>

		<guid isPermaLink="false">http://paco.to/2011/reader-in-safari-is-quite-cool</guid>
		<description><![CDATA[I noticed the RSS Reader feature on my iPad after I upgraded to iOS 5. When Im reading a web page, the word Reader shows up in the URL bar. When I tap it, the iPad looks a lot more like a kindle. The coloured backgrounds drop off, fonts are ignored, ads go away, and [...]]]></description>
			<content:encoded><![CDATA[<p style="text-align: left;">I noticed the RSS Reader feature on my iPad after I upgraded to iOS 5. When Im reading a web page, the word Reader shows up in the URL bar. When I tap it, the iPad looks a lot more like a kindle. The coloured backgrounds drop off, fonts are ignored, ads go away, and I get a basic black text on white background. Much more readable.</p>
<p>Obviously the RSS feed doesnt include YouTube videos, and a bunch of other parts of the page. But it also doesn't include the ads! Some sites don't have an RSS version, so you don't get it. But where they do have it, it's so much nicer.</p>
]]></content:encoded>
			<wfw:commentRss>http://paco.to/2011/reader-in-safari-is-quite-cool/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Fixing Firefox 4 on Mac to Always Search Google in English</title>
		<link>http://paco.to/2011/fixing-firefox-4-on-mac-to-always-search-google-in-english</link>
		<comments>http://paco.to/2011/fixing-firefox-4-on-mac-to-always-search-google-in-english#comments</comments>
		<pubDate>Mon, 02 May 2011 20:21:28 +0000</pubDate>
		<dc:creator>paco</dc:creator>
				<category><![CDATA[MacOS]]></category>
		<category><![CDATA[Web Stuff]]></category>
		<category><![CDATA[firefox]]></category>
		<category><![CDATA[google]]></category>
		<category><![CDATA[localisation]]></category>
		<category><![CDATA[localization]]></category>

		<guid isPermaLink="false">http://paco.to/?p=471</guid>
		<description><![CDATA[I travel a lot and go to different countries fairly often. If I'm in Belgium or the Netherlands or (most recently) Israel, the helpful people at Google know this. If I click at the top of Firefox to my Google search box and start typing, I will get redirected to a Google page that is [...]]]></description>
			<content:encoded><![CDATA[<p>I travel a lot and go to different countries fairly often. If I'm in Belgium or the Netherlands or (most recently) Israel, the helpful people at Google know this. If I click at the top of <a href="http://www.mozilla.com/" target="_blank">Firefox</a> to my Google search box and start typing, I will get redirected to a Google page that is in the local language. In Belgium I'm redirected to <a href="http://google.be/" target="_blank">google.be</a>, in the Netherlands I'm redirected to <a href="http://google.nl/" target="_blank">google.nl</a>, and in Israel I get <a href="http://www.google.co.il/" target="_blank">google.co.il</a>, which looks rather interesting.</p>
<p>It's easy to tell Google you want to see the web in English. In fact you can see the button to click right there ("google.com in English"). But I want it to know that I'm speaking English as soon as I submit my search from my browser. I don't want to enter my search, see the results in a language I don't speak, and then have to click a button for English.<span id="more-471"></span></p>
<div id="attachment_472" class="wp-caption alignright" style="width: 250px"><a href="/wp-content/uploads/2011/05/Screen-shot-2011-05-02-at-23.00.34.png"><img class="size-full wp-image-472 " title="Google in Hebrew" src="/wp-content/uploads/2011/05/Screen-shot-2011-05-02-at-23.00.34.png" alt="" width="240" height="145" /></a><p class="wp-caption-text">Google in Hebrew. Cool, but not useful to me.</p></div>
<p>The trick is to create a new search engine definition and make it pass the <strong>hl</strong> parameter, set to the value <strong>en</strong>.</p>
<p>The way you do this is to go find the definition of the Google search engine in <code>/Applications/Firefox.app/Contents/MacOS/searchplugins</code>. Copy google.xml and rename it something like google-en.xml. Modify it to have the following line in it where all the other <code>&lt;Param/&gt;</code> tags are:</p>
<p><code>&lt;Param name="hl" value="en"/&gt;</code></p>
<div id="attachment_474" class="wp-caption alignright" style="width: 246px"><img class="size-full wp-image-474" title="Search Engine Selection" src="http://paco.to/wp-content/uploads/2011/05/googles.png" alt="" width="236" height="241" /><p class="wp-caption-text">Search engine selection in Firefox 4</p></div>
<p>You can download my <a href="/wp-content/uploads/2011/05/google-en.txt">google-en.xml</a>. The file is named .txt. Rename it to .xml. Keep it in the same folder as all the other XML files. Now, go to your list of search engines (as shown below) and pick it.</p>
<p>Now, even though I get redirected to a local Google site, based on what country I'm in, I will still see results written in English, not the local language.</p>
]]></content:encoded>
			<wfw:commentRss>http://paco.to/2011/fixing-firefox-4-on-mac-to-always-search-google-in-english/feed</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Funny Pricing on Kids Furniture</title>
		<link>http://paco.to/2011/funny-pricing-on-kids-furniture</link>
		<comments>http://paco.to/2011/funny-pricing-on-kids-furniture#comments</comments>
		<pubDate>Sat, 30 Apr 2011 20:54:39 +0000</pubDate>
		<dc:creator>paco</dc:creator>
				<category><![CDATA[Fun Stuff]]></category>
		<category><![CDATA[Web Stuff]]></category>

		<guid isPermaLink="false">http://paco.to/?p=463</guid>
		<description><![CDATA[I was looking for childrens beds recently, and I stumbled across Children's Bed World. They have a nice, database-driven site where they can automatically calculate your savings against recommended retail price (RRP). Unfortunately, their database records all the prices, including the ones they're marking up. Here's the "Verona" trundle bed or "guest bed" as they [...]]]></description>
			<content:encoded><![CDATA[<p>I was looking for childrens beds recently, and I stumbled across <a href="http://www.childrensbedworld.co.uk/">Children's Bed World</a>. They have a nice, database-driven site where they can automatically calculate your savings against recommended retail price (RRP). Unfortunately, their database records <em>all</em> the prices, including the ones they're marking up.</p>
<p><span id="more-463"></span></p>
<div id="attachment_465" class="wp-caption alignright" style="width: 207px"><a href="http://paco.to/wp-content/uploads/2011/04/verona-full.png"><img class="size-full wp-image-465" title="Verona Guest bed: Save -11%" src="http://paco.to/wp-content/uploads/2011/04/verona-over.png" alt="" width="197" height="322" /></a><p class="wp-caption-text">Click for the full story</p></div>
<p>Here's the "Verona" trundle bed or "guest bed" as they call it. The first thing that got my attention was the "save -11%" on the overview. Sure enough, when you <a href="/wp-content/uploads/2011/04/verona-full.png">click on it</a>, you get a bigger view that makes it totally clear how much you're NOT saving. Original page is <a href="http://www.childrensbedworld.co.uk/p/Verona_Bergamo_Cabin_Bed.htm" target="_blank">here</a>.</p>
<p>That's not the only one like that. I went to "metal beds" and sorted them by price, highest to lowest. I found the "<a href="http://www.childrensbedworld.co.uk/p/Amelia_Bed_Frame.htm" target="_blank">Amelia</a>" bed frame was offering negative zero percent off. Huh? Yep, it appears the recommended retail price (RRP) is £149.95, but with them you pay only £149.99.</p>
<div id="attachment_469" class="wp-caption alignnone" style="width: 606px"><a href="http://paco.to/wp-content/uploads/2011/04/amelia-full.png"><img class="size-full wp-image-469" title="Amelia bed frame" src="http://paco.to/wp-content/uploads/2011/04/amelia-full.png" alt="" width="596" height="425" /></a><p class="wp-caption-text">Negative zero percent, huh?</p></div>
<p>The code is obviously broken for displaying the discount. It is supposed to tell you you are saving -£0.04, but it prints it as pound, decimal, negative 4. That's strange no matter how you look at it.</p>
<p>I could probably find more of these, but that was enough. Pretty amusing.</p>
]]></content:encoded>
			<wfw:commentRss>http://paco.to/2011/funny-pricing-on-kids-furniture/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Online comics</title>
		<link>http://paco.to/2011/online-comics</link>
		<comments>http://paco.to/2011/online-comics#comments</comments>
		<pubDate>Sun, 10 Apr 2011 12:50:00 +0000</pubDate>
		<dc:creator>paco</dc:creator>
				<category><![CDATA[Fun Stuff]]></category>
		<category><![CDATA[Personal]]></category>
		<category><![CDATA[Web Stuff]]></category>
		<category><![CDATA[comics]]></category>
		<category><![CDATA[funny]]></category>

		<guid isPermaLink="false">http://paco.to/?p=458</guid>
		<description><![CDATA[I discovered stripgenerator.com. Pretty cool. Interestingly, I think their limited number of diagrams means that you have to have actual funny material. If you do, then they save you a bunch of drawing. But if stuff isn't funny, it's not going to become funny by having cool art applied to it. I've done a couple. [...]]]></description>
			<content:encoded><![CDATA[<p>I discovered stripgenerator.com. Pretty cool. Interestingly, I think their limited number of diagrams means that you have to have actual funny material. If you do, then they save you a bunch of drawing. But if stuff isn't funny, it's not going to become funny by having cool art applied to it.</p>
<p>I've done a couple. They're fun.</p>
<p><a href="http://stripgenerator.com/strip/501096/communications-in-marriage/"><img src="http://s3.amazonaws.com/stripgenerator/strip/69/01/05/00/00/full.png" alt="" width="546" height="216" /></a><br />
<a href="http://stripgenerator.com/strip/501096/communications-in-marriage/">Communications in Marriage</a></p>
<p><a href="http://stripgenerator.com/strip/501100/first-day-at-the-office/"><img title="First Day At the Office" src="http://s3.amazonaws.com/stripgenerator/strip/00/11/05/00/00/full.png" alt="" width="546" height="424" /></a><br />
<a href="http://stripgenerator.com/strip/501100/first-day-at-the-office/">First Day At the Office</a></p>
]]></content:encoded>
			<wfw:commentRss>http://paco.to/2011/online-comics/feed</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Time warp: when facebook&#8217;s localization goes wrong</title>
		<link>http://paco.to/2009/facebook-localization-goes-wrong</link>
		<comments>http://paco.to/2009/facebook-localization-goes-wrong#comments</comments>
		<pubDate>Wed, 21 Oct 2009 05:03:19 +0000</pubDate>
		<dc:creator>paco</dc:creator>
				<category><![CDATA[Software Testing]]></category>
		<category><![CDATA[Web Stuff]]></category>
		<category><![CDATA[Facebook]]></category>
		<category><![CDATA[localization]]></category>

		<guid isPermaLink="false">http://paco.to/?p=372</guid>
		<description><![CDATA[Facebook is savvy about time zones and the fact that its users span the globe. But notice this conversation I had with a friend. He sent it at 12:39am on October 21st. I replied 3 hours earlier. Now, if you look at our profiles, Roy and I live in the same time zone. Normally this [...]]]></description>
			<content:encoded><![CDATA[<div id="attachment_373" class="wp-caption alignright" style="width: 331px"><img class="size-full wp-image-373" title="TimeWarp" src="http://paco.to/wp-content/uploads/2009/10/localtime1.png" alt="Time Warp" width="321" height="248" /><p class="wp-caption-text">Time Warp</p></div>
<p>Facebook is savvy about time zones and the fact that its users span the globe. But notice this conversation I had with a friend. He sent it at 12:39am on October 21st. I replied 3 hours <strong>earlier</strong>. <img src='http://paco.to/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' />  Now, if you look at our profiles, Roy and I live in the same time zone. Normally this would never happen. But, I happen to be in the UK when this happened. I think I replied a couple hours after his message, but at you'll see, it's essentially impossible to know, given what I see.<span id="more-372"></span></p>
<p>I think it has decided that I'm on the west coast. I'll have to go figure out if that's right. Without putting the time zones in there, though, it is impossible to sort out who sent what and when. You can't tell if there's an actual error in the time stamping, an error in my user profile or Roy's user profile (e.g., one of us has told facebook that we're in some weird location), or if there's an error in the localization. That is, facebook could have figured out that I'm in the UK and tried to display local times, but then goofed up the conversion to my local time zone.</p>
<p>I wonder what kind of software testing you would have to do, if you couldn't change the display to add in the time zone. Could this be tested in its current form? Could mistakes be distinguished from correct behavior?</p>
]]></content:encoded>
			<wfw:commentRss>http://paco.to/2009/facebook-localization-goes-wrong/feed</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>He ain&#8217;t heavy, he&#8217;s my mower</title>
		<link>http://paco.to/2009/he-aint-heavy-hes-my-mower</link>
		<comments>http://paco.to/2009/he-aint-heavy-hes-my-mower#comments</comments>
		<pubDate>Sun, 28 Jun 2009 01:52:19 +0000</pubDate>
		<dc:creator>paco</dc:creator>
				<category><![CDATA[Rants]]></category>
		<category><![CDATA[Web Stuff]]></category>
		<category><![CDATA[language]]></category>
		<category><![CDATA[marketing]]></category>

		<guid isPermaLink="false">http://paco.to/?p=353</guid>
		<description><![CDATA[If you check out Neuton Mowers, they're these battery-powered lawn mowers. I get the whole non-polluting, lower noise thing. But their comparison chart leaves something to be desired on the honesty scale. Take a look at the graphic from their front page: Two things strike me as a bit odd. I currently have one of [...]]]></description>
			<content:encoded><![CDATA[<p>If you check out <a href="http://www.neutonpower.com/" target="_blank">Neuton Mowers</a>, they're these battery-powered lawn mowers. I get the whole non-polluting, lower noise thing. But their comparison chart leaves something to be desired on the honesty scale.<span id="more-353"></span></p>
<p>Take a look at the graphic from their front page:</p>
<div id="attachment_354" class="wp-caption alignright" style="width: 331px"><img class="size-full wp-image-354" title="NeutonMower" src="http://paco.to/wp-content/uploads/2009/06/picture-1.png" alt="Neuton Mowers Comparison" width="321" height="445" /><p class="wp-caption-text">Neuton Mowers Comparison</p></div>
<p>Two things strike me as a bit odd. I currently have one of these "Old" mowers. Notice that they characterize my mower as "Heavy." They don't say how heavy, but I'd estimate mine between 40 and 50 pounds. Then notice that their mower is "<em>Only</em>" 69 pounds. There is no way my old skool mower is 69 pounds. It's obvious why they just said "Heavy," because if they gave a typical number or an average, they couldn't compare favorably.</p>
<p>The other thing they say is that the Neuton makes "less than half the noise." Now, noise is traditionally measured in decibels, and lawnmowers are typically estimated around 90 decibels. The decibel scale is a logarithmic one, which always makes it a bit unintuitive. Now, half of 90 dB would be 45, but they say it's "less than half." Refrigerators humming are estimated at 40 dB. I find it hard to believe that this thing is somewhere around as loud as a refrigerator humming.</p>
<p>Finally, there's the fallacy of "emissions-free." Nothing is emissions free. At best we can say it does not directly emit pollutants after you purchase it. However, consider how many pollutants were generated  to produce it in the first place. Compare that to the traditional mower and they probably compare more or less equally. While Neuton mowers may be zero emissions when operating, they are not zero pollution. Your coal-fired electric plant provides the electricity that charges the batteries. And some day some really awful chemicals in the batteries have to be disposed of carefully when it has reached the end of its life. So zero emissions, yes. Zero pollution, no.</p>
]]></content:encoded>
			<wfw:commentRss>http://paco.to/2009/he-aint-heavy-hes-my-mower/feed</wfw:commentRss>
		<slash:comments>3</slash:comments>
		</item>
		<item>
		<title>50 Ways to Inject Your SQL</title>
		<link>http://paco.to/2009/50-ways-to-inject-your-sql</link>
		<comments>http://paco.to/2009/50-ways-to-inject-your-sql#comments</comments>
		<pubDate>Mon, 15 Jun 2009 01:48:49 +0000</pubDate>
		<dc:creator>paco</dc:creator>
				<category><![CDATA[Fun Stuff]]></category>
		<category><![CDATA[Software Testing]]></category>
		<category><![CDATA[Web Stuff]]></category>
		<category><![CDATA[language]]></category>

		<guid isPermaLink="false">http://paco.to/?p=347</guid>
		<description><![CDATA[I did a Parody of Paul Simon's "50 Ways to Leave Your Lover." It's very geeky, though. It's "50 Ways to Inject Your SQL." Yes, that's me singing. I got the idea after explaining some really crappy code to my wife and how it did a ridiculous job protecting against SQL injection. I said "there [...]]]></description>
			<content:encoded><![CDATA[<p>I did a Parody of Paul Simon's "50 Ways to Leave Your Lover." It's very geeky, though. <a href="http://www.youtube.com/watch?v=5pSsLnNJIa4"><img class="alignleft" src="http://i2.ytimg.com/vi/5pSsLnNJIa4/default.jpg" alt="" width="120" height="90" /></a>It's "<a href="http://www.youtube.com/watch?v=5pSsLnNJIa4" target="_blank">50 Ways to Inject Your SQL</a>." Yes, that's me singing.<span id="more-347"></span></p>
<p>I got the idea after explaining some really crappy code to my wife and how it did a ridiculous job protecting against SQL injection. I said "there must be 50 ways to inject SQL into that code." That's when she sang a couple bars and I realized it would be a great idea. Now, my singing it might not have been such a great idea, but the parody was a good idea.<br />
<object width="425" height="344" data="http://www.youtube.com/v/5pSsLnNJIa4&amp;hl=en&amp;fs=1&amp;" type="application/x-shockwave-flash"><param name="allowFullScreen" value="true" /><param name="allowscriptaccess" value="always" /><param name="src" value="http://www.youtube.com/v/5pSsLnNJIa4&amp;hl=en&amp;fs=1&amp;" /><param name="allowfullscreen" value="true" /></object></p>
<p>I downloaded the music from a MIDI site, and then arranged it in GarageBand. Here are the lyrics:</p>
<p><em>I see your input's not validated properly<br />
You have to check it at all tiers: 1, 2 and 3<br />
Give me a browser and quite soon you will agree. There must be<br />
50 ways to inject your SQL</em></p>
<p><em>You see it really is my business to intrude<br />
The CTO wants to see this web app broke into<br />
Turn on my proxy and all doubt will be removed. There must be<br />
50 ways to inject your SQL<br />
50 ways to inject your SQL</em></p>
<p><em>Try a quick hack, Jack<br />
Add a new row, Joe<br />
Try an insert, Kurt<br />
Change their SQL query</em></p>
<p><em>Evade the regex, Rex<br />
Encode it all in hex<br />
Unbalance the quotes, Vinod<br />
And change the query</em></p>
<p><em>Break the syntax, Max<br />
Use a backslash, Cash<br />
Try command shell, Mel,<br />
And change the query</em></p>
<p><em>Use "one equals one," son,<br />
Unhandled exception!<br />
Read the stack trace, ace<br />
and change the query</em></p>
<p><em>He said our application is secure against your kind<br />
There are no simple vulnerabilities to find<br />
I said your coders write their code like they are blind, there must be<br />
50 ways to inject your SQL</em></p>
<p><em>He said our logs show unexpected funds were sent<br />
Its probably time we started using Prepared-Statements<br />
I said I'm glad you're seeing what I meant, there were<br />
50 ways to inject your SQL<br />
50 ways to inject your SQL</em></p>
<p><em>Break the syntax, Max<br />
Use a backslash, Cash<br />
Try command shell, Mel,<br />
And change the query</em></p>
<p><em>Use "one equals one," son,<br />
Unhandled exception!<br />
Read the stack trace, ace<br />
and change the query</em></p>
<p><em>Try a quick hack, Jack<br />
Add a new row, Joe<br />
Try an insert, Kurt<br />
Change their SQL query</em></p>
<p><em>Evade the regex, Rex<br />
Encode it all in hex<br />
Unbalance the quotes, Vinod<br />
And change the query</em></p>
]]></content:encoded>
			<wfw:commentRss>http://paco.to/2009/50-ways-to-inject-your-sql/feed</wfw:commentRss>
		<slash:comments>3</slash:comments>
		</item>
		<item>
		<title>Why is Facebook worse than TV?</title>
		<link>http://paco.to/2009/why-is-facebook-worse-than-tv</link>
		<comments>http://paco.to/2009/why-is-facebook-worse-than-tv#comments</comments>
		<pubDate>Fri, 24 Apr 2009 01:59:31 +0000</pubDate>
		<dc:creator>paco</dc:creator>
				<category><![CDATA[News]]></category>
		<category><![CDATA[Rants]]></category>
		<category><![CDATA[Web Stuff]]></category>
		<category><![CDATA[addiction]]></category>
		<category><![CDATA[Facebook]]></category>
		<category><![CDATA[TV]]></category>

		<guid isPermaLink="false">http://paco.to/?p=312</guid>
		<description><![CDATA[I was just reading "Five Clues That You Are Addicted to Facebook" on cnn.com and it occured to me that Facebook should really be considered in the same light as television.The 5 warning signs are: You lose sleep over Facebook You spend more than an hour a day on Facebook You become obsessed with old [...]]]></description>
			<content:encoded><![CDATA[<p>I was just reading "<a href="http://www.cnn.com/2009/HEALTH/04/23/ep.facebook.addict/index.html" target="_blank">Five Clues That You Are Addicted to Facebook</a>" on cnn.com and it occured to me that Facebook should really be considered in the same light as television.<span id="more-312"></span>The 5 warning signs are:</p>
<ol>
<li>You lose sleep over Facebook</li>
<li>You spend more than an hour a day on Facebook</li>
<li>You become obsessed with old loves</li>
<li> You ignore work in favor of Facebook</li>
<li> The thought of getting off Facebook leaves you in a cold sweat</li>
</ol>
<p>What I find surprising is that 3 of these 5 are probably true of most perfectly normal people who watch TV. I happen to watch basically no TV at all, so I have a different perspective than most people; but, I want to keep it balanced in this blog. Substitute "TV" for "Facebook" in this article and see what happens.</p>
<p>When they say "lose sleep over Facebook" they go on to say "stay up late doing facebook and wake up tired the next day." Perfectly normal people have TVs in their bedrooms and stay up later than they should watching it. Sometimes they come in tired the next day. Is this a sign of TV addiction? Or is this just a bad indicator of addiction?</p>
<p>Don't most perfectly normal people watch more than an hour of TV a day? More than an hour of Facebook is considered some kind of addiction indicator, but an hour of TV is just fine? I don't get it.</p>
<p>You become obsessed with old loves. The article goes on to cite an example of gossiping online. You could gossip at work, too, and end up in the same predicament. I'm not sure that this has anything to do with Facebook.</p>
<p>You ignore work in favor of Facebook. Hmm. Most people can't ignore work in favor of TV, so we'll have to let this slide.</p>
<p>The thought of leaving Facebook leaves you in a cold sweat, huh? Ask people to give up their televisions. While "cold sweat" might be a bit of an exaggeration, your average watch-an-hour-a-day person is not going to part quickly with their television. Again, is this really a sign of addiction? If so, are we benignly addicted to TV and everyone's cool with it?</p>
<p>This story leads off with a sad tale of a mom obsessively using Facebook while ignoring her kid's need for help with homework. Doesn't this happen with TV? "Sure honey, I'll help with your homework right after the news is over..." Is this OK? This is somehow different?</p>
<p>I think TV and Facebook are equivalent. They can be abused, or not. I think the addiction "symptoms" cited in this article are absurd because they can be applied to a lot of our lifestyle behaviors.</p>
]]></content:encoded>
			<wfw:commentRss>http://paco.to/2009/why-is-facebook-worse-than-tv/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Pirates: Rule the Carribean</title>
		<link>http://paco.to/2008/pirates-rule-the-carribean</link>
		<comments>http://paco.to/2008/pirates-rule-the-carribean#comments</comments>
		<pubDate>Sat, 06 Dec 2008 16:08:48 +0000</pubDate>
		<dc:creator>paco</dc:creator>
				<category><![CDATA[Fun Stuff]]></category>
		<category><![CDATA[Rants]]></category>
		<category><![CDATA[Technical]]></category>
		<category><![CDATA[Web Stuff]]></category>
		<category><![CDATA[Facebook]]></category>
		<category><![CDATA[games]]></category>

		<guid isPermaLink="false">http://paco.to/?p=255</guid>
		<description><![CDATA[I play a game on Facebook called "Pirates: Rule the Carribean." This is my strategy and some WTF's about the game. Game Features These are features of the game that influence my choice of strategy. Minimal Interactivity There are only 3 things that you can do to another player in the game: Lower their health [...]]]></description>
			<content:encoded><![CDATA[<p>I play a game on <a href="http://www.facebook.com/" target="_blank">Facebook</a> called "<a href="http://apps.facebook.com/piratesrule/" target="_blank">Pirates: Rule the Carribean.</a>" This is my strategy and some WTF's about the game.<span id="more-255"></span></p>
<h1>Game Features</h1>
<p>These are features of the game that influence my choice of strategy.</p>
<h2>Minimal Interactivity</h2>
<p>There are only 3 things that you can do to another player in the game:</p>
<ul>
<li>Lower their health by fighting them</li>
<li>Possibly plunder some item of their loot when fighting them</li>
<li>Join their crew</li>
</ul>
<h2>Being on "the crew" is Reciprocal</h2>
<p>If I'm on your crew, you're on my crew. If you had a crew of 10 and I had a crew of 5, and then I joined your crew, you would have 11 and I'd have 6. Because of this, there's no reason (I can see) not to be promiscuous and join as many crews as you can. If you're on someone's crew, they can't fight you. Perhaps at higher levels there are personalities and teams and things. As a low-level person (I'm level 19 as I write this), I can't see any reason not to join every crew I can.</p>
<h2>Most Game Events are Random</h2>
<p>Although whether you win a fight or not depends on your crew size and weapons, the spoils of war are largely random. In many ways this means it doesn't matter who you fight.</p>
<h1>Strategy</h1>
<p>This is how I play, based on the characteristics I noted above.</p>
<h3>1. Build experience doing simple jobs</h3>
<p>The best job, experience-wise, is called "Recover treasure from a sunken vessel" and it's on the "Swashbuckler" tab under "Plunder!" It takes 10 energy and gives you 15 experience points. If you want experience, do this job over and over again. I make my energy a multiple of 10, so I can just do this job, say, 4 times, and then ignore it for a while. If you want experience, only do this job.</p>
<h3>2. Attack people you can definitely beat</h3>
<p>Experience points are random, from 1 to 3, if you win. You occasionally have a bonus where your experience is doubled. There is no incentive to attack someone you might not beat. If I have a crew of 15 and I beat someone who has a crew of 20, I get the same experience as if I beat someone who has a crew of 5. Why risk it? You also get the same experience for attacking "fresh meat" (i.e., people who aren't playing). You're guaranteed to win, you're guaranteed the same amount of experience. What's not to like?</p>
<h3>3. Arm Everyone</h3>
<p>Make sure you have one weapon (pistols, rifles, hand grenades), one super bonus thingie (ship's wheel, golden teeth, shark army, etc.), one defensive item (eyepatch, parrot), and one vessel (rowboat, fleut, gallion) for every crew member. Unless you do, you might not beat people who have smaller crews than you.</p>
<h3>4. Keep Coming Back</h3>
<p>I typically drain all my energy and strength doing jobs and fighting, then I forget about it. I come back a few hours later, do a bunch of jobs, bury my treasure, then fight.</p>
<h3>5. Keep Gold Buried</h3>
<p>Bury your gold before you fight. Bury your gold before you leave the game alone for a while. If it's buried, it can't be stolen. Although it costs 10% to bury, you'll lose more than that overnight if you get attacked.</p>
<h3>5. Buy the Special "Islands"</h3>
<p>Every time you get 2 new crew members, you qualify to buy a new special island. It costs around 8000, and produces 12000 per hour. I have 17 crew members and 6 of these things. ALL the rest of the islands are stupid (see below).</p>
<h3>6. Buy the Special Weapons</h3>
<p>In their effort to virally market the game, the front page ("Home") always has some special offering. it's always the same: 18 attack, 18 defense, 10,000 gold. Every time you get 2 more crew members, you qualify. Always get these. They have no upkeep, they're relatively cheap, and they are the best weapons in the game.<!--more--></p>
<h1>WTFs</h1>
<p>These are things that make me wonder why I play the game at all.</p>
<h2>Advancement is Guaranteed</h2>
<p>No one can stop me from advancing. My energy renews itself at a certain rate, and when I have enough energy, I do a plunder job. I move up in levels. Nobody can take experience away from me, slow me down, or change the way I move up. Because I know how to test web applications, for example, I know how to write small programs that will watch for my energy to hit 10, then will click the 'do job' button. I could just create a program to advance me in levels. What part of this is playing a game?</p>
<h2>Gold is Static</h2>
<p>I can earn all the gold I want, and keep it buried. When people attack, they can't get my buried gold. Although it costs me 10% to bury it, that's much less than I would lose if it was available when people attacked. I try to periodically login and bury my gold. It keeps people from stealing it. I have over 4 million gold now, and I don't know what to do with it. I wish I could give it to friends or something, but that's not possible, so it just sits.</p>
<h2>No incentive to take risks</h2>
<p>Who cares that I'm attacking people who are bigger or stronger than me? In most games, a risky gamble like that pays off sometimes. In this game it just doesn't matter. I'll stick to activities that are sure bets.</p>
<h2>Most Plunder Jobs are Pointless</h2>
<p>The "Recover treasure from a sunken vessel" has only a few requirements (and no minimum crew requirement!). Everything else that gives experience points has a worse ratio. That is, the "recover treasure" job gives you 1 experience point for every 1.5 energy you spend. Everything else requires 1.6 energy, 2.0 energy, etc. to get an experience point.</p>
<p>Now that I have an income of 60,000 an hour or so, I don't use plunder to get gold or loot. I get loot by attacking people and I get gold by just sitting around. The entire "Plunder" screen is useless to me except that one job.</p>
<h2>Keelhauling is Pointless</h2>
<p>Keelhauling is when you attack someone and their health goes to zero. They lose some experience points. I guess if I don't like someone, I can go after them. But I don't need to do that. It doesn't matter. You can earn a bounty by keelhauling, but who cares? I can earn 600,000 while I sleep. If I attack someone and I keelhaul them, I don't get extra loot, I don't get extra gold, I don't get extra experience or skill points. I just get one more "keelhaul" in my stats. Whooptie do.</p>
<h2>Islands are Pointless</h2>
<p>The only islands that matter are the special ones that cost 8000 and produce 12,000 an hour. Get those. The rest are so bad that they're just not worth buying. Consider a "captured island." It costs 4 million. Yes, <em>million</em>. It produces a pathetic 8,000 per hour. It will be 500 hours (or almost 21 days) before that thing pays itself off. Why would you pay that kind of money for something so worthless? You can get a tariff station if you turn in that captured island and pay <em>another</em> 5 million. The tariff station earns 50,000 an hour, which is respectable. But at 9 million gold to buy it, it will still be 7.5 days before it pays itself off.<br />
I understand the idea of encouraging recruitment. Recruiting is the only way you get the 8K/12K islands. But this is so absurdly lopsided that it's just dumb. If I can recruit my way into the game, great, but these other options are so ridiculous that they shouldn't even be in the game.</p>
<h2>What does it mean to win?</h2>
<p>Given that I can just play all by myself and advance through the levels, amassing gold and gaining experience points regularly, what does winning mean? Nobody can take my crew away. Nobody can take my buried gold. Although I like my special weapons (shark armies, etc.), it doesn't really matter if they all get looted. I can advance in the game without them.</p>
<p>I can advance in the game without lots of crew, too. Since most jobs are tied to level, and level is tied to experience, and I can earn experience without recruiting, who cares about recruiting?</p>
<p>I can't figure out how to measure myself and decide that I'm doing well or poorly. I don't know what my motivation is to try hard. I click, I advance. I click, I advance.</p>
]]></content:encoded>
			<wfw:commentRss>http://paco.to/2008/pirates-rule-the-carribean/feed</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
	</channel>
</rss>

