00:05
<eseidel>
annevk: but does getSVGDocment() === contentDocument...
00:05
<eseidel>
I would expect it to
00:06
<Hixie>
what do you call an attack that is described in a security vulnerability report
00:06
<Hixie>
it's not an actual attack
00:06
<Hixie>
it's not a hypothetical attack
00:06
<Hixie>
it's a...
00:07
<annevk>
eseidel, yeah, it should
00:08
<annevk>
invalid report?
00:08
<Hixie>
?
00:08
<annevk>
nm
00:12
<Hixie>
you know, i should set up some sort of little exam
00:12
<Hixie>
that asks questions like:
00:13
<dveditz>
Hixie: "proof of concept"?
00:13
<Hixie>
Q. which of the following requirements is incorrect:
00:13
<Hixie>
1. a character encoding saying UTF-16 must be treated as UTF-8
00:15
<Hixie>
2. an invalid UTF-8 byte sequence must cause the user agent to informed the user of the presence of an error
00:15
<Hixie>
3. the content-type header of the resource must be ignored
00:15
<dveditz>
can we be typo nazis?
00:15
<annevk>
dveditz, doesn't matter in this case :)
00:15
<Hixie>
and people have to get 80% of the questions right before their input is taken into account
00:15
Hixie
comes off his high horse
00:16
<Hixie>
dveditz: proof of concept is perfect, thanks
00:16
<gsnedders>
Hixie: surely both 2 and 3 are incorrect? Unless substituting U+FFFD for that sequence constitutes informing the user; as the content-type header is sometimes respected (and so isn't totally ignored).
00:16
<dveditz>
it's a std term for non-attacks that demonstrate a vulnerability
00:17
<gsnedders>
</smartass>
00:17
<Hixie>
gsnedders: well, i really meant "which of the following requirements must not appear anywhere in the html5 spec"
00:17
<Hixie>
dveditz: yeah. couldn't recall the term :-)
00:17
<annevk>
Hixie, could be part of your book ;)
00:17
<gsnedders>
Hixie: MUST or must? :P
00:18
<gsnedders>
(yes, I had to do that)
00:18
<gsnedders>
Hixie: but the answer is therefore 2
00:18
<annevk>
you alread closed </smartass>; now you're just being invalid
00:18
<annevk>
or maybe ill-formed
00:18
<eseidel>
annevk++
00:18
<gsnedders>
annevk: it has an implicit opening element, as before
00:19
<gsnedders>
s/element/tag/
00:19
<Hixie>
good god you guys are all so pedantic. awesome. i approve.
00:20
SadEagle
asks Hixie about the meaning of "saying" in #1
00:20
<Hixie>
clearly you all pass this exam with flying colours
00:21
<gsnedders>
see, Hixie didn't even state the exam question well enough for me :P
00:21
<eseidel>
Hixie: are you training your army now?
00:21
<gsnedders>
now, back to a third of my computer exam (i.e., the coursework), which by now is due in today
00:21
<Hixie>
eseidel: my minions! mwuhahaha!
00:21
<Hixie>
er
00:21
<Hixie>
did i say that out loud
00:22
<gsnedders>
No. You typed it.
00:22
<gsnedders>
Actually, I don't know if you did.
00:22
<gsnedders>
But you certainly typed it.
00:23
<gsnedders>
You may be mistaking the two media.
00:24
<Philip`>
Is there any text-to-speech software that can be trained to do evil laughs?
00:30
<Dashiva>
I don't know, but I know there's a "rim shot" flash
00:30
<Dashiva>
Always a winner in good company
00:30
<SadEagle>
Philip`: just ask hixie to send you voice samples
00:30
SadEagle
wonders about aural CSS for that sort of thing
00:30
<Dashiva>
laugh-type: mad-scientist;
00:31
<annevk>
laugh-lang: en-GB--or-was-it-US-x-Hixie;
00:32
annevk
should get some sleep
00:32
<annevk>
nn
00:32
<gsnedders>
nn
00:32
gsnedders
needs less urgent deadlines
00:32
<Dashiva>
Is hx taken as language code? Otherwise we could use that
00:33
<Dashiva>
The whole en-GB-x-hixie thing just leads to copy-paste markup
00:33
<Dashiva>
It's just a talisman anyhow
00:33
<Philip`>
gsnedders: I find deadlines are only urgent because I never do any work before they are :-)
00:34
<gsnedders>
Philip`: heh. I've been too ill to. I normally do spend the entire day doing nitpicking editing, not writing half the damned thing.
00:34
<kingryan>
Lachy: votelinks have very low adoption
00:34
<kingryan>
probably not worthy a mention in a reference on HTML
00:46
<Hixie>
hsivonen?
00:46
<Hixie>
is http://hsivonen.iki.fi/test/moz/analysis.txt the best and most up to date analysis?
05:50
<Hixie>
ok
05:50
<Hixie>
next complaint
05:50
<Hixie>
could people please tell me what section they're talking about in the body of the message?
05:51
<Hixie>
i don't have the subject line when i do these mass replies :-)
06:02
<jruderman_>
maybe you should tweak your software so you do have subject lines
06:02
<Hixie>
far easier just to complain
06:37
<Hixie>
i love how i have a dozen algorithms in the spec, each of which uses a different set of typographic conventions to do the same thing
06:37
<Hixie>
some use subscripts
06:37
<Hixie>
some use foo[n] syntax
06:37
<Hixie>
some use elaborate english phrases
07:40
<hsivonen>
I'm sick and I'm not really here, but http://hsivonen.iki.fi/test/moz/analysis.txt is the latest analysis of that kind (a month old, though)
07:51
<Hixie>
thanks
08:49
<Hixie>
i don't understand why my site is doing gzip compression
08:49
<Hixie>
i have:
08:49
<Hixie>
<IfModule mod_gzip.c> mod_gzip_on No
08:49
<Hixie>
</IfModule>
08:49
<Hixie>
(er, but on three lines)
09:11
<Hixie>
hm
09:11
<Hixie>
anyone else tried posting to the whatwg list recently?
09:32
<Hixie>
what should <embed ===> parse as?
09:39
<jgraham_>
Hixie: I just tried posting to the whatwg list and got an error response suggesting some disk is full
09:39
jgraham_
wonders if putting full python tracebacks in the errors is such as good idea
11:34
<annevk>
so it seems Garrett's problem comes down to the CSSOM not following IE in standards mode
11:35
<annevk>
and endorsing what other browsers do with respect to special casing the HTML body element which he considers wrong
12:01
<Philip`>
Oh, it's a leap year?
12:02
Philip`
fixes his watch, since it's clearly not designed to cope with the complexities of time
12:03
Philip`
wonders when Time5 will be done
12:03
<annevk>
mine actually says FR 29
12:07
<Philip`>
Hixie: It seems quite possible that you're using mod_deflate instead of mod_gzip, and so you might want something like RemoveOutputFilter
14:16
Philip`
sees that http://www.mozilla.org/projects/intl/UniversalCharsetDetection.html contains lots of U+FFFD symbols unless you use a manual override for iso-8859-1
17:01
Philip`
doesn't have any interesting content-type conflicts in his data :-(
17:01
<Philip`>
(I see about 25 sites sending multiple content-types, out of 125K pages, but they're all either sending two the same or are sending one "text/html" and one "text/html; charset=...")
17:08
<Philip`>
http://www.greenvironment.fi - a dozen sites send exactly those Limerick HTTP headers
17:36
<gsnedders>
Philip`: horrific. it should be X-Limerick.
17:38
<gsnedders>
Philip`: it seems to be as common as cneonction headers
17:41
<Philip`>
Most of the Cneonctions come from imdb.com
17:42
<Philip`>
but not all
17:42
<Philip`>
http://labs.google.com/papers.html - Cneonction: close
17:42
<Philip`>
http://labs.google.com/ - NnCoection: close
17:44
<Philip`>
Hixie: ^ bug report :-)
17:45
<Philip`>
gsnedders: I only see Cneonction on 11 different domains
17:51
<Philip`>
Oh, and 11 is about a dozen, so you were right that it's as common
17:51
<Philip`>
+/- some huge margin of error in this data
18:09
<gsnedders>
Philip`: I don't even want to guess how many million percent :P
18:14
<Philip`>
gsnedders: It's nowhere near that huge an error :-p
18:14
<Philip`>
at least when "error" means "difference between measured sample mean and true population mean, where population is the ~4.5M things in dmoz.org that the sample was taken from and isn't necessarily representative of "the web""
18:15
<Philip`>
but I can't remember how to do the statistics and I can't be bothered to find out now :-)
18:15
<gsnedders>
if you define the population to be so small, I guess
18:15
<gsnedders>
Philip`: I'm meant to know for physics :P
18:16
<Philip`>
Why do you say it's small?
18:16
<gsnedders>
dmoz.org, and not the entire web
18:17
<Philip`>
The size of the population doesn't really matter - as long as it's enough times larger than the sample size, there's no benefit in making it much larger again
18:18
<Philip`>
(whereas there's always a benefit in making the sample size larger)
18:18
<Philip`>
so the (non)representativeness is the much more significant issue
18:19
<Philip`>
but that's easy to avoid by just saying "(n+/-e)% of pages from dmoz.org have some property" and if somebody tries to generalise that to the rest of the web then that's their fault and not mine
18:34
kingryan
is learning that he's "part of the problem" :)
19:04
gsnedders
laughs
19:04
<gsnedders>
post to whatwg needs to be moderated: "Too many recipients to the message"
19:06
<Lachy>
gsnedders, which post are you referring to?
19:20
<jgraham>
gsnedders: I got that on the content type sniffing thread. OTOH, I didn't mean to send it to whatwg at all
19:33
<gsnedders>
Lachy: to the whatwg mailing list
20:34
<annevk>
Hixie, Firefox is sniffing Content-Encoding stuff too now?
20:35
<Hixie>
no but apparently they are aware of pages they want to render correctly that they are not rendering correctly because of this, and so they plan to change to not be affected by the presence or absensce of that header
20:36
<annevk>
k
20:50
<Hixie>
aw, apparently I "haven't the faintest idea of how to write a specification that
20:50
<Hixie>
will last beyond the current fad-of-the-day in implementations"
20:51
<Hixie>
i wonder what it means for a specification to last... does a specification last if nobody implements it correctly?
20:51
<SadEagle>
Hixie: beats writing unimplementable specs
20:51
<Hixie>
can't disagree with that
20:51
<annevk>
you don't really want static specs anyway
20:53
<annevk>
Hixie, fwiw, https://bugzilla.mozilla.org/show_bug.cgi?id=408098
20:55
<gsnedders>
Hixie: where did that come from?
20:57
<Hixie>
latest mail to public-html
20:57
<gsnedders>
Hixie: re: your mention of my parsing draft, I really need to scrap what I've written already :)
20:57
<Hixie>
right, time to shower and go to work. bbl.
21:55
<eseidel>
Hixie: is Acid3 final now?
22:30
<Hixie>
eseidelDesk: ye, but for some reason it still hasn't been announced