Am I the only guy who goes around typing ' or 1 = '1 into almost every input form I see?

Doubt so,but it's still a rare talent

PushPop - the programmer's candy of choice.

FlightGear is a open-source flightsimulator. Free as in speech.

Awesome thing is, it utilizes a property tree,which allows you to access/edit ANYTHING(well almost. I think) within the simulator (MSFS however, afaik, needs to go through simconnect/fsuipc).

Best part about FlightGear? Not only does it have a totally awesome property tree, it exposes that property tree through a HTTP interface and a Telnet interface. Which means that you can edit almost anything within the server through the internet/LAN. And it being telnet and all, all you gotta do is write a wrapper class for your development language and you're all set to do magic.

Grabbed the connection class off the CVS website (yeah yeah, get a CVS client I know), started messing bout with it. Awesome stuff.

Given enough time, I'm pretty sure that one can fly from point A to point B on a totally different computer using a client connected through the telnet interface. I've already written code to remotely control the throttle (which was as easy as fsgs.set("controls/engine/engine/throttle",input);)

I'm pretty sure that one can send joystick/keyboard commands. Either that or map a aileron/elevator position to given joystick input (ailerons are "/controls/aileron/aileron-position" I think). Or have an instructors panel to remotely set failures, control the plane etc. Possibilities are endless!

In other words - FlightGear : Awesomely fun toy for the computer geek flightsimmer.
Hell,it's plenty good for flightsimmers who cant afford MSFS.

EDIT : Messing about with this painfully reminds me of how horrible I am at Java GUI programming. ):

Google Analytics is kinda useful, but good luck trying to access the current user accessing your blog via javascript - I have no idea how to access the header template ):

Spend a good hour trying to set logged-in blogspot user as user-defined value bah.

Anyone knows how? xD

Been toying with ubuntu the last few days (wubi is teh secks).
Second or third time I've tried it already.

Unfortunately, I have horrible apt usage habits, and I simply ctrl-z halfway through downloads. Naturally, apt/dpkg doesn't release the lock (/var/lib/dpkg/lock). So, I usually delete the lock (rm /var/lib/dpkg/lock), and aptitude works again.

Unfortunately, me being the linux newbie cum careless one, I type sudo rm /var/lib/dpkg. Try installing, gives me shit load of errors. Scroll up, see the last comment, and I go "oh shit."

So, I'm locked out of aptitude right now,with no idea how to fix it. I'm considering simply deleting ubuntu or reinstalling again. Damn.

Developing Web Applications today - learnt about ASP.NET - code-behind of VB.NET. Was really interesting.

Classmate asked a question about how ASP.NET stores session state. Piqued my interest as I've successfully performed session hijacking proof-of-concept on a ASP classic page. ASP classic simply stores a session cookie, and simple javascript will be able to access it. (type javascript:alert(document.cookie) as a url)

Didn't work for a asp.net app I knocked up,however (*insert sad face here*). A bit of searching revealed that asp.net uses HttpOnly cookies, which means that the cookie cannot be read clientside (ie. via javascript - no wonder javascript:alert(document.cookie) turned out blank).

Apparently, HttpOnly cookies are sent with the headers with a XMLHttpRequest request though. Interesting vector :D

And cookieless sessions via url is one of the stupidest idea I've heard in a long time. For chrissakes just use a hidden form?

Blogspot's gadget-based layout is really useful and cool at the same time.

And dammit.

I gotta improve on a blackjack program I wrote for Windows Application Design. And I practically did everything in one day. Without any comments/documentation of any sort. And the whole protocol is. Urgh. Trust me you have no idea how bad it is.

*headdesk*