In mid-2002, an unprecedented series of major security flaws were uncovered in Windows 2000, Internet Explorer 6.0, and IIS 5.0, which are some of Microsoft’s most strategically important products. The resulting media backlash resulted in a now-famous "trustworthy computing" internal memo from Bill Gates to all Microsoft employees. The gist of the memo was this: Stop programming and take a look at what you’re doing from a security perspective. For two mon....

We saw at the beginning of this section that one way to embed client-side JavaScript into HTML documents is to use event handler attributes of HTML tags. The following table lists the standard event handler attributes and the HTML tags to which they may be applied. The first column of the table gives the event handler attribute name: these names always begin with "on". The second column of the table lists the HTML tags to which these attributes can be applied, and ex....

One of the more recent crazes on the Internet is online auctions, where people can offer junk, antiques, or collector’s items for sale to anyone who wants to bid on them. But be careful! Besides having to deal with fraudulent bids from people who have no money or intention of buying an item up for auction, consumers have to watch out for con artists selling their own fraudulent items. The simplest con game is to offer an item for auction that does....