http://www.bbc.co.uk/dna/h2g2/brunel/A753527

The Origins and Common Usage of British Swear-words. The etymology of a bunch of words I don’t really need to tell you about. (via Kottke)

Been to see a few movies lately - here’s a two minute summary (scores are out of 100)

Revolver - Guy Ritchie’s latest movie. A potentially interesting storyline pissed all over in the last half hour. 65

A Very Long Engagement - French movie from director Jean Pierre Jeunet, a follow-on from Amélie (one of my all-time favourite movies). It’s not a sequel, but Audrey Tautou and other familiar faces reappear in this flick. Not as good as Amélie, but still well worth watching. I enjoyed it. 75

Pride & Prejudice - I’ve read the book, but didn’t see the Colin Firth BBC series. Well enough played by the actors, but the camerawork is a bit distracting at times. If you’re a bloke, take a girl with you. This is basically a chick flick (although i want to see the TV series now) 80

Dukes of Hazzard - I was expecting this to be silly and rubbish. It turned out to be silly and rather good. Thoroughly enjoyed it, and the casting was perfect… 85

Still to see,
Serenity - TV series was ace
A Scanner Darkly - strange enough to be interesting

Memeflow Goto is an AJAX-based service that allows you to build your own homepage. It’s a little bit cluttered in my view (why see URL, title, X and # on every single item - it’s so visually dense) but still promising.

There seems to be an appetite for this homepage stuff, and Microsoft, Google and Yahoo! already know that. Look forward to plenty more of these kinds of services from eager programmers in the coming months.

Purely random thoughts today - it’s one of those days.

• Have you ever noticed (maybe this is a South of England thing) how people say ‘I mean…’ all the time. It’s a bit like the word ‘like’ that seems to be injected into fairly random places in some American speakers’ sentences.
• On the back of car park and cinema tickets there’s always a note that says ‘advertise in this space, call….’ and almost never an actual advert. That seems like a pretty bad sign (if they never have any actual advertisers), and surely discourages others from taking up ads there?
• Do petrol tanker lorries run out of petrol very often? If so, are they allowed to use their own supplies?

Been incredibly busy lately creating websites (or rather, the system to create websites… the mother of all systems). Back to blogging shortly.

I’m now getting daily (or more frequent) attacks on various web forms I have around the Internet. The characteristics are always the same: an automated bot seeks out a form that looks vaguely like a contact form. It then tries to iterate through each field, injecting a newline character and some MIME headers. An AOL address is BCC’ed, so the attacker can see which exploits were successful.

Presumably, once the attacker hits a vulnerable form, the spam begins. Fortunately this has yet to happen here, but it’s undoubtedly going on all over the place.

Rather interestingly, MIME headers are put in - this could have the action (if done the right way) of hiding the original webform from the spam recipient, getting straight to the spammer’s message instead.

To date, I’ve had attacks with BCCs going back to jrubin3546@aol.com, bergkoch8@aol.com and mhkoch321@aol.com

To protect yourself against these attacks, make sure that any web forms you use remove newlines from user input - particularly those that might reappear in headers. In PHP, for example use something like $usermail=str_replace("\n","",$usermail); (and similarly for \r).

Elsewhere on the Internet, this recent ‘wave’ has been discussed, and a quick Google finds a few articles of interest:

• Article about email injection
• Blog with plenty of comments from affected webmasters

On Flickr right now, a wide array of photos from New Orleans and many other affected areas following the devastation of Hurricane Katrina. In particular, have a look at this collection, amassed from various sources.

A post from Dave Winer: "On CNN, Aaron Brown asks what the city will look like when the water recedes. The correct answer … is that the water isn’t going to recede. The only way to get the water out of the city is to pump it out…" - consider this diagram (the cross-section, bottom right of the pic) to see why this comment is quite true.

As far as I can tell, Yahoo! own Altavista. This is almost certainly old news, but slightly embarrasingly I’d never spotted it before.  Altavista is owned by Overture, which is in turn owned by Yahoo!

Only happened to spot this when I saw that Altavista.pl is hosted within Yahoo!’s IP range.

http://news.bbc.co.uk/1/hi/technology/4749507.stm

Pretty soon, you could be talking into a squirrel’s ear to take your calls.

http://www.peoplesnetwork.gov.uk/enquire.html

The idea is that you submit a question to ‘the system’ and somebody from the UK or international library system will try and answer your question in real-time. Jolly neat idea, but I’d love to see a log of previous questions to see exactly what people have been asking (I’m nosey like that…)

Last night at the cinema, a trailer was played for a movie called The Perfect Man. Remarkably, the trailer started with lead Hillary Duff writing an entry into her blog (the voiceover/narrative of the post began ‘Dear fellow bloggers…’). Yet another confirmation that the word blog has entered mainstream media.

I went to see Charlie and the Chocolate Factory by the way… quite good. Better than I thought it could be, but still basically a kid’s movie