Skip to main content


Showing posts from November, 2011


Walking , a photo by craigand on Flickr.

Sheffield Gets Festive

Welcome to this end of Division Street! Welcome to the other  end of Division Street! Lights outside John Lewis Bubble Tree in the Peace Gardens Winter Gardens, rear entrance Wintery bubble things The Peace Gardens Outdoor seating, for those foolish enough to want it Furnival Gate The Moor Arundel Gate Another outdoor seating area, also populated by nobody much Can you tell what it is yet? Outside the Globe Path to the station The Showroom, all lit up Reflections in the water feature Precarious stairs Waterfalls outside the station Closer look at the waterfalls Wall o' waterfalls Waiting by the taxi rank Not much warmer inside the station A view over the station waterworks Illuminated fountain The Winter Gardens. A bit blurry, but I like it anyway. The Town Hall looking rather terr

Lest we forget

In remembrance Fields of blood Wreaths Cenotaph

Around Sheffield

Balloons Stairs to the Job Centre Secret garden Creepers View from Barkers Pool Interesting street lamp Magistrates Court

XSS Hacks For Fun And Profit

Sometimes, just sometimes, I want to do something completely ludicrous with my web pages. For instance, just recently I wanted to embed dynamic, externally hosted content in a Blogger page, and I wanted to do it without having internal scroll bars. This meant sizing the iframe hosting the content to precisely fit the content within it, resizing it every time the content changed. Told you it was ludicrous. Anyway, I quickly ran into a few problems to do with cross-site scripting. Specifically, when a page is contained in an iframe within a page on a different domain, there are two things you can't do: It's impossible to size an iframe to its contents from the containing page It's impossible to size an iframe to its contents from inside the iframe So how do I do it? Well, I use a mighty XSS hack! Give this a try: Create a resizing widget Create a blogger page called 'resize-widget' that contains the following code: <script type="text/javascri


Street Force

Who ya gonna call?


This is what I was parked in. Thankfully I had decent boots on so I didn't get wet.

Security by Elevation

I'm seeing this technique more and more frequently these days. Most peculiar seeing a row of bikes all hanging off a fence at different heights.

Wintry Church

Church , a photo by craigand on Flickr.