Flaws in the 'web of trust' approach to trust issues
One alternative to monolithic certificate authorities is a web oftrust approach to trustissues. Here's my view of the flaws this model as an alternative toCAs, when used in practice.
First, you haven't actually removed the need to pick trust roots; everyuser has to start their web somewhere, and usually they are going tostart from some well-known root or roots. What you have really doneis made trust roots less subject to detailed scrutiny and criticism,and probably made it less obvious
袁彌明睇張舒雅 難在娛樂圈發展
文匯報 【本報訊】（記者 梁靜儀）剛與男友前往澳洲旅行回港的袁彌明，昨日接受網上財經節目訪問，對於港姐冠軍張舒雅以病為由退選國際中華小姐，袁彌明說：「張舒雅都算係破晒紀 錄，不過佢有醫生紙又唔話得佢，以往都《空姐的行李篋》出版了!!!
《空姐的行李篋》于各大書局有售。
以下是我為Elaine寫的序Elaine，教我怎樣寫
兩個80年秋冬天出生的女人，都喜歡寫，都有開blog，兩個blog的瀏覽人數都達七十多萬。問題是，我是公眾人物，她是匿名作家，即時給比下去。但不要緊
New Year's Eve
Before the advent of such smart gadgets as personal digital assistant, I used to copy my friends' address and phone number in my diary anew each year. I had never learned to love this painstaking ritual of renewing my friends yearly.
As for me, friends are never meant to be used items for cleaning up.
Why is there such a need to delete
One of Python 3's fundamental problems on Unix
Here is a thesis that I have been mulling over lately:
One of Python 3's fundamental problems is that it is trying very hardto pretend that Unix is fundamentally a Unicode operating system, sothat Python itself can be Unicode-based while still working on Unix. Theproblem with this is that it is demonstrably false, as seen in the os.listdir() problem ; Unix is fundamentally a'bytecode strings' environment, and attempts to pretend otherwise canrun into problems any time that this pretense runs
Certificate authorities seem to be a real weakness in SSL
My main reaction to recent events is that theyshow how certificate authorities are one of the real practical weaknessesin SSL. All of the theoretical security in the world can be triviallythrown away by shoddy practices on the part of a single trusted certificateauthority, and we've recently seen not one but two such CAs exposed.
The case of the improperly issued mozilla.com certificate is a clear-cut procedural failure, either failing to vet yourresellers or failing to properly vet a signing request or, for thatmatter
亞視藝員向長者派米三百包
2008年
你記得年初的雪災嗎？雪災之中有很多感人的故事，沒多久，一批疑似藝人的疑似交歡照片就把大
ZFS and crazy dates
Recently, some backups on our new Solaris x86 fileservers started failing with (GNU) tar reportingerrors about:
Warning: Cannot stat: Value too large for defined data type
More alarmingly, even ls on the Solaris fileserver would reportthis (as an error). Fortunately, I remembered a recent discussion on the ZFS mailing list about this, to the effect that if you are usingNFS, it turns out to be possible to create files with 'impossible'timestamps. Inspection showed that this was indeed the
