Thesis: reputation based antispam systems are dead

It recently struck me that one of the things that the universitywebmail phish attacks demonstrate is thatreputation based antispam systems are now dead. The university webmailattacks aren't just a few previously good sources going bad, which hashappened before; they're a systemic, broad attack on a whole class ofsystems that previously had a good to great 'spam reputation'.

(Well, this exaggerates the situation somewhat. There are two aspects ofreputation based antispam systems; you can attempt to blacklist placesthat are


The advantages of iSCSI's MC/S for multipathing

In theory, iSCSI has a feature called 'multiple connections persession', commonly abbreviated as MC/S. In iSCSI terminology, a'session' is a single logical connection between an iSCSI initiator andan iSCSI target, and a 'connection' is a TCP connection. MC/S lets asession be composed of multiple TCP connections, each of which can use adifferent set of IP addresses and thus a different network path.

(In practice, apparently very few iSCSI initiators and targets actuallysupport MC/


事先張揚超負面報道事件

我想讓大家了解時下雜志媒體對娛樂新聞報道的運作。

上星期五到了西九龍做halloween活動嗎,我們俗稱的“大圍”記者均有到場采訪,通常活動完了,記者們會向每位嘉賓補訪問,訪完就大家收工。

不過那天大圍訪問過後就有FACE的記

Skins

最近開始追 Skins
高手之作
無需多講

真係好睇,唔係講笑,大膽,去得盡,編劇有深度



我"小時候"喜歡聽此歌,聽Skins的演員再唱,特別親切

More on Firefox 3's handling of self-signed SSL certificates

One of my blogging flaws is that when I write up an entry, I can be soclose to the issue that I leave important things out because they are'obvious' to me. I did that with my recent entry about Firefox 3's handling of self-signed SSL certificates: I skippeddescribing exactly what makes Firefox 3's approach so wrong.

Firefox 3 is not wrong-headed for being cautious about self-signed SSLcertificates, because there are real concerns with them in practice. Firefox 3


Bollywood的危機

近年印度勢力逐漸入侵美國. 先是Sony Pictures 負責替《Sawaariya》海外發行, Steven Spielberg旗下的夢工場(DreamWorks)的真人電影部, 也得到印度公司的金錢資助, 脫離開派拉蒙(Paramount)自立. 而印度電影界與外國電影製作單位的合作愈來愈活躍: Rambo和加州州


次次執二攤?


圖片by《明報》

最貼近我所表達:《東方日報》
(《太陽報》與《東方》雷同)


趙碩之女僕大晒搶衫搶鏡

自 言 曾 多 次 被 「 搶 」 衫 的 袁 彌 明 , 昨 日 跟 趙 碩 之 出 席 萬 聖 節 活 動 時 , 亦 被 大 會 安 排 穿 上 一 件 對 方 嫌 棄 的 服 裝 。 對 此 袁 彌 明 直

Continue reading...

How self-signed certificates are a problem for browsers

I was a little harsh on Firefox 3's handling of self-signed SSLcertificates in the last entry , and in fairness Ineed to say that this is a genuinely hard problem for browsers, at leastfrom a security perspective. Let us talk about just how this is so.

First, let us start with my previous basic model of how https could work. Browsers always use SSL if possible, and theyprotect against straightforward man in the middle attacks by rememberingthe SSL certificate they saw last time, or


Blogger 與香港共享創意

典禮將於下個星期六 (25/10) 的下午舉行,當中會有一個「香港博客工作坊」,小弟將是坐上客之一,談的當然是 CC 有關的東西。

由 All Rights Reserved 變成 Some Rights Reserved,其實是一種「放手」,而這種放手對於 Blogger 有甚麼關係?暫時想到可以


辣招炒蟹




袁彌明(Erica)把口以辣見稱,估不到她連煮辣的食物也甚有心得,炮製冬蔭功湯和咖喱炒蟹絕不假手於人,即使有大師傅在旁也不用「請槍」,Erica這位烈女的確辣得有道理!