這是一篇我給 《明報》 寫的稿件，刊於 2007 年 5 月 19 日「星期日生活 – In Internet」版 ，原題是「自由的代價」。這次題目原本是討論 Blog 的「道德危機」，但下筆時漸漸變成寫網絡欺凌、起哄等等現象，已算是蠻離題…
The danger of a web server writeable document area
Once you have CGI programs running through your web server, you might rationally ask why allowing them to writeinto the web server's document area adds any extra danger: after all, ifa CGI program is compromised, the attacker gets to run all the code theywant anyways.
Well, in theory. The flaw in this theory is that there are differentkinds of vulnerabilities.
In practice it turns out that 'file dropper' vulnerabilities, wherea CGI program (especially PHP programs) can be tricked into writing
如果我們的生活是一場烽煙節目
早上聽電台“烽煙”節目，每隔幾日就有聽眾致電討論一個永恆的話題，內容如下：“我今朝開車送小朋友返學，落車買早餐，買完早餐有個警察抄我牌，我叫佢俾次機會，個警察話已經落咗薄，但係當時前面仲有兩部車，同樣
A case for breaking the web server ownership guidelines
I have to admit that there actually is a reason to break the goodpractice for webserver file ownership :the 404 handler trick for lightweight caching of semi-dynamic websites.
The 404 handler trick comes from three observations:
- most dynamic websites are in practice not very dynamic; the actualpages served change rarely.
- Apache (and other web servers) are many times faster at servingstatic content than dynamic content.
- Apache (and etc) can let you take arbitrary actions on 'page missing'errors.
五月二十三日八點三十分，立法局工務小組會議首項議程。
不遷不拆不告別。咁靚的poster，周圍勁貼啦。 連日下雨，困在家裡趕文，他們在碼頭繼續露宿。不停有人病倒，要交論文的學生畢不了業。
歌
令人非常不安、超越了道德底線 ——這就是我們將來的中環。 利東街 那邊，也告急到癱瘓議會以爭一朝夕的時候了。街坊十年抗爭啊。
這幾天，大家都覺得香港好像瘋了一樣。「住不得了」的聲音起此彼落。朗天便道，行開下囉
這幾天，大家都覺得香港好像瘋了一樣。「住不得了」的聲音起此彼落。朗天便道，行開下囉
我沒有拍照。
自小以來，對於文學座談上經常出現的，話語錯身而過、論點毫無交接，沒有共同的對話平台的狀況，感到非常焦躁和不耐。因此希望自己所經手的座談，都是能有真正對話的。不知道與會的嘉賓是否覺得這是個咄咄逼人的主持
Linux is a Unix
There used to be a meme going around to the effect that Linux isn't Unixand you shouldn't call it one (I say 'used to be' because I haven't seenit recently). This has always irritated me; not particularly because I'ma Linux partisan, but because it's such a small minded claim for Unixpeople to make.
When you ask people to support this, they generally point at tworeasons: Linux is not entitled to use the Unix trademark,
20070521 推介網誌
Cute Overload
可愛的東西，有誰不愛？ (當然，除了「懶可愛」) Cute Overload 就是一個專門搜集可愛東西的地方，主打動物照片影片，最常見的有貓仔、狗仔、兔仔、省仔，也有較冷門馬仔、刺蝟仔、魚仔、松鼠仔等等，
Properties relevant to finding what class supplies a method
For my own future reference if nothing else, here's someproperties relevant to finding what superclass supplies a method :
On super() objects, we have:
__self__ | the object you are calling super() about,ie the second argument. |
__self_class__ | the actual class of said object; equivalentto .__self__.__class__ but more convenient. |
__this_class__ | the class that super() was invoked for |