RSS Reader

A basic principle of website security

Wandering Thoughts | Dec. 18, 2006, 12:18 a.m. | Original

In theory I shouldn't have to say this, but in practice I probably do.One of the most basic principle of designing secure websites is simplythis:

Never trust anything you get from the network .

Everything you get from the network is under the control of asufficiently determined attacker, no matter how it is 'supposed' tobe generated. Every request, every form POST , every cookie, andevery AJAX callback. No amount of obfuscation can do more than slow anattacker down.

(In fact

隨想隨寫

silencemo | Dec. 17, 2006, 5:40 p.m. | Original

社會是分化的，人心是可怕的，近幾個星期，心情激動，非常傷身，於是時時提醒自己要心平氣和，常常故意寫些無聊小事，這是虛偽也好，是膽小也好，有些事，寫與不寫，在這地方，似乎都改變不了傷透的心。

無心閱報，無

Java SE 6 + Firefox 2 UI 問題

JackysBlog | Dec. 17, 2006, 12:20 p.m. | Original

最近分別在兩部機器上安裝了新的 Java SE6 ，然後 Firefox 都會出現 UI 問題：底下出了一個「menuitem」的紅字。我用了這個方法來解決，特此記下：

進入 Firefox 「安全模式」
選「停用所有附加元件」然後點「執行變更項目並重新啟動」
Firefox 重啟後，

《我愛巴黎》- 我愛…

JackysBlog | Dec. 17, 2006, 5:38 a.m. | Original

《我愛巴黎》是一由多個導演合作所拍的一套有關巴黎的影片。十八個片段，十八個小故事，有趣味小品、愛情故事、奇情幻想、平凡生活。這不是一些政府式製作的一味唱好的旅遊宣傳片，而是要你從每個小故事中，細嚐人生

Weekly spam summary on December 16th, 2006

Wandering Thoughts | Dec. 17, 2006, 12:18 a.m. | Original

This week, we:

got 16,689 messages from 271 different IP addresses.
handled 21,893 sessions from 1,229 different IP addresses.
received 207,766 connections from at least 62,254 different IPaddresses.
hit a highwater of 8 connections being checked at once.

This is about the same volume as last week ,although the number of different IP addresses connecting to us isunusually large.

Day	Connections	different IPs

How to get me to block your web ads in a flash

Wandering Thoughts | Dec. 17, 2006, 12:18 a.m. | Original

Tim Bray :

The animation in Web display ads is outta control, outta control, I tellya!

What he said (except that it's been going on for years). The fastest andbest way to get me to really kick your ads to the curb has always beento make them blink and get in my face, and it amazes me that anyone hasever thought such ads were a good idea.

(Huge, page-disrupting and modem-saturating ads don't help, but they are