迪士尼的末日情懷
In security, you need to stop the root mistake
Here is something that I have become more and more convinced of: if youwant to actually solve a security problem, you need to stop the rootmistake.
Many security problems have various surface issues that you can target,and then they have one (or more) root mistakes. It is tempting and easyto target surface issues, but if you do so you are not really solvingthe problem; you are simply causing the attackers to find another wayto create the circumstances where the root mistake will be committedagain
角色自身
小小通告
多謝支持 :)
Fish
Having a wife as an obstetrician means abundant opportunity for me to watch and adore my yet-to-be-born baby's face. Sure, the photos of her face invite lots of oohs and aahs from
'Conditional restart' in init.d scripts can be dangerous
Yesterday, the lighttpd instance that I run on my workstation waseffectively down for about twelve hours; while the daemon was running,it was using the wrong configuration file and so it wasn't reallyserving anything. In turn, this happened because I installed a lighttpdpackage update, and as part of the post-update actions the package did' /etc/init.d/lighttpd condrestart '.
In theory, conditional restart in an init.d script will only restartthings if the init script has started
Modern version control systems change your directory layouts
We're in the process of a slow conversion from maintaining files withRCS to mostly keeping them in Mercurial repositories,which has wound up making me think about how we want to structure themand which of our existing directory areas are easy to convert. As aresult of this, I have an observation: modern whole-directory VCSeschange how sysadmins want to lay out files and directories.
In the old days of single-file version control, it made perfect sense togroup files together in directories by function or