Scramble
Although chances are that I am killing time by juggling with the alphabets, there are occasionally good lessons to learn. Trust me, the word game sparkles with amusing examples of life lesson. Think of the word "trust", and drop the letter t – alas,
How to exploit unsigned repository metadata
Courtesy of Don Kaminsky's slides for his Black Hat DNS talk, I wound up reading Attacks on PackageManagers ,which identifies a number of attacks that can be mounted if you canset yourself up as a package repository mirror for your favoriteLinux distribution. A number of the attacks are straightforward,but judging from the Slashdot discussion the dangers of unsignedrepository metadata are not as clear. So here is an attempt toexplain them simply.
Suppose that you are an attacker with a repository mirror (the papershows that
A workaround for the Python module search path issue on Unix
One of the little challenges with writing Unix programs in Python isthe search path problem. The natural structure of Python programs is tosplit functionality up into a bunch of modules and then import themall in the main program, but the natural structure of a Unix program isto put its binary into one directory (such as /usr/bin ) but all ofits helper bits into a second, completely different directory. So theproblem is: how is a Unix Python program supposed to find its modules?
(The
The pragmatics of language changes
There is a certain view, one that is easy for people to fall into,to the effect that while backwards compatibility in new versions oflanguages is important and should be given due weight, sometimes thelanguage designers can, do, and should decide that the change isimportant enough so that it should be made. Let us call this thelanguage designer view of language changes.
The problem for this view and for the decisions that come from itis simple:
Programmers do not have to accept what you give them.
More on the funding capture problem
The usual rejoinder to the funding capture problem is that organizations will still have to actto in order to stay meaningful and important. If an organization doesnothing, outside people will come to see it as unimportant, useless, andmeaningless, resulting in the people funding it winding up not gettinganything for their money, so they'll stop paying. After all, why pay forsomething that gives you no benefits?
(Let us skip lightly over all of the practical difficulties here,starting with organizational inertia.)
世界電影經典回顧 9月 日本新浪潮電影
八號熱帶氣旋警告信號現正生效。
天文台在下午12時30分發出雷暴警告,有效時間至8月6日下午3時30分。
本港地區下午及今晚天氣預測
吹烈風程度東至東南風,離岸海域及高地間中吹暴風。密雲,有狂風大驟
