Where the risk is with virtualization (and iSCSI)

Both virtualization and iSCSI are fundamentally 'sharing' technologies,where multiple things use a shared infrastructure. This means that theyhave a shared set of general security risks, pretty much common to anysharing technologies: cross-contamination and base system compromise.

Cross contamination is the ability to interfere with other things usingthe shared environment and to compromise them in turn; having a sharedinfrastructure necessarily gives you a channel to attack other thingsthat are using that infrastructure. This isn't novel, but virtualizationand iSCSI make it


風火台談中空寶事件及其他

我覺得這一集值得推介
恰巧今日報章登了中空寶事件的新發展
大家可以從中想想對與錯之間的模糊














自我的卑劣

我們與我們認識的自己,往往存在着驚人的距離。
我們不容易相信別人,卻很容易相信自己。我們以為自己得信賴,但所作所為往往 把自己也欺騙了。也許自欺欺人者並不是故意的,但隱藏在自我中的劣根性總會自行啟動。例如

Why I am not fond of Ubuntu's management of kernel updates

It's really simple: we installed the latest Ubuntu 6.06 kernel updatelast night, since it's a security fix. Today, our machines startedpanicing with 'kernel BUG at fs/nfs/inode.c:174' messages (threemachines so far, one of them three times), so we wanted to revertback to the old kernel.

Guess what: it wasn't there any more. Apparently Ubuntu feels freeto have (some) kernel updates overwrite your


再談 Twitter

大約在一年前,我寫了一篇 Twitter火熱之謎 ,在文末如是說:

雖然嘗試開了個 Twitter 戶口 ,有時會寫一些心情紀錄,但我認為自己在此上並不會很「活躍」就是了

這句話早就要被推翻了。

事實證明,這一年來,我的 Twitter 使用量不少,可以參

TweetStats

The irritation of single-instance applications

There is a certain habit in applications these days of onlyallowing you to run one copy of themselves; for example, Firefox . I find myself more and moreirritated by this, because it is usually implemented sloppily.

A good implementation must hide the fact that it is not actuallyrunning a second copy of the application. Sloppy implementations failto completely hide this fact, generally by missing various differencesbetween the environment that the original version of the application isrunning in and the environment that the second copy is running in.


Wireless, machine rooms, and the Asus Eee PC

I want to note for the record that the combination of an Asus EEE PCand a wireless network in your machine room is a great idea. For bestresults, make sure that your wireless network does not depend on much ofyour overall infrastructure.

(Yes, we actually put a wireless access point in our machine room.Since the core wireless gateway is also in the machine room, this isfar less crazy than it might seem.)

Also, the Eee is smaller than my current lab notebook , which is


20080221 網摘 – FireGestures滑鼠手勢

Oh

News/Services

Development


曾志偉《小小小警察》


更多片段, 請到 Youtube


電影節前夕

手上有好幾天大假. 不選擇到外地旅遊, 打算投往繽紛光影世界─第三十二屆國際電影節.

是屆電影節跟往年最大不同, 就是缺少了戚家基的參與. (戚家基已辭去國際電影節協會有限公司總監一職, 原因不明) 自從失去國泰贊