炒埋一碟,難解難分也
Paying for security exploits
Somewhere out on the Internet, there is probably someone waxingindignant right now about how companies generally now have to payrelatively substantial bounties for security exploits in their products.After all, why do the security researchers now demand payment for theirresearch work?
I thin that there are two reasons: the obvious reason and the deeperreason.
The obvious reason is that companies are competing for new securityexploits with the criminal groups exploiting security vulnerabilitiesto do various bad things. Said groups pay well for new vulnerabilities,because there is
今年想去六四遊行
這個地區已三個月不下雨了,旱象叢生。然而,布朗先生的話一說完,整個香蕉區就下起大雨來。席根鐸回馬康多途中,遇
Weekly spam summary on May 26th, 2007
Unfortunately, our SMTP frontend restarted sometime Friday, so I onlyhave some statistics up until Friday morning. That said, this weekwe:
- got 10,439 messages from 277 different IP addresses.
- handled 18,746 sessions from 1,402 different IP addresses.
- received 137,918 connections from at least 49,448 different IPaddresses up until Friday at 4am.
- hit a highwater of 9 connections being checked at once.
太陽下那河水它不停流
滿營傷兵,預備巷戰, 皇后碼頭長駐滿月 ,話要打邊爐。30度戶外打邊爐,真係為團聚為打氣不惜一切。 所以,5月26日星期六下午七點, 大家都來吧 ,買少少邊爐料,過來煲煙唱歌玩天
The risks of spam filtering (part 1)
While spam filtering is 'dangerous' in that it can trigger on legitimateemail, incorrectly classifying it as spam, there are different levels ofdangerousness depending on what you do as a result of things triggering.In increasing levels of danger, there are three general things that peopledo:
- reject the email message during the SMTP conversion.
- discard the email message.
- bounce the email message back to the alleged sender.
The danger of the second option is obvious: the sender of a legitimateemail message receives no indication that their
If you want work done, you need to pay for it
It's not news that if you want work done you usually need to pay peopleto do it; there are not that many selfless volunteers and sooner orlater you stop being able to trick people into doing it for free. Ofcourse, the open source movement is a clear demonstration that you don'thave to pay people in money; people find any number of things rewarding.But you do need to give people a reward that they find meaningful.
(You can argue that a certain amount of open
取得全文 Greasemonkey scripts
RSS 放全文還是摘要,討論一直沒有停過。我當然最鼓勵大家用全文,但無可奈何地仍然有得多地方仍然是用摘要的,例如香港雅虎新聞的 RSS。最近在研究 Gresemonkey,小試牛刀寫了個 script 來弄個在 Google Reader 內取得全文的 script。
你必需:
- 使用 Firefox
- 已安

連在一起寫。
(另見 梁文道:淫審處是如何被騎劫的? )
(再推薦 明珠台專題「明光社」,影像檔 )
天星.皇后.情色
馬嶽
自天星以來,我一直在想這運動和香港的民主發展、社會運動和公民社會的關係。從學術角度這不難解釋。英高客( R