( 原刊 AV Magazine 03-12-2010)
人生音像城
心事
看了《半個好心男》( The Good Heart ),非常喜歡,一部很窩心的電影。
影片的格局很少,主要發生在紐約市街角一間版破舊酒吧。故事開始時,露宿街頭,在破紙皮箱搭建的家棲身
As an illustrated example of how not to do log messages, here is amistake of mine that I recently had my nose rubbed in. Suppose that youhave a service that authenticates requests in various ways; sometimesthe request has enough information to grant approval right away, butother times you need to do a callback of some sort. Of course you wantto log the success or failure of these requests so that when somethingis going wrong you can rule out the authentication system.
When I was doing this, I
Here is something that I've more or less written about before, but Iwant to reinforce by saying explicitly:
Asking users questions never increases security.
Never ever. Really.
(See SecurityChoiceProblem for a discussion of why.)
What this means is simple. Every time you design a system where part ofthe design is 'if something questionable happens, we will ask the userif they approve it', assume that at least half of your users will makethe wrong choice. Ask yourself what this does to
As I alluded to in a comment here ,one reason that we can't expect people to understand that 'low qualityencryption' is basically 'no encryption' is that browsers don't. In factthe issue shows why having a distinct and specially marked 'https' isultimately a terrible mistake; it has trained programmers and users thathttps means security, when in fact it doesn't.
What would have been much better is if browsers hid the differencebetween the raw protocol being used and instead showed