The problem with security bugs is that they aren't bugs

Here is a thesis that I have been mulling over lately:

One reason that security bugs are hard is that they aren't bugs. Inregular bugs, your code doesn't do things that you want it to. Insecurity bugs, the end result is that your code does extra things,things that let an attacker in. Ergo, security bugs are actuallyfeatures that you didn't intend your code to have.

(Often security bugs are created by low-level mistakes that are regularbugs.


Windows 些粉博客聚

老老實實,受夠了又大食又問題多多的Windows Vista,我一直都期待Windows 7的來臨,所以早前接到Microsoft的邀請出席這個Blogger event,我也第一時間報名了。

公司其實早有同事在試用Windows 7,但我不想我電腦的OS裝完又要拆,所以一直等了又等。而我身

Continue reading...

身體的偏好

目標是每日一篇新的網誌。

曾有多次訂下目標,每天一次,就要把那件事做好。或許是運動,或者是閱讀,又或是每日要行一件善事。結果當然是堅持了數天之後,事情就變成隔天的事,再之後就變成每週一次,然後就看看那一

忙到連文明單位都覺得困難

文明單位: 笑談《建國大業》
嘉賓:卓男

雖說《建國大業》是在主流紅色電影(或稱主旋律電影)中,罕見的新角度,有關鍵的轉變。從港產片的角度比,《建國大業》難免還會有點悶吧,所以我計劃與社運青年一起去看,找一

久旱逢甘 – D9異形禁區

Spoiler Alert!

看《District 9》(D9異形禁區) 讓人重拾看科幻片的一種痛快。回看影片的故事,其實並非甚麼創新的點子,都是說外星人來到地球,然後主角受到感染、逃走、設法「治癒」自己、與外星人合力勇闖國聯… 都是一些典型科


Why Unix filesystems precreate lost+found directories

Here's a sensible question about the lost+found directories thatvarious Unix filesystems stick in the top directory: why do they have toexist all the time? Yes, clearly fsck needs somewhere to put recoveredfiles, but in theory it could just create a lost+found directory whenneeded, and otherwise you wouldn't have it cluttering up the filesystem.

Part of the answer is that lost+found isn't just a normal emptydirectory; instead, it's usually substantially bigger, despite having


One thing that top-posting is good for

Like many Internet people of a certain generation, I don't like top-posting (and often have a semi-visceral reaction to it). For a long time Iavoided it almost entirely but these days I'm in an environment whereI'm reasonably exposed to it, and I've come to realize something aboutit.

Ultimately, the purpose of all quoting in email is to provide context,to remind people of the previous discussion if they don't remember itoff the top of


明月幾時有?

「So, how's New York?」我問Joyce,然後呷一口明前龍井。

「Vain。還是比較喜歡倫敦。」她說,又用手指搔一下剪得極短的頭髮。Joyce在航空公司任職公關,secondment到紐約半年後回來,就把一頭長髮剪短。

已經很久沒有來Pacific Place的夜上海了。

你會行賄嗎?

如果警察會因為貪吃西餅而涉嫌串謀妨礙司法公正,我手上這盒半島嘉麟樓奶黃月餅,沒理由打動不了我的秘書Selina。

我office的房間座落西南。但算命先生幫我計過,今年入秋以後,我的紅鸞星就會移到東北偏北,錯過了就要再等九

三至十八句

是已經有方法的了。當被無理的負能量環繞時,叮囑自己拉遠距離,從長的時間維度,廣的社會向度,外部的抽離角度,高遠的理念視野,去思考整個問題,不要過於沉迷所謂的人性醜惡(因為它往往有想像成份),想想一無所