How not to set up your DNS (part 1)

Presented in illustrations:

; dig +short ns harvest.idv.tw.harvest.idv.tw.www.harvest.idv.tw.; dig +short a harvest.idv.tw.219.84.30.59; dig +short a www.harvest.idv.tw.219.84.30.59

To those setting up nameservers: when people said 'have twonameservers', they did not mean 'and feel free


How not to set up your DNS (part 2)

Today's examples of MX entries are all drawn from domains presented toour mailer in MAIL FROM 's over the past 28 days or so. ' sdig ' is ascript that does a ' dig +short '. Presented in illustrated form:

; sdig mx oakhavenresort.com.10 mail.10 mail.oakhavenresort.com.

It's interesting that they get this simultaneously wrong and right. Isthe plain ' mail. ' supposed to be in some other domain?

; sdig mx

無限廣告在險峰之二

1. 菜街與讀詩

可惡, Kubrick讀詩會 不能不去,但 八樓本週日在西洋菜街讀詩 (我贊成「橫詩街頭」這個名字),我實在很想去。嗚。長恨此身非我有呀。 能去的人,替我去看看、撐場、讀詩啊。

2.訪問a

「創作者智海充滿藝術的

A little sysadmin twitch

Every system administrator has little twitches, behaviors that strikeoutside observers as somewhere between odd and superstitious. Sometimesthese are just habits, but sometimes they have interesting storiesbehind them.

One of my twitches is that when I use su , I always type ' /bin/su '(or on some irritating systems, ' /usr/bin/su '), not plain ' su '.(By now it's a reflex.)

This habit originated in a bit of security advice. The story goes


Making self-signed SSL certificates with OpenSSL

So that I don't have to try to remember it or look it up next timearound, here is how to generate a real self-signed SSL certificate withOpenSSL. The basic but incomplete incantation is:

openssl req -x509 -nodes -days -keyout .key -out.crt ...

If you want a merged PEM certificate, just make the -keyout and -out arguments the same thing. The key (or the PEM


無限廣告在險峰

我和可洛都會去, 當然也要請各位到場撐場,讀讀自己的詩 。否則我們一直讀下去就太悶了。(ps.這不是發佈會)。


幻聽不曾移動瓶子樹 廿九几讀詩會
日期:2005年11月27日
時間:15:00-16:30地點:kubrick書

20051124網摘 – SSE 使 RSS 互動起來

IT News


Solaris 9's slow patch installs

Yesterday was my first time installing the Solaris 9 recommended patchset on a production machine; we rolled it onto a basically unpatchedserver. Because it was a server, I did it in single user mode (thepatch set recommends this, as some patches in the patch set sayexplicitly to apply them in single-user mode).

I already knew that installing the patch set was achingly slow on mytest machine, but my test machine is an Ultra 10 so I wasn'tsurprised. The machine from


Multiprocessors are a leaky abstraction

Earlier this week, the story started rumbling through the usual places that using hyperthreading on Intel CPUs could cause seriousperformance problems in some applications, like Microsoft SQL Server.The current best guess of the cause is cache thrashing due toHyperthreaded processors sharing L1 and L2 cache. If a process thathammers the cache is scheduled onto one logical processor of a HTpair, it will destroy the performance of anything running on theother logical CPU (I'm summarizing from here ).

As this vividly demonstrates, multiprocessors


觸Show 2



Originally uploaded by chi_hung .


十條 觸Show 有長短

節目:音樂、行為藝術、繪畫、舞蹈、即興
演出單位:謝偉祺、鄺頌安+丸仔、周雲蓬(北京)、
廖東梅+鄭政恆、卓新力量、微風吹、觸映份子

日期:2005年 12月10日 (星期六)
時間: