It's not news that if you want work done you usually need to pay peopleto do it; there are not that many selfless volunteers and sooner orlater you stop being able to trick people into doing it for free. Ofcourse, the open source movement is a clear demonstration that you don'thave to pay people in money; people find any number of things rewarding.But you do need to give people a reward that they find meaningful.

(You can argue that a certain amount of open

In the spirit of my Firefox extensions , and since Ijust went through this exercise today, here are the Firefox preferencescustomizations that I currently use. At least some of these are onlypresent in relatively bleeding edge Firefox builds, and you will needto use about:config to enable at least some of them.

(I have not put everything in here, just the stuff that I always forgetand that irritates me when it's missing.)

Once you have CGI programs running through your web server, you might rationally ask why allowing them to writeinto the web server's document area adds any extra danger: after all, ifa CGI program is compromised, the attacker gets to run all the code theywant anyways.

Well, in theory. The flaw in this theory is that there are differentkinds of vulnerabilities.

In practice it turns out that 'file dropper' vulnerabilities, wherea CGI program (especially PHP programs) can be tricked into writing