Always sign exactly what you are authenticating

I can't claim to know very much about cryptography programming, but Ilike to think that I have picked up on a few mistakes to avoid. Here'sone of them: you want to sign exactly what you are authenticating, notsome mangled version of it .

(Note that 'canonicalizing' things is a form of mangling them.)

Suppose, as a not entirely hypothetical example ,that you are signing some sort of web request with a bunch of (URL)parameters. In order to deal


iPad之唔係食咗超級Steroid後嘅iPod Touch?

「iPad? 點解呢個名咁似M巾?」

哈哈,以上是我老婆今早聽見這個名時的第一個反應。

我第一個反應,反而係:嘩,正呀,好似成部iPod Touch變咗Incredible Hulk(變型俠醫)咁呀,勁呀!

我較緊張的是價錢,唔好講咁多,睇睇咩價碼先。

入場

Continue reading...

哲學一招了

哲學以問題為根本,舉凡哲學書籍或文章,若只標榜所謂哲學體系、哲學總綱、哲學要訣、哲學妙諦、哲學殺着等等而未有將某一特定之哲學問題條分縷析者,皆可棄之如敝屣。(註一)(註二)


(註一)此一招了不適用於本身

AT&T's mad unbundling and the damage it did to Unix

Once upon a time, AT&T had Unix, and Unix was big (by the standards ofthe time); it contained all sorts of things that made it useful. AT&Tdecided that it wanted to make as much money as possible from Unix,so it had a brilliant idea: it would sell a bunch of pieces of 'Unix'separately, as additional cost extras. After all, Unix systems wereprimarily used to run canned vendor-developed software (or at least AT&Tno


從來只有萬骨枯

這個社會很喜歡領袖訓練,甚至到了一個程度,領袖訓練是要每個月做一次,每個人都要參與,如果這個人看起來已經很像領袖,那麼他就要加強訓練,好發展他的才能,如果這個人看起來,不太能幹性格又陰沉,這就對了,他

Silent Monks Singing Hallelujah


資格


有一個小朋友在上數學課時發現老師計錯數。小朋友誠實而勇敢,在老師問大家有沒有問題的時候,依足課堂規則舉手發問,他很誠懇地詢問老師在運算過程中是不是計錯數,並且說出了自己的答案。

本來,同學們是無法察覺老

身心的異步 – KJ音樂人生

記得在台灣歌唱比賽中,評判之一的張宇說過,音樂是藝術的一部份,而藝術就在人生裏,所以唱歌除了練習技巧、音樂知識外,人生也得去體會,使之內化成一種實力,這樣唱歌就更有說服力了。若這道理是真的,那麼在《音


一本記事薄的故事

又係手作仔的小成本大創意,有誠意有心機,想唔拍手都唔過意得去。


Canon Enjoy Photo 101

早陣子我們公司幫Canon 做了一個 Enjoy Photo Facebook Page ,內裡做了不少用打印相相砌出來的手作仔短片和圖片,表面上看很簡單,但實質同事們都花過不少心血。

雖然經常要為此捱更抵夜,但同事都好像愈做愈有衝勁喎,佢地大部份都係極之

Continue reading...