Why ssh validates host keys using the exact name you supplied

One of the little things that ssh does is that it checks and maintainshost keys using exactly and only the name you used on the command line;it doesn't canonicalize the name. (Well, not much; these days it willalso try the IP address that the name resolves to.)

The problem around here is that the names of machines can be specifiedin all sorts of different ways, because of domain search paths; oftenwe have bare name, bare name plus the subdomain, and then two


創作100問

1. 前言
森月靈 那邊看到的,我覺得我非答不可。

2. 你的筆名是?
寂然

3. 將自己當成小說中的人物,介紹一下自己吧。
阿力、阿傑、芊芊、素素,都是一個普通人。

4. 你的職業是?
文字苦力。

5. 請說一下你的打工經歷

A small script: bsearch-nums

Sometimes I write little scripts partly in order toplay around with a command I haven't used before. Such is the case withtoday's script, which I have unimaginatively called bsearch-nums . Hereit is:

#!/bin/sh# usage: bsearch-nums START ENDlo=$1; hi=$2while [ $lo -lt $hi ]; do  mid=`echo $lo $hi +2/p | dc`  echo "try: $mid"

卡夫卡的身體

文明單位:卡夫卡
嘉賓: 李智良

李智良在節目裡問到,劉小楓怎麼把卡夫卡和「沉重的肉身」連結起來?因為沒準備好,所以沒正面回應。其實,是這樣的:

「卡夫卡十分清楚自己的脆弱:很難同女人一起生活。因此,婚姻對

welcome to the desert of real 歡迎來到真實的荒漠

因為接近完美,上星期三晚按捺不住一個人到卡拉ok看意大利對俄羅斯的重播,花去手頭資金1/5。當然也是哭的。然後球賽完了,順勢一個人唱k。唱k這個行為,象徵著社交(我們望著同一熒幕跟著同一指示向著同一方向

渴睡


年輕的時候
我可以超過二十四小時深度睡眠
好像死了一樣
年紀越大
這樣美好的睡眠時光已經一去不再

上星期日
突然很想來一次大昏迷
可是在床上輾轉反側
終於還是要起床上網讀報
真是命賤

最近時常覺得睡眠不足
無論睡多少時間都

A DiskSuite annoyance: metastat

In the traditional illustrated form:

; metastat fs5/d40
metastat: sandiego.cs: fs5: set name is inconsistent

Almost all DiskSuite commands that deal with disk sets will accept fsN/dN to specify the set and the disk at once, and metastat itselfproduces output in this form. But metastat refuses to accept it asinput; instead you have to use ' metastat -s fs5 d40 '.

This isn't just a cosmetic issue. The fsN/dNN format is


四五六,越跳越木獨

o係我咳到就o黎肺都甩既情況下(冇錯!我既小兒百日咳又返o左o黎),依然繼續四五六去clubbing跳到天光。

難怪我既最佳玩伴W,都訝異於我既驚人耐力。

將clubbing當成正職而空姐當成副業既我,每晚聽住差唔多一樣既音樂,對住

Weekly spam summary on November 18th, 2006

This week, we:

  • got 15,266 messages from 269 different IP addresses.
  • handled 22,009 sessions from 1,693 different IP addresses.
  • received 897,934 connections from at least 48,417 different IPaddresses.
  • hit a highwater of 10 connections being checked at once.

Just like last time , that is not a typo (andnothing on the system was affected enough to make me notice it beforenow,


How https: should work

I just got yet another prompt about certificate issues on the occasionof visiting yet another website (I think because it had a self-signedcertificate, but who can tell with Firefox's dialog about it?). And allthis reminded me of how badly implemented SSL is in web browsers.

There are three actual good things that can be done with SSL: encryptingthe conversation, stopping man in the middle attacks, and certifyingthat the website is in some sense trustworthy. The web SSL experienceis so bad