what's wrong with 3 HK?


Why Firefox 3's handling of self-signed SSL certificates is wrong

There has been a certain amount of uproar about how Firefox 3handles self-signed SSL certificates ,and a certain amount of attempts to justify it . I disagreeviolently with the attempts to excuse the behavior, because whatit comes down to for me is that Firefox 3 has made it more attractive to have no SSL certificate at all than to have a self-signedone. This is both insane and inane; it does nothing to furthersecurity on the Internet, and it has basically nothing to do withthe sorts


李碧華:政 客 好 戲 連 場 (蘋果日報)

Continue reading...

九月蘋果

《風 中 作 樂》


鸚 鵡 登 陸 香 港 那 天 , 仍 在 放 長 假 的 我 , 早 上 瞇 著 眼 用 iPhone 查 看 天 氣 ─ ─ 理 所 當 然 的 八 號 風 球 , 擁 著 冷 氣 被 安 心 睡 下 去 。 朦 朧 間 傳 來 SMS 的 鈴 聲 , 內 容 是 : "typhoon Parrot party@XX Club tonight" , 「 嘻 」 一 聲 笑 了 出 來 , 古 有 苦 中 作 樂 , 今 有

The corporate identity problem

One of the periodically proposed spam solutions is that someone willissue certificates to people and if they misbehave, the certificateswill be revoked. One of the many problems with this idea is what I willcall the corporate identity problem .

The problem with corporate identities is twofold, or perhapsthreefold. First, corporate identities are much like Internetidentities : they provide only positiveidentity, that person A is associated with corporation B, not negativeidentities, that corporation B is not associated with person A. In factthere are a


無股一身輕!

昨日終於決定將工商銀行(1398)賣光,現在可謂無股一身輕。
相信未來一個星期大市會在低位徘徊,所以絕對不用急著買貨。
商品(油、金、銀)同樣會在低水位徘徊,反而看好農產品,雖然不知道怎么買。

現時持有:大

海嘯問題

讓我想像一下未來我們經常會聽到的口號:“妤解民困”、“共渡時艱”、“振興經濟”、“逆境求生”,這些口號,九七年亞洲金融風暴之後那幾年,我們都聽過,估計在這次全球金融海嘯之後,這批口號又會捲土重來。當年

冬天的風光

冬天的風光

不用我Daisy多講,各位中環的兄弟姊妹都一定feel到我們已經步入寒冬。金融市場閃電崩潰,投資銀行家從此安息,律師頭上再也沒有什麼光環。先是金融風暴,如今又來個金融海嘯,我們總算海陸空都玩齊。很快,裁員

Improving initial ramdisks

To summarize my earlier entry , the problem withinitrds is that they are both fragile and opaque. To improve them,one needs to tackle both issues.

The easy way to tackle the fragility is to make initrds both morecomprehensive and more dynamic. Since one way initrds break is by notincluding necessary kernel modules, simply include nearly everythingby default (you can exclude modules that are clearly not needed forbooting, like sound drivers); the extra disk space and boot-time memoryspace needed is likely to be


小心眼

thank god昨日恒指大升,相信很多人趁勢減磅,平了期指,人心惶惶的日子應該這個星期不會再出現。我說的是這個星期而已。

有時真的很不明白,為何這么多人眼見一日反彈千逾點,就等於股市見了低?這是今年第四次錄得記錄性
Continue reading...