《色‧戒》之我見
Why I think identity blurs into authority
In theory we can separate the ideas of identity and authorization,and it is common to present complex computer systems this way. Inpractice I think that many people blur the two together and attemptingto forcefully separate them only leads to confused users and frustratedsecurity people.
I believe that one reason for this is because we rarely think ofpeople alone in the real world; instead we think of them with attachedassociations. It is not 'Chris Siebenmann, who is authorized to', it is'Chris Siebenmann who works
魔幻藍詩《Saawariya》
千金落難記
「這條數，我無論如何不會負責！」女皇氣得頭頂冒煙，丟下那疊厚厚的賬單，拂袖而去。四對眼睛立即轉投junior partner Eric身上，看他如何處理這筆二百萬的爛賬。
Eric鬆開領帶，開始咆哮起來，其他人也跟著破口大罵，會議
Weekly spam summary on October 13th, 2007
This week, we:
- got 11,905 messages from 252 different IP addresses.
- handled 27,710 sessions from 2,367 different IP addresses.
- received 342,122 connections from at least 124,401 different IPaddresses.
- hit a highwater of 36 connections being checked at once.
Connection volume seems up a bit from last week ,although it's hard to be entirely sure. Session volume is definitelyup,
寂然世界真空期
由現在到11月4日,我因有"要事"處理,"寂然世界"不會有更新,也不會有特別的留言回應,往年我無論多忙都保持與朋友的交流,今年我想試試把這個地方留給你們,如果我不在,我不看,我不回應,"寂然世界"還有
Getting your networks to your racks
I'm in the process of getting a new test server installed in a rackin our machine room. This means we needed to set up some networkconnections for it, which involved someone dragging yet more cablearound our machine room and finding switch ports to plug into to getthe necessary networks (which turned out not to be an entirely trivialthing).
As a result, the whole thing got me thinking about the issue of the bestway to get all of your networks to where they need to be in
A gotcha with command order in pipes
Here's a mistake I've made more than once:
tail -f active-log | grep big-filter | grep -v one-thing
(Here the big-filter is something that selects only a small amountof actual interesting logfile output, and then you want to throw awaya small bit more. For example, my most recent version of this wasmonitoring the exim log on our new mail system for failures and otheranomalies, and then wanting to throw away one particular known failure.)
風花雪月
「蘭開夏道」這個專欄，很多人看得咬牙切齒。是的，我曾經毫不留情地批評「北方佳麗」，並因此而開罪了至少五十萬個香港男人，背上「傷害中國人民感情」的罪名；在「以貌取人」等文裡，港男同樣被我嘲諷得好
How to properly look up hostnames from IP addresses
Looking up reverse DNS to determine the hostname of an IP address thatyou are talking to is one of those almost simple things that softwarekeeps getting wrong .So here is how you do it, in two variants.
First, if you use DNS and have an (almost) empty /etc/hosts or justdon't care about looking up something in it, is the simple version:
gethostbyaddr()the IP address. If it fails, you are done. Otherwiseyou have the claimed hostname .(