Local CAs and an interesting consequence of the SSL security model
Suppose that your organization creates an internal organizationalCertificate Authority, so that it can issue SSL certificates for strictly internal hostnames . Of course, everyoneneeds to have the internal CA's certificate loaded in their browser andso on in order to get work done on your intranet; as a practical matter,you probably preload it in your standard machine setups. I suspect thatthis is a not uncommon setup in sufficiently large companies.
It's recently struck me that this has an interesting consequence: yourcompany security and firewall
Colic
To give you a little bit of the idea, I would say it's just like looking into a crystal ball. I believed that I should take a good look at Dr. Spook's Baby and Child Care yesterday; I then read the advice how to nurse and breast-feed a baby when the mother is ill. This
我和神的對話 （之二）
神：我跟你開玩笑吧了！我不是
核突鬥核突
Secure or useful: pick one
A great deal of time, pragmatic security involves striking a balancebetween actual security and usefulness. The more secure you are, theless useful you are; the more useful you are, the less secure. Here,I am taking a broad view of 'useful', one that encompasses not justthings like features but also how easy your system is to use, and howmuch the security gets in the way.
(Sometimes, very rarely, this is not the case. When this happens,celebrate and take
不許人間見白頭
對聯
上流人在樓上留下下流說話
我自己先對了：
大宗師於中大終老老宗佛儒
「中大」即香港中文大學。對得不算差，但仍是美中不足，因為「大」和「老」不是相反詞。這對聯難在
重溫《秋燈夜雨》
The good and bad of SQL
The good of SQL is that it is an excellent ad-hoc query and reportingtool. If you have an SQL database with a decently formed schema (and inmany ways a denormalized schema is the easiest), you can bang togetherlots of things very fast and easily. Raw SQL is an excellent way toexplore your way around a bunch of data, for example to see if there aresigns that something odd is going on.
(It also makes it possible to answer silly amusing questions that wouldnot be