如果要為 《你在看誰的部落格?》 下一個語不驚人誓不休的副題,不如就「人類文明終結時」吧。
本書英文原名是《The Cult of the Amateur》,也即是「業餘者教派」,是一本反 Web2.0 的書。書中討論到的話題,你或許間中都會會聽過:
Python offers any number of ways to create very Pythonicinterfaces to your objects, natural ways of getting variousbits of information out of them. For an example that is freshto my mind , the len() of M2Crypto 's Cipher objects is the number of bits that the cipher uses.
The M2Crypto example also illustrates the problem with this way ofcreating interfaces: it is not necessarily very intuitive to peopleusing your code. The len() of a cipher being its bits strikes meas
Ibtisam Barakat (巴勒斯坦作家)
我屬於那兒 I Belong There
如果要為 《你在看誰的部落格?》 下一個語不驚人誓不休的副題,不如就「人類文明終結時」吧。
本書英文原名是《The Cult of the Amateur》,也即是「業餘者教派」,是一本反 Web2.0 的書。書中討論到的話題,你或許間中都會會聽過:
Suppose that you have a very valuable SSL certificate (for example,you are a bank) and a rather complex application (for example, you aredoing online banking). You want to limit the damage of a compromiseas much as possible and especially you do not want to have the highvalue SSL certificate compromised, because that would be a gold mine forsophisticated attackers.
Here is one approach to this problem that has recently struck me:
Here is another consequence of the Debian OpenSSL security bug that I did not hearabout (or realize) until recently: it lets an attacker steal any ofyour SSL certificates that were created with the broken (weak) OpenSSLversions. This includes signed certificates, with all that thatentails .
How the attacker does it is simple. They get your actual certificatesimply by connecting to your SSL-protected service (such as yourwebsite); the SSL protocol exchange necessarily sends them a copy ofyour certificate, complete with