較早前在本blog寫了一篇有關Levi’s 廣告攣與直的網誌,港台的Eric看後,便找了我上了他和梁兆輝主持的節目「自己人」做嘉賓,講一下gay marketing這題目。
噢,想來我真的和港台有緣,今次已經是第二次被不同的DJ邀請,看來DJ們都經
In theory we can separate the ideas of identity and authorization,and it is common to present complex computer systems this way. Inpractice I think that many people blur the two together and attemptingto forcefully separate them only leads to confused users and frustratedsecurity people.
I believe that one reason for this is because we rarely think ofpeople alone in the real world; instead we think of them with attachedassociations. It is not 'Chris Siebenmann, who is authorized to', it is'Chris Siebenmann who works
This week, we:
Connection volume seems up a bit from last week ,although it's hard to be entirely sure. Session volume is definitelyup,
I'm in the process of getting a new test server installed in a rackin our machine room. This means we needed to set up some networkconnections for it, which involved someone dragging yet more cablearound our machine room and finding switch ports to plug into to getthe necessary networks (which turned out not to be an entirely trivialthing).
As a result, the whole thing got me thinking about the issue of the bestway to get all of your networks to where they need to be in
Here's a mistake I've made more than once:
tail -f active-log | grep big-filter | grep -v one-thing
(Here the big-filter is something that selects only a small amountof actual interesting logfile output, and then you want to throw awaya small bit more. For example, my most recent version of this wasmonitoring the exim log on our new mail system for failures and otheranomalies, and then wanting to throw away one particular known failure.)
Looking up reverse DNS to determine the hostname of an IP address thatyou are talking to is one of those almost simple things that softwarekeeps getting wrong .So here is how you do it, in two variants.
First, if you use DNS and have an (almost) empty /etc/hosts or justdon't care about looking up something in it, is the simple version:
gethostbyaddr() the IP address. If it fails, you are done. Otherwiseyou have the claimed hostname . (