這是一篇我給 《明報》 寫的稿件,刊於 2007 年 5 月 19 日「星期日生活 – In Internet」版 ,原題是「自由的代價」。這次題目原本是討論 Blog 的「道德危機」,但下筆時漸漸變成寫網絡欺凌、起哄等等現象,已算是蠻離題…
The danger of a web server writeable document area
Once you have CGI programs running through your web server, you might rationally ask why allowing them to writeinto the web server's document area adds any extra danger: after all, ifa CGI program is compromised, the attacker gets to run all the code theywant anyways.
Well, in theory. The flaw in this theory is that there are differentkinds of vulnerabilities.
In practice it turns out that 'file dropper' vulnerabilities, wherea CGI program (especially PHP programs) can be tricked into writing
不要忘記 2
A case for breaking the web server ownership guidelines
I have to admit that there actually is a reason to break the goodpractice for webserver file ownership :the 404 handler trick for lightweight caching of semi-dynamic websites.
The 404 handler trick comes from three observations:
- most dynamic websites are in practice not very dynamic; the actualpages served change rarely.
- Apache (and other web servers) are many times faster at servingstatic content than dynamic content.
- Apache (and etc) can let you take arbitrary actions on 'page missing'errors.
很遠
和W孖公仔般clubbing快可慶祝周年紀念了,她看著我的「成長」。
不,不是這樣的。
那些男人的世界我全然不懂,我沒有相近的背景同樣的交際網。
我不是開玩笑,是真的
歌
這幾天,大家都覺得香港好像瘋了一樣。「住不得了」的聲音起此彼落。朗天便道,行開下囉
我沒有拍照。
Linux is a Unix
There used to be a meme going around to the effect that Linux isn't Unixand you shouldn't call it one (I say 'used to be' because I haven't seenit recently). This has always irritated me; not particularly because I'ma Linux partisan, but because it's such a small minded claim for Unixpeople to make.
When you ask people to support this, they generally point at tworeasons: Linux is not entitled to use the Unix trademark,