Some good practices for web servers

Here's something important for file ownership on web servers:

The user that the web server runs as should not own anything that the webserver serves.

This means that the web server's user shouldn't own anything under thedocument root or in CGI areas, and there shouldn't be any writeabledirectories under either that it can use to put things in. Stronglyresist the temptation to have CGIs write data files under the CGI areaor in the docroot, even if they are normally blocked from being


三段

我和友人坐在二樓cafe窗邊的小桌子,窗外看到的,是時代廣場那繁華的馬路。

我拿著手提電話,靠著窗邊向下望,看到人潮中那出生於1970年的男人。

他抬頭往上望,只一眼就找到了我。

穿著黑色雪紡傘裙踏著三吋Chloe的我,

Being specific about where your systems are

For a long time, whenever we installed systems we didn't bother to beterribly specific about where they were located, which generally comesup when you get asked about time zones. For example, a lot of thingsdefault to 'America/New York', and since that's in the Eastern timezone a lot of the time we said 'sure, whatever' and went on.

The recent American DST rule change illustrates that this is nowhazardous; it is now important to actually be specific about


20070430 推介網誌

英文由F學起

https://hk.myblog.yahoo.com/siu82english/

在香港,英文是一重要的語文。而要學一種語文,讀寫聽講少不了。可是香港的英文課程,一般都不會太重視發音,也不教音標,甚至連老師也發音不準。此 blog 有一系列「擺脫


集體記憶的迷宮:談喬靖夫《誤宮大廈》

書名: 《誤宮大廈》
作者: 喬靖夫
出版:鐵道館2007年4月


故事開始時,作者佈下最典型的偵探小說格局,一位律師代表城中富商委託偵探谷智明調查一宗特別的案件。當然,在正式聘用之前,谷明智的專長和技能都被律師

What matters about object oriented operating systems

Many years ago, I went to a talk about a new object oriented operatingsystem (a research project, obviously). The presenter made a big dealabout how everything in, eg, their filesystem was an object, and sothings were very general and you could put anything in the directoryobjects, and as they went on I noticed something disturbing: while youcould put all those different things into directories, none of themseemed to have the same set of methods; in fact, the methods wereoften significantly


Weekly spam summary on April 28th, 2007

This week, we:

  • got 11,321 messages from 292 different IP addresses.
  • handled 18,443 sessions from 1,247 different IP addresses.
  • received 176,017 connections from at least 61,753 different IPaddresses.
  • hit a highwater of 7 connections being checked at once.

This is slightly up from last week ,especially the number of different IP addresses hitting us.The drop in email messages may be because we'


假如雨有天意 – 記台北復活節之旅


Continue reading...

水手服與機關鎗:通俗故事的本色


導演: 相米慎二
演員: 藥師丸博子,渡瀨桓彥
官方簡介: 「啊!我做了黑社會大佬!?」穿水手服的高中女生──星泉(藥師丸博子飾),陰差陽錯下繼承父業,成為黑社會「目高組」的頭目,不但要帶著一班兄弟搵食,更要打

Why I no longer bother to complain to ISPs about spam

The simple answer: reporting spam to ISPs is not an effective way tomake the spam stop.

My job is to protect my users (or just myself) from spam, not tohelp ISPs police their customers and clean up their spam problems.Complaining to ISPs is no longer an effective way to do my actual job,if it ever was; blocking spammers, spam sources, and ISPs is, though.Once I have dealt with the problem, complaining to the ISP is at bestdonating my time and effort