RSS Reader

Why SSL and name-based virtual hosts don't get along

Wandering Thoughts | July 16, 2007, 1:18 a.m. | Original

Part of validating a SSL certificate is making sure that it is a SSLcertificate for what you are actually connecting to, to avoid thepossibility of a man in the middle attack. SSL certificates for websiteshave a field (the CN portion of the 'Distinguished Name') that names thehost they are for, and so target validation consists of checking thatthe certificate's CN is the same name as the host portion of the URL.

This checking is pretty literally a string compare; the web browserdoes not

iGoogle 飯局之又「呃飯食」

JackysBlog | July 15, 2007, 11:57 a.m. | Original

上個星期有關 Google 的晚餐，我是坐在台灣的 Google 工程師 Ray 的那一桌上，所以也要用不太靈光的國語交談，所以話也不多。內容大概如下 (排名不分先後，只是記憶所及)：

—

Yahoo!, Google 和 Microsoft 分別都有一些 RSS 的混合編輯工具， Yahoo! Pipe 以圖

如果你喜歡狗

silencemo | July 15, 2007, 10:27 a.m. | Original

介紹你讀一本愛狗人的書
作者是我的朋友夢子
書名叫"猩猩,我的寶貝"
書很薄
講的是人和狗的生活片段
感情很深厚
因為都是真人真事和真狗真事
近日在書市嘉年華推出
售30大元
我個人認為
愛狗和不愛狗的朋友都會喜歡此書
本

Saturday night

空姐的行李篋 | July 15, 2007, 2:17 a.m. | Original

Chivas SOMA party + Pi

朋友問我每星期數晚，腳踏高跟鞋跳得不留餘力，真的不覺累？

我會告訴你，現在我的大腿實在酸痛。

年輕不是大晒的。

但年輕時沒讓自己跳得大汗淋灕，老了就來不及了。

也就是因為年輕，才可以找來同樣年輕力壯

Weekly spam summary on July 14th, 2007

Wandering Thoughts | July 15, 2007, 1:18 a.m. | Original

Our SMTP frontend died (twice) around 8am on Friday morning, so some ofthe stats for this are partial stats and some of them are missing abouttwo hours of data. That said, this week we:

got 10,583 messages from 249 different IP addresses.
handled 17,948 sessions from 1,258 different IP addresses.
received 257,246 connections from over 50,000 different IPaddresses.
hit a

Problems I see with the ATA-over-Ethernet protocol

Wandering Thoughts | July 15, 2007, 1:18 a.m. | Original

I've been experimenting with AoE lately, and as a resultI've been looking at the protocol more than I did in my earlierexposure . Unfortunately, the more I look at the AoEprotocol, the more uncomfortable I get.

The AoE protocol is quite simple; requests and replies are simpleEthernet frames, and a request's result must fit in a single replypacket. This means that the maximum read and write sizes per request arebounded by the size of the Ethernet frame, and thus on