Another consequence of the Debian OpenSSL security bug
Here is another consequence of the Debian OpenSSL security bug that I did not hearabout (or realize) until recently: it lets an attacker steal any ofyour SSL certificates that were created with the broken (weak) OpenSSLversions. This includes signed certificates, with all that thatentails .
How the attacker does it is simple. They get your actual certificatesimply by connecting to your SSL-protected service (such as yourwebsite); the SSL protocol exchange necessarily sends them a copy ofyour certificate, complete with
你有想過拯救地球嗎?
看《20世紀少年》而會感動的，可能已經不是少年，這是一個肯定過去，否定現在的故事。
《20世紀少年》的漫畫好看，因為它不比一般漫畫複雜很多。六十年代的小孩子，幾個好朋友結成的小圈子，不知天高地厚，懷著沉
《20世紀少年》的漫畫好看，因為它不比一般漫畫複雜很多。六十年代的小孩子，幾個好朋友結成的小圈子，不知天高地厚，懷著沉
「 政 治 失 敗 」 之 後 轉 而 歸 咎 「 市 場 失 敗 」 今晚狂掃金！
黃金突跌(現價$875）因為美元overnight LIBOR升至10%，其效果和加息一樣，令美匯高開，金價大跌。
這是千載難逢的入金契機，因為若Bailout plan work out, LIBOR會回落，到時黃金就會升。
假如bailout plan doesn't work out at all, 黃金會發揮它的"資金天
這是千載難逢的入金契機，因為若Bailout plan work out, LIBOR會回落，到時黃金就會升。
假如bailout plan doesn't work out at all, 黃金會發揮它的"資金天
Using Python to find out what cipher a SSL server is using
I have a new-found interest in finding outwhat ciphers various SSL servers around here are using in some easy andconvenient way. Doing this in Perl is easy (there's an example here ), but I prefer Python.I'd normally use pyOpenSSL , my favorite Python OpenSSL module , butunfortunately it doesn't (currently) have an interface to thenecessary 'get the connection's cipher' OpenSSL routine, andthere's no visible substitute for it.
(While the .get
The consequences of your SSL certificate getting compromised
Suppose that your web server's SSL certificate's private key iscompromised and stolen by an attacker. Further suppose that you detectthis and replace the compromised certificate with a new one. Now, here'sa question: what damage can the attacker still do with their stolencertificate?
- they can impersonate your web server. In theory they can only do thisuntil their stolen certificate expires; in practice, I think that manyusers ignore 'expired certificate' errors because they are relativelycommon.
(SSL certificate
Charlie Brown
Charles Monroe Schulz has always been one of my favourite cartoonists. He told us wonderful stories about Charles Brown, whom I shall never forget.
One day, Charlie Brown lied on the bed, murmuring to himself, "Sometimes, I lie awake at night, and I ask, why me?"
Can you imagine how Charlie Brown comes up with the answer himself?
Then a voice answers, "Nothing personal… your name just happened to come up."
One can envisage ourselves engaging in these endless "why me
One day, Charlie Brown lied on the bed, murmuring to himself, "Sometimes, I lie awake at night, and I ask, why me?"
Can you imagine how Charlie Brown comes up with the answer himself?
Then a voice answers, "Nothing personal… your name just happened to come up."
One can envisage ourselves engaging in these endless "why me
黑色的國慶前夕
起初估計道指會跌破10，000點水平的時候，我沒有預料過會有救市方案這一著。
救市消息一出，更從來沒有想過會被House否決。
一直不敢說，（淡友插個市，還在這個投資氣氛下，好易被人罵），就是上一次恆指下試16，
救市消息一出，更從來沒有想過會被House否決。
一直不敢說，（淡友插個市，還在這個投資氣氛下，好易被人罵），就是上一次恆指下試16，
給你1萬元會買什麼？
【明報專訊】入讀明年小一的報名季節展開，33所私立或直資名校的面試試題疑於網上曝光，個別名校除要求面試以廣東話、英文及普通話三語答題外，部分試題對於年僅5歲的幼稚園高班學生來說相當刁鑽，如需以英語回答