所有文章
一位台湾校长的讲话
From ChinaUnix.
台湾有这么一所学校，学生年龄在15－18之间，每年三千多学生中，因违反校规校纪被校方开除的二、三百人。学校没有工人，没有保卫，没有大师傅，一切必要工种都由学生自己去做。学校实行学长制，三年级学生带一年级学生。全校集合只需3分钟。学生见到老师七米外要敬礼。学生没有寒署假作业，没有一个考不上大学的。这就是台湾享誉30年以道德教育为本的忠信高级工商学校。在台湾各大报纸招聘广告上，经常出现"只招忠信毕业生」字样。
阅读全文…Shall we patch a (possibly) non-exploitable heap overflow?
While I believe that proactive security practice is necessary for every consumers, the most conversave ones should argue that even a security update will possibly break compablity.
Now I am in trouble. With rsync 2.5.5 installed on a FreeBSD system, we know that it is possible to overflow its heap, however, shall we patch it, or just let it as-is because it is not exploitable on FreeBSD, unlike Linux’s silly brk(9) implementation?
阅读全文…NetBSD have pf(4) in its src repository now!
Finally, yes, itojun has imported pf(4) into NetBSD. Having pf(4) in base indicates that NetBSD’s recognition of pf(4) related work, and as security officer of NetBSD, itojun-san’s import have some special meanings.
参与评论beastie.frontfree.net under SYNFLOOD attack!
I have watched spurious SYN messages and apparantly this has affected beastie.frontfree.net’s networking subsystem, namely, its mail system. The attack is from 203.81.27.11.
Whois indicates 203.81.27.11 is:
阅读全文…Command line I am using to analyze script execution time on Apache log
grep cgi-bin scripttime | cut -f6,8 -d’ ’ | sed -E s/\\\?.+//g | grep cgi-bin | sort | uniq -c | sort > statis
Where scripttime is a log with %T (script execution time) log. The above command line will obtain execution time, script name from log, then sort it by the execution time, then have a counted unique.
参与评论beastie.frontfree.net should protect itself!
I have added some SYNFLOOD proof packet filter rules for beastie.frontfree.net. Interestingly, the filter options seems to “forge” beastie.frontfree.net to be an OpenBSD box.
阅读全文…gdb 6.1.1 imported into FreeBSD-base!
marcel has finally imported gdb into FreeBSD-base. Now we can debug kernels again.
参与评论OpenBSD to have SMP in HEAD!
niklas has committed the final SMP branch code, no more SMP branchs, we have SMP in OpenBSD-CURRENT now!!
参与评论RFC 3522 implementation and Early Retransmission
I have posted it as rev. 1.5 of <research.delphij.net/freebsd/rfc3522.diff>. Some minor comestic changes has gone into the patchset, as junsu pointed out. I’ll remove the unrelated ones soon.
参与评论哭笑不得
我就知道这事儿会招来很多无聊的人，电邮，电话，再到MSN——前天转的几篇文章居然能引起这么强烈的反应，而且居然能够被总结成「处女」，「色情」，真让人哭笑不得，让人觉得这儿突然变了CxDN……我觉得这几篇文章都是相当严肃的主题，而且，这几篇文章在讨论什么，通过转这几篇文章想表达什么，我相信清者自清，没必要解释，我也不想去谴责谁，这只是不同的人生理念而已。
我只想说我不后悔当初的选择，虽然我，至少是当时，并不喜欢那个选择的结果，但至少那是作为一个愿意为自己行为负责的人当时唯一的选择。
阅读全文…