21 April

Joel Spolsky, owner of the company that makes FogBugz, thinks writing a book about your software is a great idea. He may be right. He points to a statement made by Eric J. Smith about the book and product: "Once I started reading I was immediately intrigued by the way FogBugz ties right into your mail server and treats every incoming email as a case within the system."

Uh. That is what an issue tracker is all about, Eric. Amazing!

20 April

I told you Firefox is a big fat stinking turd. Updating to 1.0.3 destroyed my certificate. I have better things to do than restore my certificate from backup every time the Mozilla developers fuck up.

19 April

Plesner pointed me to this spectacular retard: "I defy anybody to tell me why is it more secure to not run as root. Nobody really has a good answer. They say "oh, yeah, it is!", but it really isn't." - Michael Robertson of Linspire Inc.

Here is another mindblowing observation: "If someone gets access to your libraries or whatever, who cares? Your data is the most precious thing on your computer." - Sure! Why would I want to know that my software behaves in a particular way? Feel completely free to modify the base components of my operatingsystem any time you want. Not.

Five words, Michael: YOU ARE NOT HELPING MATTERS! I do not know who this chap has been talking to, but they are the wrong people. The comment that "only root can change the wallpaper" speaks volumes about his understanding of Least Privileges.

Come on, people. This is not a difficult concept to grasp. Even Microsoft are catching on (unfortunately by spinning Limited User Access in Longhorn as their own fantastic invention. Nobody ever thought of reducing privileges to the least amount required. Honest!).

16 April

I noticed 3 URLs pointing to online resumes in my webserver referrer logs, each one having been used by 5-7 different visitors. I briefly wondered why the hell anyone would link to any of my websites from their resume. As it turns out, no one did - it was simply referrer pollution.

I understand there is finanical benefit from regular spam. For the life of me, I cannot phantom the point of spamming webserver logs with your resume. Is it all about page rankings? Google seems to think so. Reason number one to not make your webserver reports and logs available to the world - or at least disallow search engines from going there with robots.txt.

I'm still baffled at these URLs containing resumes, though. I guess there is a chance person A is leaving the URL of person B's resume all over the place in the hopes that someone will chase him down and shoot person B. If this is actually real, however, these people are morons: Leaving their full name, address, email, career detail available for anyone sufficiently pissed off.

Maybe these people are trying to get hired by spammers? *shrug*

12 April

The recent case of the Mercedes S-Class owner who had his finger chopped off by thieves so they could steal his car (protected by biometric authentication) has caused quite a stir in security circles. Adam has this to say: A Picture is Worth a Thousand Words.

6 April

"Write-once-run-anywhere. Ha. Hahahahaha." - John Carmack on Java.