-
The problem with amateur crimefighters
I wish to preface this with the fact that I am a deep believer in cooperation and data sharing. Also, I really appreciate the work that volunteers put into maintaining different resources (like the excellent CastleCops forums). But you have to remember that these people are not professionals and sometimes don’t have a complete understanding…
-
An alternative for Perl heredoc’s
Perl has (true to its motto – there more than one way to do it) many methods for declaring string. Here are a few: The single quote (‘) – does not interpolate variables, does not understand escape sequences (like n for newline) The double quote (“) – interpolates variables (replaces $foo with the value of…
-
Web Applicaiton Firewalls – are they usefull?
I was looking through a presentation by .mario about PHPIDS (embedded below for your convenience), which got me thinking about Web Application Firewalls (or WAFs for short). Currently I don’t see very much value in WAFs. My way of thinking goes something like this – there are two types of web applications you might run…
-
Converting rows (records) to and from arrays in Postgres
Arrays are one of those more special features in PostgreSQL. Like any more esoteric features, you have people both in favor and opposed to them. On the pro side you have the fact that you can have an arbitrary number of elements without wasting space and/or having cumbersome table structure. On the con side you…
-
Random links and commentary
From the Mechanix blog comes the tale of the blocking CREATE INDEX call under PostgreSQL – I consider myself lucky that the databases I run are of internal use and I can permit myself to take them offline for a couple of minutes. Via use Perl;: comments in the Perl debugger. Reminds me of the…
-
An argument (against) PHP
Via Perlbuzz I landed at the blog posting An Argument for PHP, which I disagree with. First a little about my background: I’ve been programming in PHP almost twice as long (6+ years) as in Perl, so (hopefully) it isn’t the case that I don’t know what I’m talking about. PHP seemed nice and shiny…
-
Dynamic languages, the universe and everything
From Planet Perl I somehow ended up at a transcript of a talk about dynamic languages. It just so happens that during the same time I was reading the paper Eudaemon: Involuntary and On-Demand Emulation Against Zero-Day Exploits. The paper is an extension of the Argos project, which tries to identify zero-days by correlating network…
-
Luminous CD envelopes
While reading the Luminous band-aids post over at the Universe of Disclosure blog, I was reminded of a similar event with a CD envelope a couple of years ago (the kind CD’s attached in magazines, with a round plastic window in the middle). I was opening it in the semi-dark (the kind of don’t wake…
-
Advanced MySQL features
I think usually of MySQL as a simpler alternative to more feature rich RDBMS’s like Postgres. However recently I listened to an interview with Brian Moon, the author of Phorum which is the oldest PHP and MySQL based forum software. The interview was very cool and demonstrated that you can do a lot if you…
-
An inspirational song
I don’t like baseball all that much (it isn’t played very often on this part of the ocean), but I find the song by Kenny Rogers very inspiring. The story behind the song seems to be (according to Wikipedia) that a baseball player named Kenny Rogers (not to be confused with the country singer –…