thái

working for a bank grants me a privilege to work with a lot of partners in security-related projects. it seems that in most people mind, bank is equal to security, so they tend to set a very high focus on security (which is good) whenever they have something to present to me. all of the partners i've been working with for the last few years try very hard to prove that their solutions, their products, their networks...are secure. some of them are pretty awesome, working with them sometimes give me a lot of hints to do the right thing (TM) in security. unfortunately, those are rare. in other words, most are clueless about security. here are some hints that maybe helpful if you want to detect those snake-oil companies: 1. security-clueless often talks restlessly about stuff like firewall, ids, and anti-ddos (some even tell me proudly that their firewalls can strike back to the sources of the ddos attack;)). with all due respect to networking gurus, i have to say it seems that a lot of...

Thời gian gần đây ở VN liên tục xảy ra các sự kiện có liên quan đến vấn đề bản quyền. Chẳng hạn như việc hiệp hội Công nghiệp ghi âm quốc tế (IFPI) cảnh báo Hiệp hội Công nghiệp ghi âm VN (RIAV) về tình trạng vi phạm bản quyền nghiêm trọng của một số website tìm kiếm ở VN. Hay như mới đây, gia đình cố nhạc sĩ Trịnh Công Sơn yêu cầu những tổ chức sử dụng nhạc của Trịnh Công Sơn phải trả tiền tác quyền. Theo dõi diễn biến của các sự kiện này, cũng như phản ứng của các bên liên quan và người ngoài, tôi nhận thấy một bộ phận lớn người dân VN còn rất mù mờ về luật bản quyền và các vấn đề liên quan. Âu cũng dễ hiểu, bởi mặc dù được nhắc đến nhiều trên các phương tiện truyền thông, nhưng cho đến nay, theo sự hiểu biết của tôi, có rất ít các tài liệu tiếng Việt giới thiệu đầy đủ và rõ ràng về luật bản quyền. Và nếu có, các tài liệu như thế cũng thường được viết rất dài, với rất nhiều từ chuyên môn khó hiểu. Tôi nghĩ đây là một trong những lý do khiến cho sự hiểu biết của người dân VN về pháp l...

1. pretty chick is not brainy. 2. pretty-and-brainy chick doesn't know how to use the Internet. 3. pretty-brainy-and-know-how-to-be-online chick is lesbian. 4. pretty-brainy-know-how-to-be-online-and-not-lesbian chick got logicaholic symptom. 5. pretty-brainy-know-how-to-be-online-neither-lesbian-nor-logicaholic chick turns out very secure, not easy to hack. 6. pretty-brainy-know-how-to-be-online-either-lesbian-or-logicaholic-and-easy-to-hack chick is rootkited already.

It seems that Baamboo, a very popular music search engine in VN, uses SQL full text search . This discovery makes me pretty surprised since all of the people I know use Lucene as soon as they want to create a search engine. Lucene is very good at what it does. It’s indexing and storage performance is second to none. In fact, it’s so fast that a lot of companies use it as a quick-and-dirty storage dumping ground for raw data, knowing that it will be much faster and more scalable than a relational database. Why not take advantage of this incredible power and take one more item off of your database’s back? This is all not to mention the fact that a Lucene index query is probably a lot faster than an SQL query grabbing data from a Microsoft SQL Server full-text index. If I were the designer of Baamboo, I'd use, yeah you got it already, Lucene and its sub-projects to do searching. A quick draft architecture should be a combination of Nutch and Solr , i.e. using Nutch to craw...

If you don't want to know what I'm doing, just go to http://ec2-72-44-40-221.z-2 .compute-1.amazonaws.com/ , and do some random searches. That's enough to help me ;). Otherwise, read more. I've been doing some explorations of thrudb which is a new document-oriented database service. I want to see how good thrudb perform with large dataset so I feed it with DMOZ catalog which contains information about 4,600,000 websites in all other world. I also write a small django application which accepts a keyword and query thrudb to get the relevant links to it. You can check it out at http://ec2-72-44-40-221.z-2 .compute-1.amazonaws.com/ . As you use the application, you may notice that the time thrudoc takes for each query is much larger than thrudex. This is because, for the sake of simplicity, I use the disk backend for thrudoc and, as both Ross and Jake said, disk backend is not suitable for a large dataset. I'm going to load the same dataset to other backends such ...

I'd never want to be targeted by people who are well funded, highly skilled and motivated like this: Groups supporting freedom of Tibet have been attacked with highly targeted and technically advanced attacks. Quoting an Asia Free Press news report: "AFP received an email Tuesday from someone claiming to be in Denmark, who had attached a file they said were pictures of Tibetans shot by the Chinese army. When AFP tried to open the attachment, a virus warning appeared." So...what do these attacks look like in practice? Lets take an example. Here's an email that was mailed to a pro-Tibet mailing list three days ago. It looked like it was coming from the Unrepresented Nations and Peoples Organization (UNPO). However, the email headers were forged and the mail was coming from somewhere else altogether. However, this is not a normal PDF document. It contains a modified version of a PDF-Encode vulnerability to exploit Adobe Acrobat when the document is opened. The exploi...