Archive for March 28th, 2008

泡沫 2.0

Friday, March 28th, 2008

一則只有寥寥數字的新聞,竟引起我的注意:

李投資逾億美國社交網站

第一次從標題就可以猜中新聞的所有內容,幾乎一字不漏。現在美國哪個社交網站成為天之驕子?全行皆知現在是 Facebook,根本不用說,MySpace 已經過氣了。哪個姓李的人會做這種投資?因為以往工作經驗的關係,立即就估中,不過不是李澤楷哪。(相信看到這句後,有些人會回想起當年的日子。) 這時第一個在腦海中浮現的字,就是「科網股 2.0」。想不到魔手這麼快伸到外國的 Web 2.0 了,且看看 Facebook 何時完蛋。不過,不同於香港那種純粹炒爆谷,Facebook 的大老闆比較懂得生意經,公司也比較有實力,沒像香港般,只有個不能用的 webmail 竟也可以上市,用幾億也搞不成一個網站。

2008-03-31 更新:原來我是井底之蛙。

What happens after sending email to Bugtraq?

Friday, March 28th, 2008

As most people remotely interested in computer security should know, bugtraq is one of the ultimate mailing list one should subscribe in order to get the latest news or vulnerabilities (sans full-disclosure and a few others). But few people mentions what should be done before sending to the mailing list, and what will happen afterwards. Here is my little experience to be shared:

  1. Before sending email, make sure the email is properly signed with PGP or GPG or whatever. There is a mailing list maintainer watching over the list; email will be validated before they can be delivered to the mailing list. During the first time, the maintainer told me personally my email is delivered successfully.
  2. For me the most interesting part is the ‘aftermath’. Most likely the following things will be found in your mailbox afterwards:
    1. A few or no reply to your email (depends on people’s interest in the content, disputability, etc).
    2. Lots of “out of office” reply. So many.
    3. Several “This address does not exist” or “mailbox full” error from other mail servers around the world.
    4. And what distinguished bugtraq from most mailing lists: one or two email from Russia or East Europe or wherever, asking you to join malicious groups or exchange your ’scripts’ with $$$.