我們都活在太舒服的年代

跟 jserv 信件往來的一小段節錄... 反思我們對於電腦環境的認識與了解




我們都活在太舒適的年代










jserv:


話說回來，二十年前當我剛開始接觸電腦時，那時沒有太多科技術語，而且人們探討的議題也相當局限，不外乎 BIOS、文書編輯器、繪圖程式 (你想過AutoCAD 跑在受限於 640 KB 的 DOS 環境是怎麼樣呢？)、幕後排版 (比 TeX 陽春許多)、程序導向的程式語言 (還記得 OOP/4GL 慰為風氣的年代嗎？還要再早一點) 等等。


而現在就非常可怕，我想要是把科技術語整理起來，或許都比當年的 BIOS 原始程式碼列表 (可在圖書館找到這樣的專書，全書都是程式碼，在 301 條款生效之前，把有版權保護的程式碼印列出來的盜版行為，在台灣不追究) 還長。









me:


這些更早的年代在我深入接觸電腦早已過去，但是閱讀前輩們的書籍時還是能從中體驗到那種氛圍，那個處處受現的年代，所有資源都要透過整個系統去思考，做最佳、最有效率的利用；反觀現在太多 "外殼" 將計算機內部的行為包裝起來，一般接觸電腦的人也不容易產生興趣、去明白 how it works ，太多商業化 (或是說物質)的包裝混淆了焦點。



但是值得反思的是，就拿機械工業技術來對比吧，工業革命時代下也是許多 "hackers" 想要改進蒸氣機、齒輪和傳動軸等動力機械的發展，而商業化和大量的規模生產後的現代，想要去了解各式機械的運作原理的人們也漸漸變少了。像是我們並不會想去深入探討一輛汽車或是機車如何工作、不必了解引擎運轉的種種原理等，大眾化後的結果是大家享受某項工具的的 "商品"，而技術本身可能除了技術人員外就愈來愈少人想要去理解這些。



回到電腦科學的角度不也如此？我認為電腦科學中很大的概念是 abstraction ，透過更上一層的抽象角度來思考整個系統的運作，而不去鑽底層技術的牛角尖，這種學習方式未嘗不好，只是當我們在上層進行抽象、全局的思考模式時，不能因而模糊了焦點。這個時代太多過多的包裝讓電腦系統變得漂漂亮亮的商品，而想去了解他背後工作原理的人很容易被這些外部的包裝所迷惑、混淆，相較之下當年一群 geek 跟 hacker 的時代要接觸底層工作知識的途徑就顯的容易許多。我想，這是現在學生不容易對於系統產生興趣的其中一個原因吧！

bye bye, mouse!

丟掉滑鼠的方法...



awesome wm - next gerneration framework window manager for X
http://awesome.naquadah.org/

vimium - the hacker's browser
http://vimium.github.com/

w3m text-based browser               # with mobile web pages
http://w3m.sourceforge.net/

turses - twitter client
http://turses.readthedocs.org/en/latest





rxvt-unicode - terminal emulator
http://software.schmorp.de/pkg/rxvt-unicode.html

ranger file manager
http://ranger.nongnu.org/

irssi - the IRC client of the future
http://www.irssi.org/




alsamixer
http://alsa.opensrc.org/Alsamixer

mplayer
http://www.mplayerhq.hu/design7/news.html




emacs - just another operating system(X
http://www.gnu.org/software/emacs/

vim - the ultimate editor
http://www.vim.org/



... lots of command line tools



Good keybord
FILCO ninja majestouch II

POPO.tw hacked

看到我朋友被一群腦袋也被 XSS 的 end user 罵的很慘...手癢寫了這個

請注意文中部份內容不盡然是事實的就是XD

====================================================================

Dear all,




我只是單純路過穿拖鞋的阿宅工程師，平常也是跟 POPO 工程師大大們一樣，在老闆壓榨下刻刻網頁、寫寫程式，騙點小錢，對於網路攻擊也不是很懂，但是這次的事件後，在下心裡有些想法學的需要跟大家分享一下 ：）



首先，我們何不反過來想想看，白帽子先生到底是為了什麼樣的目的才做這件事情的呢？ 我們從頭開始：

1. 白帽子先生透過 "囧 ID" 來提醒大家這邊的平台似乎出了點問題，也許使用者的資料有被竄改的可能，雖然是個無傷大雅的小玩笑，但相信就算是對於網路技術毫無概念，各位冰雪聰明的作家們一定不難推論，咦？好像哪裡怪怪的。而身為服務提供者的站方也應該要意識到，也許自家網站可能某些地方出了點問題，需要修正。

2. 也許過了很久一段時間，白帽子先生再次發現，原本有問題的網站仍然沒有被修好，於是，<刪除線>說破嘴不如跑斷腿，拼資安，做就對了</刪除線> ，他決定用更明顯的方式，來提醒大家，這個平台的資訊安全是有問題的。




3. 這次的行動造成了大家恐懼，引起軒然大波，並擔心自己的帳號安全是否有問題（我自己也嚇了一大跳），站方也馬上著手進行緊急維修。



好，我們總結一下，在 "囧事件" 發生之後，顯然使用者會感受到自己的權益其實是有受到威脅的，而理論上站方應該也知道大概發生了什麼事情，同樣身為阿宅工程師。明眼人看就知道，如果能做到這種直接從外部(留言板)植入惡意程式碼而竄改網頁資料是非常嚴重的漏洞！嚴重程度大概像是我們突然失去了所有遮蔽物而在大街上裸奔一般，相信所有做過網站的朋友們看到這種漏洞都會下出一身冷汗。但是大家秉持著人類的惰性，反正好像沒事就置之不理。對，就是姑息！對於這樣具有危險性甚至可以說是災難性的漏洞姑息！




簡單說明一下，就我的認知，這次的手法其實跟 POPO 網頁語法有關，認至可以說是白帽子完全是透過 POPO 的特色功能 (features) 而進行的，看看這篇吧：

http://www.popo.tw/books/27449/articles/3473770

我們可以用一些特殊的 script 語法來替 POPO 網頁引入來自外頭網站提供的額外功能，同樣的，白帽子先生也只是透過這個特色功能，在留言時為自己的留言提供額外的功能！不同的是，這些具有 POPO 特色的額外功能造成大家人心惶惶，也引起站方緊急關站維修一天。最後，如同站方公告所說的：


POPO 原創網在幾經考量與討論的狀況下，我們將修改及暫停部分語法的支援功能，透過停止支援特殊語法來防止類似的漏洞發生。

明白了這個原理，不難相信為什麼在修正掉這個漏洞後，有使用者非常生氣的表示：

祝白帽子走路踩到狗屎跌進水溝 ！！！

POPO 改掉了使用語法機制，讓我連貼圖還是放連結都放不上去，這點對我來說真的傷害很大！！！！





順帶一提，就我的了解，POPO 使用的網站技術預設行為本身就會自動過慮掉這些額外的 script （因為不清楚是否會對於網頁造成惡意影響），然而，站方為了方便和提供特色功能，將這個保障網站安全的功能關閉，如此舉動猶如將保障生命的安全網抽離，這樣不尊重使用者權益的網站，各位還敢繼續使用嗎？相信白帽子先生也是想到這點而和我一樣義憤填膺！



最後，希望各位如果有空的話能看一下另外幾位前輩先進的看法 ：）




http://littlebmix.blogspot.tw/2012/11/popodarkframemaster.html

https://disp.cc/b/611-4N8c







PS. 我跟這次的事件和白帽子先生沒有任何關係




PSS. 仔細注意可以發現，我並不稱呼這次的事件為攻擊或是入侵，因為如果有心要到真正的入侵行為的話能做的絕對不只這些！只能說 POPO 這是是非常幸運！


====================================================================


在我寫完這邊正思考要不要一時之間腦充血去回這封信時，突然看到底下有人留言，我不想回了，這種站這種使用者還是讓他去吧

這無知、自大的行為會催毀原本還有一點優點的自己
大家都微笑的往前面對自己的生命
只有無知、自大的人還在原地踏步、憤憤不平
覺得可笑~~~也為他感到難過 往前走吧！人生還有更多美好的事值得學習^_^

到底是誰無知呢？

結果發現我柯南電影看到一半 

R.I.P. dmr

dmr 大師逝世一週年

Brian Kernighan : 牛頓說他是站在巨人的肩膀上，而我們是站在 Dennis 的肩膀上

感謝您，Dennis ，帶給了我們如此美好的資訊世界。 : )

#include<stdio.h>

int main (void) {
    printf("Goodbye, world");
    return 0;
}

Dennis Ritchie,

    father of the C programming language and the Unix operating system


"Tribute Dennis Ritchie at Bell Labs" youtube 上面有一系列的紀念演講...熱淚瀅框




恐龍本作者給 dmr 的紀念


http://en.wikipedia.org/wiki/Dennis_Ritchie
http://www.cs.bell-labs.com/who/dmr/index.html



大家都說 Steve Jobs 的蘋果改變了全世界

但倘若這個世界沒有 C programming language 和 UNIX

Steve Jobs 要拿什麼來能種出又大又甜的蘋果呢?

10/5 全世界都為改變世界的 Steve Jobs R.I.P.

誰來為改變 computer science 世界的 dmr 大師哀悼呢?




                                                                             
從 brainyquote.com 摘下幾句 dmr 的名言

以此致哀


At least for the people who send me mail about a new language that they're
designing, the general advice is: do it to learn about how to write a compiler.


At the same time, much of it seems to have to do with recreating things we or
others had already done; it seems rather derivative intellectually; is there a
dearth of really new ideas?


C is peculiar in a lot of ways, but it, like many other successful things, has
a certain unity of approach that stems from development in a small group.


C was already implemented on several quite different machines and OSs, Unix was already being distributed on the PDP-11, but the portability of the whole
system was new.
                                                                         

C++ and Java, say, are presumably growing faster than plain C, but I bet C will
still be around.


For infrastructure technology, C will be hard to displace.


I can't recall any difficulty in making the C language definition completely
open - any discussion on the matter tended to mention languages whose inventors
tried to keep tight control, and consequent ill fate.


I'm just an observer of Java, and where Microsoft wants to go with C# is too
early to tell.


I'm not a person who particularly had heros when growing up.


I've done a reasonable amount of travelling, which I enjoyed, but not for too

long at a time.


Obviously, the person who had most influence on my career was Ken Thompson.


Over the past several years, I've been more in a managerial role.


The kind of programming that C provides will probably remain similar absolutely
or slowly decline in usage, but relatively, JavaScript or its variants, or XML,
will continue to become more central.


UNIX is basically a simple operating system, but you have to be a genius to
understand the simplicity.
Dennis Ritchie


When I read commentary about suggestions for where C should go, I often think
back and give thanks that it wasn't developed under the advice of a worldwide
crowd.

Alice in UNIX Land

原文出處 http://www.pma.caltech.edu/Publications/alice.in.unix.land.html

Alice in UNIX Land

Alice was reading the message on her monitor and beginning to suspect that everything was not as it should be. "Program too big to fit in memory," it read.
"Curiouser and curiouser," she said, "All I did was load fourteen TSRs before starting my word processor. With four megabytes, I wish I could use more than 640K."
"At that moment, a small white consultant ( a very white consultant) ran across the room. "Oh my coat and necktie," he said, "I'm going to be late for my appointment. And at one fifty an hour, too." Before Alice could say anything, he leaped into her monitor and disappeared behind her operating system.
Alice thought that she had never seen anyone leap into a monitor before; and certainly not go clean through the operating system. But then, she had been told that DOS was very shallow. Without hesitating a moment, she leaped in after him.
She found herself in a shiny corridor. Not knowing what else to do, she began walking. Turning a corner, she found herself facing two fat little men, each with an arm round the other's neck. One had "POS" embroidered on his collar, and the "NEG".
"I know," said Alice, "you two are a transistor."
"Yes," said Positive.
"Can you help me? asked Alice.
"No," said Negative.
"I'm looking for a white consultant." Alice pointed in the direction she had been walking. "Did he go this way?" she asked.
"No," said Negative.
She pointed the other way.
"Yes," said Positive.
Soon Alice came upon a large brown table. The Consultant was there, as was an apparently Mad Hacker, and several creatures that Alice did not recognize. In one corner sat a Dormouse fast asleep. Over the table was a large sign that read "UNIX Conference."
Everyone except the Dormouse was holding a paper cup, from which they were sampling what appeared to be custard. "Wrong flavor," they all declared as they passed the cup the cup to the creature on their right and graciously took the one being offered on their left. Alice watched them repeat this ritual three or four times before she approached and sat down.
Immediately, a large toad leaped into her lap and looked at her as if it wanted to be loved. "Grep," it exclaimed.
"Don't mind him," explained the Mad Hacker. "He's just looking for some string."
"Nroff?" asked the Frog.
The Mad Hacker handed Alice a cup of custard-like substance and a spoon. "Here," he said, "what do you think of this?"
"It looks lovely," said Alice, "very sweet." She tried a spoonful. "Yuck!" she cried. "It's awful. What is it?"
"Oh just another graphic interface for UNIX," answered the Hacker.
Alice pointed to the sleeping Dormouse. "Who's he?" she asked.
"That's OS Too," explained the Hacker. "We've pretty much given up on waking him.
Just then, a large, Blue Elephant sitting next to the Dormouse stood up. "Ladies and gentlemen," he trumpeted pompously, "as the largest creature here, I feel impelled to state that we must take an Open Look at..."
A young Job Sparrow on the other side of the table stood up angrily. The Elephant noticed and changed his speech accordingly. "...what our NextStep will be.
"Half the creatures bowed in respect while the other half snickered quietly to themselves. Just then, OS Too fell over in his sleep, crashing into the Elephant and taking him down with him. No one seemed a bit surprised.
"What we need," declared a Sun Bear as he lapped up custard with his long tongue," is a flavor that goes down like the Macintosh.
"Suddenly, the White Consultant began jumping up and down as his face got red. "No, no, no! he screamed. "No one pays one fifty an hour to Macintosh consultants!"
"Awk," said the Frog.
"Users," explained the Sun Bear, "want an easy interface that they will not have to learn."
"Users?" cried the Consultant in disbelief. "Users?! You mean secretaries, accountants, architects. Manual laborers!"
"Well," responded the Sun Bear, "we've got to do something to make them want to switch to UNIX."
"Do you think," said a Woodpecker who had been busy making a hole in the table, "that there might be a problem with the name `UNIX?' I mean, it does sort of suggest being less than a man."
"Maybe we should try another name, " suggested the Job Sparrow, "like Brut, or Rambo."
"Penix," suggested a Penguin.
"Mount," said the Frog, "spawn."
Alice slapped him. "Nice?" he asked.
"But then again," suggested the Woodpecker, "what about the shrinkwrap issue?"
Suddenly, everyone leaped up and started dashing about, waving their hands in the air and screaming. Just as suddenly, they all sat down again.
"Now that that's settled," said the Woodpecker, "let's go back to tasting flavors."
Everyone at the table sampled a new cup of custard. "Wrong flavor," they all declared as they passed the cup to the creature on their right and took the one being offered on their left.
Totally confused, Alice got up and left. After she had been walking away, she heard a familiar voice behind her.
"Rem," is said, "edlin."
Alice turned and saw the Frog. She smiled. "Those are queer sounding words," she said, "but at least I know what they mean."
"Chkdsk," said the Frog.

---

By Lincoln Spector TEXAS COMPUTER CURRENTS SEPTEMBER 1989

Larry Wall's video

來聽聽神的訪問

Netscape Mozilla Documentary 1998 - 2000 ProJect Code Rush - creative common licence

Code Rush, produced in 2000 and broadcast on PBS, is an inside look at living and working in Silicon Valley at the height of the dot-com era. The film follows a group of Netscape engineers as they pursue at that time a revolutionary venture to save their company - giving away the software recipe for Netscape's browser in exchange for integrating improvements created by outside software developers. The copyright to the film is now available under Creative common licence vers. 3 for interested viewers to download and use. In the future the original footage from which this film was made will be accessible under the same terms. 

一個紀錄 Netscape 和 IE 大戰後，把 source 釋出，成立 mozilla 專案的故事

amara 上面有英文(及其他語言)字幕

 src  (裏面可以下載)

irssi log 設定

今天結束了 OSDC 2012

除了見到很多大神之外，很想回憶 IRC 上面大家的嘴炮XD

於是就看了一些教學把 IRC 作 logging

day 2 log 不過不知道為什麼 day one 的沒有一起進來 ...

可能 irssi 的 buffer 爆了吧XD

linpc 學長提供的 full log => https://gist.github.com/2389778

======================

筆記一下作法




把 window 上的東西 log 下來

/window log on



關掉 log



/window log off




當你下這兩個 command 時，irssi status (window 1) 會告訴你

21:07 |-INFO > Irssi: Log file ~/irc.log.Window6 opened


21:13 |-INFO > Irssi: Log file ~/irc.log.Window6 closed

======================

lastlog 可以看一下你 buffer 裡有什麼東西

/lastlog -force

======================

此外， irssi  也提供 auto log 的方法

/set autolog on

/set autolog_path ~/irclogs/%Y/$tag/$0.%m-%d.log

以 #perl 頻道為例

他會在

~/irclogs/2012/freenode  

幫你產生

#perl.04-15.log

更多選項請使用 /help log 指令說明或是看看 irssi 官方文件

Dannvix: Presentation Best Practice

昨天看了 CrBoy 大大的 talk 投影片後

師大的    黑鬼    前輩 Dannvix 大大也慷慨解囊的將他之前做過的投影片拿出來與大家分享

如何準備演講與投影片





說到做簡報，便想到這幾年幫學弟妹修寒訓教學的經驗XD

想當初也是從完全不會到現在也逐漸培養出自己簡報風格 lol

Crboy: 那些老師沒教的事

小畢大大在成大 talk 的簡報釋出囉！

提到了資工系學生很多應該要學但是沒教的事

小弟獲益匪淺 <(_ _)>




沒有聽到現場超可惜的



小畢的 blog :  那些老師沒教的事

直接看簡報！