Joel on software

几篇很不错的文章 1 易用的界面,简单的一步 2 主次分明 3 每日构建(daily build)是你的朋友 4 第四战略篇:膨胀软件与80/20的谣传 5 行进中开火 6 看起来简单, 实际上复杂 7 给计算机系学生的建议 8 轻松面试找到理想员工-非官方的面试技术指南 9 The Joel Test: 软件开发成功 12 法则 10 《微独立软件供应商:从理想到现实》序 11 抽象渗漏法则 原文:Joel on software ...

December 7, 2009 · notsobad

ubuntu下去除开机的服务

ubuntu下去除开机的服务,如果安装了apache,mysql开发用,可以去掉,使用的时候再打开。 find /etc/rc*.d/ -name \*apache2 -exec rm {} \; #Or: sudo update-rc.d -f apache2 remove

December 7, 2009 · notsobad

当孩子还是孩子时

翻译 当孩子还是孩子时, 他总爱问, 为什么我只是我, 而不是你? 阳光下的生命, 难道不是梦吗? 当孩子还是孩子时, 他只看到苹果和面包, 他以为那就是他最大的快乐, 长大后, 快乐越来越少了, 只有在工作之后才有快乐的片刻; 当孩子只是孩子时, 糖果就是糖果, 就是这样, 在核桃树下, 他张开手,非常激动, 他总是等待着; 朝一棵树扔一个树枝, 就像扔火箭一样… 爱情来也 我们沉醉在爱情中 缠绵悱恻 爱,既在漆黑的夜晚 也在朗朗的白昼 此刻更如火如荼 谁主谁从? 我中有她,她中有我 世人谁敢称从未与人相爱? 我正沐浴在爱河中 人类无法长生不老 此情此景却可万古长存 那一晚我知道什么叫惊讶 她飘然而至,带我归家 我终于找到归宿 姻缘际会 际会唯此一回,此爱却天长地久 此情此景,至死方休 我将与之生死相随 我们俩的故事曲折奇异 男女相爱的力量终令我由神变人 我… 终于… 知道… 作为… 天使… 所不了解的… 事 另一个翻译版本 ...

December 6, 2009 · notsobad

Come Away O Human Child

A.I 中的一段台词的原文. Where dips the rocky highland Of Sleuth Wood in the lake, There lies a leafy island Where flapping herons wake The drowsy water-rats; There we’ve hid our faery vats, Full of berries And of the reddest stolen cherries. Come away, O human child! To the waters and the wild With a faery, hand in hand, For the world’s more full of weeping than you can understand. Where the wave of moonlight glosses The dim grey sands with light, Far off by furthest Rosses We foot it all the night, Weaving olden dances, Mingling hands and mingling glances Till the moon has taken flight; To and fro we leap And chase the frothy bubbles, While the world is full of troubles And is anxious in its sleep. Come away, O human child! To the waters and the wild With a faery, hand in hand, For the world’s more full of weeping than you can understand. Where the wandering water gushes From the hills above Glen-Car, In pools among the rushes That scarce could bathe a star, We seek for slumbering trout And whispering in their ears Give them unquiet dreams; Leaning softly out From ferns that drop their tears Over the young streams Come away, O human child! To the waters and the wild With a faery, hand in hand, For the world’s more full of weeping than you can understand. Away with us he’s going, The solemn eyed: He’ll hear no more the lowing Of the calves on the warm hillside Or the kettle on the hob Sing peace into his breast, Or see the brown mice bob Round and round the oatmeal-chest. For he comes, the human child! To the waters and the wild With a faery, hand in hand, From a world more full of weeping than he can understand. ...

December 6, 2009 · notsobad

神探阿蒙(Monk)结束了

《神探阿蒙》(Monk)结束了,总共8季,最后一集是s8e16 结局算是圆满了,最后介绍了每个人的归宿,monk查到了朱迪的死因,两个活宝警察也有了爱人、助手也找到了归宿,monk精神状态也变好了,看来是真的要说再见了。 上次也追着看几年的美剧结束,那还是《越狱》,当然越狱没什么遗憾的,早就盼着它结束,monk不同,这种一集一个故事的剧集,不会因为圆不上以前挖的坑而让人火大,错过一两集没看,也没啥问题,很适合长期的播下去 ...

December 6, 2009 · notsobad

一个web扫描器(nikto)

在100个最佳网络安全工具里找了下,排12的是个Nikto,也是[10个最佳web扫描器](http://sectools.org/web- scanners.html)里排第一个的,装了试一下,挺不错 wang@wang-laptop:~$ sudo apt install nokto wang@wang-laptop:~$ nikto -Help Options: -config+ use this config file -Cgidirs+ scan these CGI dirs: 'none', 'all', or values like "/cgi/ /cgi-a/" -Display+ turn on/off display outputs: 1 Show redirects 2 Show cookies received 3 Show all 200/OK responses 4 Show URLs which require authentication D Debug Output V Verbose Output -dbcheck check database and other key files for syntax errors (cannot be abbreviated) -evasion+ ids evasion technique: 1 Random URI encoding (non-UTF8) 2 Directory self-reference (/./) 3 Premature URL ending 4 Prepend long random string 5 Fake parameter 6 TAB as request spacer 7 Change the case of the URL 8 Use Windows directory separator (\) -findonly find http(s) ports only, don't perform a full scan -Format+ save file (-o) format: htm HTML Format csv Comma-separated-value txt Plain text (default if not specified) xml XML Format -host+ target host -Help Extended help information -id+ host authentication to use, format is userid:password -mutate+ Guess additional file names: 1 Test all files with all root directories 2 Guess for password file names 3 Enumerate user names via Apache (/~user type requests) 4 Enumerate user names via cgiwrap (/cgi-bin/cgiwrap/~user type requests) -nolookup skip name lookup -output+ write output to this file -port+ port to use (default 80) -Pause+ pause between tests (seconds) -root+ prepend root value to all requests, format is /directory -ssl force ssl mode on port -Single Single request mode -timeout+ timeout (default 2 seconds) -Tuning+ scan tuning: 0 File Upload 1 Interesting File / Seen in logs 2 Misconfiguration / Default File 3 Information Disclosure 4 Injection (XSS/Script/HTML) 5 Remote File Retrieval - Inside Web Root 6 Denial of Service 7 Remote File Retrieval - Server Wide 8 Command Execution / Remote Shell 9 SQL Injection a Authentication Bypass b Software Identification c Remote Source Inclusion x Reverse Tuning Options (i.e., include all except specified) -useproxy use the proxy defined in config.txt -update update databases and plugins from cirt.net (cannot be abbreviated) -Version print plugin and database versions -vhost+ virtual host (for Host header) + requires a value 试着扫了下自己的笔记本,发现还是扫到很有意思的东西 环境: ubuntu9.10 + apache2(默认配置) 居然有这么个地址 http://localhost/server-status 记录的是apache运行状态。 ...

December 5, 2009 · notsobad

shell中的引号和反引号

shell参数中单引号如何表示呢? 存在一个程序notsobad,它接受一个参数中含有单引号,怎么写呢? # 双引号引起来 echo "'" ./notsobad -a xxx -b "'" # Or,注意参数中的单引号写法,实际上是 '\'' ./notsobad -a xxx -b ''\''' echo ''\''' 在shell参数中包含`(反引号)字符,如何做呢? # Wrong! # 反引号会先被shell截获解释,替换为反引号内部命令的执行结果 # 实际上产给notsobad的是id这个命令的输出,而不是命令本身 ./notsobad -b "`id`" # Right! echo '`id`' ./notsobad -b '`id`'

December 4, 2009 · notsobad

装系统用gentoo

gentoo还真是费电啊,:-) 转自水木 发信人: arsenal (为人民服务), 信区: MilitaryJoke 标 题: Re: 当大国是要负责任的 发信站: 水木社区 (Thu Dec 3 23:56:09 2009), 站内 那帮无耻之徒洗衣服还用热水,干衣服还用烘干机,装系统用gentoo,下了班还不关灯,纯 浪费 【 在 lin (没有) 的大作中提到: 】 : 标 题: Re: 当大国是要负责任的 : 发信站: 水木社区 (Thu Dec 3 23:54:25 2009), 站内 : : 坏什么呀,你看那些发达国家都那么高的排放量,富人烧上炕了, : 咱穷人就只能硬挺着啊? : : 【 在 amdopteron (皓龙) 的大作中提到: 】 : : TG太坏了…… : : : -- : : ※ 来源:·水木社区 newsmth.net·[FROM: 114.245.140.*] -- ※ 来源:·水木社区 newsmth.net·[FROM: 221.217.204.*]

December 3, 2009 · notsobad

shell中的heredoc使用

shell中的heredoc很有用,对于临时的创建一个较长的字符串,比如脚本中要创建一个脚本等,就可以用这个 参考 Here Documents heredoc中的变量,shell命令都会被执行 下面的脚本创建了一串ftp命令,供ftp命令使用 Filename=`basename $1` # Strips pathname out of file name. Server="ibiblio.org" Directory="/incoming/Linux" # These need not be hard-coded into script, #+ but may instead be changed to command-line argument. Password="your.e-mail.address" # Change above to suit. ftp -n $Server << End-Of-Session # -n option disables auto-logon user anonymous "$Password" binary bell cd $Directory put "$Filename.lsm" put "$Filename.tar.gz" bye End-Of-Session 注意,如果想输出原始字符,即不希望‘$’符号被替换为变量,需要把引导字符用引号引起来,或者添加转义符。 ...

December 3, 2009 · notsobad

使用vi来编辑python代码

使用vi来编辑python代码,参考这如下文章 [Python and vim: Make your own IDE](http://dancingpenguinsoflight.com/2009/02/python-and-vim-make-your-own- ide/) Indenting Python with VIM 主要的: 在.vimrc中 filetype plugin indent on AutoCmd FileType python set complete+=k~/.vim/syntax/python.vim isk+=.,( AutoCmd BufNewFile,BufRead *.py \ setlocal tabstop=4 \ setlocal softtabstop=4 \ setlocal shiftwidth=4 \ setlocal textwidth=80 \ setlocal smarttab \ setlocal expandtab \ setlocal smartindent \ setlocal indentkeys=!^F,o,O,<:>,0),0],0},=elif,=except,0#

December 2, 2009 · notsobad