taint.org: Justin Mason's Weblog http://taint.org incoherent ramblings about Apache SpamAssassin, anti-spam, perl, software development, and the web Thu, 18 Mar 2010 22:05:03 +0000 http://wordpress.org/?v=2.8.5 en hourly 1 Links for 2010-03-18 http://taint.org/2010/03/18/220503a.html http://taint.org/2010/03/18/220503a.html#comments Thu, 18 Mar 2010 22:05:03 +0000 dailylinks

  • Ruby Best Practices – Full Book Now Available For Free! : one for the to-get queue
    (tags: best-practices ruby book free download toread library pdf reference coding)

  • Top Ten One-Liners from CommandLineFu Explained : worth it for #10: ‘Capture video of a linux desktop’: ‘$ ffmpeg -f x11grab -s wxga -r 25 -i :0.0 -sameq /tmp/out.mpg’
    (tags: video capture x11 ffmpeg cli bash linux)

  • Sexy Executives : ‘The finest corporate photography – from their extranets, to you’ (via Adrian Weckler)
    (tags: via:adrianweckler funny business blogs ceo photography executives zzzz)

    • ]]>     http://taint.org/2010/03/18/220503a.html/feed 1     spamass-milter != SpamAssassin http://taint.org/2010/03/18/115543a.html http://taint.org/2010/03/18/115543a.html#comments Thu, 18 Mar 2010 10:55:43 +0000 Justin http://taint.org/?p=3714 Just heading this one off before it gets too much further…

    A couple of weeks ago, a researcher found a bug in the spamass-milter project, an open-source milter to integrate SpamAssassin filtering into an MTA. Here’s the exploit details.

    This H-Online story covered it:

    Security vulnerability in SpamAssassin filter module

    The SpamAssassin Milter plug-in which plugs in to Milter and calls SpamAssassin, contains a security vulnerability which can be exploited by attackers using a crafted email to inject and execute code on a mail server. The SpamAssassin Milter plug-in is frequently used to run SpamAssassin on Postfix servers.

    (I think this is the source article on Heise.de.)

    That was more-or-less accurate — but the problem is the “chinese whispers” effect, where a news story on another site builds on misreadings of another news article. eSecurityPlanet:

    Security Flaw Found in SpamAssassin Plug-in

    The SpamAssassin Milter plug-in has been found to contain a security vulnerability. [...]

    sigh.

    To clarify: spamass-milter is not a part of SpamAssassin. it’s a third-party product which allows sendmail/postfix users to integrate spamassassin into their message flows as a milter.

    ]]>     http://taint.org/2010/03/18/115543a.html/feed 0     Links for 2010-03-16 http://taint.org/2010/03/16/220502a.html http://taint.org/2010/03/16/220502a.html#comments Tue, 16 Mar 2010 22:05:02 +0000 dailylinks

  • a sad story of connections made via second-hand small ads : ‘“It’s free to advertise,” Ned explained. “And we have a lot of things we don’t need.” So each week, they advertised for sale in Loot something from their apartment. This was their social life. Some weeks – the good weeks – they had three or four people who came to see what they were selling.’
    (tags: loot stories london small-ads for-sale second-hand irish-times irishwomans-diary rosita-boland)

    • ]]>     http://taint.org/2010/03/16/220502a.html/feed 0     Links for 2010-03-15 http://taint.org/2010/03/15/220503a.html http://taint.org/2010/03/15/220503a.html#comments Mon, 15 Mar 2010 22:05:03 +0000 dailylinks

  • RE2: a principled approach to regular expression matching : Russ Cox’ C++ lib to provide safer, guaranteed-linear-time, non-exponential regexps, at the cost of dropping support for backreferences and generalized zero-width assertions. actually looks quite useful, unlike most “I’ve fixed regexps” claims ;)
    (tags: regular-expressions regexps efficiency linear-time exponential-time backreferences google re2)

    • ]]>     http://taint.org/2010/03/15/220503a.html/feed 0     Links for 2010-03-12 http://taint.org/2010/03/12/230505a.html http://taint.org/2010/03/12/230505a.html#comments Fri, 12 Mar 2010 23:05:05 +0000 dailylinks

  • VOGON PLIERS : quick! where’s my towel?!
    (tags: via:spoon funny google-maps google pliers vogons)

    • ]]>     http://taint.org/2010/03/12/230505a.html/feed 2     Links for 2010-03-11 http://taint.org/2010/03/11/230503a.html http://taint.org/2010/03/11/230503a.html#comments Thu, 11 Mar 2010 23:05:03 +0000 dailylinks

  • NexPod, Freedom of Espresso : Nespresso-compatible capsules — fill up with your own freshly-ground coffee and use in any Nespresso machine
    (tags: nespresso coffee capsules espresso)

  • Wall anchors & plasterboard/dry lining walls : Boards thread with good advice regarding wall fixings for drylined walls
    (tags: diy boards walls howto)

    • ]]>     http://taint.org/2010/03/11/230503a.html/feed 0     Links for 2010-03-10 http://taint.org/2010/03/10/230502a.html http://taint.org/2010/03/10/230502a.html#comments Wed, 10 Mar 2010 23:05:02 +0000 dailylinks

  • openstache, closestache : new nomenclature for “{” and “}”. This I can get behind
    (tags: moustache silly openstache closestache squiggly brackets punctuation intercal bang-splat)

    • ]]>     http://taint.org/2010/03/10/230502a.html/feed 0     Links for 2010-03-08 http://taint.org/2010/03/08/230504a.html http://taint.org/2010/03/08/230504a.html#comments Mon, 08 Mar 2010 23:05:04 +0000 dailylinks

  • DIY Burglar Alarm : Damian Beresford’s experience installing his own home alarm. pretty cheap, sounds quite easy too
    (tags: alarm home-alarms house security diy install)

  • Post-mortem for February 24th, 2010 outage – Google App Engine : extremely detailed; power outage in the primary DC resulted in a degraded fleet, and on-calls didn’t have up-to-date on-call docs to respond correctly
    (tags: google gae appengine outages post-mortems multi-dc reliability distcomp fleets on-call)

  • Wrex in Effect, or, Deep Space and the Negro/Injun/Krogan Problem : fantastic article about Mass Effect’s political allegory. I’m slightly disappointed that Mass Effect 2 didn’t live up to ME1’s quality, IMO
    (tags: mass-effect games gaming politics)

    • ]]>     http://taint.org/2010/03/08/230504a.html/feed 1     Links for 2010-03-07 http://taint.org/2010/03/07/230505a.html http://taint.org/2010/03/07/230505a.html#comments Sun, 07 Mar 2010 23:05:05 +0000 dailylinks

  • Ubisoft DRM Authentication Servers Go Down : Assassin’s Creed 2 players unable to play the game for no less than 10 hours due to failure of their DRM servers. nice work Ubisoft
    (tags: drm fail defective-by-design gaming ubisoft assassins-creed)

    • ]]>     http://taint.org/2010/03/07/230505a.html/feed 0     Links for 2010-03-06 http://taint.org/2010/03/06/230506a.html http://taint.org/2010/03/06/230506a.html#comments Sat, 06 Mar 2010 23:05:06 +0000 dailylinks

  • Remote Pair Programming : using ssh, screen and emacs
    (tags: ssh screen editors emacs pair-programming xp remote collaboration)

    • ]]>     http://taint.org/2010/03/06/230506a.html/feed 0