« December 2008 | Main | February 2009 »

2 posts from January 2009

January 31, 2009

The worst idea ever: Let's break SSL for mobile users

This is definitely the scariest and stupidest idea I have heard in a very long time: some people on the W3C Mobile Web Best Practices Working Group think that is acceptable to break SSL—the security backbone of the Internet—in order to help transcoding proxies reformat content for mobile users:

This just demonstrates one of the reasons we suck at security: small groups of people who do not really know what they are doing wield significant power and affect millions. It's like year 2000 all over again. We are lucky when in some cases (such as in this one) there are informed people willing to stand for what's right.

January 14, 2009

On technical writers and their wives

Tonight, just before going to bed, I decided to browse through the technical book that arrived in the post today. As I was turning the pages, starting with the cover and progressing toward the table of contents, the dedication caught my eye:

For Lisa

There's nothing wrong with dedicating a book to the person you love*—I dedicated my book to Jelena, the love of my life—but at that point I realised this is something I've seen dozens of times before. It's a recurring pattern: a workaholic writer dedicates a book to his significant other. Sounds idyllic, until you realise that our significant others don't really care (on average; some will, but that's rare**). A dedication may be worth something if it's at the beginning of a literary masterpiece. On a technical book—let's be honest, not so much. I would dare say that the ones we love would rather spend an extra hour or two with us every day, rather than live their lives without us while we're sitting by our computers trying to meet the deadlines that we keep breaking.

(*) Please bear in mind that I don't know anything about the relationship between Lisa and the author. My blog post is not about the reality but, rather, about my perception of the reality.

(**) Ironically, it seems that Lisa actually read the manuscript of this particular book (as stated in  Acknowledgements), which means that she might have actually cared.

MY WORK

ModSecurity Handbook is the guide to the world's most popular web application firewall.
SSL Labs offers a comprehensive SSL security assessment consisting of 250+ checks. To start, enter your domain name below (it's free):

ABOUT ME

Ivan Ristić is an open source advocate, entrepreneur, writer, programmer and web security specialist. He is the principal author of ModSecurity, the open source web application firewall, and the author of Apache Security, a concise yet comprehensive web security guide for the Apache web server.   [LinkedIn Profile]

My Photo

TWITTER

@ivanristic

    FEEDS