<?xml version="1.0" encoding="UTF-8"?>
<!-- generator="Tiki CMS/Groupware via FeedCreator 1.7.2.1" -->
<?xml-stylesheet href="http://teddyb.org/rlp/lib/rss/rss-style.css" type="text/css"?>
<?xml-stylesheet href="http://teddyb.org/rlp/lib/rss/rss20.xsl" type="text/xsl"?>
<rss version="2.0">
    <channel>
        <title>RLP's Professional Site Feed</title>
        <description><![CDATA[Last modifications to the Wiki.]]></description>
        <link>http://teddyb.org/rlp/tiki-wiki_rss.php?ver=2</link>
        <lastBuildDate>Thu, 09 Sep 2010 02:53:13 +0100</lastBuildDate>
        <generator>Tiki CMS/Groupware via FeedCreator 1.7.2.1</generator>
        <image>
            <url>http://teddyb.org/rlp/img/tiki/tikilogo.png</url>
            <title>RLP@TeddyBorg</title>
            <link>http://teddyb.org/rlp/tiki-index.php</link>
            <description><![CDATA[Feed provided by RLP@TeddyBorg. Click to visit.]]></description>
        </image>
        <language>en-us</language>
        <item>
            <title>Weblocks Tutorial Blog #1</title>
            <link>http://teddyb.org/rlp/tiki-index.php?page=Weblocks+Tutorial+Blog+%231</link>
            <description><![CDATA[<style TYPE="text/css"> .diffchar { color:red; } </style>- - ; Clean out the store; this isn't really necessary, but the store- ; does persist across totally separate runs, so if you muck with the- ; class definition it'll explode when it tries to load the old- ; stuff, so it's just easier.- (dolist-   (obj (find-persistent-objects *default-store* 'recipe))-   (delete-persistent-object *default-store* obj))- - ; Put some example objects in the store- (persist-objects *default-store*-                  (list-                    (make-instance 'recipe-                                   :name &quot;Chocolate Chip Cookies&quot;-                                   :description &quot;Mmmmm.&quot;)-                    (make-instance 'recipe-                                   :name &quot;Caramel&quot;-                                   :description &quot;Tasty!&quot;)))+   ; Clean out the store; this isn't really necessary, but the store+   ; does persist across totally separate runs, so if you muck with the+   ; class definition it'll explode when it tries to load the old+   ; stuff, so it's just easier.+   (dolist+    (obj (find-persistent-objects *default-store* 'recipe))+    (delete-persistent-object *default-store* obj))+ +   ; Put some example objects in the store+   (persist-objects *default-store*+                    (list+                     (make-instance 'recipe+                                    :name &quot;Chocolate Chip Cookies&quot;+                                    :description &quot;Mmmmm.&quot;)+                     (make-instance 'recipe+                                    :name &quot;Caramel&quot;+                                    :description &quot;Tasty!&quot;)))+ +   ...+ </p>+ + <p>FIXME: fill in the ... above, perhaps by making the setf a seperate function or something so it can be talked about independently]]></description>
            <pubDate>Fri, 23 Apr 2010 03:28:34 +0100</pubDate>
        </item>
        <item>
            <title>Weblocks Tutorial Blog</title>
            <link>http://teddyb.org/rlp/tiki-index.php?page=Weblocks+Tutorial+Blog</link>
            <description><![CDATA[<style TYPE="text/css"> .diffchar { color:red; } </style>+ <h2 class="showhide_heading" id="The_Setup"> The Setup</h2>+ + <p>Well, it's been <em>ages</em> since I wrote <a title="Learning About Weblocks" href="tiki-index.php?page=Learning+About+Weblocks" class="wiki ">Learning About Weblocks</a>,+ and I've forgotten everything, and it's probably half obsolete+ anyways.+ </p>+ + <p>In April 2010, I went around honestly trying to be language agnostic+ and to look for good web programming frameworks.  I was quite+ surprised to find nothing that seemed even remotely as advanced as+ <a class="wiki external" target="_blank" href="http://weblocks.viridian-project.de/" rel="external nofollow">Weblocks</a><img border="0" class="externallink" src="img/icons/external_link.gif" alt=" (external link)" />.  I had assume that,+ for example, Ruby On Rails would be close, since people seem to+ think it is quite impressive, so I was very surprised to see raw+ HTML in the first few pages of an RoR tutorial.  That just seems so+ ... <strong>primitive</strong> after using Weblocks.+ </p>+ + <p>But, on the other hand, the documentation is <em>atrocious</em>.  The+ community is decently responsive, but that can only make up for some+ much opacity in the docs, especially since my next project is+ something I'd like other people to be able to freely help with.+ </p>+ + <p>There's also the fact that Lisp is hard for a lot of people, and while I find it syntactically enjoyable, I have real trouble with using it seriously (trying to actually use and understand continuations f'reals makes my head explode, for example).+ </p>+ + + <h2 class="showhide_heading" id="The_Plan"> The Plan</h2>+ + <p>So, this is my thought: I'll write a not-too-complicated sample+ application in Weblocks, without the added overhead of my usual+ <a class="wiki external" target="_blank" href="http://en.wikipedia.org/wiki/Behavior_Driven_Development" rel="external nofollow">BDD</a><img border="0" class="externallink" src="img/icons/external_link.gif" alt=" (external link)" />+ programming style, and blog the process as a tutorial.+ </p>+ + <p>Some possible results:+ </p>+ + <ul><li> A great weblocks tutorial, good enough to point to people that I might like to help me with my project+ </li><li> I get so annoyed with not being able to understand weblocks that I toss it away and use Ruby On Rails like a sane person+ </li><li> I eventually wander off to another project with no real outcome+ </li></ul>+ + <h2 class="showhide_heading" id="The_Tutorial_Application"> The Tutorial Application</h2>+ + <p>The standard here is a block or a wiki.  And I'm fine with that, but weblocks really shines when you give it a decent amount of data to work with, and both blogs and wikis tend to just have a few entries, at least for tutorials.+ </p>+ + <p>A friend suggested a recipe manager instead, and that's what I'm going to do.  Eventually, the idea is to have wiki-style editing of recipes and ingredient information, links between ingredients and recipes, and other nifty stuff like that.+ </p>+ + <p>I'm going to start simple, though, and deliberately am <em>not</em> planning ahead at all: I want to see how weblocks deals with major design changes.  As a for example, I'm going to start by having the user explicitely link recipes to ingredients, but my intention is that eventually linking ingredients will just be a bit of wiki markup and the ingredients list will auto-generate.+ </p>+ + <h2 class="showhide_heading" id="The_Blog_Entries"> The Blog Entries</h2>+ + <ul><li> <a title="Weblocks Tutorial Blog #1" href="tiki-index.php?page=Weblocks+Tutorial+Blog+%231" class="wiki ">Weblocks Tutorial Blog #1</a>+ </li></ul>+ ]]></description>
            <pubDate>Sun, 18 Apr 2010 07:26:52 +0100</pubDate>
        </item>
        <item>
            <title>Common Lisp Stuff</title>
            <link>http://teddyb.org/rlp/tiki-index.php?page=Common+Lisp+Stuff</link>
            <description><![CDATA[<style TYPE="text/css"> .diffchar { color:red; } </style>+ </li><li> <a title="Weblocks Tutorial Blog" href="tiki-index.php?page=Weblocks+Tutorial+Blog" class="wiki ">Weblocks Tutorial Blog</a>]]></description>
            <pubDate>Sun, 18 Apr 2010 07:05:53 +0100</pubDate>
        </item>
        <item>
            <title>XPath Finder For Selenium</title>
            <link>http://teddyb.org/rlp/tiki-index.php?page=XPath+Finder+For+Selenium</link>
            <description><![CDATA[<style TYPE="text/css"> .diffchar { color:red; } </style>+         Final dual-rooted XPath for parent 0: (//span[@class='menuText'])[24]+ + <p>(Please ignore the &quot;Final dual-rooted XPath&quot; bit for now.)+ </p>+         Final dual-rooted XPath for parent 1: //a[@href='The+Logical+Language+Group' and @class='separator']/span+         Final dual-rooted XPath for parent 2: (//div[@class='separator'])[6]/a[2]/span+         Final dual-rooted XPath for parent 3: //div[@role='navigation']/div[11]/a[2]/span+         Final dual-rooted XPath for parent 4: //div[@id='lojban_org_Menu' and @style='display:block;']/div/div[11]/a[2]/span+ + <p>The astute among you will have noticed that this is exactly the value in &quot;Final dual-rooted XPath for parent 4&quot;, which is why that line is there: so you don't have to do the compositing yourself.+ </p>+ + <p>Just find the first stable parent of your element, use the &quot;Final dual-rooted XPath&quot;, and you should be good to go.+ </p>+ + <p>You might want to trim or modify it in some cases, though.  Here come some examples.+ </p>]]></description>
            <pubDate>Sun, 18 Apr 2010 03:56:16 +0100</pubDate>
        </item>
        <item>
            <title>HomePage</title>
            <link>http://teddyb.org/rlp/tiki-index.php?page=HomePage</link>
            <description><![CDATA[<style TYPE="text/css"> .diffchar { color:red; } </style>+ </li><li> <a title="XPath Finder For Selenium" href="tiki-index.php?page=XPath+Finder+For+Selenium" class="wiki ">XPath Finder For Selenium</a>]]></description>
            <pubDate>Sat, 17 Apr 2010 00:52:26 +0100</pubDate>
        </item>
        <item>
            <title>Mass Upload To Smart.FM</title>
            <link>http://teddyb.org/rlp/tiki-index.php?page=Mass+Upload+To+Smart.FM</link>
            <description><![CDATA[<style TYPE="text/css"> .diffchar { color:red; } </style>+ </p>+ + <p>Erk.  Sound uploading doesn't work yet; see <a class="wiki external" target="_blank" href="http://developer.smart.fm/forum/read/67134" rel="external nofollow">http://developer.smart.fm/forum/read/67134</a><img border="0" class="externallink" src="img/icons/external_link.gif" alt=" (external link)" />.]]></description>
            <pubDate>Tue, 23 Feb 2010 05:39:19 +0100</pubDate>
        </item>
        <item>
            <title>Problems I've Solved</title>
            <link>http://teddyb.org/rlp/tiki-index.php?page=Problems+I%27ve+Solved</link>
            <description><![CDATA[<style TYPE="text/css"> .diffchar { color:red; } </style>+ </li><li> <a title="Mass Upload To Smart.FM" href="tiki-index.php?page=Mass+Upload+To+Smart.FM" class="wiki ">Mass Upload To Smart.FM</a>- ]]></description>
            <pubDate>Tue, 23 Feb 2010 05:10:13 +0100</pubDate>
        </item>
        <item>
            <title>SSH Keys Kinda Suck</title>
            <link>http://teddyb.org/rlp/tiki-index.php?page=SSH+Keys+Kinda+Suck</link>
            <description><![CDATA[<style TYPE="text/css"> .diffchar { color:red; } </style>- <h2 class="showhide_heading" id="SSH_Keys_Are_About_Equal_To_SSH_Passwords_In_Terms_Of_Security_I<span class="diffchar">n</span>_<span class="diffchar">M</span>o<span class="diffchar">s</span>t_Ca<span class="diffchar">s</span>e<span class="diffchar">s</span>"> SSH Keys Are About Equal To SSH Passwords In Terms Of Security I<span class="diffchar">n</span> <span class="diffchar">M</span>o<span class="diffchar">s</span>t Ca<span class="diffchar">s</span>e<span class="diffchar">s</span></h2>+ <h2 class="showhide_heading" id="SSH_Keys_Are_About_Equal_To_SSH_Passwords_In_Terms_Of_Security_I<span class="diffchar">f</span>_<span class="diffchar">Y</span>o<span class="diffchar">u_re_A</span>t<span class="diffchar">_All</span>_Ca<span class="diffchar">r</span>e<span class="diffchar">ful</span>"> SSH Keys Are About Equal To SSH Passwords In Terms Of Security I<span class="diffchar">f</span> <span class="diffchar">Y</span>o<span class="diffchar">u're A</span>t<span class="diffchar"> All</span> Ca<span class="diffchar">r</span>e<span class="diffchar">ful</span></h2>- <p>Better?  That's at least not insane sounding, yeah?+ <p>Better?  That's at least not insane sounding, yeah?<span class="diffchar">  By &quot;at all<br />careful&quot; there, I mean that you're running<br /><a class="wiki external" target="_blank" href="http://denyhosts.sourceforge.net/" rel="external nofollow">denyhosts</a><img border="0" class="externallink" src="img/icons/external_link.gif" alt=" (external link)" /> or<br /><a class="wiki external" target="_blank" href="http://www.fail2ban.org/" rel="external nofollow">fail2ban</a><img border="0" class="externallink" src="img/icons/external_link.gif" alt=" (external link)" /> or checking your shadow file<br />with <a class="wiki external" target="_blank" href="http://www.openwall.com/john/" rel="external nofollow">john</a><img border="0" class="externallink" src="img/icons/external_link.gif" alt=" (external link)" /> or otherwise mitigating<br />against the constant flood of external password-based brute force<br />attempts that's part of having ssh open on the modern internet.</span>- <p><span class="diffchar">Ca</span>n <span class="diffchar">I</span> back<span class="diffchar"> </span>i<span class="diffchar">t</span> up<span class="diffchar">?</span> <span class="diffchar"> Yes, I mos</span>t c<span class="diffchar">ert</span>ai<span class="diffchar">nly can</span>.+ <p><span class="diffchar">So, o</span>n <span class="diffchar">to</span> backi<span class="diffchar">ng</span> up <span class="diffchar">tha</span>t c<span class="diffchar">l</span>ai<span class="diffchar">m</span>.- <ul><li><a href='#SSH-Based_Attack_Vectors_In_The_Real_World' class='link'> SSH-Based Attack Vectors In The Real World</a>- <ul><li><a href='#Attack_Vectors:_The_Summary' class='link'> Attack Vectors: The Summary</a>- </li><li><a href='#A_Digression:_Sticky_Notes_Are_Better_Than_Simple_Passwords' class='link'> A Digression: Sticky Notes Are Better Than Simple Passwords</a>- </li><li><a href='#Another_Digression:_Remote_Fun_With_sudo' class='link'> Another Digression: Remote Fun With sudo</a>- </li></ul></li><li><a href='#Thanks_For_Security_101_There_How_Do_SSH_Keys_Fit_In_' class='link'> Thanks For Security 101 There; How Do SSH Keys Fit In?</a>- <ul><li><a href='#But_SSH_Keys_Have_Passwords_' class='link'> But SSH Keys Have Passwords!</a>- <ul><li><a href='#Thinking_About_Security_From_A_Server-Based_Perspective' class='link'> Thinking About Security From A Server-Based Perspective</a>- </li></ul></li><li><a href='#No_Really:_SSH_Keys_Don_t_Have_Passwords_From_The_Server_s_Perspective_' class='link'> No, Really: SSH Keys Don't Have Passwords (From The Server's Perspective)</a>- </li><li><a href='#ssh-agent_And_Remote_Compromises' class='link'> ssh-agent And Remote Compromises</a>- </li></ul></li><li><a href='#In_Summary:_Do_You_Trust_Every_Machine_Every_User_Logs_In_To_Your_Machine_From_' class='link'> In Summary: Do You Trust Every Machine Every User Logs In To Your Machine From?</a>- </li><li><a href='#OK_So_What_Do_We_Do_' class='link'> OK, So What Do We Do?</a>- </li><li><a href='#Exceptions' class='link'> Exceptions</a>- <ul><li><a href='#Keyboard_Logging' class='link'> Keyboard Logging</a>- </li><li><a href='#Scripts' class='link'> Scripts</a>- </li></ul></li></ul></li><li><a href='#SSH_Keys_Don_t_Really_Improve_Security' class='link'> SSH Keys Don't Really Improve Security</a>- </li><li><a href='#SSH_Keys_Are_About_Equal_To_SSH_Passwords_In_Terms_Of_Security_In_Most_Cases' class='link'> SSH Keys Are About Equal To SSH Passwords In Terms Of Security In Most Cases</a>]]></description>
            <pubDate>Tue, 02 Feb 2010 01:55:47 +0100</pubDate>
        </item>
        <item>
            <title>Ramblings</title>
            <link>http://teddyb.org/rlp/tiki-index.php?page=Ramblings</link>
            <description><![CDATA[<style TYPE="text/css"> .diffchar { color:red; } </style>+ </li><li> <a title="SSH Keys Kinda Suck" href="tiki-index.php?page=SSH+Keys+Kinda+Suck" class="wiki ">SSH Keys Kinda Suck</a>]]></description>
            <pubDate>Mon, 01 Feb 2010 05:50:41 +0100</pubDate>
        </item>
        <item>
            <title>Amanda, I Don't Care About Tapes</title>
            <link>http://teddyb.org/rlp/tiki-index.php?page=Amanda%2C+I+Don%27t+Care+About+Tapes</link>
            <description><![CDATA[<style TYPE="text/css"> .diffchar { color:red; } </style>- <p>Pick some amount of the holding space that divides <span class="diffchar">wil</span>l into most of+ <p>Pick some amount of the holding space that divides <span class="diffchar">even</span>l<span class="diffchar">y</span> into most of]]></description>
            <pubDate>Wed, 09 Dec 2009 21:18:23 +0100</pubDate>
        </item>
    </channel>
</rss>
