The connection gets encrypted before it sends the host header, so there's no way for the web server to know which certificate to send. Afterward, however, it's the same HTTP connection it ever was, and virtual hosts work just fine.
I'm not sure where you got the idea that HTTPS is anything but HTTP, S, but that's just not the case.
https://www.example.com/
GET / HTTP/1.1
Host: www.example.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.1) Gecko/2008070208 Firefox/3.0.1
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive
My friend, if you can rotate your eyes 360 degrees, you deserve the patent.
Re:Huh. I'm still using STL.
on
Boost 1.36 Released
·
· Score: 2, Informative
Hey, anyone else ever notice that games are, generally speaking, the buggiest, hackiest, most insecure pieces of software on a system? Other than spyware and "enterprisey" stuff, anyway.
- smart pointers (Seriously? You can't check pointers yourself?)
No, I can't, and neither can you unless you've found some way to replace your organic brain with a metal and wire positronic supercomputing device. Once you've managed that feat, you still have to overcome the impossibility of using exceptions properly without RAII. Stick to games.
I will try it, but I'm doubtful. I mean, if that one tweak can cause up to a 100% increase in performance with no stability loss, why wouldn't it be the default? If it only works for some people, why not make it the default after some sort of test?
Anyway, thanks for pointing me at that, now I'm going to waste another week on Wine. God damn it.
EVE's performance in Linux is abysmal. Wine is fine for apps that you need to run occasionally, but if you need performance or reliability it's right out. I love it when they make Linux games, but this wasn't nearly good enough.
Require two or more keys to access the data. Restrict downloads to your corporate IP block, with individual user files accessible from anywhere but encrypted with only their keys, which are backed up and dual encrypted so the IT department can recover them if necessary, but doesn't have access to spy unless they can get an accomplice.
This stuff is solvable, and can be done transparently. I mean, I'm not putting my data on some fly-by-night's servers (or any servers that aren't running open-source software with plenty of competitors), but there's no technical reason this couldn't come out.
Risk != difficulty. Something can be incredibly risky and still easy. Just try Russian Roulette, easiest game in the world.
Sure, pulling 9 Gs is demanding, but speaking as someone who's done both, I'd much rather pull a quickly over explosive effort than a sustained effort requiring high levels of concentration and low levels of attention-grabbing change over a period of hours. That is, I'd much rather muscle a refrigerator up a flight of stairs than stay up on watch overnight.
Not saying fighter pilots don't deserve respect or anything, but if piloting a UAV means 12-14 hour shifts that's no joke.
No kidding, I've been doing this for, oh, three to four years using nothing but pam-krb5 and nss-ldap. Slashvertisement of the worst kind. The "review" is nothing of the sort, just, "hey, want AD integration? Use this!"
1500 with a sedentary lifestyle is believable. 1200-1280 while walking 5 hours and cycling 10 hours a week at 380 lbs just isn't, as you can see by the funny mod up there.
Hell, cycling period at 380 lbs is a stretch. That's faaaaaaaaaat.
I was going to suggest dressing him in unmatching polyester outfits and knocking his books out of his hands and telling him to "pick it up, faggot." Maybe find a pretty girl to laugh at this occasionally. In my experience, this is almost certain to drive someone to program.
Maybe combining the two would create the perfect uber-coder.
Re:Can Oscar's be given posthumously?
on
Batman Discussion
·
· Score: 1
No, it really was an incredible performance.
You know how sometimes, no matter how hard you try you just can't stop seeing the actor instead of their character? Well, watch this movie. No matter how hard I tried, I couldn't see Heath Ledger, I just saw the Joker. He got into that character like nothing I've ever seen, it was truly amazing.
Hey now.
You can get it for $800... maybe as low as $699 through the partner program.
With today's prices on PCs, that's $999 for a desktop.
Cheap, huh?
Agreed, this should have been there from the beginning. In fact, it's the reason I don't own a Wii. With this, maybe. Of course, they blew it the first time, so I'll have to do plenty of playtesting before I call the problem solved.
They will look at how you're performing your primary job. All that other stuff you do, they probably won't even know about, and if they do they won't care. If you're doing all that other stuff, you're not doing your primary job as well as you could, and probably not as well as it should be done even as a baseline.
When they fire people there will be lots of slack to pick up. Wait for that. Pick it up very visibly and you might get promoted.
I've been through three of these things, and the story is always the same. Those guys are the first to go.
For anyone going through a merger, or really anything that involves a new CEO or significant part of upper management (new CEO will mean lots of new upper management), this is exactly right. Don't let the awful formatting fool you, this post is a map telling you exactly how to survive.
It's especially bad if you're in a critical position. The instant you think they're going to fire you, you'd better go, because if they think you're going to go they have to get a replacement, and then what do they need you for? Of course, unless you're an idiot you know this, so as soon as you think they think you're going to go, you have to go. Somewhere in there someone's going to think you're gone. It's a lot like being in love. If you both lie to yourselves properly, you'll end up staying together, but that's a rare and wonderful thing.
Until you've personally proven yourself to a management chain that's proved itself all the way up to the CEO, be ready to be fired at any time.
That means have your resume ready, credit cards paid off, and a savings account. If you can't go six months without any income, just start looking for a job right now.
If you're one of those guys that "does everything" but really has a nebulous job that no one can define, be ready to be fired soon. I've been through three of these things and survived them all, but by God at times I wished they would just fire me and get it over with.
Running multiple simultaneous browsers is explicitly supported.
Your data is encrypted before it's ever sent to the server.
If that's not enough, you can run your own. All you need is a WebDAV server.
It's getting better. Passwords, history, cookies, forms, extensions, and tabs are all on the way. Most of that has been working at some point or another, just... poorly. But they're not quite at 0.2 yet, so I think we can cut 'em a little slack.
Slashdot Mirror
Actually, the certificate is the entire problem.
The connection gets encrypted before it sends the host header, so there's no way for the web server to know which certificate to send. Afterward, however, it's the same HTTP connection it ever was, and virtual hosts work just fine.
I'm not sure where you got the idea that HTTPS is anything but HTTP, S, but that's just not the case.
https://www.example.com/
GET / HTTP/1.1
Host: www.example.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.1) Gecko/2008070208 Firefox/3.0.1
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive
HTTP/1.x 200 OK
Date: Tue, 19 Aug 2008 17:58:20 GMT
Server: Apache
Last-Modified: Tue, 12 Aug 2008 02:40:10 GMT
Etag: "10497f-1a5-4543a30c69680"
Accept-Ranges: bytes
Content-Length: 421
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html
That's an actual dump from Live HTTP Headers (domain was changed to protect the innocent), but notice the Host: header. Still there, even in HTTPS.
Subject Alternative Name
Not entirely true. Yes, HTTP 1.1 can support many sites on one IP address, but https cannot.
That's also not entirely true: A few posts up, I schooled you on the wonders of Subject Alternative Name.
Caveat - only 1 HTTPS per IP.
That's not necessarily true: Subject Alternative Name
There's plenty of ways that turns out less than ideal, but 90% of the time if you're sharing an IP, it's not a big deal to share a cert.
My friend, if you can rotate your eyes 360 degrees, you deserve the patent.
Hey, anyone else ever notice that games are, generally speaking, the buggiest, hackiest, most insecure pieces of software on a system? Other than spyware and "enterprisey" stuff, anyway.
- smart pointers (Seriously? You can't check pointers yourself?)
No, I can't, and neither can you unless you've found some way to replace your organic brain with a metal and wire positronic supercomputing device. Once you've managed that feat, you still have to overcome the impossibility of using exceptions properly without RAII. Stick to games.
Gynoid.
I will try it, but I'm doubtful. I mean, if that one tweak can cause up to a 100% increase in performance with no stability loss, why wouldn't it be the default? If it only works for some people, why not make it the default after some sort of test?
Anyway, thanks for pointing me at that, now I'm going to waste another week on Wine. God damn it.
EVE's performance in Linux is abysmal. Wine is fine for apps that you need to run occasionally, but if you need performance or reliability it's right out. I love it when they make Linux games, but this wasn't nearly good enough.
Require two or more keys to access the data. Restrict downloads to your corporate IP block, with individual user files accessible from anywhere but encrypted with only their keys, which are backed up and dual encrypted so the IT department can recover them if necessary, but doesn't have access to spy unless they can get an accomplice.
This stuff is solvable, and can be done transparently. I mean, I'm not putting my data on some fly-by-night's servers (or any servers that aren't running open-source software with plenty of competitors), but there's no technical reason this couldn't come out.
What's preventing a service that does encryption/decryption on the client side? Other than the lack of desire from the providers I mean.
Risk != difficulty. Something can be incredibly risky and still easy. Just try Russian Roulette, easiest game in the world.
Sure, pulling 9 Gs is demanding, but speaking as someone who's done both, I'd much rather pull a quickly over explosive effort than a sustained effort requiring high levels of concentration and low levels of attention-grabbing change over a period of hours. That is, I'd much rather muscle a refrigerator up a flight of stairs than stay up on watch overnight.
Not saying fighter pilots don't deserve respect or anything, but if piloting a UAV means 12-14 hour shifts that's no joke.
No kidding, I've been doing this for, oh, three to four years using nothing but pam-krb5 and nss-ldap. Slashvertisement of the worst kind. The "review" is nothing of the sort, just, "hey, want AD integration? Use this!"
1500 with a sedentary lifestyle is believable. 1200-1280 while walking 5 hours and cycling 10 hours a week at 380 lbs just isn't, as you can see by the funny mod up there.
Hell, cycling period at 380 lbs is a stretch. That's faaaaaaaaaat.
Yeah, there's no fucking way. I mean, there's variances, but what you've described isn't even close to possible.
I was going to suggest dressing him in unmatching polyester outfits and knocking his books out of his hands and telling him to "pick it up, faggot." Maybe find a pretty girl to laugh at this occasionally. In my experience, this is almost certain to drive someone to program.
Maybe combining the two would create the perfect uber-coder.
No, it really was an incredible performance.
You know how sometimes, no matter how hard you try you just can't stop seeing the actor instead of their character? Well, watch this movie. No matter how hard I tried, I couldn't see Heath Ledger, I just saw the Joker. He got into that character like nothing I've ever seen, it was truly amazing.
Hey now. You can get it for $800 ... maybe as low as $699 through the partner program.
With today's prices on PCs, that's $999 for a desktop.
Cheap, huh?
You can never really take away access once somebody has it at that level in a large and complex system.
Yup.
Agreed, this should have been there from the beginning. In fact, it's the reason I don't own a Wii. With this, maybe. Of course, they blew it the first time, so I'll have to do plenty of playtesting before I call the problem solved.
Dumb advice.
They will look at how you're performing your primary job. All that other stuff you do, they probably won't even know about, and if they do they won't care. If you're doing all that other stuff, you're not doing your primary job as well as you could, and probably not as well as it should be done even as a baseline.
When they fire people there will be lots of slack to pick up. Wait for that. Pick it up very visibly and you might get promoted.
I've been through three of these things, and the story is always the same. Those guys are the first to go.
For anyone going through a merger, or really anything that involves a new CEO or significant part of upper management (new CEO will mean lots of new upper management), this is exactly right. Don't let the awful formatting fool you, this post is a map telling you exactly how to survive.
It's especially bad if you're in a critical position. The instant you think they're going to fire you, you'd better go, because if they think you're going to go they have to get a replacement, and then what do they need you for? Of course, unless you're an idiot you know this, so as soon as you think they think you're going to go, you have to go. Somewhere in there someone's going to think you're gone. It's a lot like being in love. If you both lie to yourselves properly, you'll end up staying together, but that's a rare and wonderful thing.
Until you've personally proven yourself to a management chain that's proved itself all the way up to the CEO, be ready to be fired at any time.
That means have your resume ready, credit cards paid off, and a savings account. If you can't go six months without any income, just start looking for a job right now.
If you're one of those guys that "does everything" but really has a nebulous job that no one can define, be ready to be fired soon. I've been through three of these things and survived them all, but by God at times I wished they would just fire me and get it over with.
You're right, Weave is pretty alpha. That said: