2015/11/25

Stupid remarks of 盧寵茂

I am  very pleased to spread the leaked out recording of the remarks by HKU Council Member盧寵茂 at the Council Meeting on 29 September.  Let all HK people judge how stupid 盧寵茂 is. Here it is.

"盧寵茂:
And in the personal point of view that he is a good guy as many of the members have said. He is a good man. He has been working for the University for so long. This is the first impression for me that I should support him. But after looking at this and especially after the incident in July, I have some reservation. It is about his qualification. Professor CHEN has a very detailed analysis on the publication. You can look at it, for the last 15 years, he has produced less than 5 items output including factor and article, less than 5 a year and in some years for example, in 2008, he has produced only 1 item, 2011, 1 item only.
(正如許多校委所言,我個人認為他是一個好人。他在港大工作多年。我第一個念頭是,我應該支持他。然而當我仔細考量,尤其是七月事件(學生衝擊校委會議)發生後,我有些保留。關於其資格,陳(坤耀)教授就其學術文章作過詳細分析。過去十五年,他出產少於五篇學術文獻,每年少於五篇,他分別於2008年和2011年各出產一篇文章而已。)

I know the number, quantity, is not the absolute measure, you have to see the quality as well. If I have an assistant professor with this kind of output, I will be very concerned, I would really say, hey, how can you reach the bar of the notion within the university, very strict criteria 4 + 4 for practical, 3 + 3 for non-practical, for promotion either up or out from an assistant professor to an associate professor. If my assistant professor give me a CV of 1 output per year, I would say, you are in trouble. In 6 years or in 8 years time, how many publications did you have in your CV? You can’t reach that bar.
(我明白產量並非絕對標準,也視乎質素。若然我屬下的助理教授只有這樣的產量,我會非常憂慮。我會說,你怎能符合港大"四加四"和"三加三"晉升為副教授的嚴謹要求? 若果我的助理教授的履歷只有每年一篇文獻,我會說,你惹麻煩了,在六至八年內你會有多少篇文獻? 你並不達標。)

But on that event, on that night we have been in the storm of Council meeting and subsequently my injury. And after the event, I didn't really see him showing any sympathy for the Council members, and in particular, I use myself as an example. I am a staff elected by all the other staff to take part. And i sustained and injured. From all the opinion that he has expressed, actually he's still putting the blame on the Council, he has never...i'm not saying I need his sympathy. But as a staff, i really feel if you are PVC (staffing) and if a staff member had an injury during an event like this, should you just keep on saying it's the Council's fault, that means it's my fault as well? So in a way he's telling the public, he's speaking out in public, including his 香港家書, that the fault remains in the Council...the suffering i encountered. That is my reserve.
(然而,在校委會會議掀起風暴那一夜我受了傷,此後我看不到陳文敏對任何校委致以慰問。以我本人為例,我是員工選出的校委,我緊守崗位並受傷。但他對外發表意見,只是怪責校委。我不是說我需要他慰問,但作為掌管學術及人事的副校,若有同事在這種場合受傷,你應否不斷強調這是校委會的錯,即是我也錯了?他在香港家書等公開言論均指錯在校委會...我所受的苦。這是我有保留的原因。)

But when I fell, all these people...I am not saying only the students, I know there are people outside the University, there is no doubt that the student lead the crowd in when I have this meeting. I was accused in so many media, so many articles, pictures to say that I am an actor, 插水, alright. I really feel very bad, I didn’t complain eventually and even when I was in the hospital and I talked to the media with my occupation in charge that I will kindly accept, "我唔追究D 學生". That’s my true belief because I feel very sad if those people in the room and outside were our students, I really feel ashamed. We have not done our duty well.
(然而當我跌倒,這些人...不只是學生,還有校外人士,牽頭闖進來的無疑是學生。在很多傳媒文章和相片,我被指控是演員、「插水」。我很難過,卻依然沒投訴,在醫院對傳媒也說我會接受:「我唔追究啲學生」。這是我的信念,我難過的是,若果會議聽內外的是我們的學生,我會覺得羞愧,因我們沒盡責(教好學生)。)

And in contrast, he put the blame into the Council members and including me as a staff member. I am really terrified that someone with this kind of... i don't want to extrapolate but I felt if someone ... i would say he's putting his political inclination into the university. Because of the difference in political opinions he may think that I am here to represent CY. I can tell you I am not a 梁粉. I came in with support of the staff members. I've never talked to CY. CY has never talked to me about this. but it seems that everybody there including Johannes Chan has labelled me as a 梁粉...and whatever I did, whatever I suffered, I deserved it.
(反之,他責怪校委,包括我作為職員。我感到震驚...我不想揣測但我感到...我會說他把政治取向帶進港大...由於政見不同,他可能認為我在此是代表梁振英,我可以對你說,我不是"梁粉"。我是基於同事的支持加入校委。我沒與梁振英說過話,梁振英也從對我談及此事。似乎所有人包括陳文敏已經標籤我做"梁粉"...無論我做過甚麼,受了甚麼苦,都是我"抵死"。)

馬斐森:
There were 4 academic members on the Search Committee. I was qualified to make academic judgments. I have a lot of experience of making these judgments. There were 3 other academic members of the committee. So there were 4 ppl, 3 of them are not here to represent their views, so my job as a chairman is to represent their views. Academic credentials were considered, and were considered suitable. Council members may disagree. But I am not going to go back from the judgement made by the Search Committee.
(物色委員會有四名學者(包括他本人)。我有資格作學術判斷,而且經驗豐富。另外三人現不在席,我作為委員會主席有責任代為表達。我們曾經考慮申請人的學術資歷,認為合適。可能有校委不同意,但我不會重新審視物色委員會的決定。)

As to a comment to the number of papers he published, I think it’s utterly irrelevant. There’s no job description that says you could have published certain number of papers or you’re not qualified for this role. The absolute number of papers published are not...quality and you can’t transfer from medicine into law because the publication requirements are different. So frankly the number of paper he published in the last 15 years I think is irrelevant.
(至於對文獻產量的意見,我認為完全不相關。招聘條件並無指明你必須出產一定數量的文章否則就不合資格。文獻數量並不...質素。你也不能把醫學的學術要求轉移至法律,因兩者出產文獻的要求不同。老實說,我認為過去十五年他的文獻數量並不相關。)

So my comment on that is I think you’ve taken things very personally, and I think we should keep things to factual discussion, and the purpose of the candidate. There’s no requirement in the job description for the candidate to express sympathy otherwise for anybody who is injured. I think you are putting post-event facts into this particular context, so the … I can’t speak for the Search Committee, Search Committee hasn’t met since 27 May, I can only speak as a Council Member, the events that happened since the Search Committee’s paper was written on 27 May, there have been many things written and said, a lot of opinions, I prefer to stick to the facts. And the facts that the Committee has to consider were the qualification and suitability for the post. I’ve already said at the start of the meeting that it’s my view that whilst none of the outcomes are attractive, to my mind, there will be less damage done for the University by the acceptance of the nomination and become a......projection.
(我認為你(盧寵茂)摻雜很多個人情感。我們的討論應基於事實和招聘目的。招聘條件並無要求申請人對任何傷者致以慰問。你把做完決定之後發生的事都考慮在內。我不能代表物色委員會發言,他們在五月廿七日之後未曾碰面。我只能以校委身份發言,那天之後發生了很多事情,傳媒寫了很多東西,有很多意見,我寧可聚焦在事實之上。事實是物色委員會已考慮此職位的資格和合適與否。我在會議開首已指出,即使所有結果(接受,否決或押後任命)都不太吸引,對我來說,接受物色委員會的推薦將對港大做成較少傷害。)

2015/11/23

為落選人制作紀念特輯

根據民建聯內部規則,輸了區議會選舉的黨員不能被提名參加立法會選舉,現懇請各大電子/網上 傳媒盡快為該名落選人制作紀念特輯,內容一定要包括立法會內出現的四字成語及 Tree Gun Style English

2015/11/21

time belongs to the Earth, not technology !

Regarding the retention of leap second in UTC, I have no hope some concrete plans will emerge in 2023 leading to a future-proof reference time-scale. Assuming scientists and engineers are smart enough to accomplish their task, there is a need to allow 10 years for the transition. That is to say, leap second will continue to stay with us for at least 18 more years.

My view is that it is a waste of time to continue studies on this issue.  From 2000 to 2023, 23 years would have been used up.   My advice to scientists and engineers is given below:

"Time belongs to the Earth, not technology (時間是屬於地球的,而不是屬於科技的)"

2015/11/19

leap second till 2023

Great news. ITU has just announced that the leap second will continue to be used until 2023 pending for a final decision. Between 2015 and 2023, scientists and engineers should fully study all possible technical options leading to a future-proof reference time-scale.

2015/11/10

Buying new domain names

God, please help me to choose, buy which one, two, or all the three !


2015/11/08

More recording leaked out.

Yes, more recording leaks out.  This time,  it is placed on a Taiwan  discussion group.   Nothing HK court can do.  Applaud !! 

"台灣一網上討論區晚上有人上載一段懷疑是港大校委王䓪鳴否決陳文敏任副校的會議發言錄音和文字紀錄,全文轉載如下(中文譯本取自來源網站):

Thank you Chairman. I just want to make a few comments, but the comments...when I make this comment I understand, I totally understand my duty as a member of the Council, particularly in terms of the appointment of senior executive in this Council. I understand it well and I understand the duty. And to me, there is no emotion in that. What I said later is something that I really give a lot of thought into it. I know this candidate very well, and in fact we were in the same class when we were in LSE, so I know the candidate well. It’s not that I don’t understand him, I don’t know him, and I read the paper and every piece of paper on my table, and I exercise my independent thinking without an
ybody intervening. With the biggest interest of the University, wide and long of the University, and before I make a comment, so I know what I am doing.

謝謝主席。我只要說一點意見。當我發表這些意見時,我完全了解我身為校務委員會一員的責任,特別是委員會委任資深行政人員上,我深切了解,也明白責任重大。對我來說,這沒有摻雜感情因素,我等等要說的是經深思熟慮。我跟這位候選人很熟,事實上我們在倫敦政經學院是同學,所以我跟他很熟。並不是我不了解他、我不認識他,而且我讀了我桌上每一份文件,在發言前,我經過獨立思考、未受外力影響,並考量大學最大利益,更寬廣和長遠的未來,所以,我知道我在做什麼。

In the last two years or so, this University just like Hong Kong, has been undergoing quite a bumpy journey, in a sense there’s so many things happening in Hong Kong. Started from the University, on the 818 visit of Li Keqiang and also the Occupy Central thing, the donation issue, and recently about this appointment of this Vice President and PVC. In fact the last two years and a half is pretty sickening in the sense, you can see that so many discussion, division, particularly and entirely divided you know, the community. And I can understand, I mean, University as part of the wider Hong Kong community that reflect whatever happened in Hong Kong in the University, I can understand, but what bother me a lot is about this division, now the problem of the division is that we continue to divide the University. I don’t talk about Hong Kong, just about this University. It really, I think to me, is becoming a distraction of the University and it prevents the University actually to look longer term. In the last two years, I’ve been sitting in this Council every month, even more work than my own board meeting, but we never have a chance to talk about what mixed in this University. If we ever even think of any opportunities that we should grab and let this University shine and glow, I’ve been patiently waiting, you know, the new VC coming to this University with a hope that we have a smooth strategy of development, no time, no discussions, everything has been pre-occupied and dominated by this sided political issue, the issues that are so d
ivided in the community. And I am sick of it.

這所大學在過去2年,就像香港一樣,經歷一段顛簸的旅程,香港發生了太多事。從818李克強來學校訪問開始,其後的佔領中環、捐款議題,和最近這個副校長的委任。事實上這2年半讓人滿難過的,你可以看到許多討論、分裂、讓社會完全分裂。我能了解,我的意思是,作為香港社會一部份,香港發生什麼事都會反映在大學裡,我了解。但非常困擾我的是這種分裂,分裂的問題也持續造成大學分裂,我講的不是香港社會,是這間大學。對我而言,它真的分散了大學注意力,也讓大學無法把眼光放遠。在最近兩年,我每個月來開這委員會的會議,甚至比我自己的董事會花更多精力,但我們從來沒有機會好好談談,這間大學裡摻雜了什麼。如果我們曾思考,是否有什麼應該好好把握的機會,讓這間大學發光發亮,我一直耐心等待,希望新副校長到任後,能讓我們有一套平穩發展的策略。沒有時間、沒有討論,每件事都被枝微末節的政治議題佔據、主導,每個議題都太分裂社會,而我實在受夠了。

And then when I think of this appointment, I give a pause into looking into whether this candidate would further divide the University, or unite the University. I asked this question because I want to see this unity, so that we’re able to see this University continue to glow. Because of the potential controversy of this candidate, I don’t say whether, you know, the candidate is wrong or why we can bring this up, but there is a potential controversy, it exists whether you, whatever position you… whether you are on yellow camp or the blue
camp, I don’t care, but the potential controversy exists. And because of a strong political position of this candidate, and I do not have enough confidence that this candidate would probably help to unite, but on the contrary, he probably would further divide. Now this is a senior executive position that’s on academic staffing and resources, I’ve been a chair of HRPC for several years, and I think that this is important that we look for person… I think in a lot of cases during my career to appoint a lot of senior executives, persons can be qualified but may not be suitable. I know this candidate well, he’s a good gentleman, but sometimes for a lot of other reasons, he may not be totally s
uitable. And I have to say, because of the controversy that exists, because of his strong political position, because of the potential risk of further divide the community, I have to say I do not have enough confidence to accept this recommendation. And I want the candidate, at least, the future PVC or the Vice President, must be able to unite and must not politicize the working place that he is working in. So on that basis, Chairman, I would suggest that we go for another search and I cannot accept the recommendation as proposed. Thank you.

而當我思考這個委任,我停下來審視這個候選人會不會進一步分裂這所大學,或讓它團結。我這樣問因為我想看到團結,我們才能看到大學持續發光。由於這候選人潛在的爭議,我不是說他是錯的人或者我們為什麼提出這樣的議題,因為存在潛在爭議,無論你在什麼職位,無論你屬於黃絲帶或藍絲帶陣營,我不管,但潛在爭議就是存在。因為候選人強烈的政治立場,我沒有信心他能夠有助團結,相反地,他可能帶來進一步分裂。現在這是一個掌管人力資源的資深行政職務。我任職「人力資源政策委員會」主席數年,在職業生涯中多次遇上委任資深行政職務的案件,我認為尋覓人選時很重要的是,有的人可能合格,但不一定合適。我認識這名候選人,他是名君子,但有時因為各種原因,他可能不完全合
適。我必須說,因為爭議的存在、因為他強烈的政治立場、因為存有進一步分裂社會的潛在危險,我必須說我沒有足夠的信心接受這個人選。我希望的候選人,至少未來的副校長,必須要能促成團結,必須不讓他的工作場域政治化。所以主席,基於這些理由,我建議我們另覓人選,我不能接受這個推薦人選,謝謝。"

2015/11/03

Another piece of fucking remark at the HKU Council Meeting on 29 Sept

Another piece of fucking remark at the HKU Council Meeting on 29 Sept:

"Chairman, I have been a corporate CEO and employer for over 30 years, and I have interviewed and hired hundreds of people in the past. But never in my life have I encountered a candidate who will overtly and recklessly discuss his or her potential employment at any stage of the recruitment process. This in fact is already in breach of confidentiality.
It is most unfortunate that the candidate recommended by the University Search Committee has never been tabled at this Council for deliberation. In our view we are actually doing it according to procedures.

I am in support of press freedom and also in sympathy with the candidate who defended himself against the criticism of some media. But apparently he has gone too far, to create controversy and use external and internal forces, directly or indirectly to lobby, pre-claim, coerce, intimidate, fabricate and sometimes even threaten Council members to approve his appointment. I myself was a victim on February 12th this year when I was accused by a local newspaper for stalling his appointment at this Council. I then have to issue a public statement to clarify that the Council has not even started to discuss this appointment. This is just one incidence among many, and to me, all these tactics in fact are interference in the University affairs at the highest level.

As members of the Council, and also trustee of the University, we are professionals with our independent judgment and ethics. We do our assessment based on the…… interests of HKU and the community at large. Given that position of the pro-vice-chancellor is responsible for academic recruitment and resources, the pro-vice-chancellor should be a role model for all, staff and students included. So I have strong reservation about the recommended candidate's integrity. And I would not accept the recommendation.


Thank you."

2015/10/28

This was the remark by Arthur Li.

李國璋的說話 : 

So from that point of view, I have no worry in that he is dean, my main worry on academic side was that he has no higher degree equal to a PhD or an MD or LLD, now you may say in law is not necessary. Well, if it is not necessary, why is such a degree there in the first place? And when you look at the other referee professors, they all got LLDs. Therefore, either he hasn’t tried or he is too busy or he doesn’t think it is important, but if that’s the case he will be devaluated maybe of the lecturers, professors who have got PhDs, who have gone through the rigours of academic pursues. Now, can you, can someone be in charge of promotion of another person who actually has not gone through the same rigours as that other person and give an honest independent objective view? And I would put my question here is that, I do have my doubt about this.


However, I do have some worries that I feel I should articulate, the Dean, the vice chancellor, in those days, were elected by the Faculty. So all you have to do is to be a nice guy to everyone, and I think Johannes Chan is a very nice guy. And at this point, I’d like to declare my interest; there was one of the referees which is my cousin. And my cousin has already said he’s a very very nice guy.


The second thing I’d like to bring up is that, we’ve been said that we’ve been under a lot of pressure form the liaison office, from the Chief Executive, and I’d like to say very categorically I have not been under any pressure. It has been said that the left-wing press, 文匯報、大公報 have been running hundreds of articles against this candidate. And quite honestly, I don’t read 文匯報 or 大公報, and I think most people in Hong Kong do not read 文匯報 or 大公報. Relatively most people take a negative view, the more they say about something, the more we feel anti whatever they say. However, on the other side, it’s that the political parties are very well organized, very well informed, very well…how would I say… very keen to push this candidate by, as Leonie said, by intimidation, by failing our council meeting, by having concern groups and all these threatening JRs and everything. But I just wonder why is these political parties so keen on this candidate, is it, you know, in the Mainland university, they have 黨委書記. Do they want a 黨委書記 at Hong Kong U? Is he a 黨委書記, is he put in here as a 黨委書記? So I don’t know, forgetting about the politics, all these things made me feel very uncomfortable and very uneasy with this candidate.

2015/08/20

化學死魚

不是講笑:强國奸商一定會將天津數以噸計化學死魚制成鹹魚,以供本港及內地,試圖謀利。為自己和家人着想,未來十年都不要再食鹹魚。

2015/08/17

電車作用

港島已有地鐵,電車作用不大。此歪理等同你老豆老母養大咗你,現在作用不大,賜佢哋安樂死吧!

2015/06/24

閏秒











6月30日又再來閏秒,祝各位 IT 佬好運。

2015/05/21

本來無一物,何處惹塵埃。

本來無一物,何處惹塵埃。The wise man knows he knows nothing, the foolish man thinks he knows it all. Since all is void, where can the dust alight.

法治,公平公開公正的司法制度,大陸永遠不會擁有。

2015/05/09

Decommission DLV


ISC, please don't decommission DNSSEC Look-aside Validation (DLV). This picture tells you our pains. On behalf of .hk domain owners, I beg you once again, please.

 

2015/05/03

綠能網路 ???

點解叫做 "綠能通訊網路" 和 "綠能無線網路"? 點解唔可叫做 "環保通訊網路" 和 "綠色無線網路" ?

2015/03/18

Testing the responder (Turing test??)

I can confirm the HKTV Mall CS offering help by online chat is not a machine.





















Wait. I missed one step. I, as the interrogator, should have asked "Who is the US President?" in order test the human nature of the responder.

2015/03/17

支持齊昕,脫離魔爪

以下幅圖是見證。罪不及女兒,禍不及下代,冤有頭,債有主,ㄧ人做事ㄧ人當。支持齊昕,脫離魔爪,過有尊嚴嘅生活。





2015/02/15

Dumping SMTP over TLS traffic

This is the analysis of TLS traffic over SMTP by way of ssldump.  The server requested client cert and the client cert (gmail) was verified ok.  However, I could not identify which part dealt with SSL client certificate verification.

# ssldump -i eth0 port 25
New TCP connection #1: mail-ie0-f170.google.com(37742) <-> transfer(25)
1 1  1.4201 (1.4201)  C>S  Handshake
      ClientHello
        Version 3.3
        cipher suites
        TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
        TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
        TLS_ECDHE_ECDSA_WITH_RC4_128_SHA
        TLS_ECDHE_RSA_WITH_RC4_128_SHA
        TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA
        TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
        TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
        TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
        TLS_RSA_WITH_AES_128_GCM_SHA256
        TLS_RSA_WITH_RC4_128_SHA
        TLS_RSA_WITH_RC4_128_MD5
        TLS_RSA_WITH_AES_128_CBC_SHA
        TLS_RSA_WITH_3DES_EDE_CBC_SHA
        TLS_RSA_WITH_AES_256_CBC_SHA
        TLS_DHE_RSA_WITH_AES_128_CBC_SHA
        TLS_DHE_DSS_WITH_AES_128_CBC_SHA
        TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA
        TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA
        TLS_DHE_RSA_WITH_AES_256_CBC_SHA
        TLS_DHE_DSS_WITH_AES_256_CBC_SHA
        TLS_EMPTY_RENEGOTIATION_INFO_SCSV
        compression methods
                  NULL
1 2  1.4221 (0.0020)  S>C  Handshake
      ServerHello
        Version 3.3
        session_id[0]=

        cipherSuite         TLS_RSA_WITH_AES_128_GCM_SHA256
        compressionMethod                   NULL
1 3  1.4221 (0.0000)  S>C  Handshake
      Certificate
Error: short handshake length: expected 17172 got 16380
Error: short handshake length: expected 4608083 got 792
1 4  1.6004 (0.1782)  S>C  Handshake
1 5  1.6004 (0.0000)  S>C  Handshake
1 6  1.7820 (0.1816)  C>S  Handshake
      Certificate
1 7  1.7820 (0.0000)  C>S  Handshake
      ClientKeyExchange
1 8  1.7820 (0.0000)  C>S  Handshake
      CertificateVerify
Not enough data. Found 258 bytes (expecting 16384)
1 9  1.7820 (0.0000)  C>S  ChangeCipherSpec
1 10 1.7820 (0.0000)  C>S  Handshake
1 11 1.7916 (0.0096)  S>C  Handshake
1 12 1.7916 (0.0000)  S>C  ChangeCipherSpec
1 13 1.7916 (0.0000)  S>C  Handshake
1 14 1.9699 (0.1782)  C>S  application_data
1 15 1.9703 (0.0004)  S>C  application_data
1 16 2.1483 (0.1779)  C>S  application_data
1 17 2.1484 (0.0000)  C>S  application_data
1 18 2.1484 (0.0000)  C>S  application_data
1 19 2.1779 (0.0294)  S>C  application_data
1 20 2.3952 (0.2173)  S>C  application_data
1 21 2.3952 (0.0000)  S>C  application_data
1 22 2.5747 (0.1794)  C>S  application_data
1 23 2.5747 (0.0000)  C>S  application_data
1 24 2.7329 (0.1582)  S>C  application_data
1 25 2.9110 (0.1780)  C>S  application_data
1    2.9111 (0.0000)  C>S  TCP FIN
1 26 2.9113 (0.0001)  S>C  application_data
1 27 2.9115 (0.0002)  S>C  Alert
1    2.9115 (0.0000)  S>C  TCP FIN

2015/02/14

New OFCA mobile speedtest app

This is the results of new OFCA speedtest app in testing 802.11ac WiFi speeds.  Surprise !!!


2015/02/12

Opendkim SignTable and KeyTable

As a member of PISA and ISOC HK, I occasionally need to use the email address warren@isoc.hk and warren.kwok@pisa.org.hk from my web-based email client to send outgoing emails.  However, as the DKIM signature is binded to a single sender domain only, the outgoing emails bearing the above two mentioned sender addresses can not have DKIM signature.  Fortunately, opendkim provides a SignTable which specifies which email addresses outside the default domain can be issued with signature.  Interestingly, if the SMTP server is providing email hosting to multiple domains, all email addresses of the domains can be signed.   This also reminds me of the file KeyTable which of course by its name means different domains can use different keys and selectors.    If I have time, I will try all these out to strengthen my understanding on DKIM.

2015/02/10

DKIM crashed

My DKIM signature on outgoing emails has crashed over 3 months.  As a good security practice, I changed the key some time ago and uploaded the public key as a DNS text record.  In the course of checking the key before updating the DNS, a space character was inadvertently inserted which I still could not figure out how such thing could have happened.  By now the root cause is known and rectified, every outgoing has reinstated the DKIM signature for the receiving SMTP server to verify.   What a bad luck.   

Some years ago, I stumbled through an IT magazine saying that PGP, S/MIME and DKIM are the protocols for securing emails.  While they are use public key cryptographic approach, DKIM can not encrypt the email body.  It can only authenticate the sender.  The other obvious advantage is that it can help the sender to gain higher scores in the sender reputation and the likelihood of treating emails from the sender as spam or malicious emails is much reduced.   Last but not least, the DKIM verification can also ensure that message body is not tampered by man-in-the-middle attack in the course of delivery. 

2015/02/04

上賊車

如果你現在三十嵗出頭,供樓按及二按用去收入的七成,還要供三十年。被困在這樣的供樓壓力下,你沒餘錢再進修,更何況生兒育女和供養父母,你的人生除了為磚頭賣命外,還有甚麼意義?

在此要奉勸那些80後, 不要拿走老豆老母嘅大半生積蓄或棺材本做首期, 佢哋無欠你架。 要上賊車就要靠自己, 輸贏都喺你自己,老豆老母吾喺你嘅賭本,兩老萬一遇上大病, 佢哋仲點會有錢入院做手術呀。

2015/02/02

PuTTY

PuTTY, addicted to it forever !

2015/01/31

Openvpn tcp port 443

唉,太大意了。居然用咗openvpn 預設的 udp port 1194, 這會被中國長城防火牆看穿晒。一定要改做 tcp port 443, 等防火牆錯誤理解被連接的 openvpn 機器為網上銀行平台。當然 tcp 比 udp 速度稍漫,但這點完全不重要。