no windows for me

News that the GDI and jpeg security problems are not just limited to windows itself. The libraries were copied and possibly modified by other programmer that then just included then in their programs. This causes many other programs to be vulnerable, check with the gdi scanner. See the sometimes long list of programs affected and start asking for updates.

The latest news is that C'T took a clean XP-SP1 system, patched it and still IE would crash when displaying the image. Not nice.

I have the feeling that if the major media start realizing the impact of this we could see major sh*t hitting fans all over the place. I just wish I would have the money to give the mother-in-law and mother an Apple, so they should be safer...

nugget of code

Suppose you have a feature debug that you use to turn on debugging, and that if debug is on *features* you want to araneida not to cache your responses for a day. Then you can use the following code:

(araneida:request-send-headers

   request

   :content-type "text/html"

   ;; cache this page for 24h

   #-debug #-debug

   :expires (+ (get-universal-time) (* 60 60 24)))

The #-debug #-debug will exclude both expressions that follow. Another neat trick I've learned from Erik Naggum.

Kerberos for dummies

I had forgotten this dialogue. Wonderful stuff.