Anime World

facebook apis test

2012-01-04T17:04:00.000-08:00

Google Code jam Round1A 2010 Rotate Join-k game

2011-12-18T05:36:00.000-08:00

My solution. =)

http://code.google.com/codejam/contest/dashboard?c=544101#s=p0

import java.util.Scanner;
import java.io.File;
import java.io.PrintWriter;
import java.util.List;
import java.util.ArrayList;

public class JoinK
{
static Scanner in;
static PrintWriter out;

static boolean isBlue, isRed;
static int countRed, countBlue, k;

public static void main(String[] args) throws Exception
{
 in = new Scanner(new File("input-sample.in"));
 out = new PrintWriter(new File("output.txt")); 

 int t, n, m;

 t = in.nextInt(); in.nextLine();
 for(int i = 1; i <= t; i++)   {    n = in.nextInt();    k = in.nextInt();    in.nextLine();    char[][] lines = new char[n][n];    for(int j = 0; j < n; j++) {     char[] line = in.nextLine().toCharArray();     for(int z = 0; z < n; z++) {      lines[j][z] = line[z];          }    }           lines = rotate90degrees(lines);       System.out.println("-----------ROTATE---------");    for(int z = 0; z < lines.length; z++) System.out.println(lines[z]);    lines = doGravity(lines);    System.out.println("-------------GRAVITY--------------");    for(int z = 0; z < lines.length; z++) System.out.println(lines[z]);           out.printf("Case #%d: %s\n", i, checkWinner(lines));   }      in.close();   out.close();  }    /**  * First column becomes the first row  * from bottom to top.  */  static char[][] rotate90degrees(char[][] lines)  {   int l = lines.length;   char[][] newLines = new char[l][l];   for(int i = 0, c = 0; i < l; i++, c++)   {    for(int j = 0, r = l-1; j < l; j++, r--)    {     newLines[i][j] = lines[r][c];    }     }     return newLines;  }    static char[][] doGravity(char[][] lines)  {   for(int c = 0; c < lines.length; c++)   {    for(int r = lines.length-1; r > -1; r--)
  {
   int x = r;
   while(lines[r][c] == '.' && x > 0) {
    lines[r][c] = lines[--x][c];
    lines[x][c] = '.';
   }
  }  
 }
 return lines;
}

/**
* It's the same check as tic-tac-toe:
* horizontal, vertical and diagonal.
*
* @returns Red, Blue, Neither, or Both
*/
static String checkWinner(char[][] lines)
{
 isBlue = false; isRed = false;

 // check horizontal (row)
 for(int r = 0; r < lines.length; r++) {    countRed = 0; countBlue = 0;    for( int c = 0; c < lines.length; c++) {     testCheckWinner(lines[r][c]);    }      }      // check vertical (column)   for(int c = 0; c < lines.length; c++) {    countRed = 0; countBlue = 0;    for( int r = 0; r < lines.length; r++) {     testCheckWinner(lines[r][c]);    }      }      // check main diagonal. bottom half   for(int i = 0; i < lines.length; i++) {    countRed = 0; countBlue = 0;    for(int r = i, c = 0; r < lines.length; r++, c++) {         testCheckWinner(lines[r][c]);    }      }      // check main diagonal. upper half   for(int i = lines.length-2; i > 0; i--) {
  countRed = 0; countBlue = 0;
  for(int r = 0, c = i; c < lines.length; r++, c++) {         testCheckWinner(lines[r][c]);    }      }      // check opposite diagonal. bottom half   for(int i = 0; i < lines.length; i++) {    countRed = 0; countBlue = 0;    for(int r = i, c = lines.length-1; r < lines.length; r++, c--) {         testCheckWinner(lines[r][c]);    }      }      // check opposite diagonal. upper half   for(int i = 1; i < lines.length; i++) {    countRed = 0; countBlue = 0;    for(int r = 0, c = i; c >= 0; r++, c--) {   
   testCheckWinner(lines[r][c]);
  }  
 }


 if(isBlue && isRed) {
  return "Both";
 } else if(isBlue) {
  return "Blue";
 } else if(isRed) {
  return "Red";
 } else {
  return "Neither";
 }
}

static void testCheckWinner(char c)
{
 if(c == 'R') {
  countRed++;
  countBlue = 0;
 } else if(c == 'B') {
  countBlue++;
  countRed = 0;
 } else {
  countRed = 0;
  countBlue = 0;
 }
 if(countRed == k) isRed = true;
 if(countBlue == k) isBlue = true;
}
}

CSS

2011-11-12T03:41:00.000-08:00

November 12th, 2011

The Power of Negative Margins:
http://coding.smashingmagazine.com/2009/07/27/the-definitive-guide-to-using-negative-margins/

3d effect


<html>
<head>
<style type="text/css">
.threeD1 {
 color: red;
 line-height: 40px;
 margin-left: 1px;
 font-size: large;
}
.threeD {
 margin-top: -48px;
 color: blue;
 font-size: large;
}
</style>
</head>
<body>
<p class="threeD1">Leandro</p>
<p class="threeD">Leandro</p>
</body>
</html>

Linux

2011-07-09T19:31:00.000-07:00

========================
July 9th, 2011

Could you be Linus?
1 3 -> flame mailing list
2 2 -> diving Australia
3 5 -> take the kids
4 3 -> Android
5 -> microEmacs

Private software puts limitation. They imply that you know what you are doing.
Sometimes you put the wrong goal or just lose focus.

Software is just a part of the solution.

He doesn't use debuggers.
Debuggers makes for worst programmers. And if you don't understand the problem at the source level, you shouldn't even try to fix it. xD uhahuauhauhauha
He sleeps ten hours a day.

He is against software desing.
"A lot of people do a very strict design first and then they try to implement it. And when they find problems in the design, they just
implement it anyway." xD
"I'm a big believer of doing prototypes."
========================

========================

My Solutions to Google Code Jam 2010

2011-05-28T15:27:00.000-07:00

Solutions written in Java!!!

Problem A. Store Credit

http://code.google.com/codejam/contest/dashboard?c=351101#s=p0

import java.util.Scanner;
import java.io.File;
import java.io.PrintWriter;

public class ProblemAStoreCredit2010
{ 
 public static void main(String[] args) throws Exception
 {
  Scanner scanner = new Scanner(new File("A-large-practice.in"));
  PrintWriter pw = new PrintWriter("A-large-practice.ou"); 
  int _case = 1;
  
  scanner.nextLine();
  while(scanner.hasNextLine())
  {
   int c = Integer.parseInt(scanner.nextLine()); //Amount of credit you have at the store
   int i = Integer.parseInt(scanner.nextLine()); // Number of items in the store
   String prices = scanner.nextLine();
  
   /* Available items */
   Item[] l = new Item[i];
  
   String[] ap = prices.split(" ");
   for(int x = 0; x < i; x++)  
    l[x] = new Item(Integer.parseInt(ap[x]));
  
  
   search:for(int x = 0; x < i-1; x++)
   {
    for(int j = x+1; j < i; j++)
    {
     if(l[x].price + l[j].price == c)
     {
      System.out.printf("Case #%d: %d %d\n", _case, x+1, j+1);
      pw.printf("Case #%d: %d %d\n", _case, x+1, j+1);
      break search;
     }
    }
   }
   _case++;
  }
  
  scanner.close();
  pw.close();
 }
}


class Item
{
 int price;
 
 Item(int price)
 {
  this.price = price;
 }
}

MySQL Stuff

2010-05-26T19:12:00.000-07:00

Hi!

July 9th, 2011

Creating a Function

-- MySQL testing

create database if not exists testing
character set = utf8;

-- show create database testing;

use testing;

create table client
(
id int primary key auto_increment,
name varchar(20) not null,
lastname varchar(40) not null,
born_date date not null
);

-- show create table client;

insert into client (name, lastname, born_date) values
('Leandro', 'dos Santos Coutinho', '1987-02-02'),
('Marco', 'Aurélio Magalhães Coutinho', '1960-12-15');
('Rodrigo', 'dos Santos', '1981-07-01');

-- the age below is not corret because it doesn't consider the month nor the day
select name, year(now()) - year(born_date) as age from client;


-- Creating a FUNTION

delimiter |
create function get_age(born_date date) returns int
begin
declare age int;

declare this_month, this_day int;
declare born_month, born_day int;

set age = year(now()) - year(born_date);

set this_month = month(now());
set this_day = day(now());

set born_month = month(born_date);
set born_day = day(born_date);

if this_month < born_month then set age = age - 1;
elseif this_month = born_month and this_day < born_day then set age = age - 1;
end if;
RETURN age;
end |
-- drop function get_age
select name, born_date, get_age(born_date) as age from client;

March 26th, 2010

Redirect Select Output to File

http://dev.mysql.com/doc/refman/5.1/en/mysqldump.html

mysql -u userName -p -e "select fields from table" dataBase > folder/fileName

Example:

mysql -u root -p -e "select * from fool_users" hacker > temp/fool_users===================18th August 2010

Add a column to an existing MySQL table

http://www.tech-recipes.com/rx/378/add-a-column-to-an-existing-mysql-table/ALTER TABLE contacts ADD email VARCHAR(60);

Bash Script Stuff

2010-05-23T11:13:00.000-07:00

Howdy!

Download a file to the same directory:

wget http://site/file

Download a file to the specified directory:

wget -O directory/fileName http://site/file

What do you think you can do with the commands above? xD

Python Stuffs

2010-05-20T20:25:00.000-07:00

Howdy!

Useful functions!

4.3.1. The `type` Function

The type function returns the datatype of any arbitrary object. The possible types are listed in the types module. This is useful for helper functions that can handle several types of data.

4.3.2. The `str` Function

The str coerces data into a string. Every datatype can be coerced into a string.

Discovering Methods: dir(object)

Getting Help About a Method: help(obj.method)

Presentation comparing Python with C, C++ and Java. It also shows some Python's nice features:

http://www.youtube.com/watch?v=bDgD9whDfEY

BUILT-IN CONTAINER TYPES

Tuple: immutable sequence - ()

List: mutable sequence (a vector) - []

Dict: map key -> value by hashtable - {}

EASY 3: Hospitality and Restaurant Episode 9

2010-05-05T13:20:00.000-07:00

Hi!

I tried to write the transcript of this video: http://www.youtube.com/watch?v=dOX9Fl17F6s

I would really appreciate any corrections. Thank you!

Luis: Hi. I'm Luis. I'm going to start working as a server. The manager told me to talk with the bartender.

Jake: That's me. Hi Luis. I'm Jake. You'll just need a short orientation before serve alcohol.

Luis: Sure.

Jake: The first thing you need to know: don't serve alcohol to anyone underage. You know, too young. It's against the law.

Luis: Yes, I know.

Jake: Here you have to be 21 years old. Other places, only 18.

Luis: How do I know how old someone is?

Jake: If you are not sure, ask for a photo ID. Usually, it's a driver's license like this. Just say: “May I please see your ID?”. If you are not sure about the ID, show me. It needs to be a government issue with a photo ID, like a passport or a driver's license.

Luis: Okay. That makes sense.

Jake: We serve mixed drinks, beer and wine.

Luis: So I ask for drink orders when people sit down?

Jake: That's right. Here's a drink menu. Most people order off the menu.

Luis: I don't know much about drinks.

Jake: Don't worry about it. Here, I'll show you a few things.

Jake: “On the rocks” means over ice. So a martini over or on the rocks is like this. A martini up or straight up is in a glass like this. “Neat” means only the liquor, no ice.

Luis: What about beer?

Jake: We have two draft beers. (name of the beers?). Here is our list of bottle beers. Take this list and memorize it.

Luis: Sure. I can do that. What about wine?

Jake: We have a wine list. We serve wine by the glass and by the bottle. We sell a few by the half bottle.

Luis: I don't know much about wine either.

Jake: A lot of people enjoy wine with their meal. Some people know a lot about wine. Other people want you to help them.

Luis: I know that red wine goes with red meat and white wine goes with white meat, like chicken or fish.

Jake: That's the main idea, but people can order what they want.

Luis: The chef said he will offer wine recommendation with each entry.

Jake: That's good. He knows what goes together. So that's about it. We gonna have happy hour five to seven. I need to set up the hors d'oeuvres and snacks.

Luis: What is happy hour?

Jake: During happy hour, all drinks don't have price. We want customers to come in and stay for dinner.

Luis: Just one more thing. What about smoking?

Jake: The dining room is nonsmokers. So is the bar. But we do allow smoking on the patio outside.

Luis: Okay. Well, thanks for the information.

Jake: Sure. If you have any questions, just ask. You know where you can find me.

Other tech stuffs

2010-03-03T15:01:00.000-08:00

Hi!

March 3td, 2010

What the hell is 32 bits and 64 bits?

The first tech stuff is about bitsss. I'm posting this because I need to understand it, so I can buy the right hardware and OS for my server.

To build a system with more than 4 gigs of RAM, you need to have a 64-bit microprocessor and a 64-bit operating system.

hehe That's the short answer and what is important to me. If you want to read more, take a look in the links below.

http://blog.newsweek.com/blogs/techtonicshifts/archive/2009/09/16/64-bit-computing-the-next-big-confusing-thing.aspx
http://blogs.msdn.com/hiltonl/archive/2007/04/13/the-3gb-not-4gb-ram-problem.aspx

Ubuntu Stuff

2010-02-22T15:19:00.000-08:00

=======================
21th August 2010

Ubuntu 10.04 Wireless driver installation

Go to this folder: ftp://3dsp.com.cn/Open%20Source%20Code/Sectional%20Open%20source%20code/

And download: BlueW-2310U_3.0.4_100820.tar.gz

Unpack an read the readme file. It worked at my notebook (Microboard Ultimate)

I'm using D-link DI 524 Wireless router

(Maybe) Useful links:
http://www.vivaolinux.com.br/topico/OTRS/3dsp-no-Ubuntu-10.04
http://www.orkut.com.br/Main#CommMsgs?cmm=91345357&tid=5464668451951237704&kw=ubuntu&na=1&nst=1
http://www.youtube.com/watch?v=m03RcFkSIA8&feature=related

=======================
Karmic Koala 9.10

March 26th, 2010

List all users and groups

cat /etc/passwd | cut -d: -f1
cat /etc/group |cut -d: -f1

source: http://www.linuxforums.org/forum/redhat-fedora-linux-help/41672-command-view-list-all-users-groups.html

Add permission to a Group to Access a File

March 2nd, 2010

How to Install JRE plugin in Firefox

sudo apt-get install sun-java6-jre sun-java6-plugin sun-java6-fonts

If you already have JRE installed, then only sudo apt-get install sun-java6-plugin is necessary.

February 23, 2010

Install flash in Firefox

Hi! It's very easy to install flash in Firefox.

Steps:
- Applications -> Ubuntu Software Center
- Search for flash
- Adobe Flash plugin -> install
- be happy!! xD

February 22th, 2010

Install mp3 support

Probably mp3 support won't be available due to license issues, but it's very simple to install mp3 support.

1. sudo apt-get update
2. play some file
3. search plugin
4. reopen the file
5. be happy

PostgreSQL Stuff

2010-02-18T02:32:00.000-08:00

Hi folks!

In this post I'll write stuffs related with PostgreSQL.

Login

February 18th, 2010

> psql -h localhost -U postgres
> ***** (your password)

Java Stuff

2010-02-08T09:38:00.000-08:00

Hi!

Files

1 - text file busy February 8th, 2010

So, I was changing the content of an executable file with PrintWriter, then I used flush() and tried to execute the file:
...
pw.flush();
Runtime rt = Runtime.getRuntime();
rt.exec("./testPrinter.sh");

And I was getting the following exception: IOException - text file busy
Fortunately it had a simple solution ...
I just had to close the PrintWriter object before execute the file:
-------> pw.close();

Cheers!

Import Static

hi folks!

I tried to do a import static ClassName.*, but it didn't work. The problem is that the class must be inside some package. So I did: import static packageName.ClassName.*;

Servlets and JSP stuff

2010-02-03T18:01:00.000-08:00

FAIL - Application at context path /project1 could not be started

The problem was in the web.xml file. I just changed ISO-8851-1 to ISO-8859-1. xD
Cheers!

**********************

So, response.sendRedirect("destination") doesn't exit the method. Well maybe it's obvious, but it was not for me. So if you use response.sendRedirect and want to exit the method you must use return

Conversations Questions Getting to Know Each Other

2010-01-18T19:18:00.000-08:00

source: http://iteslj.org/questions/getting.html

Conversation Questions
Getting to Know Each Other

A Part of Conversation Questions for the ESL Classroom.

Do you have any pets?
What was the last book you read?
Do you like to cook?
What's your favorite food?
Are you good at cooking/swimming/etc?
Are you married or single?
Do you have brothers and sisters?
- Are they older or younger than you?
Do you like baseball?
Do you live alone?
Do you live in a house or an apartment?
Have you ever lived in another country?
Have you ever met a famous person?
How do you spend your free time?
How long have you been studying English?
How old are you?
How tall are you?
Tell me about a favorite event of your adulthood.
Tell me about a favorite event of your childhood.
What are your hobbies?
What two things could you not do when you were.....?
What countries have you visited?
What country are you from?
What do you do on Sundays?
What do you do? What's your job?
What do you like to do in your free time?
What hobbies do you have?
What is the nearest bus stop or train station to your house?
What is your motto?
What is your religion? (Perhaps not a good question in some situations.)
What kind of food do you like?
What kind of people do you like?
What kind of people do you not like?
What languages do you speak?
What two things could you not do when you were a child, but you can do now?
What's something you do well?
What's your address?
What's your father like?
What's your mother like?
What's your name?
What's your phone number?
What's your telephone number?
When did you start to study English?
Where are you from?
Where do you live?
Where do you live? How long have you lived there?
Where were you born?
Which sports do you like?
Who do you live with?
Who do you respect the most?
Who has had the most influence in your life?
Why did you decide to take this course?
Why do you want to learn English?
Would you like to be famous?
What do you think you will be doing five years from now?
- Where do you think you'll be living five years from now?
What is your goal in life?
Are you a 'morning' or 'night' person?
When do you feel best? In the morning, afternoon, or evening?
How many cities have you lived in?
What jobs have you done?
Which do you prefer, sunrises or sunsets?
What could you do as a child that you can't do now?
Who is your next door neighbor in your home country?
- What is he or she like?
- Did you get along with each other?
What is the best memory of our country that you will take back home with you?
What is the worst memory of our country?
How many times did you move as a child?
Are you a task oriented person or a people oriented person?
What is the profile of the wife/husband you would meet?
- What kind of woman/man would you like to marry?

source: http://iteslj.org/questions/getting.html

Rails Is A Ghetto Original Copy

2009-11-24T10:06:00.000-08:00

Copy of the original Zed Shaw's rant

I had to post it here, because, you know, this is a real gem! xD

source: http://www.zedshaw.com.sharedcopy.com/rants/51489cec9386f7c13f69b3a58cd50b02.html

Rails Is A Ghetto

I’ve more or less kept my mouth shut about some of the dumb and plain evil stuff that goes on in the Rails community. As things would happen though I’d take notes, collect logs, and started writing this little essay. As soon as I was stable and didn’t need Ruby on Rails to survive I told myself I’d revamp my blog and expose these fucks.

NOTE: This post is currently an open draft. Feel free to comment but it will have spelling and grammar errors and some paragraphs might not make sense. Check my blog and my atom feed to find out when I post the updates.

This is that rant. It is part of my grand exit strategy from the Ruby and Rails community. I don’t want to be a “Ruby guy” anymore, and will probably start getting into more Python, Factor, and Lua in the coming months. I’ve got about three or four more projects in the works that will use all of those and not much Ruby planned.

This rant is full of stories about companies and people who’ve either pissed in my cheerios somehow or screwed over friends. I can back all of them up from emails, IRC chat logs, or with witnesses. Nothing in here is a lie unless it’s really obviously a lie through exaggeration, and there’s a lot of my opinion as well.

The best part about ripping on these guys though is this:

If they have a blog, speak at conferences, publish papers,
or write books then they are public figures just like me.

This means that thanks to Larry Flynt I can stab them in the ear verbally, insult them, question their sexual orientation, and say anything that’s true and they just have to take it. Their only recourse is to write their pathetic little rebuttals in their stupid little blogs.

I’ll add one more thing to the people reading this: I mean business when I say I’ll take anyone on who wants to fight me. You think you can take me, I’ll pay to rent a boxing ring and beat your fucking ass legally. Remember that I’ve studied enough martial arts to be deadly even though I’m old, and I don’t give a fuck if I kick your mother fucking ass or you kick mine. You don’t like what I’ve said, then write something in reply but fuck you if you think you’re gonna talk to me like you can hurt me.

I’ll never be afraid of some pilsner fresh fat fuck who eats donut hamburgers and only gets exercise when he plays World of Warcraft on a DDR pad.

To prime the pump, let’s talk about Kevin Clark. Me and Kevin don’t get along because he once tried to demand some free tech support out of me for Mongrel. His dumb little company VaporSet had this stupid setup where the people deploying Rails didn’t have root access. I told Kevin that this was stupid and apparently it was Kevin’s idea because he told me “fuck you”. Ever since then Kevin’s been a mouthy little shit with nothing to back it up.

This particular discussion started with Kevin Clark deciding to tell me that my idea to restrict access to the main repository for Utu until it’s solid makes me a “dick”. But, read to the end of the chat for the punch line. It’s great.

02:18 <> evan: http://utuprotocol.info/repos/
02:18 <> evan: I thought so too, but it still seems to
                   happen (atleast on my system). And lightning has
                   a few that hang out
02:18 <> evan: http://utuprotocol.info/repos/utu/changes.rss
              is generated from an included xslt i hacked up
02:18 <@evan> zedas: and who can push code to that location?
02:18 <> me
02:18 <> large git clones can also get kind of bad
02:18 <@evan> see, thats the problem.
02:19 <@evan> kevinclark: hang out?
02:19 <> not a problem at all.  feature since i don't trust
              any you mofos :-)
02:19 <@evan> kevinclark: you mean missing files?
02:19 <@evan> zedas: then you're set!
02:19 <> evan: I mean generated files are sitting in svn
02:19 <> evan: no, people can contribute by doing a darcs send
              which packs it up and shoots it to my email.

Then kevin comes in:

02:21 <@evan> we've got very different ideas about how to deal with
             contribution, i suspect.
02:21 <> i also anticipate that there won't be so many people
              contributing directly on the main utu server, but
              more contributing by writing clients or tools that
              use it
02:21 <> evan: I'd say you're polar opposites
02:22 <> how's that kevinclark?
02:22 <> zedas: I thought you weren't talking to me
02:22 <> kev * [1003] /rubinius/trunk (8 files) add
                 rb_hash_delete
02:24 <> kevinclark: well i'm gonna talk to you if you're
              making passive aggressive little comments
02:24 <> zedas: they aren't passive aggressive. You don't
                   want anyone to check in to your repo. Evan's
                   repo is open to anyone who's gotten a patch in.
                   polar opposites
02:24 <> and you're still a dick
02:25 <> and I'm enjoying the vacation
02:25 <> so, keep it up
02:27 <> kevinclark: you just called me a dick?
02:27 <> you can still read too
02:27 <> awesome
02:27 <> hmmm
02:27 <> well, i'll just leave this alone for now.
02:27 <> sorry about that evan.
02:28 <@evan> no problem.

And then kevin demonstrates why I’m trying to limit people’s access to the main repository:

02:47 <> evan: lighting is using autoconf?
02:47 <> er lightning
02:48 <@evan> yeah
02:48 <@evan> well, crap.
02:48 <@evan> lightning is faulting on i386
02:48 <> hmm?
02:48 <> yeah r1003 deleted configure
02:48 <> working on mine now
02:48 <> oh, crap
02:48 <> I thought configure was generated
02:48 <> from autoconf
02:48 <@evan> really?
02:48 <> all my build tools do it ;)
02:48 <> sorry
02:48 <> well, not from our .configure
02:48 <@evan> brixen: it should be there.
02:49 <> I'll restore from r1002
02:49 <> brixen: cool. sorry about that.
02:49 <> just wasn't sure if the build steps had changed
02:49 <> kevinclark: np
02:50 <@evan> brixen: wtf.
02:50 <@evan> why did it get deleted....
02:50 <@evan> kevinclark: did you delete it?
02:51 <> evan: I did. Too much time with buildtools that
                   were generating configure for me, and I got
                   confused.
02:51 <> evan: It got caught with the docs that got
                   modified
02:51 <> and I didn't think twice about it
02:52 <@evan> yeah, just restore it plz, kthxomgwtfbbq
02:52 <> evan: working on it ;)
02:52 <> brixen: you're doing the restore, yeah?
02:52 <> yeah, one sec
02:52 <> was just checking it would build
02:52 <> and it's building :)
02:53 <> sweet
02:53 <> brixen * [1004]
/rubinius/trunk/shotgun/external_libs/lightning/configure restore

Wow, rails is a ghetto. The little prick calls me a dick (and in private chat said he’d find me at the next conference but of course never did), then he deletes the fucking configure file for the project! Remember he was working on GNU lightning when I started chatting, so this means that it took an hour for everyone to figure out that his dumb fuck ass deleted it.

Why is this ghetto? Any experienced developer knows that autoconf configure files are a PAIN IN THE ASS to recreate. They almost always require special reconfigure calls, special m4 macros, or just time. You usually get them right, generate them once, and then leave them in your repository for all to use. To make it worse, Kevin actually wrote a supposed alternative to autoconf, and yet he doesn’t know the most basic thing about autoconf.

Only a fucking tool bag piece of shit would:

spend 10-20 minutes calling me names over IRC,
not have the balls to say any of that to my face,
say I’m a dick for wanting to use a different (established) publish/review model,
and then demolish such an important file for a project,
keeping everyone stumped and pissed for an hour,
therefore proving me right.

This is exactly what makes Rails a ghetto. A bunch of half-trained former PHP morons who never bother to sit down and really learn the computer science they were too good to study in college. BTW, this is true about Kevin as he’s an English major or something stupid (and it shows).

Hats off to you Kevin, you fucking prick. I’m enjoying my vacation too.

After this, I started thinking, since it was the first realization that I picked the absolute last wrong community to make my living in. They were all pricks, morons, assholes, and arrogant fucks who didn’t care about the art or the craft.

They were all a bunch of little ghetto fabulous princesses trying to make it in this tiny little Rails world and not enough brains between them all to make it happen.

Tied To The Rails

I’ve been thinking this over ever since I realized that Mongrel and Rails more or less killed my career. During 2006 I was effectively homeless for about 4-6 months out of the year and made no money at all. During the rest of the year the little money I made was impossible to get, and many times I was simply not paid.

If it weren’t for the totally kick ass Obie Fernandez I’d probably be slogging away in some McD’s screaming, “you want fries with that?!” He got me a really good gig in Florida and I was able to get back on my feet. Obie rocks, and he’s also a good family man, treats his kids well, and is very smart. He’s one of the few gems of the Ruby world.

Before Mongrel I was building kick ass software for the NYC Dept. of Correction with a tiny team. We were doing innovative stuff like REST XML feeds of prisoner releases and RSS of prisoner transfers. It was fun, I was in charge, and things were pretty good.

Before that I built software for finger print readers, network protocols, designed business processes, lead software teams, created portals, and generally rocked as a consultant.

After Mongrel I couldn’t get a gang of monkeys to rape me, so forget any jobs. Sure people would contact me for their tiny little start-ups, but I’d eventually catch on that they just want to use me to implement their ideas. Their ideas were horrendously lame. I swear if someone says they’re starting a social network I’m gonna beat them with the heel of my shoe.

The Stories I Could (and Will) Tell

One company tried to get me to sign a contract that required me to list all of my inventions, software, cooking recipes, works of art, writings, poems, essays, thoughts, ideas, patentable or unpatentable, prior to taking a 2 hour per week gig mentoring someone. The list of shit they wanted went on and on, and after I refused and just ignored them they still kept asking me.

Another company told me they had a great job for me and that I’d be perfect for them. I knew these guys so I at first trusted them, but what a mistake. Turns out that it wasn’t a job they had, it was an RFP that they wanted to bid for and put my name on the bid so they’d have an advantage. Alright, that’s fine but that means they’re using my name and reputation (that I earned) in a business transaction without telling me. Fine, I better get some fat cash. They then build the team and dole out the positions: Software Architect to the shithead who can’t code; Project Manager to the MBA asshole who talks like a car salesman; Lead Engineer to the guy using my shit to run his company. What do they give me? Nothing. I’m just Zed. Nobody needs my skills.

Other companies would hire me to fix something simple, I’d quote them $500 or so to do it, and then they’d refuse to pay if it didn’t take me a week to do. In one case I did something in about 5 minutes, sent off my automated billing PDF and they just flat refused. I had to work for another hour and even then they didn’t want to pay.

A company in NYC flew me out, put me up, and I gave them a cut-throat deal on my rate if they’d pay me quick. I needed the money to pay rent, so it had to be right after the two weeks of work. About the middle of the week I hear that the CEO isn’t going to pay me right away but is instead going to do NET-30 (an evil practice reserved only for furniture sales). I tell the guys that I got to go and I’d like my money, but they refuse, I fly out, and I don’t get paid for 60 days. What’d I do for them? Oh only a custom Mongrel server, a clean deployment to Mongrel from fastcgi, and a ton of training for their main man.

Then there’s the social network idiots. They all have a social network plus something fucking stupid to sell, but of course no MBA can actually code so they come running to me. However, there’s a slight problem. You see, I have a business degree you cock suckers. If you tell me that your social network will take on facebook because it includes baby pictures then I’m going to laugh in your face. They are an established player with CIA backing. You won’t wipe them out.

Google was a total riot. They offered me a job twice. I went with it, and they never responded. Probably because the job they were offering me—someone who’s been coding for 21 years, 15 professionally—was as a junior system administrator. What the hell does a junior sysadmin do at google? That’s probably like mopping the floor at a glory hole in Queens. I told them to review my resume and offer me a real position.

Revenge Of The Zen Prick

In Vancouver it was even weirder. There was no Rails there, and the only Ruby on Rails work was at this shitty little company I once worked for name Raymond James. I worked for them on a small gig, not doing much coding, just getting a project they screwed up out the door. Later I got into it with their “Development Manager” Alex Bunardzic over e-mail where he says something strange:

I would think twice before doing something like that, if I were you. As a Development Manager at Raymond James, I am privy to the work details you did for us some time ago (it’s all here, meticulously classified by [MANAGER]), and I must say that your references from that job are far from being stellar. To put things extremely mildly, you’ve ended up on our ‘not to rehire’ black list.
You may be looking for work, and people will naturally start asking around. I have plenty of contacts in the industry, and you know how people are when hiring—looking for references and for some feedback.
I’m afraid that, after just reviewing the code you’ve delivered here, I won’t be in the position to say many encouraging things about the quality of your work, not to mention your personality traits.

We go at it for a bit, because I didn’t actually write much code for them and I sure as hell didn’t write bad code since, you know, the damn project actually ran after I got there. Hell, I reverse engineered a Java library they bought but lost the source to so we could patch it. They even asked me to come in a few times and help on short gigs after my initial work. How the hell was I on a blacklist, why did they have a blacklist, why didn’t I know, and why the hell was Alex telling people this shit?

As the exchange unfolds (where apparently my use of foul language is bad but his threatening my livelihood is all right), Alex the Zen Master confesses that he got things wrong:

Here I need to apologize—I went back and looked over the documentation, and was shocked to realize that I’ve confused you with another person! That person’s name is Shai, and because that name was on a quick glance so close to Shaw, I’ve made a blunder and jumped at the premature conclusions.
...
So please scratch all the things I wrote previously concerning your past performance—all of that applies to some person whose name is Shain.

That’s right, this moronic idiot basically told (or just threatened to tell) everybody I was a shitty coder, refused to hire me, threatened me with slander, and tried to destroy me because he confused me with a “Shai” or a “Shain” in his blacklist. He even later tried to tell me that there wasn’t a blacklist.

Here’s the guy who is a development manager for an entire company and he can’t even tell the difference between two completely different people in some weirdo black list. All the more reason to leave Vancouver and try again somewhere else with people who don’t pretend to be Zen masters while they’re treating you like shit with a perfect half smile on their face.

How’d This Happen?

Over and over again I’d run into these morons who would offer me tiny jobs, no jobs, insult my intelligence, treat me like all I can do is code, and when I didn’t fit that mold or wanted to charge them for the privilege they’d cheat me or laugh at me.

Here’s a bit of background on me: My education is in business. I have a BS in MIS and almost finished my MS but ran out of money. I’ve got more business education than most of the MBAs out there, and I have a nearly formal education in software development, modeling, statistical analysis, and sociology. I’ve done it all, but what does the slick talking shit head car sales MBA loser think I am?

Just a code monkey.

I have this rule that when life isn’t going well I have to look at myself very hard first, make the changes that might improve things, and then start looking at who’s stomping on my day.

After revitalizing myself, getting out of the Rails business (or trying), distancing myself from Mongrel, disconnecting from the Ruby community, and focusing on my business skills, I finally felt ready to figure out why the hell the Rails community is so completely and totally useless, stupid, and arrogant.

I believe, if I could point at one thing it’s the following statement on 2007-01-20 to me by David H. creator of Rails:

(15:11:12) DHH: before fastthread we had ~400 restarts/day
(15:11:22) DHH: now we have perhaps 10
(15:11:29) Zed S.: oh nice
(15:11:33) Zed S.: and that's still fastcgi right?

Notice how it took me a few seconds to reply. This one single statement basically means that we all got duped. The main Rails application that DHH created required restarting ~400 times/day. That’s a production application that can’t stay up for more than 4 minutes on average.

Let me put this into perspective for you: I’ve ran servers that needed to be restarted once in a year. They were written in PHP, Python, Java, C, C++, you name it. Hell, I’ve got this blog on a server I’ve restarted maybe 10-20 times the whole year.

Now, DHH tells me that he’s got 400 restarts a mother fucking day. That’s 1 restart about ever 4 minutes bitches. These restarts went away after I exposed bugs in the GC and Threads which Mentalguy fixed with fastthread (like a Ninja, Mentalguy is awesome).

If anyone had known Rails was that unstable they would have laughed in his face. Think about it further, this means that the creator of Rails in his flagship products could not keep them running for longer than 4 minutes on average.

Repeat that to yourself. “He couldn’t keep his own servers running for longer than 4 minutes on average.”

Assuming his statements are true (which we may never know) he basically duped us all.

Now I’m glad he did since Rails is a pretty nice idea, and it demolished the Java world I hated so much. What bothers me though, is that while all of the Rails Core fuck tards would insult me, tell me I was wrong, laugh at me, marginalize me, tell me I was a waste of space, that I “jumed the shark”, they were quietly taking my work and using it to improve their festering shit pile deployments.

In fact, in chats with me and them where I started to identify the GC, Threads, and IO all I ever got was denial from guys like Dave Thomas, Michael Koziarski, and Chad Fowler. Remember that nasty cgi.rb bug that is fixed with a monkey patch in Mongrel? Did you guys know that Michael K. and Dave Thomas pretty much threatened me into not releasing a Mongrel fix for the problem for three months? They actually let it sit for three months before other people crafted the cgi_multipart_eof_fix which I could include.

In the beginning, was this huge lie, but after that…

Then The Idiots Came

My theory on why Rails is a ghetto is best summarized by an observation I made about Michael Koziarski. Here’s is fat fucking face just in case you don’t know who I’m talking about. See, here’s the thing about Koz: He’s got a big mouth he runs when he’s online, but in person he doesn’t say shit. He loves talking shit about me when I’m not around apparently, insults me when he wants, but the best thing about Michael Koziarski is this:

When he tells people I’m an asshole they go, “Zed’s such a prick I hate him.”

When I tell people Mike’s a fucktard loser, they say,

"Who?"

That’s right, dude works on Rails in some capacity, apparently writing tons of shitty fucking code with his butt buddy Nicholas Sekar. Yet, nobody knows him. He’s got more web sites than Elvis and Chuck Noris combined and nobody knows him. He’s written mountains more open source code than me and no-bo-dy knows him.

He’s a fucking loser, and man he used to bug me. Now however, I don’t give a shit about Rails so he’s a little fly. Rails is my money maker platform I don’t invest in at all. Rails could sink in the ocean for all I care and I’d roll on to my next big thing. I’ve done the right thing by giving Mongrel to a great team, and if Rails dies, then awesome because little useless pricks like MK will probably fall off the planet into that part of hell where shitty managers end up.

The best part about the whole thing is there’s potentially 10 new web frameworks that can take on Rails. Hell, Mongrel spawned or helped 5 of those. My favorite of those frameworks is Merb which is literally “Mongrel plus Erb” but now it uses Erubis mostly. What I love about Merb is that it proved you could make a fast thread safe Ruby web framework with all the same ideas as Rails and using most of the Rails gear at the same time. However, the joke is that before Merb the Rails Core morons would scream up and down you can’t make Rails thread safe. Ezra however proved them all wrong by just writing a better Rails than Rails and all thanks to Mongrel being so easy to hack and work with.

If the Rails guys had given me even an ounce of respect and listened to me I might have helped them, but instead I wanted to make sure that they didn’t rule the world because when I listened to them shit talk about the community that made them famous I wanted to scream.

Alright, but let’s say I’m totally wrong and Koz is really a great coder who’s just staying under the radar? Alright, remember the change to Rails to allow this?

http://mysite.com/controller/action;edit

That one little ’;’ was the cause of some serious pain for people since it’s actually not a proper request the way they interpret it. Requests with ’;’ in them are considered path parameters which are kind of like query parameters. Koz and DHH and crew added this, but I told them that’s not right, they should use something else like, uh, oh, maybe fucking ’/’. They ignored me. Did it anyway. Then when it was clearly obvious they were wrong (since Mongrel’s got a tight parser) who was out there defending this decision? Fucking Koz. Great programmers don’t defend stupid, they stamp it out and own up to their mistakes.

Fuck you Koz. You don’t speak.

Ruby on Rails has become full of people like Koz, with Koz the most senior of the wannabe smarties. Koz got lucky at best and injected his shitty coding into a good project, fucked it up, and then latched on to security as the way to get more control. Of course he doesn’t actually know anything about secure coding which is why his code seems to have lots of the bugs (go check out the date parsing shit. Clue: months don’t always have 30 days).

When I hang out with the Nitro, Factor, Django, Lua, Python, Lisp, or Mongrel crews I get to talk to super smart guys who have egos for sure, but have mutual respect. They craft nifty shit I love to play with, are fun to talk with even when I disagree, and don’t say mean shit when I’m not around.

With Rails I get scrawny cock suckers with carpal tunnel syndrome talking to me like they’re gonna eat my young. Their feeble PHP infected minds can’t grasp advanced shit like objects or closures. When you combine stupid businesses with stupid people using a stupid framework based on a big fat fucking lie on a shitty platform you get the perfect storm of dumbfuck where a man like me can’t find work.

There’s no work for a smart man in a town full of stupid.

The Hysteria Of Consultancy

Where I work the company is willing to blow huge amounts of money on a consulting firm or hardware, but ends up firing people when times get tight. It’s a universal mass hysteria that paying $100 – $200 per hour for a group of consultants is preferable to simply hiring good employees. At the rates companies pay these consultants they could hire 4 full time employees.

Consultancies used to provide a service by managing the entire project so you didn’t have to do much. Now with Agile and Pair Programming the consulting firms can dupe clients into helping them make the sausage, provide little to no services, yet still charge insane rates. What’s impressive is these consulting firms somehow charge rates that are 5 or 6 times what they pay their employees.

Think about that. How is it possible that your consulting firm has so much inefficiency they must charge 600% overhead? Are the services you get really that far above the base pay of that employee? Why the hell not just hire someone and have a long term learner who’ll be ready to work on anything?

Accounting, that’s why. When you hire a Full Time Employee (FTE) you need to account for it and budget them differently than if you pay a firm for a consultant. There’s several loop holes in the tax and accounting standards that make a consultant seem cheaper than a regular employee.

However, this is a mass hysteria. Eventually people will catch on that the quality they get for the price they pay isn’t there. A smart consultancy will figure out that they could undercut these idiot firms by simply using technology properly to cut costs and reduce overhead. Hell, you’ve got 600% overhead to work with. Should be easy to pull a Southwest Airlines on them.

Let’s take ThoughtWorks as a classic example of the hysteria. They decided to get into the Ruby on Rails game and went full bore. I was telling people right when Rails came out that doing it for internal projects at big companies would be a huge money maker. Nobody believed me, and now rather than all my smart friends working on cool applications for big money I have ThoughtWorks fucking up my party.

Before you continue this part of the rant ask yourself a question:

How did ThoughtWorks go from 0% Rails business to 60% Rails in just a few short months, but somehow didn’t hire that many top notch Ruby guys? Remember, if 60% of your business is Rails then 60% of your people need Rails training or else you have to hire more people. If they didn’t hire any more people than that means…the people they had were retrained. With two week training courses. Huh? How does that make them experts?

What happens if you do that is you have a group of former C# and Java guys running around writing shitty Ruby code and training on the client’s dime for huge fees.

Think for a second. ThoughtWorks charges its clients a premium price for expertise. They claim that their Agile methods and development expertise means they’ll produce a great result. This is why you pay them a premium. However, they reserve the right to control staffing, and you have very little say in the skills of the people they place.

Continue the logic further my friends with this little walk through consulting practices:

TW figures out it can make a mint doing RoR projects for dumb ass MBAs at dumbass companies.
TW goes for it and gets 60% of its business now all RoR.
TW realizes that they can’t hire enough Ruby people to do that. Actually, they didn’t really try too hard since that’d mean paying the new people a fair salary.
Yet, somehow they put 6-20 people on projects and claim that these people are Rails experts with a high standard of quality. These people actually had two weeks of training.
After each person has been on a project for a few months, they mysteriously get transitioned to another project, become “sick”, or generally leave.
They are then replaced with someone else who’s training is limited.
During their operations they seem to focus entirely on the process, but very little on the quality of the code. Sorry guys, but having a 1:4 code:test ratio is not focusing on code quality. It’s focusing on test quality.
Finally, when your project is in the dumps and it takes months to get simple things done you realize that you’ve been paying ThoughtWorks a premium for what is effectively a bunch of total newbies who are only there for a few months before they roll off.
You my friend got fucked in the ass. Congratulations because all the idiots who paid ThoughtWorks 6x times salary for junior ass wipes got taken and simply paid to train ThoughtWorks’ new crew.

How do I know this? Well, I’ve been a consultant for years and recently I’ve taken over two ThoughtWorks Ruby on Rails projects. BTW, they claim they don’t do “Ruby on Rails” projects, but actually do “Ruby” projects. They also claim they don’t do “eXtreme Programming” but do “Agile”. Doing this little semantics juggle means you can never hold them to any standard of quality.

In the two projects I’ve taken from ThoughtWorks I found mountains of horrible, horrible code. They of course try to pull the classic “there’s many ways to do everything in programming” but this time they kind of get caught because Ruby on Rails means stay on the Rails. There is an established best practice way to build web applications with Rails and that’s the entire point of the system. When ThoughtWorks fucked up these projects they did it in such a completely deviated way that it was impossible to defend.

Additionally, the people they placed on these projects were not well trained at all, had no idea about simple Ruby idioms let alone good design, and spent more of their time drinking and having fun than actually getting shit done. At the last project they actually had bottles of Pedialyte in the fridge to help with their hangovers after wild nights partying.

After ThoughtWorks left the most recent project we revamped the team. We got rid of pair programming, cut down the number of tests, started cleaning more and more code out, got rid of their shitty tools, and we all started leaving at 6pm. What happens?

We doubled our productivity with fewer people. Yes, that is a verifiable metrically validated claim I can back up. Just like the horrible quality of the code, their idiotic defense of it, and their very bad job at designing even the basics of the business model required. Remember, they are testing and svn whores so their failure on these two projects is very well documented.

However, what really ticks me off about ThoughtWorks isn’t the way they fucked up these two projects. I’d take ThoughtWorks over IBM, Accenture, or BearingPoint any day of the week. ThoughtWorks’ competitors are even worse, so I’ll take the lesser of ten evils any day. What pisses me off is that I know they’re responsible for turning Ruby on Rails into the next Visual Basic. Why? Because they wrote in a position paper that Ruby on Rails was like Visual Basic. Yes, they did that. They compared Ruby on Rails to probably the most technically vilified language in the history of computing.

Here’s my prediction about ThoughtWorks: They’ll continue to screw customers over by training their employees on their client’s dime and write tons of fucked up software. The bad results from ThoughtWorks will kill Ruby on Rails for companies as these companies are left with a bad taste from bad implementations.

From Industry to Corporate

ThoughtWorks is simply taking advantage of a pattern where new technology goes from fringe to corporate and then dies. A great example of this is Java Portals. They started out on the fringe at universities and non-profits, where they were mildly successful. Then they migrated into the corporate world where they were complete disasters, and finally the risk averse government picked them up for even less success.

How do I know this? I worked on portals for their entire life and followed them through this process. Go look. I did some of the first work on uPortal, then I worked on portals in companies, and then worked on them for the government.

Ruby on Rails is following the same trajectory I’m afraid, and ThoughtWorks is milking it while they can. First it started on the fringe in start-ups and a few lonely places where it’s having mixed success (mostly due to the poor performance of the Ruby platform). Now it’s getting adopted internally at companies where of course it’ll get fucked up again and die off. After that it’ll move to the government sector where it will languish along with it’s new found buddy COBOL.

Oh, did I mention ThoughtWorks compared Rails to COBOL as well? Awesome.

Fighting Consulting Firms

I have a few pieces of advice for people about to hire any company like ThoughtWorks. There’s just a few simple strategies you can follow to make sure you get the most out of them and get your money’s worth:

Make sure you have the right to see every resume and interview each consultant they place. Treat them like new hires and don’t let anyone who’s not worth the rate you’re paying on the team.
Demand a variable rate based on the position of the person and their experience.
Demand that no employees can leave the project to work on another project. These placements have to be for the life of the project or until the employee quits.
Require that you have the right to have someone replaced if they are not immediately capable. Part of what you’re paying is that a ThoughtWorker should be able to drop in commando style and just start working. The reality is they are usually totally lost anyway.
Seriously consider recruiting one full time employee as a team lead, another as a project manager, and then staff the rest of your team with independent consultants. You’ll find that you get more control and better quality at a lower price.

Finally, a company like ThoughtWorks uses bizarre socialization processes and weird shit like Neuro-Linguistic Programming to enslave their employees into working more hours than needed. That shit about “can’t leave with a broken build”, pair programming, hazing rituals, firing people who don’t conform, and other unprofessional behavior mostly exists to make employees pliable pawns.

Why? Because ThoughtWorks pays these people a salary that is fixed and considered a sunk cost. If they pay someone 60k/year and that person works 40 hours/week then they are paying them about $29/hour. If they convince this idiot to work 60 hours/week then they are basically paying the moron $19/hour. If they can push them to 80 hour/week then these idiots are actually making $14/hour. You can make $29/hour managing a fast food joint.

The further and harder ThoughtWorks (or any consulting firm) pushes its employees the more money they make because then they charge the client for each fucking hour. Get it? If they push an employee to 60/week they not only reduce the cost of that employee but also increase the billable hours. Hell, even if they don’t charge for those hours they still make more money just by reducing costs.

Now I’ll admit I didn’t see ThoughtWorks do this quite as much as I’ve seen IBM Global Services, Accenture, and BearingPoint do it, but they still do it. My observation about ThoughtWorks is they’re really really really fucking weird about it. I saw them pull passive aggressive shit like picking on a single employee high-school-nerd-vs-jock style until he conforms or quits.

What’s this got to do with your project? Well, if you have a mix of ThoughtWorks employees and your own then be careful that the ThoughtWorkers don’t warp your employees as well. I’ve seen it once already where a room full of ThoughtWorkers would thrash and trash on one poor employee simply because he disagreed with their approach to a problem. Or, having special boards on the wall with “How Many Times Frank Is Late”. Or, holding “dev lunches” (which I called “dev lynches“) where they thrash client employees with alternative opinions in order to maintain their stupid operations.

I’ve seen it, and they do it. Be careful of it as you’ll lose people who are smart and not susceptible to that crap, or you’ll have a bunch of brain washed idiots at the end of the project. It’s also a horrible way to treat a client so don’t put up with it.

More To Come

This is a long rant I’m writing in serial form. Stay tuned for more about Ruby conferences and why they suck, and why the Pickaxe book is what killed Ruby.

source: http://www.zedshaw.com.sharedcopy.com/rants/51489cec9386f7c13f69b3a58cd50b02.html

Hibernate Tips and FAQ

2009-11-20T16:38:00.000-08:00

Hello! Well, I encountered many problems when using Hibernate. So I'm going to post here how I solved the problems.

LazyInitializationException
When you commit a transaction the session is closed. So I was getting LazyInitializationException in my Swing application. You don't need to commit after reading operations. And I was right. I removed the commit after the read and the problem was gone.

Cannot fetch multiple begs
The name of the error was something like this, cannot fetch multiple begs. It was because I had in the same class two Lists with fetch type equals Eager. I just changed one to Set and problem solved.

I can't remember more errors, but for sure they will appear. Well, I hope not. xD

If you had some problem that you could solve, share your solution here!!!

What Technology Should (and Shouldn't) Try to Achieve

2009-11-11T16:50:00.000-08:00

source-> http://www.oreillynet.com/xml/blog/2002/08/does_xml_suck_revisited.html

"Does XML Suck?" Revisited

Tuesday August 6, 2002 11:33AM
by Jeff Bone

XML-bashing seems to have become a semi-popular passtime of late… of the many critiques I’ve come across, this presentation is one of the best. Here are a few hopefully reasonable comments addressing the whole anti-XML sentiment that’s floating around and this critique in particular.

Up front… I’m not particularly an XML advocate; I’ve been involved in none of the XML specifications or working groups. However, while I share some of the same feelings that somehow XML is rather “grotty,” I’ve developed what I hope is a reasonable position on the matter.

Some of Aaron’s arguments are pretty good, but some rest on a few assumptions and philosophical positions that are, IMHO, erroneous.

What Technology Should (and Shouldn’t) Try to Achieve

All instances of technology have one meta-purpose: to accomplish or achieve some function, feature, or design requirement. That’s it. It’s not the job of a technology to be beautiful, aesthetically pleasing, etc. In fact, there’s *no such thing* as beautiful or aesthetically pleasing technology. We technologists are prone to thinking that technology can have these qualities because we “feel” that some technologies do; however, this is a trap — one that we technologists often fall into.

A technology should accomplish what it is designed to accomplish in a reasonably efficient manner, with minimal cognitive overhead. Let’s break that down: technology should be designed to accomplish some purpose. It should not attempt to accomplish things for which it is not explicitly and specifically designed. (A desire to make our artifacts very general is another pervasive trap that us techies fall into.) It should fulfill its design in a reasonably efficient manner; this means that it shouldn’t be obviously and grossly inefficient, i.e., some other design should not be able to fulfill the specific requirements in a significantly more efficient manner. Efficiency is a loosey-goosey term, but it can mean computational efficiency, storage or bandwidth efficiency, ease-of-use, or any combination of the above and other types of efficiency. Efficiency is likely to be domain-specific, so the statement needs be interpreted in the context of the particular application. Minimal cognitive overhead means that the simplest design that achieves the design requirements reasonably efficiently wins.

All other considerations about a technology are illusionary, insignificant, unimportant. A technology that does what it is supposed to in an efficient manner with no more than a minimum amount of complexity is “good enough” — and there’s no such thing as “better than good enough.” The mistaken belief that there is such a thing is what leads to a chronic and puzzling thing in the marketplace: technologies that are deemed “best of breed” (i.e., exceed their design requirements on somebody’s subjective quality assessment) *ALWAYS* underperform “inferior” but adequate technologies in the market. (NeXT, Beta, Objective C, the Mac, Be, Newton, etc. etc. etc.)

Aaron falls into this trap when he describes XML as “technologically terrible.” He’s expressing an aesthetic opinion dressed up as a technological argument. The question we should ask when evaluating XML (or any technology) is: “can something else do as good or better a job on the relevant / important dimensions?” The answer for XML *might* be “yes”, but in absence of any compelling evidence to the contrary it’s probably “no.”

“Does XML Suck?” Revisited

Aaron lists “verbosity” as one of the problems with XML. He’s not alone in that complaint. However, this criticism is off base for several reasons. First, it’s important to distinguish between XML-the-syntax and XML-the-datastructure. Complaints about syntax are, generally, pretty silly. Two otherwise equivalent syntaxes for something should be considered the same; and a range of techniques exist for reducing the verbosity of XML (including judicious use of namespaces and schemas, as well as things like binary and indexed representations.) Complaining about XML’s verbosity is a generalization from some certain bad examples of XML. And: some researchers at IBM Almaden about two years ago [lost the ref, anybody] showed that a reasonably efficient XML representation of something was IIRC same-order the size of the minimal representation / encoding of something that carried the same amount of structural and semantic information. That is, with appropriately efficient use of namespaces, etc. XML will be less than 10x the minimal compressed size of the same info given any non-lossy compression scheme. In my experience, differences of that order can largely be ignored in almost all systems. (It’s the O(n^2), O(n!) etc. stuff that we’ve got to worry about.)

Aaron also emphasizes that XML isn’t the most human-readable representation. But that assumes that XML is intended to be read / written by humans. It’s tempting to make that assumption, but IMHO it’s incorrect: we make that assumption because HTML is often read / written by humans. However, just as *more* HTML is created / processed by software than by people, so too (and even moreso) is more XML created / processed by software than people. The nice thing about both is that they *can* — when necessary — be processed by humans. XML represents a nice tradeoff between human readability and efficient machine representation.

Aaron’s arguments about complexity sound reasonable on the surface, however… Complexity is a tough thing to pin down. In computer science we have good (at least adequate) tools for analyzing and understanding computational complexity e.g. time-space tradeoffs, algorithmic complexity, etc. Information theory gives us some tools for dealing with information complexity… But we have very poor or no tools for analyzing and quantitatively addressing problems of dynamic complexity of component interactions in systems, representational complexity of data structures, expressivity of languages, etc. I’ve spent over a year trying to create a theory of the former (compositional complexity in software architectures) and let me tell you, complexity is a complex notion. ;-)

Representational complexity and expressivity is an even less studied and less understood area, and while Aaron may in fact be right his argument isn’t well supported. And there are hints from information theory — such as the size order of XML vs. theoretic optima — that indicate that it’s wrong.

If Aaron can state exactly what he means by “complexity” and quantify / generalize his argument, it would be significant not only as XML criticism but as an important result in computer science.

The “acronym proliferation” problem is very real, but it’s a function of where this technology is in its lifecycle and the amount of attention it has received. It’s not surprising that there’s a “fan-out” of overlapping applications / standards / etc. related to XML — it’s relatively early, very general, and lots of people are trying to do stuff. That leads to quite a bit of noise and frustration but — inevitably — there will be a “fan-in” to a few general, standard tools for various things. Aaron even recognizes that this is happening: “Even here, the situation is improving.”

The bottom line is this: it *might* be possible to design a similar representational mechanism that accomplishes all the things that XML accomplishes — i.e., multidimensional reference structures with arbitrary attribution and strong typing… But *today* there are no existence proofs of such alternatives and, indeed, I believe that if there were they would strongly resemble XML except in the trivial details. In the absence of proposals for such alternatives, it would seem that criticizing XML is a rather empty exercise.

And Aaron recognizes the most important argument *for* XML — its socioeconomic benefits. “Everybody’s doing it” is a very *good* argument for any technology; systems that can communicate through such a mechanism grow in value with the square of the number of components, per Metcalfe’s law. Anyone using other idiosyncratic technologies to accomplish some or all of the same things actually inhibit the overall growth of value of the system.

What do you think? Does XML suck? Is it horribly inefficient? Are there better alternatives that accomplish the same thing?

source-> http://www.oreillynet.com/xml/blog/2002/08/does_xml_suck_revisited.html

Books I read

2009-10-26T08:29:00.000-07:00

Books I read:

JAVA:

Just Java 2 6th edition
SCJP Sun Certified Programmer for Java 6
Core Java 2, Volume I -- Fundamentals. 7th edition

C:
Practical C Programming, 3rd edition

PROGRAMMING IN GENERAL:

Coders at Work

Regular Expressions

2009-04-02T12:23:00.000-07:00

date 04/02/09

source http://weblogtoolscollection.com/regex/regex.php

Naruto Opening

2009-01-06T16:08:00.000-08:00

Naruto Beginning theme 1

Naruto Shippuuden Opening Song [Hero's Comeback]

Naruto Opening 2- Haruka Kanata

Naruto Opening 3

javascript

2008-12-18T07:15:00.000-08:00

JavaScript Stuff

********************************

Curly Braces Convention

Use the Java convention and not others like C#. You may come across hard to catch problems.

********************************

About the "new" operator

I don't use "new" anymore. I think it's just too dangerous.

Doug Crockford. 00:25:35

http://www.youtube.com/watch?v=hQVTIJBZook

*******************************

Creating an Object

First way:

var person = {
name: 'Leandro',
age: 23
};

document.write(person);

for(var p in person) {
document.write(p + ' = ' + person[p]);
}

Second way:

var person = new Object();

person.name = 'Your name';
person.age = 80;

****************************

Iterating through an Object or Array -

var person = new Object();

person.name = 'Leandro';
person.age = 23;

for(var p in person) {
document.write(p + ' = ' + person[p]);
}

***************************

date 02/01/2010

Hi! I found an interesting thing about JavaScript today.

I was trying to set the value of a text field in the popup window, but
I was not having success.

The problem was that the page didn't have render yet, so I couldn't access the field.

So, instead of the parent window try to access the pop up window, I made the popup window access the parent window. =)

--------------------------------------------------------

date 12/24/08

Fixed tooltip

There are lot of scripts about tooltip available dynamicdrive is a good example. But I need one that the tooltip would be fixed (positon: absolute) and I could pass the mouse over it. I didn't find one that do that (i didn't search too much =D), and what I found made javascript look complex, at least to me (do you think javascript is complex?), and would be difficult to modifie, so I create this one.
It's a very readable code. If you have any doubts or can improve it, post a comment here.

http://www.webdeveloper.com/forum/showthread.php?p=962797#post962797

/************************************
date 22/12/08
How to access a element in a iframe
both with Firefox (the best) and IE (the worst)

/****************************************************
date: 18/12/08

Most modern browsers support cookies. However, a user can usually also choose whether cookies should be used or not. The following are common options:

To enable or disable cookies completely, so that they are always accepted or always blocked.
To allow the user to see the cookies that are active with respect to a given page by typing

javascript:alert("Cookies: "+document.cookie)

in the browser URL field. Some browsers incorporate a cookie manager for the user to see and selectively delete the cookies currently stored in the browser.

Gloria Estefan - Reach

2008-12-10T02:57:00.000-08:00

Some dreams live on in time forever
those dreams, you want with
all your heart

and I'll do whatever it takes
follow through with the promise I made
put it all on the line
what I hoped for at last would be mine

if I could reach, higher
just for one moment touch the sky
from that one moment in my life
I'm gonna be stronger
know that I've tried my
very best
I'd put my spirit to the test
if I could reach

somedays are meant to be
remembered
those days we rise above
the stars

so I'll go the distance
this time
seeing more the higher I climb
that the more I believe
all the more that this dream
will be mine

Alguns sonhos vivem para sempre no tempo
Aqueles sonhos que você anseia com todo
coração.

E eu farei o que for preciso
Seguir a diante com a promessa que fiz
Colocar tudo na linha
O que eu esperava, finalmente seria meu

Seu eu pudesse alcançar, mais alto
Só por um instante tocar o céu
A partir deste momento em minha vida
Eu vou ser mais forte
Sabendo que eu fiz o meu
melhor
Eu colocaria meu espírito a teste
Se eu pudesse alcançar

Alguns dias são destinados a
serem lembrados
Aqueles dias em que nós
ultrapassamos as estrelas

Então eu vou à distância
desta vez
Vendo mais, quanto mais eu me elevo
Que quanto mais eu acredito
Mais este sonho
será meu

JAR files

2008-12-07T13:15:00.000-08:00

jar tutorial http://java.sun.com/docs/books/tutorial/deployment/jar/index.html

JAR File Specification http://java.sun.com/j2se/1.5.0/docs/guide/jar/jar.html

//////////////////******************************************

source: http://www.ibm.com/developerworks/library/j-jar/index.html

What is a JAR file?

The JAR file format is based on the popular ZIP file format, and is used for aggregating many files into one. Unlike ZIP files, JAR files are used not only for archiving and distribution, but also for deployment and encapsulation of libraries, components, and plug-ins, and are consumed directly by tools such as compilers and JVMs. Special files contained in the JAR, such as manifests and deployment descriptors, instruct tools how a particular JAR is to be treated.

A JAR file might be used:

For distributing and using class libraries
As building blocks for applications and extensions
As deployment units for components, applets, or plug-ins
For packaging auxiliary resources associated with components

The JAR file format provides many benefits and features, many of which are not provided with a traditional archive format such as ZIP or TAR. These include:

Security. You can digitally sign the contents of a JAR file. Tools that recognize your signature can then optionally grant your software security privileges it wouldn't otherwise have, and detect if the code has been tampered with.
Decreased download time. If an applet is bundled in a JAR file, the applet's class files and associated resources can be downloaded by a browser in a single HTTP transaction, instead of opening a new connection for each file.
Compression. The JAR format allows you to compress your files for efficient storage.
Transparent platform extension. The Java Extensions Framework provides a means by which you can add functionality to the Java core platform, which uses the JAR file for packaging of extensions. (Java 3D and JavaMail are examples of extensions developed by Sun.)
Package sealing. Packages stored in JAR files can be optionally sealed to enforce version consistency and security. Sealing a package means that all classes defined in that package must be found in the same JAR file.
Package versioning. A JAR file can hold data about the files it contains, such as vendor and version information.
Portability. The mechanism for handling JAR files is a standard part of the Java platform's core API.

Compressed and uncompressed JARs

The jar tool (see The jar tool for details) compresses files by default. Uncompressed JAR files can generally be loaded more quickly than compressed JAR files, because the need to decompress the files during loading is eliminated, but download time over a network may be longer for uncompressed files.

The META-INF directory

Most JAR files contain a META-INF directory, which is used to store package and extension configuration data, such as security and versioning information. The following files or directories in the META-INF directory are recognized and interpreted by the Java 2 platform for configuring applications, extensions, and class loaders:

MANIFEST.MF. The manifest file defines the extension- and package-related data.
INDEX.LIST. This file is generated by the new -i option of the jar tool and contains location information for packages defined in an application or extension. It is part of the JarIndex implementation and used by class loaders to speed up the class loading process.
xxx.SF. This is the signature file for the JAR file. The placeholder xxx identifies the signer.
xxx.DSA. The signature block file associated with the signature file stores the public signature used to sign the JAR file.

The jar tool

To perform basic tasks with JAR files, you use the Java Archive Tool (jar tool) provided as part of the Java Development Kit. You invoke the jar tool with the jar command. Table 1 shows some common applications:

Table 1. Common usages of the jar tool

Function	Command
Creating a JAR file from individual files	jar cf jar-file input-file...
Creating a JAR file from a directory	jar cf jar-file dir-name
Creating an uncompressed JAR file	jar cf0 jar-file dir-name
Updating a JAR file	jar uf jar-file input-file...
Viewing the contents of a JAR file	jar tf jar-file
Extracting the contents of a JAR file	jar xf jar-file
Extracting specific files from a JAR file	jar xf jar-file archived-file...
Running an application packaged as an executable JAR file	java -jar app.jar

Back to top

Executable JARs

An executable jar file is a self-contained Java application stored in a specially configured JAR file, which can be executed directly by the JVM without having to first extract the files or set up a class path. To run an application stored in a non-executable JAR, you have to add it to your class path and invoke the application's main class by name. But by using executable JAR files, we can run an application without extracting it or needing to know the main entry point. Executable JARs facilitate easy distribution and execution of Java applications.

Creating executable JARs

Creating an executable JAR is easy. You begin by placing all your application code in a single directory. Let's say the main class in your application is com.mycompany.myapp.Sample. You want to create a JAR file that contains the application code and identifies the main class. To do this, create a file called manifest somewhere (not in your application directory), and add the following line to it:

Main-Class: com.mycompany.myapp.Sample

Then, create the JAR file like this:

jar cmf manifest ExecutableJar.jar application-dir

That's all there is to it -- now the JAR file ExecutableJar.jar can be executed using java -jar.

An executable JAR must reference all the other dependent JARs it requires through the Class-Path header of the manifest file. The environment variable CLASSPATH and any class path specified on the command line is ignored by the JVM if the -jar option is used.

Launching executable JARs

Now that we've packaged our application into an executable JAR called ExecutableJar.jar, we can launch the application directly from the file using the following command:

java -jar ExecutableJar.jar

Back to top

Package sealing

Sealing a package within a JAR file means that all classes defined in that package must be found in the same JAR file. This allows the package author to enforce version consistency among packaged classes. Sealing also provides a security measure to detect code tampering.

To seal a package, add a Name header for the package, followed by a Sealed header with value "true" to the JAR manifest file. Just as with executable JARs, you can seal a JAR by specifying a manifest file with the appropriate header elements when the JAR is created, as shown here:

Name: com/samplePackage/
Sealed: true

The Name header identifies the package's relative pathname. It ends with a "/" to distinguish it from a filename. Any headers following a Name header, without any intervening blank lines, apply to the file or package specified in the Name header. In the example above, because the Sealed header occurs after the Name header without intervening blank lines, the Sealed header will be interpreted as applying only to the package com/samplePackage.

If you try to load a class in a sealed package from another source other than the JAR file in which the sealed package lives, the JVM will throw a SecurityException.

Packaging for extensions

Extensions add functionality to the Java platform, and an extensions mechanism is built into the JAR file format. The Extensions mechanism allows JAR files to specify other required JAR files via the Class-Path headers in the manifest file.

Let's say that extension1.jar and extension2.jar are two JAR files in the same directory, with the manifest of extension1.jar containing the following header:

Class-Path: extension2.jar

This header indicates that the classes in extension2.jar serve as extension classes for purposes of the classes in extension1.jar. The classes in extension1.jar can invoke classes in extension2.jar without extension2.jar having to be part of the class path.

The JVM effectively automatically adds JARs referenced in a Class-Path header to the class path when loading a JAR that uses the extension mechanism. However, the extension JAR path is interpreted as a relative path, so in general the extension JAR must be stored in the same directory as the JAR referencing it.

For example, assume the class ExtensionClient, which references class ExtensionDemo, is bundled in a JAR file called ExtensionClient.jar, and that the class ExtensionDemo is bundled in ExtensionDemo.jar. In order for ExtensionDemo.jar to be treated as an extension, ExtensionDemo.jar must be listed in the Class-Path header in ExtensionClient.jar's manifest, as follows:

Manifest-Version: 1.0
Class-Path: ExtensionDemo.jar

The value of the Class-Path header in this manifest is ExtensionDemo.jar with no path specified, indicating that ExtensionDemo.jar is located in the same directory as the ExtensionClient JAR file.

Back to top

Security in JAR files

A JAR file can be signed by using the jarsigner tool or directly through the java.security API. A signed JAR file is exactly the same as the original JAR file, except that its manifest is updated, and two additional files are added to the META-INF directory, a signature file and a signature block file.

A JAR file is signed using a certificate stored in the Keystore database. Certificates stored in the keystore are protected with a password, which must be provided to the jarsigner tool to sign a JAR file.

Figure 1. Keystore database

Each signer of a JAR is represented by a signature file with the extension .SF within the META-INF directory of the JAR file. The format of the file is similar to the manifest file -- a set of RFC-822 headers. As shown below, it consists of a main section, which includes information supplied by the signer but not specific to any particular JAR file entry, followed by a list of individual entries which also must be present in the manifest file. To validate a file from a signed JAR, a digest value in the signature file is compared against a digest calculated against the corresponding entry in the JAR file.

Listing 1. Manifest and signature files in signed JARs

Contents of signature file META-INF/MANIFEST.MF

Manifest-Version: 1.0
Created-By: 1.3.0 (Sun Microsystems Inc.)

Name: Sample.java
SHA1-Digest: 3+DdYW8INICtyG8ZarHlFxX0W6g=

Name: Sample.class
SHA1-Digest: YJ5yQHBZBJ3SsTNcHJFqUkfWEmI=

Contents of signature file META-INF/JAMES.SF

Signature-Version: 1.0
SHA1-Digest-Manifest: HBstZOJBuuTJ6QMIdB90T8sjaOM=
Created-By: 1.3.0 (Sun Microsystems Inc.)

Name: Sample.java
SHA1-Digest: qipMDrkurQcKwnyIlI3Jtrnia8Q=

Name: Sample.class
SHA1-Digest: pT2DYby8QXPcCzv2NwpLxd8p4G4=

Digital signatures

A digital signature is a signed version of the .SF signature file. Digital signature files are binary files and have the same filename as the .SF file but a different extension. The extension varies depending on the type of digital signature -- RSA, DSA, or PGP -- and on the type of certificate used to sign the JAR.

Keystore

To sign a JAR file, you must first have a private key. Private keys and their associated public-key certificates are stored in password-protected databases called keystores. The JDK contains tools for creating and modifying keystores. Each key in the keystore can be identified by an alias, which is typically the name of the signer who owns the key.

All keystore entries (key and trusted certificate entries) are accessed with unique aliases. An alias is specified when you add an entity to the keystore using the keytool -genkey command to generate a key pair (public and private key). Subsequent keytool commands must use this same alias to refer to the entity.

For example, to generate a new public/private key pair with the alias "james" and wrap the public key into a self-signed certificate, you would use with the following command:

keytool -genkey -alias james -keypass jamespass
     -validity 80 -keystore jamesKeyStore
     -storepass jamesKeyStorePass

This command sequence specifies an initial password of "jamespass" required by subsequent commands to access the private key associated with the alias "james" in the keystore "jamesKeyStore." If the keystore "jamesKeyStore" does not exist, keytool will automatically create it.

The jarsigner tool

The jarsigner tool uses keystore to generate or verify digital signatures for JAR files.

Assuming you've created the keystore "jamesKeyStore" as in the example above, and it contains a key with alias "james," you can sign a JAR file with the following command:

jarsigner -keystore jamesKeyStore -storepass jamesKeyStorePass
       -keypass jamespass -signedjar SSample.jar Sample.jar james

This command fetches the key whose alias is "james" and whose password is "jamespass" from the keystore named "jamesKeyStore" with the password "jamesKeyStorePass," and signs the Sample.jar file, creating a signed JAR, SSample.jar.

The jarsigner tool can also verify a signed JAR file; this operation is considerably simpler than signing the JAR file. Just execute the following command:

jarsigner -verify SSample.jar

If the signed JAR file has not been tampered with, the jarsigner tool will tell you the JAR has been verified; otherwise, it will throw a SecurityException indicating which files could not be verified.

JARs can also be signed programmatically using the java.util.jar and java.security APIs. Alternatively, you can use tools such as Netscape Object Signing Tool.

You can also sign JARs programmatically using the java.util.jar and java.security APIs. (See Resources for details). Alternatively, you can use tools such as the Netscape Object Signing Tool.

Back to top

JAR indexing

If an application or applet is bundled into multiple JAR files, the class loader uses a simple linear search algorithm to search each element of the class path, which may entail the class loader downloading and opening many JAR files until the class or resource is found. If the class loader tries to find a nonexistent resource, all the JAR files within the application or applet will have to be downloaded. For large network applications and applets this could result in slow start up, sluggish response, and wasted network bandwidth.

Since JDK 1.3, the JAR file format has supported indexing to optimize the process of searching for classes in network applications, especially applets. The JarIndex mechanism collects the contents of all the JAR files defined in an applet or application and stores the information in an index file in the first JAR file. After the first JAR file is downloaded, the applet class loader will use the collected content information for efficient downloading of JAR files. This directory information is stored in a simple text file named INDEX.LIST in the META-INF directory of the root JAR file.

Creating a JarIndex

You can create a JarIndex by specifying the -i option to the jar command. Suppose we have a directory structure as depicted in the following diagram:

Figure 2. JarIndex

You would use the following command to create an index file for JarIndex_Main.jar, JarIndex_test.jar, and JarIndex_test1.jar:

jar -i JarIndex_Main.jar JarIndex_test.jar SampleDir/JarIndex_test1.jar

The INDEX.LIST file has a simple format, containing the names of the packages or classes contained in each JAR file indexed, as shown in Listing 2:

Listing 2. Example JarIndex INDEX.LIST file

JarIndex-Version: 1.0

JarIndex_Main.jar
sp

JarIndex_test.jar
Sample

SampleDir/JarIndex_test1.jar
org
org/apache
org/apache/xerces
org/apache/xerces/framework
org/apache/xerces/framework/xml4j

Back to top

Summary

The JAR format is much more than an archive format; it has many features for improving the efficiency, security, and organization of Java applications. Because these features are built into the core platform, including the compiler and classloader, developers can leverage the power of the JAR file format to simplify and improve their development and deployment processes.

source: http://www.ibm.com/developerworks/library/j-jar/index.html

Steve Jobs Stanford Commencement Speech 2005

2008-11-30T07:17:00.000-08:00

source http://news-service.stanford.edu/news/2005/june15/jobs-061505.html
youtube http://www.youtube.com/watch?v=D1R-jKKp3NA

Stanford Report, June 14, 2005

'You've got to find what you love,' Jobs says

This is the text of the Commencement address by Steve Jobs, CEO of Apple Computer and of Pixar Animation Studios, delivered on June 12, 2005.

I am honored to be with you today at your commencement from one of the finest universities in the world. I never graduated from college. Truth be told, this is the closest I've ever gotten to a college graduation. Today I want to tell you three stories from my life. That's it. No big deal. Just three stories.

The first story is about connecting the dots.

I dropped out of Reed College after the first 6 months, but then stayed around as a drop-in for another 18 months or so before I really quit. So why did I drop out?

It started before I was born. My biological mother was a young, unwed college graduate student, and she decided to put me up for adoption. She felt very strongly that I should be adopted by college graduates, so everything was all set for me to be adopted at birth by a lawyer and his wife. Except that when I popped out they decided at the last minute that they really wanted a girl. So my parents, who were on a waiting list, got a call in the middle of the night asking: "We have an unexpected baby boy; do you want him?" They said: "Of course." My biological mother later found out that my mother had never graduated from college and that my father had never graduated from high school. She refused to sign the final adoption papers. She only relented a few months later when my parents promised that I would someday go to college.

And 17 years later I did go to college. But I naively chose a college that was almost as expensive as Stanford, and all of my working-class parents' savings were being spent on my college tuition. After six months, I couldn't see the value in it. I had no idea what I wanted to do with my life and no idea how college was going to help me figure it out. And here I was spending all of the money my parents had saved their entire life. So I decided to drop out and trust that it would all work out OK. It was pretty scary at the time, but looking back it was one of the best decisions I ever made. The minute I dropped out I could stop taking the required classes that didn't interest me, and begin dropping in on the ones that looked interesting.

It wasn't all romantic. I didn't have a dorm room, so I slept on the floor in friends' rooms, I returned coke bottles for the 5¢ deposits to buy food with, and I would walk the 7 miles across town every Sunday night to get one good meal a week at the Hare Krishna temple. I loved it. And much of what I stumbled into by following my curiosity and intuition turned out to be priceless later on. Let me give you one example:

Reed College at that time offered perhaps the best calligraphy instruction in the country. Throughout the campus every poster, every label on every drawer, was beautifully hand calligraphed. Because I had dropped out and didn't have to take the normal classes, I decided to take a calligraphy class to learn how to do this. I learned about serif and san serif typefaces, about varying the amount of space between different letter combinations, about what makes great typography great. It was beautiful, historical, artistically subtle in a way that science can't capture, and I found it fascinating.

None of this had even a hope of any practical application in my life. But ten years later, when we were designing the first Macintosh computer, it all came back to me. And we designed it all into the Mac. It was the first computer with beautiful typography. If I had never dropped in on that single course in college, the Mac would have never had multiple typefaces or proportionally spaced fonts. And since Windows just copied the Mac, its likely that no personal computer would have them. If I had never dropped out, I would have never dropped in on this calligraphy class, and personal computers might not have the wonderful typography that they do. Of course it was impossible to connect the dots looking forward when I was in college. But it was very, very clear looking backwards ten years later.

Again, you can't connect the dots looking forward; you can only connect them looking backwards. So you have to trust that the dots will somehow connect in your future. You have to trust in something — your gut, destiny, life, karma, whatever. This approach has never let me down, and it has made all the difference in my life.

My second story is about love and loss.

I was lucky — I found what I loved to do early in life. Woz and I started Apple in my parents garage when I was 20. We worked hard, and in 10 years Apple had grown from just the two of us in a garage into a $2 billion company with over 4000 employees. We had just released our finest creation — the Macintosh — a year earlier, and I had just turned 30. And then I got fired. How can you get fired from a company you started? Well, as Apple grew we hired someone who I thought was very talented to run the company with me, and for the first year or so things went well. But then our visions of the future began to diverge and eventually we had a falling out. When we did, our Board of Directors sided with him. So at 30 I was out. And very publicly out. What had been the focus of my entire adult life was gone, and it was devastating.

I really didn't know what to do for a few months. I felt that I had let the previous generation of entrepreneurs down - that I had dropped the baton as it was being passed to me. I met with David Packard and Bob Noyce and tried to apologize for screwing up so badly. I was a very public failure, and I even thought about running away from the valley. But something slowly began to dawn on me — I still loved what I did. The turn of events at Apple had not changed that one bit. I had been rejected, but I was still in love. And so I decided to start over.

I didn't see it then, but it turned out that getting fired from Apple was the best thing that could have ever happened to me. The heaviness of being successful was replaced by the lightness of being a beginner again, less sure about everything. It freed me to enter one of the most creative periods of my life.

During the next five years, I started a company named NeXT, another company named Pixar, and fell in love with an amazing woman who would become my wife. Pixar went on to create the worlds first computer animated feature film, Toy Story, and is now the most successful animation studio in the world. In a remarkable turn of events, Apple bought NeXT, I returned to Apple, and the technology we developed at NeXT is at the heart of Apple's current renaissance. And Laurene and I have a wonderful family together.

I'm pretty sure none of this would have happened if I hadn't been fired from Apple. It was awful tasting medicine, but I guess the patient needed it. Sometimes life hits you in the head with a brick. Don't lose faith. I'm convinced that the only thing that kept me going was that I loved what I did. You've got to find what you love. And that is as true for your work as it is for your lovers. Your work is going to fill a large part of your life, and the only way to be truly satisfied is to do what you believe is great work. And the only way to do great work is to love what you do. If you haven't found it yet, keep looking. Don't settle. As with all matters of the heart, you'll know when you find it. And, like any great relationship, it just gets better and better as the years roll on. So keep looking until you find it. Don't settle.

My third story is about death.

When I was 17, I read a quote that went something like: "If you live each day as if it was your last, someday you'll most certainly be right." It made an impression on me, and since then, for the past 33 years, I have looked in the mirror every morning and asked myself: "If today were the last day of my life, would I want to do what I am about to do today?" And whenever the answer has been "No" for too many days in a row, I know I need to change something.

Remembering that I'll be dead soon is the most important tool I've ever encountered to help me make the big choices in life. Because almost everything — all external expectations, all pride, all fear of embarrassment or failure - these things just fall away in the face of death, leaving only what is truly important. Remembering that you are going to die is the best way I know to avoid the trap of thinking you have something to lose. You are already naked. There is no reason not to follow your heart.

About a year ago I was diagnosed with cancer. I had a scan at 7:30 in the morning, and it clearly showed a tumor on my pancreas. I didn't even know what a pancreas was. The doctors told me this was almost certainly a type of cancer that is incurable, and that I should expect to live no longer than three to six months. My doctor advised me to go home and get my affairs in order, which is doctor's code for prepare to die. It means to try to tell your kids everything you thought you'd have the next 10 years to tell them in just a few months. It means to make sure everything is buttoned up so that it will be as easy as possible for your family. It means to say your goodbyes.

I lived with that diagnosis all day. Later that evening I had a biopsy, where they stuck an endoscope down my throat, through my stomach and into my intestines, put a needle into my pancreas and got a few cells from the tumor. I was sedated, but my wife, who was there, told me that when they viewed the cells under a microscope the doctors started crying because it turned out to be a very rare form of pancreatic cancer that is curable with surgery. I had the surgery and I'm fine now.

This was the closest I've been to facing death, and I hope its the closest I get for a few more decades. Having lived through it, I can now say this to you with a bit more certainty than when death was a useful but purely intellectual concept:

No one wants to die. Even people who want to go to heaven don't want to die to get there. And yet death is the destination we all share. No one has ever escaped it. And that is as it should be, because Death is very likely the single best invention of Life. It is Life's change agent. It clears out the old to make way for the new. Right now the new is you, but someday not too long from now, you will gradually become the old and be cleared away. Sorry to be so dramatic, but it is quite true.

Your time is limited, so don't waste it living someone else's life. Don't be trapped by dogma — which is living with the results of other people's thinking. Don't let the noise of others' opinions drown out your own inner voice. And most important, have the courage to follow your heart and intuition. They somehow already know what you truly want to become. Everything else is secondary.

When I was young, there was an amazing publication called The Whole Earth Catalog, which was one of the bibles of my generation. It was created by a fellow named Stewart Brand not far from here in Menlo Park, and he brought it to life with his poetic touch. This was in the late 1960's, before personal computers and desktop publishing, so it was all made with typewriters, scissors, and polaroid cameras. It was sort of like Google in paperback form, 35 years before Google came along: it was idealistic, and overflowing with neat tools and great notions.

Stewart and his team put out several issues of The Whole Earth Catalog, and then when it had run its course, they put out a final issue. It was the mid-1970s, and I was your age. On the back cover of their final issue was a photograph of an early morning country road, the kind you might find yourself hitchhiking on if you were so adventurous. Beneath it were the words: "Stay Hungry. Stay Foolish." It was their farewell message as they signed off. Stay Hungry. Stay Foolish. And I have always wished that for myself. And now, as you graduate to begin anew, I wish that for you.

Stay Hungry. Stay Foolish.

Thank you all very much.

source http://news-service.stanford.edu/news/2005/june15/jobs-061505.html
youtube http://www.youtube.com/watch?v=D1R-jKKp3NA

In portuguese:

Idiomatic Expressions

2008-11-07T09:31:00.000-08:00

- There's so much at stake. -> A tanta coisa em jogo.
- A chain is no stronger thant its weakest link.
- the end of (one's) rope -> The limit of one's patience, endurance, or resources.

http://www.usingenglish.com/reference/idioms/

Scalability

2008-11-05T12:13:00.000-08:00

A system whose performance improve after adding hardware, proportionally to the capacity added, is said to be a scalable system.

Source: http://en.wikipedia.org/wiki/Scalability

become better programming

2008-10-27T08:29:00.000-07:00

dates in english format

/***********************************************/
05/23/2010

This is sometimes called hacking; in other contexts, it is called "engineering." In essence, it is the ability to build a tool when the right one is not already on hand.
http://radar.oreilly.com/archives/2007/02/pipes-and-filte.html

/***********************************************/

04/04/2010

There is a saying that: If you wanna be a good programmer, you just program every day for two years, you will be an excellent programmer. If you want to be a world-class programmer, you can program every day for ten years, or you can

program for two years and take an algorithms class.

MIT teacher -> http://www.youtube.com/watch?v=JPyuH4qXLZ0&feature=fvste2
/***********************************************/
08/01/2009
first write what a function or whatever is supposed to do, then you implement it.
a professor from Berkley, forgot his name.

/***********************************************/
07/21/09
Ideally, the programmer should not need control this detail of specifying exactly how it variables are passed, just say which direction the information goes and leave the compiler to optimize it automatically, but C was designed for raw low-level programming on far less powerful computers that are standard these days so the programmer has to do it explicitly.
source: http://duramecho.com/ComputerInformation/WhyHowCppConst.html

/***********************************************/
07/13/09
The question of whether Machines Can Think... is about as relevant as the question of whether Submarines Can Swim -- Edsger W. Dijkstra
/***********************************************/
03/13/09

source: http://thread.gmane.org/gmane.comp.version-control.git/57643/focus=57918

On Wed, 5 Sep 2007, Dmitry Kakurin wrote:
>
> When I first looked at Git source code two things struck me as odd:
> 1. Pure C as opposed to C++. No idea why. Please don't talk about portability,
> it's BS.

*YOU* are full of bullshit.

C++ is a horrible language. It's made more horrible by the fact that a lot
of substandard programmers use it, to the point where it's much much
easier to generate total and utter crap with it. Quite frankly, even if
the choice of C were to do *nothing* but keep the C++ programmers out,
that in itself would be a huge reason to use C.

In other words: the choice of C is the only sane choice. I know Miles
Bader jokingly said "to piss you off", but it's actually true. I've come
to the conclusion that any programmer that would prefer the project to be
in C++ over C is likely a programmer that I really *would* prefer to piss
off, so that he doesn't come and screw up any project I'm involved with.

C++ leads to really really bad design choices. You invariably start using
the "nice" library features of the language like STL and Boost and other
total and utter crap, that may "help" you program, but causes:

- infinite amounts of pain when they don't work (and anybody who tells me
that STL and especially Boost are stable and portable is just so full
of BS that it's not even funny)

- inefficient abstracted programming models where two years down the road
you notice that some abstraction wasn't very efficient, but now all
your code depends on all the nice object models around it, and you
cannot fix it without rewriting your app.

In other words, the only way to do good, efficient, and system-level and
portable C++ ends up to limit yourself to all the things that are
basically available in C. And limiting your project to C means that people
don't screw that up, and also means that you get a lot of programmers that
do actually understand low-level issues and don't screw things up with any
idiotic "object model" crap.

So I'm sorry, but for something like git, where efficiency was a primary
objective, the "advantages" of C++ is just a huge mistake. The fact that
we also piss off people who cannot see that is just a big additional
advantage.

If you want a VCS that is written in C++, go play with Monotone. Really.
They use a "real database". They use "nice object-oriented libraries".
They use "nice C++ abstractions". And quite frankly, as a result of all
these design decisions that sound so appealing to some CS people, the end
result is a horrible and unmaintainable mess.

But I'm sure you'd like it more than git.

Linus

source: http://thread.gmane.org/gmane.comp.version-control.git/57643/focus=57918

/***********************************************/
02/04/09

Server-side filtering is important for security, while client-side validation is important for usability.
PHP 5 Certification Study Guide

/***********************************************/
date: 01/13/09

What programming language to choose?

http://www.google.com/search?hl=en&sa=X&oi=spell&resnum=0&ct=result&cd=1&q=What+programming+language+to+choose%3F&spell=1

C++

Speaking of the average C++ programmer, what are C++’s major advantages over its newer rivals? In other words, what makes C++ relevant today – and tomorrow?

→ As ever: Performance, flexibility, generality, and access to hardware resources. When you encounter an application with "unusual requirements" you'll appreciate C++'s strengths compared to languages more finely tuned to a specific class of problems.

Actually, the interest in C++ seems to be increasing again. For example, the C++ track at the SD conference in Santa Clara in early March was by far the largest track and significantly larger than last year (where is again was larger than the year before).

Bjarne Stroustrup

/***********************************************/
date: 01/13/09
source: http://www.sans.org/top25errors/

CWE/SANS TOP 25 Most Dangerous Programming Errors

Experts Announce Agreement on the 25 Most Dangerous Programming Errors - And How to Fix Them
Agreement Will Change How Organizations Buy Software.

Project Manager: Bob Martin, MITRE
Questions: top25@sans.org

(January 12, 2009) Today in Washington, DC, experts from more than 30 US and international cyber security organizations jointly released the consensus list of the 25 most dangerous programming errors that lead to security bugs and that enable cyber espionage and cyber crime. Shockingly, most of these errors are not well understood by programmers; their avoidance is not widely taught by computer science programs; and their presence is frequently not tested by organizations developing software for sale.

The impact of these errors is far reaching. Just two of them led to more than 1.5 million web site security breaches during 2008 - and those breaches cascaded onto the computers of people who visited those web sites, turning their computers into zombies.

People and organizations that provided substantive input to the project are listed below. They are among the most respected security experts and they come from leading organizations ranging from Symantec and Microsoft, to DHS's National Cyber Security Division and NSA's Information Assurance Division, to OWASP and the Japanese IPA, to the University of California at Davis and Purdue University. The MITRE and the SANS Institute managed the Top 25 Errors initiative, but the impetus for this project came from the National Security Agency and financial support for MITRE's project engineers came from the US Department of Homeland Security's National Cyber Security Division. The Information Assurance Division at NSA and National Cybersecurity Division at DHS have consistently been the government leaders in working to improve the security of software purchased by the government and by the critical national infrastructure.

What was remarkable about the process was how quickly all the experts came to agreement, despite some heated discussion. "There appears to be broad agreement on the programming errors," says SANS Director, Mason Brown, "Now it is time to fix them. First we need to make sure every programmer knows how to write code that is free of the Top 25 errors, and then we need to make sure every programming team has processes in place to find, fix, or avoid these problems and has the tools needed to verify their code is as free of these errors as automated tools can verify."

The Office of the Director of National Intelligence expressed its support saying, "We believe that integrity of hardware and software products is a critical element of cybersecurity. Creating more secure software is a fundamental aspect of system and network security, given that the federal government and the nation's critical infrastructure depend on commercial products for business operations. The Top 25 is an important component of an overall security initiative for our country. We applaud this effort and encourage the utility of this tool through other venues such as cyber education."

Until now, most guidance focused on the 'vulnerabilities' that result from programming errors. This is helpful. The Top 25, however, focuses on the actual programming errors, made by developers that create the vulnerabilities. As important, the Top 25 web site provides detailed and authoritative information on mitigation. "Now, with the Top 25, we can spend less time working with police after the house has been robbed and instead focus on getting locks on the doors before it happens." said Paul Kurtz, a principal author of the US National Strategy to Secure Cyberspace and executive director of the Software Assurance Forum for Excellence in Code (SAFECode).

What You Will Find In This Announcement:

Which People and Organizations Made Substantive Contributions to the Top 25 Errors List?

How Will the Top 25 Errors Be Used?

How Important Are the Top 25 Errors?

What Errors Are Included in the Top 25?

Resources to Help Organizations Eliminate The Errors

Which People and Organizations Made Substantive Contributions to the Top 25 Errors List?

Robert C. Seacord, CERT
Pascal Meunier, CERIAS, Purdue University
Matt Bishop, University of California, Davis
Kenneth van Wyk, KRvW Associates
Masato Terada, Information-Technology Promotion Agency (IPA), (Japan)
Sean Barnum, Cigital, Inc.
Mahesh Saptarshi and Cassio Goldschmidt, Symantec Corporation
Adam Hahn, MITRE
Jeff Williams, Aspect Security
Carsten Eiram, Secunia
Josh Drake, iDefense Labs at VeriSign, Inc.
Chuck Willis, MANDIANT
Michael Howard, Microsoft
Bruce Lowenthal, Oracle Corporation
Mark J. Cox, Red Hat Inc.
Jacob West, Fortify Software
Djenana Campara, Hatha Systems
James Walden, Northern Kentucky University
Frank Kim, ThinkSec
Chris Eng and Chris Wysopal, Veracode, Inc.
Ryan Barnett, Breach Security
Antonio Fontes, New Access SA, (Switzerland)
Mark Fioravanti II, Missing Link Security Inc.
Ketan Vyas, Tata Consultancy Services (TCS)
Lindsey Cheng, Ian Peters and Tom Burgess, Secured Sciences Group, LLC
Hardik Parekh and Matthew Coles, RSA - Security Division of EMC Corporation
Mouse
Ivan Ristic
Apple Product Security
Software Assurance Forum for Excellence in Code (SAFECode)
Core Security Technologies Inc.
Depository Trust & Clearing Corporation (DTCC)
The working group at the first OWASP ESAPI Summit
National Security Agency (NSA) Information Assurance Division
Department of Homeland Security (DHS) National Cyber Security Division

Robert Martin, CWE Project Leader at MITRE heralded the effort of these contributors by saying, "It is gratifying to see the amount of collaboration and energy that all these serious, security-savvy people invested in making this list as accurate and authoritative as it can be. Very impressive!"

How Will the Top 25 Errors Be Used?

The Top 25 Errors will have four major impacts:

Software buyers will be able to buy much safer software.
Programmers will have tools that consistently measure the security of the software they are writing.
Colleges will be able to teach secure coding more confidently.
Employers will be able to ensure they have programmers who can write more secure code.

First, software buyers will be able to buy much safer software.

Buyers will require that software vendors certify in writing that the code they are delivering is free of these 25 programming errors. Certification shifts responsibility to the vendor for correcting the errors and for any damage caused by those errors. The standard procurement language under development by the State of New York and other state governments already is being adjusted to use the Top 25 Errors. Over time the multi-national Common Criteria program may also adopt the Top 25 as one approach for ensuring code purchased by the US government is free of the Top 25 errors.

Second, programmers will have tools that consistently measure the security of the software they are writing.

Software testing tools will use the Top 25 in their evaluations and provide scores for the level of secure coding in software being tested. In parallel with this announcement, on January 12, one of the leading software testing vendors is announcing that its software will be able to test for and report on the presence of a large fraction of the Top 25 Errors. Application development teams will use such testing software during the development process.

Colleges will be able to teach secure coding more confidently.

Colleges and others who prepare programmers will use the Top 25 Errors as a foundation for curriculum that ensures their students know how to avoid the critical programming errors. One of the colleges that participated in developing the Top 25, UC Davis, has already established a secure coding clinic where student-written software is reviewed for the key programming errors that lead to critical security vulnerabilities. The Top 25 enables the clinic to prioritize errors in its review. Other colleges are beginning to emulate the secure coding clinics.

Employers will be able to ensure they have programmers who can write more secure code.

Employers will use the Top 25 Errors list as a guide for evaluating and improving skills of programmers they hire and of outsourced programming talent. More than 100 large employers are already using a common assessment tool called the GSSP (GIAC Secure Software Programmer) to measure secure coding skills. The GSSP exams are being reviewed in an effort to fully incorporate and highlight mastery of programming knowledge needed to find and eliminate or avoid the Top 25. More data on the GSSP may be found at http://www.sans-ssi.org/ and organizations with at least 500 programmers may have up to 100 of those programmers? secure coding skills assessed confidentially and at no cost. Email spa@sans.org to get that started.

Courses are available that teach secure coding skills to programmers in C/C++, in Java, and in .NET languages. Information at http://www.sans-ssi.org/courses/

How Important Are the Top 25 Errors?

We asked several of the participants why they thought this effort was important enough to merit a significant amount of their time and expertise. Here are a few of their answers. More are at the end of the announcement.

National Security Agency's Information Assurance Directorate: "The publication of a list of programming errors that enable cyber espionage and cyber crime is an important first step in managing the vulnerability of our networks and technology. There needs to be a move away from reacting to thousands of individual vulnerabilities, and to focus instead on a relatively small number of software flaws that allow vulnerabilities to occur, each with a general root cause. Such a list allows the targeting of improvements in software development practices, tools, and requirements to manage these problems earlier in the life cycle, where they can be solved on a large scale and cost-effectively."
-Tony Sager, National Security Agency's Information Assurance Directorate
US Department of Energy:: "The CWE/SANS Top 25 effort is extremely valuable and will provide many organizations with a tangible way to begin addressing software security problems."
- Michael Klosterman, SCADA Operations, Western Area Power Association, US Department of Energy
Depository Trust:: "The CWE-SANS Top 25 Errors is a vital tool for organizations that believe in a risk-based approach to software security enabling them to assess the specific vulnerabilities identified in their environments compared with a composite perspective of risk from industry recognized experts."
- Jim Routh, CISO, The Depository Trust & Clearing Corporation
Microsoft:: "The 2009 CWE/SANS Top 25 Programming Errors project is a great resource to help software developers identify which security vulnerabilities are the most important to understand, prevent and fix."
- Michael Howard, Principal Security Program Manager, Security Development Lifecycle Team, Microsoft Corp.
OWASP Foundation:: "When facing a huge application portfolio that could contain many thousands of instances of over 700 different types of weaknesses, knowing where to start is a daunting task. Done right, stamping out the CWE Top 25 can not only make you significantly more secure but can cut your software development costs."
- Jeff Williams, Aspect Security CEO and The OWASP Foundation Chair
Symantec:: "The 2009 CWE/SANS Top 25 Programming Errors reflects the kinds of issues we've seen in application software and helps provide us with actionable direction to continuously improve the security of our software."
- Wesley H. Higaki, Director, Software Assurance, Office of the CTO, Symantec Corporation
Software Assurance Consortium:: "As an advocate for the consumer, this is viewed as a giant step forward in providing security for all users. It increases awareness of the various levels of secure software by highlighting its effects on our daily use of all software products. The CWE/SANS Top 25 effort adds the capability to our tool box which in turn aids the SwAC in our mission to bring together Industry and Government to transform the security and dependability of all software products."
- Dan Wolf, Director, Software Assurance Consortium.
EMC:: "The Top 25 List puts a powerful tool into the hands of the programmers along with every person involved in designing and developing software. The simple fact that such a list now exists will allow software assurance to be practiced more effectively."
- Dan Reddy, Consulting Product Manager, EMC Product Security Office
Purdue:: "The CWE Top 25 should be watched because targeting the most troublesome programming mistakes can potentially reduce the occurrence of vulnerabilities and our exposure at a national level, while diminishing our undesirable dependence on patches."
- Pascal Meunier, CERIAS, Purdue University
Secunia:: "This Top 25 is without a doubt one of the most useful compilations of common coding mistakes leading to vulnerabilities in software. The list, which has been created based on feedback from many experts in the security industry, focuses on selection criteria like severity and prevalence, thus covering a broad range of the most critical errors commonly introduced in applications today. The Top 25 is compiled in a easy-to-read and entertaining language and does not only provide a good understanding of common coding mistakes, but also how to avoid them. I can therefore highly recommend this read to anyone involved in software design to ensure that they won't make the same mistakes in 2009 as they've made previously."
- Carsten Eiram, Chief Security Specialist, Secunia.
Ken van Wyk:: "This list of programming errors should be enormously useful to the community. It serves to help us all get our collective "arms around" understanding the most common security defects in our code, just as the OWASP Top 10 helps us understand the attacks against those defects."
- Kenneth R. van Wyk, KRvW Associates, LLC
Veracode:: "A prioritized list of security issues is the starting point to make software security practical in the business world of resource constraints and ship dates. The Top 25 list gives developers a minimum set of coding errors that must be eradicated before software is used by customers."
- Chris Wysopal, Co-Founder and CTO of Veracode, Inc.
Core Security Technologies:: "This is the first serious attempt at building a taxonomy of software security weaknesses and flaws with an emphasis on the practical application of identifying, preventing and fixing or mitigating the issues they pose. It is a necessary and long overdue step towards creating a common language for the software development and security communities in need of a more rational way to address what are currently the most urgent and relevant software security problems."
- Ivan Arce, CTO of Core Security Technologies Inc.
Breach Security:: "The CWE/SANS Top 25 List is an excellent tactical resource for organizations to prioritize and remediate the root causes of today's successful attacks. This should be required reading for all developers as it is a "Cliff Notes" version of essential secure coding principles."
- Ryan C. Barnett, Director of Application Security Research, Breach Security
McAfee:: "The 2009 CWE/SANS Top 25 Programming Errors effort is right on target. By educating software developers on the most important issues and showing them how to avoid writing security bugs, this effort will help programmers correct code issues before they become security problems."
- Kent Landfield, Director, Risk and Compliance Security Research, McAfee, Inc.
Ounce Lab:: "Let's use this list as a way to jumpstart the solutions - make 2009 a year to make things happen and solve these problems that have been around way too long. Far too many solutions exist out there to help address these all-too-common errors. Start using this list to secure your software today because if the last few years have been any indication, tomorrow is already too late."
- Ryan Berg, Co-Founder and Chief Scientist, Ounce Labs
Grammatech:: "Bugs in software are a plague on our profession and bad for business. They are inevitable, yet understanding of which bugs are most important is often gained the hard and expensive way when they show up in the field. The CWE/SANS Top 25 effort will raise awareness of the huge variety of different kinds of defects that can occur, and will help programmers focus on those that matter most to application quality and security."
- Paul Anderson - Vice President of Engineering, Grammatech Inc.

What Errors Are Included in the Top 25?

The Top 25 Errors are listed below in three categories:

Clicking "MORE" in any of the listings takes you to the relevant spot in the MITRE CWE site where you will find the following:

links to the full CWE entry data,
data fields for weakness prevalence and consequences,
remediation cost,
ease of detection,
attack frequency and attacker awareness
related CWE entries
related patterns of attack for this weakness.

Each entry at the Top 25 Errors site also includes fairly extensive prevention and remediation steps that developers can take to mitigate or eliminate the weakness.

CATEGORY: Insecure Interaction Between Components

CWE-20: Improper Input Validation

It's the number one killer of healthy software, so you're just asking for trouble if you don't ensure that your input conforms to expectations...MORE >>

CWE-116: Improper Encoding or Escaping of Output

Computers have a strange habit of doing what you say, not what you mean. Insufficient output encoding is the often-ignored sibling to poor input validation, but it is at the root of most injection-based attacks, which are all the rage these days...MORE >>

CWE-89: Failure to Preserve SQL Query Structure (aka 'SQL Injection')

If attackers can influence the SQL that you use to communicate with your database, then they can...MORE >>

CWE-79: Failure to Preserve Web Page Structure (aka 'Cross-site Scripting')

Cross-site scripting (XSS) is one of the most prevalent, obstinate, and dangerous vulnerabilities in web applications...If you're not careful, attackers can...MORE >>

CWE-78: Failure to Preserve OS Command Structure (aka 'OS Command Injection')

When you invoke another program on the operating system, but you allow untrusted inputs to be fed into the command string that you generate for executing the program, then you are inviting attackers...MORE >>

CWE-319: Cleartext Transmission of Sensitive Information

If your software sends sensitive information across a network, such as private data or authentication credentials, that information crosses many...MORE >>

CWE-352: Cross-Site Request Forgery (CSRF)

With cross-site request forgery, the attacker gets the victim to activate a request that goes to your site. Thanks to scripting and the way the web works in general, the victim...MORE >>

CWE-362: Race Condition

Attackers will consciously look to exploit race conditions to cause chaos or get your application to cough up something valuable...MORE >>

CWE-209: Error Message Information Leak

If you use chatty error messages, then they could disclose secrets to any attacker who dares to misuse your software. The secrets could cover a wide range of valuable data...MORE >>

CATEGORY: Risky Resource Management

CWE-119: Failure to Constrain Operations within the Bounds of a Memory Buffer

Buffer overflows are Mother Nature's little reminder of that law of physics that says if you try to put more stuff into a container than it can hold, you're...MORE >>

CWE-642: External Control of Critical State Data

There are many ways to store user state data without the overhead of a database. Unfortunately, if you store that data in a place where an attacker can...MORE >>

CWE-73: External Control of File Name or Path

When you use an outsider's input while constructing a filename, you're taking a chance. If you're not careful, an attacker could... MORE >>

CWE-426: Untrusted Search Path

If a resource search path is under attacker control, then the attacker can modify it to point to resources of the attacker's choosing. This causes the software to access the wrong resources at the wrong time...MORE >>

CWE-94: Failure to Control Generation of Code (aka 'Code Injection')

For ease of development, sometimes you can't beat using a couple lines of code to employ lots of functionality. It's even cooler when...MORE >>

CWE-494: Download of Code Without Integrity Check

You don't need to be a guru to realize that if you download code and execute it, you're trusting that the source of that code isn't malicious. But attackers can perform all sorts of tricks...MORE >>

CWE-404: Improper Resource Shutdown or Release

When your precious system resources have reached their end-of-life, you need to...MORE >>

CWE-665: Improper Initialization

Just as you should start your day with a healthy breakfast, proper initialization helps to ensure...MORE >>

CWE-682: Incorrect Calculation

When attackers have some control over the inputs that are used in numeric calculations, this weakness can lead to vulnerabilities. It could cause you to make incorrect security decisions. It might cause you to...MORE >>

CATEGORY: Porous Defenses

CWE-285: Improper Access Control (Authorization)

If you don't ensure that your software's users are only doing what they're allowed to, then attackers will try to exploit your improper authorization and...MORE >>

CWE-327: Use of a Broken or Risky Cryptographic Algorithm

You may be tempted to develop your own encryption scheme in the hopes of making it difficult for attackers to crack. This kind of grow-your-own cryptography is a welcome sight to attackers...MORE >>

CWE-259: Hard-Coded Password

Hard-coding a secret account and password into your software's authentication module is...MORE >>

CWE-732: Insecure Permission Assignment for Critical Resource

If you have critical programs, data stores, or configuration files with permissions that make your resources accessible to the world - well, that's just what they'll become...MORE >>

CWE-330: Use of Insufficiently Random Values

If you use security features that require good randomness, but you don't provide it, then you'll have attackers laughing all the way to the bank...MORE >>

CWE-250: Execution with Unnecessary Privileges

Spider Man, the well-known comic superhero, lives by the motto "With great power comes great responsibility." Your software may need special privileges to perform certain operations, but wielding those privileges longer than necessary can be extremely risky...MORE >>

CWE-602: Client-Side Enforcement of Server-Side Security

Remember that underneath that fancy GUI, it's just code. Attackers can reverse engineer your client and write their own custom clients that leave out certain inconvenient features like all those pesky security controls...MORE >>

Resources to Help Eliminate The Top 25 Errors

The TOP 25 Errors List will be updated regularly and will be posted at both the SANS and MITRE sites
www.sans.org/top25
cwe.mitre.org/top25/

MITRE maintains the CWE (Common Weakness Enumeration) web site, with the support of the US Department of Homeland Security's National Cyber Security Division, presenting detailed descriptions of the top 25 programming errors along with authoritative guidance for mitigating and avoiding them. That site also contains data on more than 700 additional programming errors, design errors and architecture errors that can lead to exploitable vulnerabilities. cwe.mitre.org/

SANS maintains a series of assessments of secure coding skills in three languages along with certification exams that allow programmers to determine gaps in their knowledge of secure coding and allows buyers to ensure outsourced programmers have sufficient programming skills. Organizations with more than 500 programmers can assess the secure coding skills of up to 100 programmers at no cost.
Email spa@sans.org for details
And see www.sans-ssi.org/certification/ for the GSSP Blueprints

SAFECode - The Software Assurance Forum for Excellence in Code (members include EMC, Juniper, Microsoft, Nokia, SAP and Symantec) has produced two excellent publications outlining industry best practices for software assurance and providing practical advice for implementing proven methods for secure software development.
http://www.safecode.org/publications/SAFECode_BestPractices0208.pdf http://www.safecode.org/publications/SAFECode_Dev_Practices1108.pdf

Nearly a dozen software companies offer automated tools that test programs for these errors. SANS maintains case studies of user experience with these and other security tools at www.sans.org/whatworks.

New York State has produced draft procurement standards to allow companies to buy software with security baked in.

Draft New York State procurement language will be posted at www.sans.org/appseccontract.

For additional information on any of these:
SANS: Mason Brown, mbrown@sans.org
MITRE: Bob Martin, ramartin@mitre.org
MITRE: Steve Christey, coley@mitre.org

source: http://www.sans.org/top25errors/
date: 01/13/09

/***********************************************/
date 01/06/09

Five good programming habits

Use good naming.
Take smaller bites.
Document your code.
Handle error conditions.
Never, ever, copy and paste.

source: http://www.ibm.com/developerworks/opensource/library/os-php-5goodhabits/index.html

/****************************************************
"The recruiters-who-use-grep, by the way, are ridiculed here, and for good reason. I have never met anyone who can do Scheme, Haskell, and C pointers who can't pick up Java in two days, and create better Java code than people with five years of experience in Java, but try explaining that to the average HR drone."
http://www.joelonsoftware.com/articles/ThePerilsofJavaSchools.html

"A big part of my job ends up being reinterpreting what people are asking for into what they really want." Ian Hickson http://blogs.techrepublic.com.com/programming-and-development/?p=718

10 alimentos para emagrecer

2008-10-04T20:25:00.000-07:00

Conheça os 10 alimentos que não faltam nas dietas dos famosos
A nutricionista Bia Rique revela a lista que faz as celebridades emagrecerem.

Emagrecer custa caro. Calma, a gente nem está falando da força de vontade e da determinação em fechar a boca para suas delícias favoritas. A questão aqui é no bolso, mesmo: perder peso, com saúde, à base dos alimentos que vêm na cesta básica é tarefa quase impossível. Mas o investimento compensa, segundo a nutricionista Bia Rique. Com consultório na badalada clínica Ivo Pitanguy e representando a American Overseas Dietetic Association no Brasil, ela está acostumada a atender famosos e endinheirados do mundo todo. Os alimentos indispensáveis à dieta nem são assim tão caros, mas aumentam um pouco a despesa familiar , afirma Bia. Abaixo, confira as dez dicas da especialista para entrar em forma sem deixar a saúde de lado.

1. Vegetais coloridos: nada de fechar a mão na hora de ir à feira. Os vegetais são fontes de fibra, água e fitonutrientes, por isso não podem faltar à dieta , diz Bia. São recomendadas de três a cinco porções diárias por dia de vegetais, incluindo legumes e verduras na lista.

2. Pão 100% integral: abolir as massas de farinha fina é uma das primeiras medidas de qualquer dieta. Além de ajudar seu intestino a funcionar melhor, os pães integrais mantêm a saciedade por mais tempo, já que a digestão deles demora mais. Resultado: você come menor e emagrece.

3. Azeite extra-virgem: quem está acostumado a usar óleo toma um susto quando vê os preços dos azeites nas prateleiras. Mas não tem jeito, afinal esse tipo de gordura é aliado do seu coração, reduzindo a formação de placas (ou ateromas) nas paredes dos vasos sangüíneos. Uma maneira de economizar um pouquinho é comprar a versão virgem, um pouco mais barata, para cozinhar. A extra-virgem pode ser usada apenas no tempero de saladas e pratos que não vão ao fogo , recomenda Bia Rique.

4. Aveia: o cereal é um exemplo de fibra solúvel que não pode, jamais, ficar de fora do cardápio de quem deseja emagrecer. A aveia age no controle do colesterol, da glicose sangüínea e regula o funcionamento do intestino.

5. Frutas frescas: como nos vegetais, o segredo está nas cores. Você precisa consumir de duas a quatro porções, diariamente. Vale experimentar em dentadas ou na forma de sucos, não importa.

6. Feijões: muita gente torce o nariz para eles. Mas está aqui um dos poucos ingredientes da cesta básica que fazem a diferença no regime. Preto, mulatinho ou carioca, o feijão é fonte de proteínas e fibras, ajudando a controlar a fome.

7. Peixes: as carnes brancas são o coringa de qualquer dieta, com destaque para os peixes. Mas esqueça os pacotes congelados do supermercado. Você precisa consumir versões frescas, que guardam os nutrientes e têm mais substâncias benéficas. De uns tempos para cá, salmão e outros peixes de água fria estão mais baratos: é que eles têm sido cultivados em cativeiro, perdendo muitas das propriedades nutricionais que apresentam quando são pescados em seu ambiente natural.

8. Queijo branco: ele tem menos gorduras e é fonte de proteína para sua dieta, além de oferecer cálcio (mineral que, além de fortalecer os ossos, está envolvido nos mecanismos de contração muscular e regula batimentos cardíacos saudáveis).

9. Semente de linhaça: o aperitivo pode integrar seus lanches e é uma fonte poderosa de ômega-3, substância que diminui os triglicérides e o mau colesterol. Você bate bater duas colheres de sopa das sementes com sua fruta favorita, adicioná-la no iogurte ou no leite, junto à aveia.

10. Castanhas: vale a de caju, do-pará, nozes, macadâmias, amêndoas... elas são fontes das chamadas gorduras monoinsaturadas, reconhecidas por baixar os níveis do mau colesterol e aumentar os do bom (papel que o azeite também desempenha).

http://yahoo.minhavida.com.br/materias/alimentacao/Conheca+os+10+alimentos+que+nao+faltam+nas+dietas+dos+famosos.mv

RoR -> Ruby on Rails

2008-09-24T05:41:00.000-07:00

alfredogangsta

Sure, Migrations use Ruby, but you have to know what you are doing with SQL to make it work right.

Rails doesn't transform people who don't know what they're doing. It still requires all sorts of... thinking.

TheRockin88

I think YOU must code in the language which is afordable, and if you are GOOD enough, you can do it in ASP, PHP, etc...since you focus the Objective.
I spend my time developing solutions for my clients, both PHP (linux server) as ASP for windows.
Call me as a DUMB, but I spend my time to EARN MONEY, not to LEARN a bad known "framework" and jump to the new "train" in Rails...LOL...TIME is Money, and my costumers dont want to know if I used PHP,ASP or ROR. They want a WORKING site!

aiyuo

its kinda dumb to compare a framework with a language. A better comparison would be Rails vs Codeigniter

riotiticaca

RoR if 1 billion miles away to compete with PHP. These marketing strategies ain't help a lot.

644547024430

ok... so all PHP coders look like Private Pyle from Full Metal Jacket and are sarcastic as hell while all RoR coders are gay and like phallic objects [with cock rings, no doubt]

damn.

riotiticaca

If you use procedural PHP and without a framework, that could be true.

Just try Zend Framework in you will see why PHP is superior.

rallyrulz

haha, people are actually defending php! soo pathetic, php must die. Its not just the language that sux for so many reasons (not a true OO language, no namespaces, pathetic unicode support, extremely error prone with absolute SHIT! frameworks to go with it), but the programmers that use it are even worse, its like 1/100 php programmers actualy have a clue

sirinferno

yahoo, digg, wikipedia, photobucket all use php. you suck.

guille1983

With cakephp you dont need neither RoR nor learning another programming language. Besides it's not common to find a hosting provider who supports RoR. So I stay with cakephp

cybercow222

Yes, offcourse ... that`s why 99,9% of web sites run php apps, and 0,1% of them is built on pre-under-preview-beta-still-i n-dev of RoR. But, yes offcourse, everyone of us has built it`s first RoR blog or shopping chart in less than hour, and was amazed how it`s simple ... but when complicated things come on the scene, it become shiny-clear that you can`t do with it nothing more in less time ... It`s a blafemy ... RoR sucks

just think about it

2008-08-31T06:35:00.000-07:00

Datas em inglês
/**********************
05/28/2010

O lugar onde alguém pensa em você, é pra lá que você deve voltar ..."
naruto shippuden 103

The place where someone think of you, it's there that you should came back ...

/**********************
01/26/2010
“If you talk to a man in a language he understands, that goes to his head. If you talk to him in his language, that goes to his heart.” Nelson Mandela
******************
10/08/2009
The code I wrote nine months ago sucks. And I'm happy about it. ... So why am I so happy about it? Simple: if I can look back at code I had written previously and know that the code I am writing today shows significant improvement, it means that I am still learning and growing as a coder. , by Bear Bibeault
/**********************
10/05/2009
"WRONG" IS ONE OF THOSE CONCEPTS THAT DEPENDS ON WITNESSES.
Scott Adams
http://dilbert.com/strips/comic/2009-11-05/

/**********************
10/02/2009
"There are two kinds of people, those who do the work and those who take the credit. Try to be in the first group; there is less competition there."
Indira Gandhi
/**********************
09/29/2009
"If I'm good at one thing, it's probably staying up-to-date."
Bill Gates.
/**********************
date 08/04/09
dhhHow do you figure out what your app should cost? Just ask yourself: Would I pay for this with my own credit card? http://is.gd/219CY
/**********************
date 08/04/09
KathySierraMarketing could focus less on being "innovative" and more on being useful. (and being useful should not require innovation... just focus)
10:08 AM Aug 2nd from web

/**********************
date 03/11/09
The problem with beauty is that it's like being born rich and getting poorer.
Joan Collins

/**********************
date 01/30/09
"I have not failed. I've just found 10,000 ways that won't work."
Thomas Edison

/**********************
date 01/15/09
"The best way to predict the future is to invent it".
Alan kay

/**********************
date 01/06/08
"A positive attitude may not solve all your problems, but it will annoy enough people to make it worth the effort."
Herm Albright

/**********************
date 12/19/08
"Do not worry about your difficulties in Mathematics. I can assure you mine are still greater."
Albert Einstein

/**********************
date 12/18/08
"There is only one boss, the customer. And he can fire everybody in the company from the chairman on down, simply by spending his money somewhere else."
Sam Walton

/*********************

The most important characteristic for a career success is humility.
First of all, confidence and humility are not mutually exclusive. You can be ultra confident about your skills, but you can also understand that you don't know everything there is to know.

Source: http://blogs.techrepublic.com.com/career/?p=436&tag=nl.e124

Nov-06-08 KingG: So what? Karpov was a fantastic player. There is no shame in only being a little bit better than him. That's more than anyone else can say.
Source: http://www.chessgames.com/perl/chessgame?gid=1067246

"Feedback is the breakfast of Champions"

Como se tornar um milionário (Como se tornar rico)

2008-07-07T20:56:00.000-07:00

source: Free Money Finance

Heh, um milhão de dólares não é o que costumava ser. Mas isto é mais do que 90% de todos os lares do EUA possuem. Então quem não gostaria de ser um milionário?

Este artigo da Money Central foi escrito por uma milionária e aqui ela compartilha suas dicas sobre como se tornar milionário. As dicas chaves:

Faça da segurança financeira uma prioridade

Gaste menos do que ganha

Economize e invista regularmente

Salde suas dívidas

Tenha uma casa própria (ficou redundante?)

Dicas boas, simples, básicas e efetivas. Eu voltarei com elas em um minuto, mas vamos rever alguns outros petiscos da peça:

Se você não tem um plano, é um caminho muito fácil para perder seu caminho: gastar dinheiro com coisas que não são importantes, tomar dívidas que mais prejudicam do que ajudam, cair em desespero quando o mercado se vira contra você. Ter uma meta de longo prazo e uma visão de longo prazo são essenciais para manter seu equilílibrio.

Eu abençôo minha Era-de-depressão mãe, que cresceu pobre, sabia como beliscar um tostão e colocava alta prioridade na poupança. Ela entendeu a importância de "se pagar primeiro", então a partir do meu primeiro emprego eu tenho economizado pelo menos 10%, e freqüentemente 20%, do meu salário bruto. Ela me ensinou como usar cartão de crédito como uma conveniência, não uma desculpa para comprar coisas que eu não poderia dar-se ao luxo. Ela via as pessoas com cartão de crédito com saldo com a mesma desconfiança e descontentamento com a qual ela considerava as pessoas que não mantinham a casa arrumada.

Denovo, planos de investimento automatizados realmente ajudam. Nós investimos independente do mercado está para cima, para baixo ou para os lados. Sabemos que na longa jornada, uma carteira de ações bem diversificada bate qualquer outro tipo de investimento, mesmo se há alguns acidentes ao longo do caminho.

Outro ponto-chave: Não gaste seu 401 (k) quando você deixar o emprego. Quase metade de todos os trabalhadores fazem, e isto é insano. Não é apenas os impostos e penalidades que consomem um quarto de sua retirada. Mais importante, cada R$ 1000,00 custa R$ 10.000,00 na renda da aposentadoria futura. Então reinvista seu dinheiro em uma IRA ou no seu próximo plano do empregador.

Mas isto siginifica que você deve evitar taxas elevadas de débito e ser cauteloso sobre sua carga total de débito. Mantendo suas despesas domésticas em 25% do seu pagamento bruto, por exemplo, ajudará a assegurar que você tem fundos suficientes sobrando para financiar suas metas e ter algum divertimento por algum tempo.

Apesar dos altos e baixos, possuir uma casa tem sido por muito tempo o alicerce para a riqueza para a maioria das pessoas. Considere que o valor líquido mediano de todos os proprietários na América em 2004 foi $184,400. Para locatários foi $4,000. Entre os lares 10% mais ricos, 96,9% são donos de casa, comparado com 69,1% de todos os lares.

Nós descobrimos que é mais fácil alcançar suas metas e ter dinheiro para se divertir se seus rendimentos estão crescendo. Assim nós investimos em educação, lançamos nosso próprio negócio e buscamos novos caminhos para gerar dinheiro. Na economia dinâmica de hoje, você tem que estar pronto para aprender novas habilidades e tomar novas direções.

Finalmente e talvez mais importante: Meu marido e eu não vivemos apenas para amanhã. Nossas metas de longo prazo são importantes para nós, mas nós também devemos aproveitar a vida hoje. A conta bancária mais gorda do mundo não seria de para nós se nós não tivemos uma possibilidade de apreciar um ao outro, nossa filha, nossas vidas. Portanto nós apreciamos nossos objetivos financeiros quando nós os conseguimos, mas nós sabemos que há mais -- muito mais -- na vida do que o dinheiro.

401 (k)

O plano 401k empregador-patrocinado definindo um plano de contribuição para aposentadoria sob a seção 401(k) Internal Revenue Code (26 U.S.C. § 401(k)) dos Estados Unidos e alguns outros países. (Qual um plano parecido no Brasil?)

A 401 (k) permite ao trabalhador poupar para a aposentadoria, enquanto prorrogando os impostos sobre o rendimento do dinheiro guardado e ganhos até à retirada. O trabalhador opta por ter uma parte do seu salário pago directamente, ou "diferida", em sua conta 401 (k). Em planos participante-dirigido (a opção mais comum), o trabalhador pode escolher a partir de uma série de opções de investimento, normalmente uma variedade de fundos mútuos que enfatizam ações, obrigações, títulos de mercado monetário investimentos, ou alguma combinação das anteriores. Muitas empresas "401 (k) planos de oferecer também a opção de comprar ações da empresa. O empregado pode geralmente re-alocar dinheiro investindo entre estas opções a qualquer momento. Em planos menos coumum como administrador-dirigido 401 (k), a entidade patronal nomeia trustees que decidir como os ativos do plano serão investidos.
Source: wikipedia

IRA

Uma conta individual de aposentadoria (IRA) é uma conta de um plano de aposentadoria que fornece algumas vantagens de imposto para as economias da aposentadoria nos EUA.
Source: wikipedia

Grandes Ensinamentos

2008-05-10T10:28:00.000-07:00

"If you see the good move, look for the better one."
Emanuel Lasker
---------------------------------------
"Viva como se fosse morrer amanhã e aprenda como se fosse viver para sempre"
(Frase do líder pacifista indiano Mohandas Karamchand Gandhi, cujo título, Mahatma, significa “grande alma”.)

Bill Gate's dad

"My favorite axiom is: 'We are all in this together.'

You know it's a good axiom because there are so many ways to express it. 'We are all in the same boat' is one. Benjamin Franklin said, 'We must all hang together, or assuredly we shall all hang separately'.

The fundamental idea here is interdependence. We simply cannot succed without the contribution of others.

What are the implications of that idea? The biggest one is basic citizenship. Citizenship means that we are obligated to believe that every person matters just as much as every other person."

*****************************
8/7/2008
TRECHO EXTRAÍDO DA FOLHA DE SÃO PAULO DOMINGO, 6 DE JULHO 2008
JOSÉ SIMÃO

Bafômetro! Aceitamos casais a pé!

...

Um drive-in já estendeu a faixa: "Aceitamos Casais a Pé!". E reunião de amigos para beber uma cervejinha agora é pelo Messenger. Cada um na sua casa no computador com a sua latinha! Assasinaram o happy hour! E hoje vai ter passeata. Manifesto das Mulheres Feias! Sem beber, quem vai comer a gente?!

...

E a Marta Motox? Prometeu um túnel ligando o cabeleireiro à academia. Túnel Belezura! E o Alckimin continua com aquela cara de degustador de sopa de hospital!

....

*****************************

"Transar é arte, gozar faz parte, engravidar é moda, assumir é que é foda!"

"Casar é trocar a admiração de várias mulheres pelas críticas de uma só."

"A principal diferença entre o homem e a mulher é que o pau que está entre as pernas do homem é sempre o mesmo."

"Mulheres são como traduções: as boas não são fiéis, e as fiéis não são boas."

"O que há em comum entre um bolo queimado, uma cerveja estourada no congelador e uma mulher grávida?

Se você tivesse tirado antes, nenhum deles teria acontecido..."

"The human brain starts working the moment you are born and never stops until you stand up to speak in public."
- George Jessel

"When you play, play hard; when you work, don't play at all."

God will never throw anything at you that you can't handle. Just take it one step at a time.

"For those who don't believe in themselves... Hard-work is useless."
Maito Gai

so who's the king?
"The unborn children who''ll grow up to be the next generation of the leaf ninja".
Sarutobi Asuma

"... I can't force you to believe me, that's your choice.
... people live their lives bound by what they accept as correct and true. That's how they define 'reality'.
But what does it mean to be 'correct' or 'true'? Merely vague concepts ... Their 'reality' may all be a mirage.
Can we consider them to simply be living in their own world, shaped by their beliefs?"
Uchiha Itachi

"I'm in no condition to drive...Wait! I shouldn't listen to myself, I'm drunk!"
- Homer J. Simpson
- Theodore Roosevelt

Naruto

2007-09-07T09:29:00.000-07:00

Naruto (ナルト, Naruto?) é uma série de mangá criada por Masashi Kishimoto e serializada na revista semanal Shonen Jump desde 1999. Recebeu uma adaptação para anime em 2002 produzida pelo Studio Pierrot e exibida pela TV Tokyo. A série animada foi exibida até Fevereiro de 2007, quando recebeu uma sequência, Naruto: Shippuuden, correspondente à segunda parte do mangá.
No Brasil, a série começou a ser exibida em 1 de Janeiro de 2007 no canal pago Cartoon Network, em uma edição feita pela licenciadora norte-americana VIZ Media. Na TV aberta, a série passou a ser exibida pelo SBT (em uma terceira edição), em 3 de Julho de 2007, através da distribuidora SATO CO. Ltda do empresário Nelson Akira Sato. O mangá é publicado pela Panini Comics.

Aviso: Abaixo contém revelações sobre o enredo (spoilers).

Ranking

Genins
Shinobi já graduado na academia ninja. A maioria dos genins utiliza técnicas básicas, grande parte delas aprendidas na academia, mas é valido lembrar que alguns Genins desenvolvem técnicas próprias, ou caso tenham, técnicas de sua linhagem sangüínea avançada.
Normalmente são formados grupos de três Genins para serem treinados por um Jounin. Eles recebem missões muito fáceis e "chatas", como andar com os cachorros de um homem rico ou procurar um gato, resgatar um animal que fugiu ou ajudar pessoas a colher e plantar, ou até mesmo escoltar uma pessoa. Essas missões são de rank D ou C.

Chunnins
Depois de participar do Exame Chuunin, o Genin é julgado por sua força e inteligência pelos Kages, senhores feudais e dentre os juízes. Eles agora são qualificados para liderar um grupo de Genins durante missões extracurriculares. Eles podem ser mandados em missões sozinhos ou em grupo. Eles normalmente viajam em grupos de quatro nas missões, podendo ser de rank C ou B.

Jounins
Chuunins que possuem uma inteligência e uma força extraordinária são promovidos para Jounins. Este é um nível ninja muito alto, todos os Jounins são enviados para missões mais difíceis do que as dos Chuunins, normalmente envolvendo assassinatos e infiltrações, como as missões de rank A e S. Alguns Jounins possuem uma força incalculável e algumas habilidades completamente desconhecidas, Jounins são maduros o suficiente para treinar grupos de três Genins e acompanhá-los em missões.

ANBU
Ansatsu Senjutsu Tokushu Butai (暗殺戦術特殊部隊, Esquadrão Especial de Táticas e Assassinatos?), a elite especial shinobi, recebendo ordens diretamente do Hokage. Todos os shinobis existentes na ANBU são Jounins com um altíssimo poder. Os Shinobis ANBU são normalmente enviados para capturas, assassinatos especiais, investigações secretas e sempre tem participações nas guerras.
Ex-membros ANBU: Hatake Kakashi, Uchiha Itachi, Yamato (Tenzou), Morino Ibiki.

Nukenin
Ninjas que abandonaram por motivos pessoais ou traíram o seu vilarejo. Por isso, eles são marcados para serem mortos pelos Oinins (Caçadores Ninjas). A organização denominada Akatsuki é composta por 10 nukenins, cujo poder de cada integrante é comparável ao dos Kages.
Ninjas-Rejeitados: Momochi Zabuza (Névoa) (Morto), Yakushi Kabuto (Konoha), Hoshigaki Kisame (Névoa), Uchiha Itachi (Konoha) (Morto), Orochimaru (Konoha) (Morto), Sasori(Areia) (Morto), Deidara (Pedra) (Morto), Zetsu (Grama) Kakuzu (Cachoeira) (Morto), Hidan (Chuva) (Morto), Pain (Chuva), Konan (Chuva), Uchiha Sasuke (Konoha), Tobi (Konoha)

Oinin
Caçadores Ninja, também conhecidos como Ninjas rastreadores são os shinobis especializados em matar ou capturar os Ninjas-Rejeitados que fogem da vila. São shinobis extremamente inteligentes e conhecedores da estrutura corporal de um ser humano. Podem ser identificados por suas máscaras especiais (parecidas com a da ANBU). Ao encontrarem os Ninjas-Rejeitados que fogem da vila os matam para que os segredos da vila não sejam revelados a inimigos.
Durante todo o anime, nenhum destes ninjas realmente são mostrados, mas, logo na primeira temporada Haku aparece nos trajes de um caçador e se diz um suposto Oinin.

Kages
O mais poderoso Shinobi de um vilarejo. Seu poder só pode ser comparado ao de outro Kage. Sua finalidade é administrar toda vila, incluindo os shinobis dela, as missões e seus moradores. Caso haja uma guerra, o Kage sempre está disposto a dar sua vida pelo seu vilarejo.
Kages: Primeiro Hokage (Shodaime), Segundo Hokage (Nidaime), Sarutobi - Terceiro Hokage (Sandaime), Minato Namikaze - Quarto Hokage (Yondaime), Tsunade - Quinta Hokage (Godaime), Sabaku no Gaara - Quinto Kazekage (Vila Oculta da Areia), Orochimaru - Otokage,(Vila oculta do Som).

Jutsus
Jutsu é a mística arte que um ninja usa na batalha. Para usar um jutsu um ninja precisa usar o chakra. Chakra vem de dois lugares: da energia do corpo nos trilhões de células e da energia espiritual e mental adquirida por meio de exercícios e experiência. Para fazer um jutsu, o ninja vai precisar usar duas energias. Fazendo um selo de mão o ninja consegue manifestar o jutsu desejado. Por causa do extensivo número de selos de mão e as diferentes combinações existem centenas de jutsus para serem usados. Baseado em qual jutsu o ninja usa, o tipo e a quantidade de chakra será diferente assim como o elemento que é usado.
Os jutsus se dividem em três tipos:
Ninjutsu: É a técnica ninja mais utilizada. Baseia-se no uso de selamento com as mãos e chakra convertido em elementos, ou algo que se possa usar como um "poder ou habilidade" especial.
Taijutsu: combate corpo-a-corpo.
Genjutsu: habilidade mental usa-se para enganar, iludir ou até agredir o adversário.
Também existem alguns jutsus especiais, os passados por meio de sangue, chamados de Kekkei Genkai. Ainda existem os Fuuinjutsu, Kinjutsu, Hijutsu e Juin Jutsu.
Doujutsu: Habilidades utilizadas através das pupilas/olhos. Permitem ao usuário ler vários tipos de Genjutsu, Ninjutsu e Taijutsu para antecipá-los e se defender durante uma luta, ou até mesmo copiá-los, como é o caso do Sharingan. Geralmente exclusivas de clãs com kekkei genkai.
Hijutsu: Habilidades especiais e secretas limitadas a certos indivíduos (passadas pela família) ou a clãs com linhagem avançada de sangue (kekkei genkai). Podem ser adquiridas através de transplante ou experiência genética (como aconteceu com Hatake Kakashi e Yamato, respectivamente). Esse tipo de jutsu não é classificado em nível de dificuldade por ser exclusivo de determinadas famílias.
Kinjutsu: É uma classificação informal para jutsus. Como o próprio nome já diz, são técnicas proibidas ou moralmente rejeitadas, geralmente por exigirem sacrifícios muito altos ou hediondos. O nível de dificuldade dessas técnicas pode variar de Rank-C a Rank-S, e podem ser de qualquer uma das três categorias principais (Ninjutsu, Genjutsu ou Taijutsu). Entretanto, poucos têm acesso aos kinjutsus.
Fuuinjutsu: São ninjutsus de selamento, que aprisionam espíritos, bijuus, chakra, armas e quaisquer outros seres animados ou inanimados em algo ou alguém. Versáteis, podem servir tanto para conter um demônio quanto para carregar um grande número de armas em um pergaminho, dependendo, é claro, do nível de dificuldade.

Sannin
Literalmente "três ninjas" em japonês (San = 3, nin = Ninja). Fortes candidatos ao cargo de Hokage são considerados "Ninjas Lendários" esta denominação "Sannin" só é aplicada aos discípulos de Sarutobi que são: Tsunade, Jiraiya e Orochimaru (este sendo um Nukenin). Os três lendários já passaram do Rank de Jounin, acima disso existiria o Kage, mas Sannin não é um Rank, é um título dado aos três. Orochimaru é considerado um Nukenin, ou seja, um traidor. O Rank de Tsunade é Hokage. O que resta para Jiraiya é ser chamado de Sennin (que significa eremita).
Na edição 369 do mangá, foi revelado que Jiraiya, Tsunade e Orochimaru são chamados de "Sannin lendários de Konoha", pois foram os únicos que sobreviveram em uma das batalhas contra a Vila Oculta da Chuva em um ataque feito pelo líder do vilarejo, Hanzou. Ele então os nomeou Sannin em troca de saber seus nomes, pois os considerou muito fortes e dignos de seu respeito e que só os deixou viver por esse fato.
Orochimaru
Orochimaru foi um dos 3 aprendizes do Sarutobi - Terceiro Hokage junto com Jiraiya e Tsunade. Orochimaru sempre pensou em seu futuro como o Quarto Hokage, pois seu mestre sentia muito amor por ele. Quando Sarutobi sentiu que devia nomear um novo Hokage, Orochimaru pensou que sua hora havia chegado, mas seu mestre nomeou como Quarto Hokage Namikaze Minato discípulo de Jiraiya, pois além de ser mais forte, ele tinha mais nobreza e caráter que Orochimaru que se revoltou contra isso e fugiu. Tempos depois, no torneio Chuunin Shiken, Orochimaru aparece disfarçado para tentar se vingar do seu mestre. Ele consegue matar o Terceiro, porém perde a capacidade de usar seus jutsus, pois suas mãos foram seladas pelo Terceiro antes de sua morte.
Jiraiya
Jiraiya é outro ninja com nível de sannin. Sabemos que foi o sensei do Quarto Hokage e ele pega Naruto para treinar para a terceira fase do Chunnin Shiken. Assim ele ensina Naruto a invocar o poderoso Gamabunta (Chamado por Naruto de Gama Oyabin "Chefe dos Sapos"), que é o mesmo que o Quarto Hokage invocou para ajudá-lo no selamento da Kyuubi. No mangá, é dito que Jiraiya não tem nenhum grau de parentesco com Naruto ou Minato. Ele também é conhecido pelos seus atos mulherengos, como Ero Sennin (hermitão pervertido).
Tsunade
Tsunade tem em seu maior vício o jogo. Tanto que ganhou o apelido Perdedora por causa de sua péssima sorte. Uma das três sannins é neta do Primeiro Hokage. Especializou-se em jutsu médico, criando uma regra que todo time ninja deveria ter um ninja médico, o que evitaria mortes. Seu irmão mais novo foi morto na guerra, e seu amor também. Desde então ela tem medo de sangue, e viaja pelo mundo, apostando e perdendo, junto com sua aluna Shizune. É tida como a maior ninja que já existiu na técnica de curar é também a Godaime Hokage de Konoha.

Música de Aberturas e encerramentos

Temas de abertura (openings)
Episodios 1 al 25: R★O★C★K★S por HOUND DOG
Episodios 26 al 53: "Haruka Kanata" (遥か彼方, Allá, a lo lejos?) por Asian Kung-fu Generation
Episodios 54 al 77: "Kanashimi wo Yasashisa ni" (悲しみをやさしさに, Tristeza en la ternura?) por little by little
Episodios 78 al 103: "GO!!!" por FLOW
Episodios 104 al 128: Seishun Kyōsōkyoku (青春狂想曲, Rapsodia de juventud?) por Sambomaster (サンボマスター, Sanbomasutā?)
Episodios 129 al 153: "No Boy, No Cry" (ノーボーイ・ノークライ, Nō bōi - Nō kurai?) por STANCE PUNKS
Episodios 154 al 178: "Namikaze Satellite" (波風サテライト, Namikaze Sateraito?, Satélite del desacuerdo) por Snorkel (シュノーケル, Shunōkeru?)
Episodios 179 al 202: "Re:member" por FLOW
Episodios 203 al 220: "Yura Yura" por Hearts Grow

Naruto Shippuden
Episodios 1 al 30: Hero's Come Back!! por Nobodyknows+
Episodios 31 al 52: The Distance por Long Shot Party
Episodios 53 al ??: BLUE BIRD por Ikimono Gakari

Versão Americana
Episodios 1 al 52: Rise (n/a) Jeremy Sweet and Ian Nickus
Episodios 53 al 77: 遥か彼方 Haruka Kanata, "Far away" Asian Kung-Fu Generation
Episodios 78 al 104: "GO!!!" por FLOW
Episodios 105 al ??: Seishun Kyōsōkyoku (青春狂想曲, Rapsodia de juventud?) por Sambomaster (サンボマスター, Sanbomasutā?)

Temas de encerramento (endings)
Episodios 1 al 25: "Wind" (ワインド, Waindo?, Viento) por Akeboshi (明星, Akeboshi ?)
Episodios 26 al 51: "Harmonia" (ハルモニア, Harumonia?) por RYTHEM
Episodios 52 al 64: "Viva★rock ~Japanese side~" (ビバ★ロック~japanese side~, Biba★rokku~japanese side~?) por ORANGE RANGE
Episodios 65 al 77: "ALIVE" por Raiko (雷鼓, Raiko ?)
Episodios 78 al 89: "Ima Made Nando Mo" (今まで何度も, "Hasta ahora, repetidamente"?) por The Mass Missile (ザ・マスミサイル, Za Masumisairu?, El misil masivo)
Episodios 90 al 103: "Ryūsei" (流星, Estrella fugaz?) by TiA
Episodios 104 al 115: "Mountain a Gogo two" (マウンテン・ア・ゴーゴー・ツー, Maunten-a-gōgō-tsū?) por Captain Stridum (キャプテンストライダム, Kyaputen Sutoraidam?)
Episodios 116 al 128: "Hajimete kimi to shabereta" (はじめて君としゃべった, La primera vez que charlé contigo?) por GagagaSP (ガガガSP, GagagaSP ?)
Episodios 129 al 141: "Nakushita Kotoba" (失くした言葉, Palabras perdidas?) por No Regret Life (ノー・リグレット、ライフ, Nō-riguretto, raifu?)
Episodios 142 al 153: "Speed" (スピード, "Speed"?) por Analog Fish (アナログフィッシュ, Analog Fish ?)
Episodios 154 al 165: "Soba ni iru kara" (そばにいるから, Porque estoy contigo?) por AMADORI
Episodios 166 al 178: "Parade" por CHABA
Episodios 179 al 191: "Yellow Moon" por Akeboshi
Episodios 192 al 202: "Pinocchio" por Ore Ska Band
Episodios 203 al 220: "Scenario" por Saboten

Naruto Shippuden
Episodios 1 al 18: "Shooting Star" por Home Made Kazoku
Episodios 19 al 30: "Michi ~ to you all" por Aluto
Episodios 31 al 41: "Kimi monogatari" por little by little
Episodios 42 al 52: "Mezamero! Yasei" por MATCHY with QUESTION?
Episodios 54 al ?? : "Sunao na Niji" por Surface

Akatsuki
Literalmente "Lua Vermelha" em japonês (Aka = Vermelho tsuki = Lua). É uma organização criminosa secreta composta por 10 membros, todos eles ninjas de rank S. Originalmente eram 10 membros, número reduzido com a saída de Orochimaru . Cada membro possui uma bandana de seu vilarejo original com um risco horizontal bem no meio, um anel identificando suas posições na organização, um chapéu de palha e uma roupa negra decorada com nuvens vermelhas. Cada anel possui um símbolo difrente.

A tabela abaixo mostra a divisão dos membros da Akatsuki, seus respectivos deuses e anéis:

fade window

*No esconderijo da Akatsuki, onde o Shukaku é removido de Gaara, é mostrado uma grande estátua, onde cada dedo da mão da estátua representa o lugar que cada anel estava anteriormente. Outra particularidade sobre os anéis é que eles só podem ser tirados dos membros após sua morte. Não se sabe o porque, mas quando Orochimaru saiu da organização levou o seu.

Origem: Wikipédia, a enciclopédia livre.

Anime World

facebook apis test

Google Code jam Round1A 2010 Rotate Join-k game

CSS

Linux

My Solutions to Google Code Jam 2010

Solutions written in Java!!!

Problem A. Store Credit

MySQL Stuff

Add a column to an existing MySQL table

Bash Script Stuff

Python Stuffs

4.3.1. The type Function

4.3.2. The str Function

EASY 3: Hospitality and Restaurant Episode 9

Other tech stuffs

Ubuntu Stuff

PostgreSQL Stuff

Java Stuff

Servlets and JSP stuff

Conversations Questions Getting to Know Each Other

Conversation QuestionsGetting to Know Each Other

Rails Is A Ghetto Original Copy

Rails Is A Ghetto

Tied To The Rails

The Stories I Could (and Will) Tell

Revenge Of The Zen Prick

How’d This Happen?

Then The Idiots Came

The Hysteria Of Consultancy

From Industry to Corporate

Fighting Consulting Firms

More To Come

Hibernate Tips and FAQ

What Technology Should (and Shouldn't) Try to Achieve

"Does XML Suck?" Revisited

Books I read

Regular Expressions

Naruto Opening

Naruto Beginning theme 1

Naruto Shippuuden Opening Song [Hero's Comeback]

Naruto Opening 2- Haruka Kanata

Naruto Opening 3

javascript

Fixed tooltip

Gloria Estefan - Reach

JAR files

Steve Jobs Stanford Commencement Speech 2005

'You've got to find what you love,' Jobs says

Idiomatic Expressions

Scalability

become better programming

CWE/SANS TOP 25 Most Dangerous Programming Errors

Experts Announce Agreement on the 25 Most Dangerous Programming Errors - And How to Fix ThemAgreement Will Change How Organizations Buy Software.

What You Will Find In This Announcement:

Which People and Organizations Made Substantive Contributions to the Top 25 Errors List?

How Will the Top 25 Errors Be Used?

First, software buyers will be able to buy much safer software.

Second, programmers will have tools that consistently measure the security of the software they are writing.

Colleges will be able to teach secure coding more confidently.

Employers will be able to ensure they have programmers who can write more secure code.

How Important Are the Top 25 Errors?

What Errors Are Included in the Top 25?

The Top 25 Errors are listed below in three categories:

CATEGORY: Insecure Interaction Between Components

CWE-20: Improper Input Validation

CWE-116: Improper Encoding or Escaping of Output

CWE-89: Failure to Preserve SQL Query Structure (aka 'SQL Injection')

CWE-79: Failure to Preserve Web Page Structure (aka 'Cross-site Scripting')

CWE-78: Failure to Preserve OS Command Structure (aka 'OS Command Injection')

CWE-319: Cleartext Transmission of Sensitive Information

CWE-352: Cross-Site Request Forgery (CSRF)

CWE-362: Race Condition

CWE-209: Error Message Information Leak

CATEGORY: Risky Resource Management

CWE-119: Failure to Constrain Operations within the Bounds of a Memory Buffer

CWE-642: External Control of Critical State Data

CWE-73: External Control of File Name or Path

CWE-426: Untrusted Search Path

CWE-94: Failure to Control Generation of Code (aka 'Code Injection')

4.3.1. The `type` Function

4.3.2. The `str` Function

Conversation Questions
Getting to Know Each Other

Experts Announce Agreement on the 25 Most Dangerous Programming Errors - And How to Fix Them
Agreement Will Change How Organizations Buy Software.