Seven years ago I wrote about XML security problems, the XXE vulnerability. This flaw is the gift that keeps on giving: someone exploited Google with it this month. XML is a ridiculously complicated data format. And XML parsers implement all the features, including the obviously dangerous and useless ones. And engineers keep forgetting to turn those features off. It’s just terrible. One of the few things I can cook competently is Tex-Mex chili. It’s basically a pot of meat cooked with red chile and onion. No beans, no tomato. Hearty and delicious with tortillas, sharp cheddar, fresh onion, and sour cream garnishes. I’ve learned to make chili from scratch. But if you want to cheat, Wick Fowler’s 2 Alarm Chili Kit is a reasonable compromise. It’s not as good as making it the hard way but it’s still pretty good, particularly if you bump it up with some of your own chile powder. To make it from scratch, I use this Homesick Texan recipe. I love her blog and cookbook. It’s a very fussy recipe but makes an excellent result. Over time I’ve modified it a bit.
I grew up with this kind of food. Unison is good software. It’s a command line program to synchronize filesystems, to keep a directory tree identical on multiple computers. I use it to sync about 40G of files across two Macs, to keep my home directory and source code and various applications in sync. The neat trick is I sync those two Macs through a portable hard drive so I don’t have to wait for hours for files to go over the Internet. Unison can also work online so changes are propagated automatically. Unison is a lot like rsync. But Unison is designed to be bidirectional. Rsync always syncs one way: copy A to B. Unison will look at the differences between A and B and merge them, including a limited UI for conflict resolution. This protects me from the case where I modify something on both machines without syncing beforehand. The main drawback with Unison is it’s slow, it takes many minutes to decide what files to sync. I also hate the interactive UI; it doesn’t work well when you have lots of files that changed in both places. I’m also a bit concerned that it’s no longer under active development but Unison is the rare software that’s a complete product, it’s not clear it needs many changes. There are other tools solving similar file sync problems, none perfect. Dropbox is phenomenal but doesn’t have offline syncing of large files. Camlistore is promising but not quite ready for civilian use. git can be used to keep stuff in sync but is better suited for text files whose history you want to keepl. And CrashPlan is great for online backup but doesn’t really provide a second live copy. There’s good fine dining in California’s Central Coast. Cayucos is one of those tiny California beach towns from the 50s. A few dumpy motels, a surf shop, restaurants with names like The Salty Seagull and The Rusty Pelican you’d only ever eat at because you’re on vacation in a beach town. But there’s something special and unique in Cayucos, the Cass House, and as the Michelin folks say it is vaut le voyage. Chef Jensen Lorenzen and his crew are turning out phenomenal fine dining, as good as anything I’d expect to find at San Francisco’s top restaurants. They are serving only one option, a 14 course tasting menu of delicate little plates. With excellent (but laid back) service and a good wine list and a lovely room that only seats about 30 people. The key thing here is the cooking works. The kitchen knows its business and is producing excellent creative food with technique but not silly gimmicks. My favorite dish was a dessert, a fennel-based gelée that was delicate, deeply flavored, with a bit of candied fennel as a crunch accent. So elegant and precise. The cauliflower “curds & whey” were also phenomenal, a rich risotto-like texture with a deep butter and cheese flavor. A heavy dish, it came after a very delicate dashi bouillon. The main course (I chose chicken) was a satisfying solid portion, keeping the whole meal from being a bit too precious and dainty. We were also very impressed at how they handled my friend’s near-vegan diet, deftly substituting coconut milk and the like for the dairy that would have been in half the dishes. (Elegant cooking without butter!) I admit I was concerned going in that the menu was too demanding, but Cass House executed incredibly well. They’ve been doing fine dining for a couple of years but jumped full in to the tasting menu program this February. It’s ambitious and risky and one service a night at a reasonable $85 caps their business. My impression is they’re doing this because they love this kind of cooking, like being in control and preparing food with art in the way they want. I was glad to be along for the ride and hope to return. Mozilla, the creators of the Firefox browser and other important open web technologies, just appointed Brendan Eich as CEO. The problem is Brendan Eich donated $1000 to Proposition 8, the anti-gay marriage referendum that set back marriage equality in California for five years. And now there’s a shitstorm. I held my tongue on this for a few days to give Eich and Mozilla time to give their side of the story. Well, they did and it’s a mealy-mouthed non-explanation where Eich desperately tries to sidetrack any questions about his politics with a confusing endorsement of “inclusiveness” and Indonesians. It ends with him questioning the world’s faith in Firefox because his colleagues are calling him out on failing a basic measure of human decency. The interview is dishonest and disgusting. I don’t think there should be a political litmus test for CEOs, even CEOs of mission-driven non-profits. It’d be fine with me if Eich were an NRA supporter or a no-tax Tea Partier or some other debatable position. But this isn't politics. Gay marriage is a civil right and Eich unapologetically contributed to deny me and my friends equal citizenship in the United States. It’s unacceptable and makes him unfit to be the CEO of Mozilla. Apparently he doesn’t intend to apologize or recant. Fine. But it’s particularly appalling that he doesn’t even want to explain his position. I’d respect him more if he said “I oppose gay marriage because of my religious beliefs” or whatever, at least then he’d have some integrity. Instead he just wants us all to ignore his demonstrated anti-gay stance, a dishonesty and lack of courage. Unexamined bigotry is the most dangerous kind. Brendan Eich must go. His position as CEO is threatening Mozilla’s future. Sadly there’s a crisis in the board of directors too. This kind of chaos destroys organizations. Ken is the family chef but I enjoy cooking in Grass Valley. Partly because it’s a huge kitchen with plenty of room to work. And also because we outfitted it from scratch with high quality kitchen tools. Here’s some of the stuff I particularly like using.
Neither the knives or pans are particularly cheap. But if you can afford the initial cost they’ll pay for themselves in longevity. Also most have generous warranties. In my salad days I threw out cheap pans about once every two years; we have All Clad that’s 20 years old and still in great shape. Apologies for the spammy-sounding Amazon links;
they’re for your convenience, but I do pocket a few bucks a
year from affiliate fees
Gfycat (and CloudFlare) has a fantastic error page for when they
have a server error.
Such a clear, simple statement of what the error is and what the
user can do. One of my pet peeves is software that blames the user
when it's not their fault, like the "your Internet is down" message
Steam displays when their client can't connect to their server.
This kind of message is much more honest and useful.
BTW, Gfycat is an awesome service. They host animated GIFs for sharing. And they transcode the bloated source GIF to much smaller HTML 5 video, then serve the smaller file to browsers who can handle it. The hosting is good, the 95% bandwidth savings is great. |