David L. Farquhar on technology old and new, computer security, and more
I wasn’t surprised people were trying to hack my blog. What surprised me were how many people were trying to hack my blog–there was a time when I probably had more hacking-related traffic than I had reader-related traffic.
If you have a WordPress blog, you’re probably in a similar situation.
Last week, a former classmate shared a Dave Ramsey article about early savings. Ramsey stated a teenager could save a couple thousand a year, stop saving in their 20s, and still retire a multimillionaire. I agree with the sentiment completely, but I’m concerned that Ramsey overstates how rich that person can expect to become.
Ramsey’s favored investment vehicle is a mutual fund that tracks the S&P 500.
The problem with the article is that he assumed an annual return on investment of 12 percent, which is well above every reasonable historical estimate I’ve ever heard of S&P 500 rates of return. Forbes agrees. Ramsey is basing his number on a subset of history, not all available history.
It was June 2, 2015, the 80th anniversary of Babe Ruth’s final Major League Baseball game. That day, I bought a lottery ticket. I spied a 1935 Goudey Babe Ruth card on Ebay, which casually mentioned it was an “RP,” which is usually shorthand for “reprint.”
Chances were, the seller was telling the truth, and hoping some bidders would fail to notice the code word. But the card looked just convincing enough that I decided to place a bid, just in case the seller was wrong. I won. The total price including shipping was $11. No one else had taken the bait.
I got this question anonymously, but it’s a fair question: Does AT&T U-Verse drop connections like DSL?
In my experience, over the 3½ years I’ve had it, sometimes. But not nearly as often.
In many security job interviews, the interviewer will ask about cross-site scripting, also known as XSS. Most descriptions of it are overly complex, however. The best description of it that I’ve ever heard is just five words long: Code execution in the browser. That’s cross site scripting explained as succinctly as possible.
That succinctly sums up the problem: You don’t want someone to be able to inject their code into your site.
Last year I got a Samsung LN-S2338W 23″ LCD TV at an insanely low price. The catch was that it didn’t behave very well–the buttons didn’t always work, and the TV liked to turn itself off randomly, or sometimes it even turned itself on.
It wasn’t haunted–it needed a power supply. Samsung TVs of this era had a recall due to defective capacitors in their power supplies, but either this one never got fixed, or wasn’t fixed completely. But it’s not too difficult to fix it yourself.
I got the white screen of death last week, but it was odd—it only happened if I tried to edit posts that were in draft or scheduled status. Already-published content would edit fine. Here’s my experience fixing white screens in WordPress.
Clearing my cache helped temporarily, but the problem would come back as soon as I saved a post. I ended up doing two other things as well, and then the problem went away. I emptied my spam, which also greatly sped up the site, and I also deleted a mobile plugin that I was no longer using but was disabled. Disabled plugins can still affect behavior sometimes. Read more
Over the weekend I installed the All-in-One WP Security and Firewall plugin to fix another issue–more on that tomorrow–and I ended up breaking my site. Hopefully I fixed it to a better state than it started in.
The lesson, as with many security tools, is to proceed with caution.
Every so often, the topic of lamp oil as a cheap substitute for smoke fluid in Lionel and Marx trains comes up.
The topic has been beaten to death on many closed message groups, but finding the answer isn’t always that easy. But, in short, it’s not a safe thing to do.
I sometimes show my age by making jokes about Bonsai Buddy and Gator and Hotbar, but ads injected in browsers are a problem that’s coming back. And sometimes these ads come with malicious payloads, installing unwelcome software on your computer to maintain persistence.
Problems like this are the reason I tend not to load my browsers down with lots of extensions. Sometimes the functionality is cool, but I’ve always found ways to get what I need done with a stock browser, and then I have a better idea of what I’ve gotten myself into. I’m beholden enough to the agendas of Microsoft, Mozilla, or Google as it is; I don’t need third parties injecting their agendas into the mix, especially when they may be malicious.
And besides that, a lot of extensions tend to be very memory- or CPU-hungry. I have enough memory on most of my machines that I can dedicate 2 GB of RAM to a web browser, but I’m not sure why I should have to.
The fewer extensions you load onto your web browsers, the safer you’ll be, and in the long term, I’d wager the happier you’ll be as well.