Seek the opportunities

Here's another item from a series I would sometime like to put together in a story.
Someone told me today, referring to a general context, that you should seek the opportunities not the shortcomings. Of course, you should be moderate (see post VIRTUE NO.1 MODERATION) in ignoring the threats but getting back to the good parts i don't see it other but beneficial to focus on them. Once the basic needs are fulfilled the higher ones depend much on the way you think about them. It's a problem related to our mindset: you can't really avoid the issues and take advantage of the opportunities in the same time. We are always biased in one direction or the other.
And because of that, and because i'm biased in the other direction :), I suggest that seeking opportunities has to be a better option than seeking difficulties. It's harder of course but it must be the way to go.
So SEEK OPPORTUNITIES.  
To try and put together the posts written by now I would say:
You, the reader should not believe it's true what I'm telling here but think about it and judge by yourself. And what I propose you to think about for now is that you should be moderate but with a bias to the seeking of opportunities. In a broader sense you may put is like this: to have a positive mindset.

Virtue no.1 : moderation

"Some things are better than others.
We should have preferences that leads us into one future over
another but when these preferences drives us too hard and too
fast because we have overrated the difference between these
futures, we are at risk.

When our ambition is bounded it leads us to work joyfully .
When our ambition is unbounded it leads us to lie, to cheat,
to steal, to hurt others, to sacrifice things of real value.
When our fears are bounded we're prudent, we're cautious
and we're thoughtful. When our fears are unbounded and
overblown we're reckless and we're cowardly.

The lesson i wanna leave you with from this data is that our
longings and our worries are both to some degree overblown
because we have within us the capacity to manufacture the
very commodity we are constantly chasing when we choose
experience."

Dan Gilbert at TED talk "Why are we happy?"

A lesson about moderation

Believe nothing.
No matter where you read it,
Or who said it,
Even if I have said it,
Unless it agrees with your own reason
And your own common sense.
—Buddha

JAVA code in JAVA Server Pages

Using (more than a few lines of) code in JSPs is bad practice. For one reason, you mix logic with presentation. This is the reason you should use a Model 2 framework. But here's another one: you cannot debug JSP code. Of course you can insert prints to figure it out what's happening but if there's pretty complex code there you will surely miss a debugger.

A new beginning

Yes, i finished school ... actually it's more like: I finished school, yupiiii !!! Theoretically I could post more often now, since I do not have to go to school in the week-ends but stay home surfing the net endlessly (to read: searching and learning from technical articles). To sum up, I have learned a bit about security, met real teachers and not really teachers. Now that it is over, I can focus on the thing I'm trying to learn for a while now. That is building web apps the right way.

Master - apprendre par coeur

De cand astept sa-mi testez capacitatea memoriei - estimez ca e scazuta, cativa KB in cel mai bun caz, si aia deja ocupati cu numarul propriu de telefon, vreo 2 pinuri de card etc. . Acel moment a sosit. Ocazia a venit din partea unui examen pe care il am azi la Master: Auditului Sistemelor de Securitate Informatica. Materia incepe cam asa: Auditul de securitate informatica este un instrument de managent, de verificare si monitorizare a sistemelor de management al securitatii informatice. Si daca nu e elocvent, mai spun doar ca: "Cercetările şi studiile referitoare la auditul în domeniul tehnologiei informaţilor se referă atât la auditul propriu-zis, incluzând aspecte teoretice şi metode practice de abordare, cât şi la domeniile auditate, incluzând studii şi analize referitoare la aplicaţii şi sisteme informatice, sisteme informaţionale, date, informaţii, cunoştinţe, fluxurile acestora în cadrul organizaţiilor, precum şi între organizaţii şi mediile în care operează." - imi cer scuze pentru cei care s-au prins de la prima fraza, desi probabil ca vor renunta la citit si nu vor mai ajunge pana aici.

Stack overrun

Aici se face diferenta intre stack overrun si stack overflow. Stack overflow e atunci cand spatiul alocat de OS programului pentru stiva este depasit, de obicei prin recursivitate infinita sau prin definiri de variabile locale prea mari. Stack overrun e un caz de depasire a bufferului si inseamna ca se aloca un buffer pe stiva unei functii iar datele venite din exterior sunt mai mari decat spatiul destinat bufferului ajungand sa suprascrie alte portiuni de stiva, cum ar fi adresa de revenire. Un atac stack overrun se realizeaza apeland o astfel de functie cu un parametru care va suprascrie peste adresa de revenire salvata de program adresa unui cod dorit de atacator (de exemplu un shellcode care permite atacatorului sa preia controlul masinii). Wikipedia numeste stack overrun stack buffer overflow