- John Levine: Challenge-response systems are as harmful as spam – John is correct, C-R is useless without digitally signed envelopes. Although using a CA system could work, so could a simpler solution involving PGP/GPG signatures. PTP verification would probably be computationally prohibitive, but some sort of distributed or transitive trust model might be adequate
- Digital Sundials International – ok, this is even cooler than the Pimp Watch
- Unusable Web – D. Keith Robinson on bad web design
random($foo) is the occassionally still updated blog of Leonard Lin. My pics are on Flickr, code is on Github. @lhl on Twitter. More »