http://www.zhen.org/blog Business, Technology and Other Things Tue, 14 Aug 2007 05:11:16 +0000 http://backend.userland.com/rss092 en I have been wanting some information on this topic for a while now. Finally someone's written something about it here and here. http://www.zhen.org/blog/2007/08/13/how-much-equity-for-investors-and-employees/ Ok, so by now everyone has probably seen this. The code for the front page of Facebook was exposed due to a server misconfiguration. Both TechCrunch and Mashable have blogs about it so no need for me to say much. http://www.zhen.org/blog/2007/08/12/facebook-exposed/ Well, I am going to try blogging again. I realized recently the failure of Zen 1.0, or the blog I called Operational Intelligence, was probably because I was trying to be too focused. I tried to write about topics that are related to my work. Not that the topics are ... http://www.zhen.org/blog/2007/08/11/zen-20/ This is a pretty cool compilation of the various technologies in its old and new form. The least convincing one is probably the mouse. Even though there are small mice, I can't imagine people using those small mice for a long time and not get sick of it. Human hands ... http://www.zhen.org/blog/2006/10/06/technology-then-and-now/ This is a pretty interesting contest. Netflix is making available to the public 100 million of its customers' movie ratings so you can help them design a new rating system that's at least 10% better than what they have today. A better rating system means customers will likely to rent ... http://www.zhen.org/blog/2006/10/01/netflix-offers-1-million-for-a-better-review/ Very interesting read on IE + JavaScript Performance Recommendations. http://www.zhen.org/blog/2006/10/01/ie-javascript-performance-recommendations-part-1/ AJAX has been the talk of the web development community since Google came out with Gmail and Google Map. Here's an interesting view of The 4 States of Ajax Adoption. http://www.zhen.org/blog/2006/10/01/the-4-states-of-ajax-adoption/ Interesting article on exploring the root causes of many coding defects and possible solutions. http://www.zhen.org/blog/2006/10/01/avoiding-the-most-common-software-development-goofs/ More javascript performance tips, Lessons in Javascript Performance Optimisation: 90 seconds down to 3 seconds. http://www.zhen.org/blog/2006/10/01/lessons-in-javascript-performance-optimisation-90-seconds-down-to-3-seconds/ Great article on how to organize CSS files. Given the AJAX popularity these days, CSS knowledge is essential for anyone who wants to play with AJAX. Check out Architecting CSS. From ajaxian.com: Archetype-Based A stylesheet for each class of page, e.g. homepage stylesheet, article stylesheet, etc. Page Element/Section-Based A stylesheet for each class ... http://www.zhen.org/blog/2006/10/01/architecting-css/ This is a pretty good overview of the various ajax toolkits out there. Not a lot of detailed analysis but gives you some ideas of what each toolkit does. http://www.zhen.org/blog/2006/10/01/demystifying-open-source-ajax-toolkits/ According to this CNET news, A Democratic member of the U.S. House of Representatives said Thursday that she plans to introduce legislation next week that would force Internet providers to record customer information for one year. Personally I think it's stupid for the gov't to create such mandate, especially for the reasons ... http://www.zhen.org/blog/2006/09/21/data-retention-bill-expected-next-week/ Earlier we mentioned that EMC is buying Network Intelligence, well, there's a bunch of analyst/editor comments out now. EMC and Network Intelligence: What it Means. In the last few months, Novell bought e-Security and IBM got GuardedNet through its acquisition of Micromuse. Cisco grabbed Protego about and year ago and rumor has ... http://www.zhen.org/blog/2006/09/21/emc-and-network-intelligence/ Read this post on 5 Easy Ways to be a Better Developer today. Agree with most of what it says. Though I wouldn't call these "easy ways." None of them is easy unless you are willing to spend time working on them. My comments on the points... 1) Learn Ruby and Ruby on ... http://www.zhen.org/blog/2006/09/17/5-easy-ways-to-be-a-better-developer/ Rumor has it that EMC is buying the SIEM vendor Network Intelligence for between $150 to $175 million. NI's revenue is said to be around $20 to $25 mil. That's 7x revenue, which is not bad at all. [Update: Announcement was made today on the NI acquisition by EMC. Interesting how ... http://www.zhen.org/blog/2006/09/15/emc-rumored-to-buy-network-intelligence/ Have been reading quite of bit of stuff on the various best practices and frameworks such as COBIT, PCI, ISO17799, ISO20000 and ITIL. I think one of the best description of COBIT vs ISO vs ITIL is the article The Big Picture: ITIL as an Integrated Framework written by Kevin ... http://www.zhen.org/blog/2006/09/12/the-big-picture-itil-as-an-integrated-framework/ So a few days ago, 9/7/06 to be exact, American Express, Discover Financial Services, JCB, MasterCard Worldwide and Visa International jointly announced the formation of an independent council, called PCI Security Standards Council, designed to manage the ongoing evolution of the Payment Card Industry (PCI) Data Security Standard. As its first ... http://www.zhen.org/blog/2006/09/11/pci-dss-11-released/ Some links I've collected, nowhere near comprehensive but they have served me well. Eric Fitzgerald's Windows Security Logging and Other Esoterica - Always a great blog to get all kinds of good info on Windows events. Eric's a Program Manager for Windows Core Security. He's pretty active on the loganalysis list ... http://www.zhen.org/blog/2006/09/10/windows-events-links/ There's a very interesting thread being discussed on the log-analysis list. The topic is on "Log integrity handling on central logsystem." I think the general consensus is that log signing ALONE is not going to be enough, and that signing just the filtered log is also not enough. Very interesting read. Should ... http://www.zhen.org/blog/2006/09/01/re-log-integrity-handling-on-central-logsystem/ Finally got a chance to read the 2006 CSI/FBI Computer Crime and Security Survey. It's definitely worth scanning through. There are some interesting findings: Regulatory compliance related to information security is among the most critical security issues customers face. Virus attacks continue to be the source of the greatest financial losses. ($15.7 mil) Unauthorized ... http://www.zhen.org/blog/2006/09/01/187/