Glitch in C++ libraries allows a DoS attack against ISAPI
Grok Headline matches for Glitch in C++ libraries allows a DoS attack against ISAPI
Tracing ISAPI Extension in IIS 6.0
Tracing ISAPI Extension in IIS 6.0
01/16/2004 01:02 PM
Woo. I just found this gem of an IIS 6.0 feature
while hopping around
for info prior to writing an ISAPI Extension for IIS 6.0.
It's called IIS
6.0 Enterprise Tracing for Windows:
Windows Server 2003 includes Enterprise Tracing for
Windows (ETW), a new
framework for implementing tracing providers that can be used for
debugging and capacity
planning. IIS 6.0 implements a number of providers to trace
key transitions and
the progress that an HTTP request makes as it moves through the IIS
service framework.
These providers include the following:
-
HTTP Service Trace. This provider traces new connections,
new HTTP requests
from a given connection, HTTP kernel cache hits, application
pool routing, and HTTP
request completion.
-
IIS: WWW Server. This provider traces the transition of a
request from HTTP.sys
to the worker process, start and stop events surrounding Common
Gateway Interface
(CGI) requests, and the transition of a request back to HTTP.sys
from the worker process.
This information reveals the type of request that is being
processed.
-
IIS: SSL Filter. This provider traces calls into and out
of the SSL Filter,
which is used for SSL traffic.
-
IIS ISAPI Extension. This provider traces the transition
of a request into
and out of ISAPI extension processing.
-
IIS ASP. Traces the start and completion of the execution
of an ASP request.
These tracing providers allow you to follow a request through all
of its phases. This
information is very useful in the problem isolation phase of
troubleshooting. For
example, ISAPI filters can often cause delays or hangs in HTTP
request processing.
The tracing functionality can help to determine which ISAPI filter
is causing the
delay for a given request.
Nice! It's a bit beastly to use and there isn't a GUI tool to
display the trace
logs prettily so my eyes won't cross, but it's will come in handy
when I find myself
up the creek wearing a blindfold.

The amount of office space that
corporations allocate to their libraries
has fallen by 8.36% over the past five
years, according to a new survey of
corporate libraries "Corporate Library
Benchmarks, 2004-05 Edition" ISBN:
1-57440-069-X.
The amount of office space that
corporations allocate to their libraries
has fallen by 8.36% over the past five
years, according to a new survey of
corporate libraries "Corporate Library
Benchmarks, 2004-05 Edition" ISBN:
1-57440-069-X.
09/03/2004 02:51 AMReports on results of a major survey of corporate and other business
libraries. Gives extensive data on management policies and practices
and details on spending trends for salaries, electronic and print
materials, and library services. [PRWEB Sep 3, 2004]
Glitch, glitch, glitch, but not everyone
had complaints
Glitch, glitch, glitch, but not everyone
had complaints
07/25/2004 09:03 PMSiliconValley.com Jul 26 2004 0:36AM GMT
Merge old iPhoto libraries on CD with
iPhoto 5 libraries
Merge old iPhoto libraries on CD with
iPhoto 5 libraries
03/19/2005 02:40 AMI had several iPhoto libraries burned to CD backups from iPhoto 3 or 4
that I wanted to merge with my nearly complete iPhoto 5 library.
However, because I burned the libraries directly to CD from the Finder
or Toast, and not ...
""I am satisfied that I never saw any
intelligence that indicated there was
going to be an attack on America -- at a
time and a place, an attack." "
""I am satisfied that I never saw any
intelligence that indicated there was
going to be an attack on America -- at a
time and a place, an attack." "
04/13/2004 10:28 PMIt’s the Libraries, Stupid
It’s the Libraries, Stupid
06/09/2004 11:39 PMVia Jeff Dillon,
some insightful words on programming in Java and
in the C#/.NET/Mono ecosystem. I hadn’t thought about it that way.
England Libraries May All Get Wi-Fi
England Libraries May All Get Wi-Fi
12/04/2003 01:07 PMThe majority of libraries in England already have broadband access but
now the government is working on adding Wi-Fi: Most of the libraries
in King County, outside of Seattle, have Wi-Fi. It's a great, low-cost
way for libraries to offer Internet access without having to provide
computers for everyone. My library always has a line of people waiting
to get on its computers so perhaps with Wi-Fi some people could come
in with their own computers to use the Internet. But I wonder how many
of the people I see waiting in line there actually have laptops that
they could bring with them instead....
2D Graphics Libraries
2D Graphics Libraries
05/05/2004 07:45 PM
While platforms these days have fairly good 2D graphics support
like Quartz on OSX,
GDI+ on XP, and , and Gnome Canvas, developers like me often have
to use third-party
libraries for whatever reasons. On Win32, for example, GDI+
support is missing
in legacy platforms which means either giving up on fancy
graphics, redistributing
GDI+ binaries, use a third party library, or writing one
yourself. Writing one
yourself is fun (I have done it a couple of times over 20 years)
but, unless it offers
some unique features, you'll always end up migrating to a third
party library.
BTW, Flash has an excellent 2D graphics engine but it's lacks an
API so it's like
a sports car without a driving wheel. Yes, you can embed the
Flash ActiveX and
generate SWF on-the-fly but it's unwieldy for dynamic interaction
and even handling
gets tricky. Embedding Adobe SVG ActiveX is just as unwieldy
if not more.
While there are proprietary 2D engines out there, typically written
by a few guys
at a small company, they tend to disappear within a couple of
years, either bought
by companies (i.e. Apple, Adobe, Macromind, and Microsoft), or
abandoned out
of lack of interest or workable revenue model. Besides, they
charge fairly steep
fees so I tend to avoid them.
Out of all the freely available 2D libraries out there, Libart stands
out in features and quality. It offers fast
anti-aliased rendering
and it's use in Gnome Canvas over the years means most of the bugs
have already been
stepped on. Libart is also used to drive librsvg,
a SVG engine, and Java 2D, Java's graphics API, although Sun made
extensive changes
to tap hardware acceleration. While Libart can and has been
used cross-platform,
it's not exactly cakewalk to use in non-Linix platofrms. Cairo has
some interesting features and rising interest could mean it will
replace Libart someday,
but it's still in development.
Third-party 2D graphics library I really like these days is Anti-Grain
Geometry (AGG) which, although dormant for the last two years,
has been rejuvenated
with the released of version 2.1. AGG is written in C++ and
uses templates extensively
like ATL does. AGG is lightweight, very fast, flexible, and
full of features.
It even comes with a partial implementation of SVG
viewer as an example. AGG supports Win32, X11, and SDL as
is. It doesn't
yet support features variable stroke effects like Creature House's
Expression
3 engine and Fractal Design's Painter support but then
it's just me being
unreasonable. :-)
I should note that subpixel graphics was first done 20 years
ago in Word
Handler to display 70 columns of hi-res text on Apple
II.Silicon
Valley Systems, the company that published Word Handler, was
based just 5 minutes
from where I live now and I enjoy fond memories of working there
every time I pass
by the old office on El Camino. I guess everybody remembers
their first job.
LCD screens were just starting to replace LED on calculators at the
time, so Steve
Gibson and Microsoft ClearType can claim to be the first to use
subpixel graphics
on LCD screen. Lenny Elekman, where are you now?

Libraries and the Internet
Libraries and the Internet
12/19/2004 03:00 PM
Kudos to Google and its new university allies -- including my alma
mater, the University of Michigan, as well as Harvard, Stanford, and
Oxford -- for their exciting project to
open the stacks (Wall Street
Journal, via
Paul
Kedrosky). It's a great day for the dissemination of knowledge!
Bloggers from these institutions are relaying the emails received from
their administrators:
...NB Parser Libraries
NB Parser Libraries
06/11/2004 09:55 AMProject started
Merlin Libraries
Merlin Libraries
06/06/2004 05:02 AMMerlin Libraries v0.1.103 (unstable) Released
Libraries 8, Amazon 0
Libraries 8, Amazon 0
12/09/2003 12:13 PMHave You
Ever Wondered....
"Have you ever wondered if the library were like Amazon.com?"
[The J-Walk
Blog]
slack-get 0.2 (Libraries)
slack-get 0.2 (Libraries)
05/04/2004 04:41 PMA tool like 'apt-get' for Slackware.
New IM Record in Libraries
New IM Record in Libraries
03/14/2005 06:23 PMI've been so short on time lately that I've been trying to avoid
using what little blogging time I do have to simply repost what other
library bloggers are already putting up. This one, however, was just
too good to pass up.
when was the
last time you had this kind of response to a new library
service?
"Brian didn’t give me permission to publish a portion of
his email, but I’m so excited about it I’m going to throw caution
into the wind. He wrote [emphasis mine]:
'Rule number 1: Don’t send out IM reference fliers to
every middle school and jr. high classroom on the same day!
Had to have been at least 100 IMs in the first 2 hours after the
kiddies got home. For a while, I had about 20 IM windows up at once.'
"
Someone recently observed that there are a lot of Eeyo
res in the library community, but I think we can officially
declare IM reference a Martha-Stewart-good-thing for (at least) public
libraries and move it to Pooh status.
Cost of purchasing the AIM software: $0.
Cost of staff time to "man" the AIM service during those two hours:
already paid for.
Satisfaction of having 100 kids respond positively and view the
library in a new light: PRICELESS.
YSL Coding Libraries
YSL Coding Libraries
12/11/2003 06:12 PMTransfer of CVS repository in progress
PlanetaMessenger.org Libraries
PlanetaMessenger.org Libraries
11/01/2003 10:43 AMJMML 0.4 released
slack-get 0.3 (Libraries)
slack-get 0.3 (Libraries)
05/26/2004 10:49 PMA tool like 'apt-get' for Slackware.
Salon in Libraries?
Salon in Libraries?
03/19/2003 10:45 PMLast year I said I thought Salon should look into licensing
content to libraries, and now they're finally doing something about
it. Adrienne Crew, their Content Licensing Manager, sent me the
following:
"Thought you'd like to know that Salon's Premium Institutional
Subscription program for libraries is finally up and running....
Currently we are offering a one year subscription in the $300-400
range and feeds all access to the articles on the site via an IP
authentication system or a single password."
More details as I get them.
Essential in Libraries?
Essential in Libraries?
04/27/2004 10:48 PMSMS an
Essential Communication Tool
"The Mobile Data Association (MDA) reports that 2.1 billion text
messages were sent in March 2004 in the U.K which is a 25% rise on the
total from the same month last year.At present, on average, around 69
million text messages are sent each day in the UK.This article from
the BBC states.'It is evident that in the last five years texting has
grown from a popular craze among teenagers to an essential
communication tool.'
Text
messaging reaches new high" [Smart Mobs]
'UK libraries out of use by 2020'
'UK libraries out of use by 2020'
04/26/2004 09:46 PMThe public will stop using libraries if visitor numbers and book loans
continue to fall, according to a new report.
Echidna Libraries
Echidna Libraries
07/15/2004 07:16 AMAdded 8Bit Targa Support
"http://p2p.libraries.psu.edu/"
"http://p2p.libraries.psu.edu/"
11/18/2003 03:32 AMComputers in Libraries -- Wednesday
Computers in Libraries -- Wednesday
03/19/2005 02:36 AMI went to four sessions yesterday in addition to the keynote and went
to the dead technologies night session, and I wonder why I'm tired
when I get to the...
Enlightenment Foundation Libraries
Enlightenment Foundation Libraries
08/02/2004 05:18 PMArran4's Libraries (A4lib)
Arran4's Libraries (A4lib)
08/20/2004 09:28 PMProject registered
Forcing SQL Performance Libraries into
WMI
Forcing SQL Performance Libraries into
WMI
06/03/2004 03:15 PMTrusting Libraries for Your Aggregator
Trusting Libraries for Your Aggregator
05/24/2004 01:41 AMTV News in a
Postmodern World: The Busine$$ of RSS
"Want a glimpse of tomorrow? Innovators Bill French and Harry Hayes
are SmartStream Alliance and have a product that's so compelling
that news executives of every sort will be scrambling to be first in
their market with it....
RSxStream is a sophisticated and ingenious software engine
that takes RSS, Atom, RDF, XML, any other sort of feed or data stream,
or any other content that lives on the Internet and makes it available
to the desktop via a contextual reader. End users are given a
state-of-the-art reader capable of grabbing anything from live
TV to music to video-on-demand to simple RSS text feeds. If it's
available via the Internet (today), it can be routed through the
RSxStream engine. The end users have complete control of what sources
they choose, as they would with any other RSS reader. The difference
is those choices are drawn indirectly, through the RSxStream
software....
What's crucial to understand with this is that whoever provides the
reader to the public also owns the engine, and THAT is the business
end of RSS. It means advertising can be crafted into the design of the
reader and delivered based on the choices, habits and interests of the
end user. It's contextual advertising nirvana. This type of business
currently does not exist, but it's ideal for local media outlets. Why?
Because we're in the information distribution business, and getting
the reader onto the public's desktops is the key to its success.
Moreover, if the local media entities don't do it, somebody else will,
and they will take all those ad dollars with them." [DONATA Communications, via JD on MX]
I love the idea of providing the reader and even pre-populating it
with feeds relevant to the intended audience, but I hate the
idea of some company monetizing it. I'd much rather get a grant and
have libraries provide this information-centric software. We're in the
"information distribution" business, too, except we're interested in
people getting information without strings attached.
BBC NEWS | UK | 'UK libraries out of use
by 2020'
BBC NEWS | UK | 'UK libraries out of use
by 2020'
04/28/2004 11:04 PMdie britischen Bibliotheken im Jahre 2020 unbenutzt seien .. 'UK
libraries out of use by 2020' .. failing users ..
BBC
news.bbc.co.uk/1/hi/uk/3661831.stm
track this
site | 5 links
Computers in Libraries: Keeping Up
Computers in Libraries: Keeping Up
03/19/2005 02:36 AMGary Price, Genie Tyburski, and Steven Cohen talked about keeping up
in "Tips for Keeping Up: Expert Panel" that was the last item on Track
A on Wednesday. (Track A...
Building Testing Libraries
Building Testing Libraries
05/07/2004 07:22 PMSave time, test more, and use what the CPAN has made available to
enhance your development. Casey West demonstrates examples of good
techniques when testing Perl-based software.
Java Atomic Libraries
Java Atomic Libraries
09/10/2004 05:05 PMFirst checkin!
Islamic Tools and Libraries 0.6
Islamic Tools and Libraries 0.6
08/29/2004 03:47 AMIslamic tools and applications, including an Islam-centric library.
Ham Radio Control Libraries
Ham Radio Control Libraries
02/16/2004 08:07 PMHamlib 1.2.0 released
Ham Radio Control Libraries 1.2.0
Ham Radio Control Libraries 1.2.0
02/18/2004 01:18 PMShared libraries for HAM radio equipment control.
Who's Hot Today? Nashville; All U.S.
Libraries
Who's Hot Today? Nashville; All U.S.
Libraries
06/24/2005 10:01 PM Nashville, Tenn., has 600 computers in its Metro library system and
waiting lines: Adding Wi-Fi is a natural for their patrons who can
bring their own laptops. The system will cost just under $70,000
across the system through 50-50 federal and local money. The AP
reports on an library study showing 99.6 percent of libraries
connected to the Internet: Almost of those offer Internet access to
their patrons. This number from the American Library Association is up
from 20.9 percent in 1994, when the commercial Internet was
brand-spanking new. (I founded a Web site development firm in 1994,
and had a T-1 to the Net that August--when it was pretty rare.)
Eighteen percent of libraries offer Wi-Fi, but a whopping 21 percent
plan to offer it in the next year. Only 42 percent of libraries have
high-speed connections, and often broadband is coupled with Wi-Fi:
sharing a single dial-up modem over Wi-Fi isn't much of an incentive
over home dial-up to library patrons. Public libraries' biggest
problem is having enough computers to go around....

Anarchists, Libraries and Freedom
Anarchists, Libraries and Freedom
05/17/2004 08:50 PMSiva Vaidhyanathan is in town
today to promote his new book, The Anarchist in the Library, which I've read and
highly recommend. I'll explain why in an upcoming posting.
portal: Libraries and the Academy
portal: Libraries and the Academy
02/10/2004 02:49 AMportal: Libraries and the Academy
http://muse.jhu.edu/journals/portal_libraries_and_the_academy/A journal that presents research findings and provides regular
coverage of issues in technology, publishing, and periodicals, portal
is written by librarians for librarians. Peer-reviewed articles
address subjects such as library administration, information
technology, and information policy. The journal examines the role of
libraries in meeting institutional missions, explores how technology
affects librarianship and scholarship, and conveys this research to
academic librarians in a timely manner. Through the highest-quality
research and news about librarianship in higher education
institutions, portal provides a much needed, fresh perspective. portal
earned recognition as the runner-up for the best new journal of 2001,
awarded by the Council of Editors of Learned Journals.
SSTTR Java Libraries 1.1
SSTTR Java Libraries 1.1
05/09/2004 04:42 AMMiscellaneous Java libraries for XML, crypto, and other things.
Libraries and culture, from a trench
Libraries and culture, from a trench
07/02/2004 01:28 PMToday (July 1, 2004) marks a new chapter for many libraries across the
US of A. Today is the first day of mandatory Internet filtering, if
your library accepts federal telecommunications funds. Mine does.
Grok Description matches for Glitch in C++ libraries allows a DoS attack against ISAPI
GrokA matches for Glitch in C++ libraries allows a DoS attack against ISAPI
Glitch in C++ libraries allows a DoS attack against ISAPI