六月麦田

今天去了Santa Cruz的两处海滩。那里正在搞比赛，看上去像是长跑或者铁人三项。比赛的终点就在沙滩上，经过长途奔跑的男女老少在终点前接受大家的欢呼和掌声。

天气依然是阳光灿烂，吹着海风也很温暖。

Weekend。

今天跑去Gilroy的Outlets，买了两件衬衫一双鞋，加上带过来的衣服，至少够穿一个月了。

晚间时候在Mountain View的Villa 08吃海鲜自助，觉得和Crazy Buffet并没有什么差别。“外滩8号”则似乎是一部电影的名字。

雨季的大部分时间，这里的天气依然明艳。早晨洗澡时明晃晃的太阳光刺进来，想戴上墨镜。路边通常都有各种不同的树混杂种在一起，从热带的棕榈到寒带的松柏。它们中的一些在这个时候变成红、橙或者黄色，深深浅浅的很好看。“Palo Alto”据说是西班牙语，来自于一棵树的名字。这棵树也许不晓得它的名字对世界有怎样的意义。如果它还健在的话，我很想知道它在秋天里是哪一种颜色。

引用Wikipedia上Palo Alto词条的一段：

Palo Alto (pronounced /ˌpæloʊˈæltoʊ/, from Spanish: palo: “stick” (or “pole” or “tree”) and alto: “tall”) is a California charter city located in the northwest corner of Santa Clara County, in the San Francisco Bay Area of California, USA. It is named after a tree called El Palo Alto. The city includes portions of Stanford University and is headquarters to a number of Silicon Valley high-technology companies, including Hewlett-Packard, VMware and Facebook. As of the 2000 census, the city had a total population of 58,598 residents.

希望明天可以去个地方闲逛。

对DC的痛恨与日俱增，年末如有盈余定置单反。

We always use an ACL module to control if a UI component displays in the screen for current user. For example, Client ACL attend to prevent a read-only user from creating new object by hiding “New” button. But considering that the client application is actually an user interface which runs on client machine and communicates with the server through the Internet, data can be changed easily in the long way from browser to the server. Although client code, Javascript for example, do hide the “New” button, the user is able to display it with browser tool like firebug. One even doesn’t need the button but just calls the Javascript function directly to invoke the hidden feature. So the real ACL must be built on the server side – “safe area”, instead of client side which is out of control.
Never see “client ACL” as an ACL issue – it’s indeed an business logic. It’s just data set by which client code can decide whether show UI component – nothing else.
It sounds easy, but unfortunately, we came to such an issue today on a product released months before.

CA985

Arrived at Palo Alto on Oct. 17th. Everything goes well.