security – Page 5

Tag: security (page 5 of 7)

Links for September 5

Richard Nixon’s health care reform proposal. I would gladly take this plan.
Brian Mastenbrook: How I cross-site scripted Twitter in 15 minutes, and why you shouldn’t store important data on 37signals’ applications. Good post on XSS vulnerabilities and best practices for dealing with security researchers.
New York Times: For Your Health, Froot Loops. Put this in your pocket for when people start yammering about businesses regulating themselves.
Tim Bray: On Music. A wide ranging look at the future of the music business. For all the complaining about the death of the music industry, an awful lot of really good music is being recorded.
Matt Mullenweg: How to Keep WordPress Secure. Shorter version: make sure you’re always running the latest release.

Links for August 28

August 28, 2009 / Rafe / 3 Comments

What do you guys think of the new link format? Good? Bad? Should each link be a separate post?

It’s Snow Leopard day. Here’s a wiki for tracking which applications are Snow Leopard compatible. Here’s John Gruber’s upgrade procedure, which I will be following.
Ted Leung revisits the age old debate — is open source development incompatible with good design?
ComputerWorld tests free antivirus software for Windows.

Links for August 24

August 24, 2009 / Rafe / 5 Comments

Trying yet another format for daily links. Here we go:

This is accountability.
Footnotes for last night’s Mad Men. If you like those, there’s a whole blog of Mad Men footnotes by the same author.
I wanted to second this notion from Matthew Yglesias that it’s stupid to blame Obama’s mistakes for the trials and tribulations of passing health care reform. This is an incredibly complex, emotionally charged issue, and trillions of dollars are at stake. Plus the opposition party is willing to lie constantly to scuttle reform for political reasons. There is no simple road map to reform.
The next World of Warcraft expansion (due sometime in 2010) will feature an in game launch event. The theme of the expansion is that an evil dragon unleashes an event that rips the original game world apart, so it’ll probably be worth renewing your game account just for that event when the time comes.
How rich are the super rich? Richer than ever.
Security researchers are looking at ways that botnets can be controlled through Google or Twitter. As far as I know, right now the most common approach is via IRC. Honestly, it strikes me that the simplest approach would be to set up a blog on BlogSpot and have all of the zombie PCs subscribe to the RSS feed.

Dave Smith just emailed to let me know that the theme I’m using is vulnerable to a cross-site scripting attack. He’s detailed the fix here, which I’ve applied. If you’re using depo-skinny, you’ll want to fix it as well.

Links from May 31st

May 31, 2009 / Rafe / 0 Comments

Security Fix: Microsoft Update Quietly Installs Firefox Extension. This is why nobody trusts Microsoft. Pulling this sort of stunt as an OS vendor is really irresponsible.
Scott Rosenberg: Rosen and Sotomayor: Blame it on the blog. After writing a really irresponsible hit piece, Jeffrey Rosen tries to blame his own crappy reporting on the fact that he was writing a blog post. Even though he wasn’t.
drupal.org: Apache Solr Search Integration. How to use Solr for site search with Drupal.
drupal.org: Zappos.com and Drupal. A case study.
Ajaxian: GWT team Wave’s goodbye to annoying question; It’s the API stupid. How Google Wave makes use of Google Web Toolkit.

Links from May 22nd

May 23, 2009 / Rafe / 2 Comments

Today’s batch of links:

Alan Clarke. Saw a link to these brilliantly designed posters for the 2012 Olympic games on Twitter. I absolutely love the diving poster.
Transformation in the Federal Sector: Data.gov Arrives!. Announcement from the consulting firm that built it.
Sunlight Labs: Everything We Know About Data.gov. It’s a LAMP site.
Jake Brewer: Data.Gov Launches: Why You Should Care and What You Should Do.
Schneier on Security: On the Anonymity of Home/Work Location Pairs. Sort of like my post about the uniqueness of various phrases this week. Generally speaking, the amount of data required to uniquely identify something is smaller than we think.
Anil Dash: Flags, Windows, Lucky Numbers and Hidden Mickeys. How the new Windows logo builds on the old Windows logo.
Schillmania: Javascript Malware Analysis: A Case Study.

Conficker Eye Chart

April 2, 2009 / Rafe / 0 Comments

Want to know whether you’re infected by the dread Conficker worm? Use this handy eye chart. (Simple and 100% effective, no kidding.)

Links from March 30th

March 30, 2009 / Rafe / 0 Comments

Jason Santa Maria: Reflections on Layer Tennis. Really, really great post on participating in Layer Tennis. I loved this.
SF Gate: Food, service uneven at Absinthe. A review of Top Chef participant Jamie “Top Scallop” Lauren’s San Francisco restaurant by Michael Bauer. Brutal.
John Resig: Determining Browser Market Share. Deep thoughts on measuring browser market share.
New York Times: Vast Spy System Loots Computers in 103 Countries. Uncovered by researchers at the University of Toronto. Also read this followup from James Fallows.
Goodnight, Raleigh: Memorializing a Magnificent Oak and “The Great Pacificator”. A little local knowledge about Raleigh.
The Economist: Germany’s racy auto banks.
Tim Bray: On Rack. A nice, short introduction to Rack, the glue that provides an interface from Ruby applications to Web servers.
MySQL Performance Blog: PROCEDURE ANALYSE. Very useful for optimizing your MySQL schema.
Vanessa Fox: Transforming the Relationship Between Citizens and Government: Making Content Findable Online. Advice on making data more searchable, pertinent to anyone publishing online.
Last.fm: Last.fm Radio Announcement. Users not in the US, UK, or Germany have to pay up to listen. Music licensing sucks.
LastFM Firefox Extension. Scrobbles Pandora tracks to Last.fm, for people like me who feel weird anytime they listen to a song and the data isn’t transmitted to Last.fm.
intranation: Development virtual machines on OS X using VMWare and Ubuntu. A clever alternative to MacPorts or Fink.
Trustico: Buy GeoTrust, VeriSign SSL Certificates At Cheaper Prices – Strategic Partner United States. I hate paying for certificates. These guys are cheap.

Quotable: Mohammad Sephery-Rad

March 27, 2009 / Rafe / 0 Comments

Mohammad Sephery-Rad, minister of Iran’s High Informatics Council, on replacing Windows with Linux for reasons of security:

All the software in Iran is copied. There is no copyright law, so everybody uses Microsoft software freely but we cannot continue like this much longer.

Apparently Iran is also seeking admission to the WTO, which would require them to respect international copyright laws.

Links from March 12th

March 12, 2009 / Rafe / 1 Comment

Kurt Cagle: Is Dreamweaver being beaten by Drupal? The real question being asked is whether the features associated with dynamic database-driven Web sites are more compelling than the pinpoint control and top notch user experience of Dreamweaver.
Pathfinder Development: Keeping Up With The Joneses: Keeping Rails and its extensions up to date. Managing dependencies is generally one of the most unpleasant aspects of any software development project.
Eric Burke: Ban Software Patents. Yet another example of ludicrous patents.
Michael Ruhlman: Michael Symon’s Pickled Chillis. Really cool recipe.
Serial Consign: Desktop Deja Vu. The history of the default desktop picture that shipped with Windows XP.
useum: Measuring Social Participation in a Science Museum. Useful for more than just museums.
Wired: The Untold Story of the World’s Biggest Diamond Heist. Looks fascinating but I’m not reading it ’til my Wired comes in the mail.
High Performance Web Sites: Performance Impact of CSS Selectors. Hard numbers on the varying performance of different CSS selectors. Also a reminder that there’s a lot more we could be measuring that we don’t.
oobject: formula 1 user interfaces. Incredibly fascinating comparison of the current state of steering wheels in Formula 1 cars.
PC Pro Blog: I’m sorry but Dreamweaver is dying. Another argument that high end page-based authoring tools are giving way to Drupal.

rc3.org

Strong opinions, weakly held