Top 10 Risks to Web Applications

OWASP has published a release-candidate report of the top 10 risks they foresee to web applications in 2010.

Summary:

  1. Injection
  2. Cross Site Scripting (XSS)
  3. Broken Authentication and Session Management
  4. Insecure Direct Object References
  5. Cross Site Request Forgery (CSRF)
  6. Security Misconfiguration
  7. Failure to Restrict URL Access
  8. Unvalidated Redirects and Forwards
  9. Insecure Cryptographic Storage
  10. Insufficient Transport Layer Protection

Lady Gaga at the 2009 VMA’s looks awfully familiar

all-your-gaga

Selecting Anti-Virus Software for Home

“I purchased X Anti-Virus for my Home PC last year and unimpressed, let it expire. Which anti-virus product should I purchase now?”

I get asked this question a lot. I provide below how I typically answer it, hoping that someone out there will find it useful as a template for your responses to similar questions to which you must respond.

Read more…

AUC #2: ls

auc2AUC 2 – Arbitrary Unix Command #2
I thought it might be useful to cover some obscure unix commands that you may find useful in your day to day system administration. My primary work machine is a Macbook Pro these days, so I’ll lean towards cover commands that come with OS X. Most unix operating systems will likely have the commands I cover.

Read more…

Worth Watching – Stargate Atlantis

Stargate Atlantis | SCIFI.COM.png

I never got into Stargate SG-1. I loved the original Stargate movie so I gave the series a try, but never got hooked.

I recently discovered the second Stargate spin off, Stargate Atlantis just as the SciFi cable channel was advertising it’s 5th and final season was about to come to a close.

I’m hooked.

Read more…

Amazon Deal: 90% off HD-DVDs

AA892708-2A2E-4EC3-8157-9E939C78F712.jpg

If you are like me and sided with the HD-DVD format during the HD media war, you have an HD-DVD player collecting dust in your entertainment center. (I’m not bitter)

So how better to embrace the new world order that is Bluray than laugh at Sony by purchasing the same content, at the exact same quality, by buying up a storm of High Definition DVDs at rock bottom prices. In fact, at up to 90% off they are cheaper than purchasing most Standard Definition DVD’s on sale.

I picked out my favorites below (read: worth watching in High Def) as well as a link to what’s left of the HD-DVD stock. Pick $25 worth and get free super saver shipping. If you are HD-DVD player-less and have an Xbox 360 or a Windows Vista PC you can pick up the Microsoft HD-DVD add-on drive for about $50.

Read more…

LCD on the Wall, Which Netbook Battery Lasts the Longest of Them All?

batteries_netbook

On the hunt for a travel netbook? After testing out early models with squished keyboards I decided to wait for a model with useable size and 10″ seems to be about perfect. I originally thought I wanted a fully loaded netbook until I realized that wasn’t the point. Netbooks are not intended to replace laptops. They are intended to be ultra portable with prices making them nearly disposable. Netbooks are perfect travel companions for photographers who need to dump the days pictures onto a backup external hard drive and review images on a screen larger than the thumbnail preview on the back of their camera.

Since a unit’s size is an important feature, how much juice can you realistically expect from the form factor? Find the list of which models last the longest after the jump.

Read more…

AUC #1: paste

auc2AUC 1 – Arbitrary Unix Command #1
I thought it might be useful to cover some obscure unix commands that you may find useful in your day to day system administration. My primary work machine is a Macbook Pro these days, so I’ll lean towards cover commands that come with OS X. Most unix operating systems (OpenBSD, FreeBSD, Linux, Solaris) will likely have the commands I cover as well so only the Microsoft-only folks will be left out. (sorry)

Read more…

Forget Reading the News, Absorb It

newser

Similar to the NYT Article Skimmer I posted recently, Newser.com provides another option if you want to absorb the news rather than read it. +5 points to them for reducing burn time spent on the internet.

Open Source Mac

osmac

I recently stumbled upon this website (OpenSourceMac.org) which is a clean list of useful open source software that has been written or ported over to Apple OS X. This is very handy to email to your friend which you recently converted to Apple :-)