|
Robert Clark - Legal Aspects of Full Spectrum Computer Network (Active) Defense
-
media.defcon.org
-
12 years ago
-
eng
Legal Aspects of Full Spectrum Computer Network (Active) Defense ROBERT CLARK ATTORNEY Full spectrum computer network (active) defense mean more than simply "hacking back". We've seen a lot of this issue lately. Orin Kerr and Stewart Baker had a lengthy debate about it online. New companies with some high visibility players claim they are providing "active defense" services to their clients. But all-in-all, what does this really mean? A....
|
|
Alejandro Caceres - Conducting massive attacks with open source distributed computing
-
www.defcon.org
-
12 years ago
-
eng
Conducting massive attacks with open source distributed computing ALEJANDRO CACERES OWNER, HYPERION GRAY LLC Distributed computing is sexy. Don't believe us? In this talk we'll show you, on a deep, practical level and with lots of (mostly Python) code, how a highly automated and effective computer network attack could be crafted and enhanced with the help of distributed computing over 'Big Data' technologies. Our goal is to demystify th....
|
|
Alejandro Caceres - Conducting massive attacks with open source distributed computing
-
media.defcon.org
-
12 years ago
-
eng
Conducting massive attacks with open source distributed computing ALEJANDRO CACERES OWNER, HYPERION GRAY LLC Distributed computing is sexy. Don't believe us? In this talk we'll show you, on a deep, practical level and with lots of (mostly Python) code, how a highly automated and effective computer network attack could be crafted and enhanced with the help of distributed computing over 'Big Data' technologies. Our goal is to demystify th....
|
|
Daniel Chechik and Anat (Fox) Davidi - Utilizing Popular Websites for Malicious Purposes Using RDI
-
www.defcon.org
-
12 years ago
-
eng
Utilizing Popular Websites for Malicious Purposes Using RDI DANIEL CHECHIK SECURITY RESEARCHER, TRUSTWAVE SPIDERLABS ANAT (FOX) DAVIDI SECURITY RESEARCHER, TRUSTWAVE SPIDERLABS Reflected DOM Injection is a new attack vector that will be unveiled for the first time in our talk! We will explain the technique and show a live demo where we use it to hide malicious code within popular and trusted websites. Daniel Chechik is a veteran sec....
|
|
Daniel Chechik and Anat (Fox) Davidi - Utilizing Popular Websites for Malicious Purposes Using RDI
-
media.defcon.org
-
12 years ago
-
eng
Utilizing Popular Websites for Malicious Purposes Using RDI DANIEL CHECHIK SECURITY RESEARCHER, TRUSTWAVE SPIDERLABS ANAT (FOX) DAVIDI SECURITY RESEARCHER, TRUSTWAVE SPIDERLABS Reflected DOM Injection is a new attack vector that will be unveiled for the first time in our talk! We will explain the technique and show a live demo where we use it to hide malicious code within popular and trusted websites. Daniel Chechik is a veteran sec....
|
|
40,000+ programmers use HackerEarth. Everyday, people from all over India and other countries submit code on HackerEarth, solve problems and participate in online coding tests. Our CodeFactory server has processed over 500,000 requests till now. There are different types of challenges running every month. The technology stack consists of multiple servers of different types e.g. search-server, realtime-server, web-server, log-server, ....
|
|
Google hangouts is awesome, its my preferred method for most audio/video calls these days. When running a group call I often dial into a separate phone if I have a better phone available for the group. It also got around the annoyance that when you are typing google automatically mutes you. This for most people is pretty subpar. While dialing in to the hangout can still be nice, you don’t have to do so to get rid of the annoying muting whil..
|
|
Google hangouts is awesome, its my preferred method for most audio/video calls these days. When running a group call I often dial into a separate phone if I have a better phone available for the group. It also got around the annoyance that when you are typing google automatically mutes you. This for most people is pretty subpar. While dialing in to the hangout can still be nice, you don’t have to do so to get rid of the annoying muting whil..
|
|
Advanced Oracle Troubleshooting Guide – Part 11: Complex Wait Chain Signature Analysis with ash_wait_chains.sql
-
tanelpoder.com
-
12 years ago
-
eng
Here’s a treat for the hard-core Oracle performance geeks out there – I’m releasing a cool, but still experimental script for ASH (or poor-man’s ASH)-based wait event analysis, which should add a whole new dimension into ASH based performance analysis. It doesn’t replace any of the existing ASH analysis techniques, but should bring the relationships between Oracle sessions in complex wait chains out to bright daylight much easier than befor....
|
|
Advanced Oracle Troubleshooting Guide – Part 11: Complex Wait Chain Signature Analysis with ash_wait_chains.sql
-
tanelpoder.com
-
12 years ago
-
eng
Here’s a treat for the hard-core Oracle performance geeks out there – I’m releasing a cool, but still experimental script for ASH (or poor-man’s ASH)-based wait event analysis, which should add a whole new dimension into ASH based performance analysis. It doesn’t replace any of the existing ASH analysis techniques, but should bring the relationships between Oracle sessions in complex wait chains out to bright daylight much easier than befor....
|
|
Many people use git pull and merge frequently in an effort to keep a branch up to date while working a feature. However it's actually…
|
|
Just as PostgreSQL 9.3 was coming out I had a need to take advantage of the JSON datatype and some of the operators and functions within it. The use case was pretty simple, run a query across a variety of databases, then take the results and store them. We explored doing something more elaborate with the columns/values, but in the end just opted to save the entire result set as JSON then I could use the operators to explore it as desire....
|
|
Just as PostgreSQL 9.3 was coming out I had a need to take advantage of the JSON datatype and some of the operators and functions within it. The use case was pretty simple, run a query across a variety of databases, then take the results and store them. We explored doing something more elaborate with the columns/values, but in the end just opted to save the entire result set as JSON then I could use the operators to explore it as desire....
|
Summary: "DEF CON is the world's largest hacking conference, held in Las Vegas, Nevada. In 2012 it was held for the 20th time. The conference has strict no-filming policies, but for DEF CON 20, a documentary crew was allowed full access to the event. The film follows the four days of the conference, the events and people (attendees and staff), and covers history and philosophy behind DEF CON's success and unique experience." Written by ....
|
Summary: "DEF CON is the world's largest hacking conference, held in Las Vegas, Nevada. In 2012 it was held for the 20th time. The conference has strict no-filming policies, but for DEF CON 20, a documentary crew was allowed full access to the event. The film follows the four days of the conference, the events and people (attendees and staff), and covers history and philosophy behind DEF CON's success and unique experience." Written by ....
|
|
Improving the state of healthcare through innovation requires investing in others to join you on the journey; not just for today, but for the decades to come. Project Lead the Way has established the Computer Science and Software Enginering course that teaches computational thinking to high school students, and it will pilot in 60 schools across the country this fall. Providing exposure to a wide variety of computational and computer scien..
|
|
In an excellent article posted to The Verge earlier this afternoon Casey Newton made the point I intended to discuss this evening almost as an aside near the end of his article: “Apple could also let users log in to other apps and services using a fingerprints, providing secure authentication into apps and websites with a couple of taps. If biometric solutions become widely adopted, the tech industry could begin to phase out — or at lea....
|
|
With just hours left until the iPhone event today it’s a little late to speculate on pricing, but I just couldn’t resist. Permalink.
|
|
Where there is smoke, there is fire. Apple, then Google, and now Sony all make set-top boxes of varying sizes and functionality. Will Apple, as the leader in this trend, be the first to take the next step in the television space? Permalink.
|
|
If you add a dir directly under app/ Do nothing. All files in this dir are eager loaded in production and lazy loaded in development by default. If you add a dir under app/something/ (e.g. app/models/concerns/, app/models/products/) Ask: do I want to namespace modules and classes inside my new dir? For example in app/models/products/ you would need to wrap your class in module Products. If the answer is yes, do nothing. It will just....
|
|
I am working on building code to load polygons for the different Marine Forecast areas in the United States. These polygons need to be stored in MongoDB and there is a special way that needs to be done. It would not have been a big deal if it wasn’t for this fact. There isn’t just one polygon for each area. There is an external polygon and then zero to many interior polygons that need to be stored in relationship. After staring at the ..
|
|
It’s not a cabin, but I’m sure this neat little structure will appear on Cabin Porn before too long. The advent and increase in popularity of minimal living structures such as this one is very interesting to me; perhaps one day I will build one of my own. Until then, though, I can always dream. Permalink.
|
|
I could write an entire article proposing improvements to the new website alone, let alone the aging app. But this article isn’t just about Instapaper’s website, nor is it just about the app; this article is about Instapaper the read it later service and what Betaworks can do to revolutionize this beloved platform upon its next milestone release. Permalink.
|
|
My First Paper I’m pleased to announce that my first paper, titled “Anti-Coordination Games and Stable Colorings,” has been accepted for publication! The venue is the Symposium on Algorithmic Game Theory, which will take place in Aachen, Germany this October. A professor of mine once told me that everyone puts their first few publications on a pedestal, so I’ll do my best to keep things down to earth by focusing on the contents of the paper..
|
|
My First Paper I’m pleased to announce that my first paper, titled “Anti-Coordination Games and Stable Colorings,” has been accepted for publication! The venue is the Symposium on Algorithmic Game Theory, which will take place in Aachen, Germany this October. A professor of mine once told me that everyone puts their first few publications on a pedestal, so I’ll do my best to keep things down to earth by focusing on the contents of the paper..
|
|
My First Paper I’m pleased to announce that my first paper, titled “Anti-Coordination Games and Stable Colorings,” has been accepted for publication! The venue is the Symposium on Algorithmic Game Theory, which will take place in Aachen, Germany this October. A professor of mine once told me that everyone puts their first few publications on a pedestal, so I’ll do my best to keep things down to earth by focusing on the contents of the paper..
|
|
Background When we started to work on the new version of our mobile web app, we knew we wanted to run unit tests on a wide variety of…
|
|
Background When we started to work on the new version of our mobile web app, we knew we wanted to run unit tests on a wide variety of…
|
|
The Parrot AR.Drone is quite a lot of fun, and also quite hackable . We recently got one, and the first thing to do was to connect the excellent Node.js ar-drone module with the NoFlo flow-based programming framework. While quite a lot of work remains, it was already very satisfying to see how the drone was able to fly patterns based on the NoFlo graphs we created. This will obviously be more interesting when we have the ....
|
|
HackerEarth API v2: Introducing asynchronous callbacks
-
engineering.hackerearth.com
-
12 years ago
-
eng
We had already published HackerEarth API v1 in February, 2012 at http://developer.hackerearth.com . The API v1 was synchronous in nature. This means that your request kept hanging until the code evaluation was done and response was received. This seriously limited anyone from writing robust applications using the API. We have been using the asynchronous API for a long time ourselves at HackerEarth for processing all the code submission....
|
|
Following my previous posts with basic Javascript aspects, like context and variable hoisting, I’ll try to write some basic concepts of the Ruby language. I decided to start with something that usually confuses new Ruby users (sometimes they don’t even know that they are confused, by the way): the Ruby nil object.
|
|
The Parrot AR.Drone is quite a lot of fun, and also quite hackable . We recently got one, and the first thing to do was to connect the excellent Node.js ar-drone module with the NoFlo flow-based programming framework. While quite a lot of work remains, it was already very satisfying to see how the drone was able to fly patterns based on the NoFlo graphs we created. This will obviously be more interesting when we have the ....
|
|
Wednesday evening, news broke that Apple had removed The Omni Group’s iOS app OmniKeyMaster for facilitating upgrade pricing, a feature Apple has refused to build in to the App Store since its launch. Amidst the vocal calls for change in Apple’s long-standing policies, I remembered something Marco Arment said on an episode of Build & Analyze . Permalink.
|
|
Hey there, I’ve done a bit of puppet-gluster hacking lately to try to squeeze some extra features and testing in before Linuxcon . Here’s a short list: SELinux fixes to keep Dan Walsh happy :) Ping and status checks before volume creation. Now puppet-gluster will be less noisy about failures or missing executions that are due to the necessary incremental nature of puppet-gluster runs. You'll need multiple puppet runs to get a c....
|
|
Hey there, I’ve done a bit of puppet-gluster hacking lately to try to squeeze some extra features and testing in before Linuxcon . Here’s a short list: SELinux fixes to keep Dan Walsh happy :) Ping and status checks before volume creation. Now puppet-gluster will be less noisy about failures or missing executions that are due to the necessary incremental nature of puppet-gluster runs. You'll need multiple puppet runs to get a c....
|
|
Hi All, I spent the morning today working on a performance issue I had with paperboys startup time. As they’re isn’t a huge amount of info out there on how to do this on the phone I thought I’d blog along as I worked through the problem. First port of call is the Windows Phone application analysis tool in Visual studio. This will hopefully help me work out what calls are going on at the time when I see the delay.
|
|
A little more than a year ago we closed our offices to become a fully distributed company. This story, which is still unfolding, has been the subject of my We Are All Remote Workers talk at RomagnaCamp 2013.
|
|
Introduction Iron.io has a product called IronWorker which provides a task oriented Linux container that you can run your programs inside. If you are not sure what I mean, think of this as having a temporary Linux virtual machine instantly available for your personal but short term use. IronWorker allows you to load your binaries, code files, support files, shells scripts and just about anything else you may need to run your program in ....
|
|
After nearly six years of Windows XP, the tenth major version of Microsoft’s computer operating system released to much hype and high expectations. With an overhauled visual aesthetic and a host of other headlining features, the Windows world heralded this release as the platform atop which the next generation of computers would build itself. An ambitious claim for sure, Microsoft’s promise to not only overhaul the user interface but its ve..
|
|
This serves as the announcement of my new bug tracker product I am working on. My needs are pretty specific and none of the existing bug trackers I have tried have meet the following goals. Speed. Searching, adding projects/issues/comments should be instant. Any time waiting on the bug tracker is wasted time. Outlook style view of projects/issues/comments. This should allow me to get an overview of how I am tracking. Not require me to s....
|
|
Interview with J. Paul Morrison, the father of Flow-Based Programming
-
bergie.iki.fi
-
12 years ago
-
eng
J. Paul Morrison invented Flow-Based Programming while at IBM in 1969. I ran into the concept in 2011 while trying to figure out a better way to create software. I read his canonical book on the subject, and decided to try and implement it in JavaScript. Thus, NoFlo got started. It has been an honor to have Paul as a mentor in the process. In late June 2013 we flew to Toronto to meet him. What resulted was quite a thorough code..
|
|
Interview with J. Paul Morrison, the father of Flow-Based Programming
-
bergie.iki.fi
-
12 years ago
-
eng
J. Paul Morrison invented Flow-Based Programming while at IBM in 1969. I ran into the concept in 2011 while trying to figure out a better way to create software. I read his canonical book on the subject, and decided to try and implement it in JavaScript. Thus, NoFlo got started. It has been an honor to have Paul as a mentor in the process. In late June 2013 we flew to Toronto to meet him. What resulted was quite a thorough code..
|
|
In case you haven’t noticed, I will be delivering my Advanced Oracle Troubleshooting and Advanced Oracle Exadata Performance: Troubleshooting and Optimization classes again in Oct/Nov 2013 (AOT) and December 2013 (Exadata). I have streteched the Exadata class to 5-half days as 4 half-days wasn’t nearly enough to deliver the amount of details in the material (and I think it’s still going to be a pretty intensive pace). And that’s..
|
|
In case you haven’t noticed, I will be delivering my Advanced Oracle Troubleshooting and Advanced Oracle Exadata Performance: Troubleshooting and Optimization classes again in Oct/Nov 2013 (AOT) and December 2013 (Exadata). I have streteched the Exadata class to 5-half days as 4 half-days wasn’t nearly enough to deliver the amount of details in the material (and I think it’s still going to be a pretty intensive pace). And that’s..
|