Tiffany B. Brown

a mish-mosh of stuff

Posts in: Security

On Airline Security
Remember the fake boarding pass that was in Schneier’s hand? Actually, it was mine. I had flown to meet Schneier at Reagan National Airport because I wanted to view the security there through his eyes. He landed on a Delta flight in the next terminal over. To reach him, I would have to pass through [...] [22 Dec 2011]
HTML5 for AS3 Developers: cross-domain.xml and Cross-Origin Resource Sharing
This is the second post in an occasional series designed to bridge the gap between ActionScript 3.0 and emerging front-end technologies. Flash, like JavaScript, more-or-less adheres to a same-origin policy by default. Under a same-origin policy, requests for data must come from the same scheme, hostname, and port. If http://foo.example tries to request data from [...] [10 Oct 2011]
Recommended: “Wrapping Things Nicely with HTML5 Local Storage”
Today’s 24Ways entry is from Christian Heilmann and takes a look at HTML5 Local Storage. Heilmann explains: Why client-side storage can be a good thing; The origins of and need for local storage; How to use local storage; When to use local storage; I implemented local storage in browsers that support it for our wedding [...] [7 Dec 2010]
Damn … my VPS is being cracked
UPDATE: What appears to have happened … Yeah, as I type this, I’m getting hit with an attack. I’m not precisely sure of the motive. I just know that there are two directories on my server that should not be there and the attack appears to be coming through a specific URL. It’s been happening [...] [7 Nov 2007]
Link dump: Aug 6, 2006
Javascript Boot Camp Tutorial Groovy bits from Amy Hoy’s talk at OSCON 2006. [Via Spun] .NET developers make more money No mention of Java web developers. And even less mention of a methodology, so take it for what it’s worth. UPDATE: The author says: I began searching job sites for currently available jobs within the [...] [6 Aug 2006]
Thursday three-fer
F-Shaped Pattern For Reading Web Content This week’s Alertbox column, offers tips for web writing based on eyetracking studies of how users read web pages. Community Creators, Secure Your Code! Tips for sanitizing your user-generated content and code. Related: Ask Chris Episode 1 (MP3 file). Google Calendar releases an API So now you can create [...] [20 Apr 2006]
Links for April 7, 2006
TV on the Web ramping up in 2006 Richard MacManus has a round-up and analysis of some recent posts about rich media. Study sees interest in multitasking phones Or ‘Why mobile content is about to become even hotter’, although Nokia’s CEO argues voice is still the killer app. [Related: My notes from Demystifying the Mobile [...] [7 Apr 2006]
Never, EVER, neverever in life
… should you include put a file with your database passwords in your web document root and give it an .inc extenstion. I ran across an example of this today and it’s just a really bad practice. These files are web-readable, and by saving it as an .inc file, you are exposing your data to [...] [17 Aug 2005]