Freelance Software Architect
hosting
Exploiting web development worst practices: SQL injection
Nobody likes to be the guy who coded the “simple” website that later compromised a whole server and was used to leech ten-thousands of dollars out of unsuspecting citizens, and thus dragged an innocent company in trouble. Or the explaining that inevitably follows. Having security audited a few custom websites lately, I got the feeling that there is a need for a resource that in a few simple lessons helps web developers make more secure sites and avoid trouble.
Cloud power!
We all know in theory the advantages of load-balanced high availability clusters, but we often forget that they are also fun to build and operate.
Yes, I’m at fault of calling it a cloud when it’s rather a cluster, but who can resist the siren call of buzzwords? :) Cloud usually implies virtualization besides using multiple [...]
The best features of the coming Drupal 7
Yesterday I have read through Dries’ State of Drupal presentation, and I have to say I’m impressed both by the thinking he put into the release engineering (something I have only seen at OpenBSD), and by the features Drupal 7 will bring to the table.
Cherry-picking from his presentation, I think the most promising new features [...]
How to get screwed on the Internet
A few weeks ago I had a chat about the state of Internet security with a friend who runs a hosting company, and he told me that the majority of the websites they host are cracked. This is because people just install just a forum/blog/gallery/etc software, but most have no idea that such installations have to be constantly “security patched”. Then, sooner or later someone finds an exploitable bug in that particular engine, and then their website is used to send spam, facilitate phishing attacks, host viruses, or worse.
More posts about...
Keep in touch!
