Nobody likes to be the guy who coded the “simple” website that later compromised a whole server and was used to leech ten-thousands of dollars out of unsuspecting citizens, and thus dragged an innocent company in trouble. Or the explaining that inevitably follows. Having security audited a few custom websites lately, I got the feeling that there is a need for a resource that in a few simple lessons helps web developers make more secure sites and avoid trouble.
We all know in theory the advantages of load-balanced high availability clusters, but we often forget that they are also fun to build and operate.
Yes, I’m at fault of calling it a cloud when it’s rather a cluster, but who can resist the siren call of buzzwords? :) Cloud usually implies virtualization besides using multiple [...]
Yesterday I have read through Dries’ State of Drupal presentation, and I have to say I’m impressed both by the thinking he put into the release engineering (something I have only seen at OpenBSD), and by the features Drupal 7 will bring to the table.
Cherry-picking from his presentation, I think the most promising new features [...]
Lately I was thinking about quantities of code.
More specifically, how the codebase of a typical web application relates to the open-source code used in it?
For an example, let’s use a mutual-fund search web application we developed for a brokerage about a year ago. (Disclaimer about the design: they wanted feng-shui compatible, ok? We deliver.) It’s [...]