#security (165 links)
- PHP Security Consortium: PHPSecInfo phpsec.org
Provides an equivalent to the phpinfo() function that reports security information about the PHP environment, and offers suggestions for improvement.
- Bulletproof backups for MySQL | Carsonified carsonified.com
What my shell script does is allow you to automate correctly backing up a standard MySQL database, or databases, with full end-to-end encryption to an offsite location.
- Web Security: Are You Part Of The Problem? - Smashing Magazine smashingmagazine.com
Via twoplusfour.
- Ultimate Htaccess Tutorial for .htaccess files askapache.com
Insanely obsessive htaccess gubbins.
- Carsonified » The Definitive Guide to GET vs POST carsonified.com
There is a lot misuse of GET over POST and vice versa. Both HTTP methods can achieve the same goals, but an incorrect choice between them can lead to unexpected and potentially harmful outcomes.
- Verified by Visa: a conversion rate killer? | Blog | Econsultancy econsultancy.com
Banks and card providers haven't really done enough to educate customers about the system, or to make the forms more usable, but retailers can at least minimise some of the damage to conversion rates by doing as much as they can to advise customers about what to expect during the checkout process.
- Orbicule | Undercover | iPhone orbicule.com
Hurrah, Undercover iPhone version is out. "If your iPhone is stolen, Undercover will pretend to be a game. This will encourage the thief to wait a few seconds for the game to load, enabling Undercover to get accurate location information. This location information is then added to your account and transmitted to the police station where you reported the theft."
Take a look at Verified By Visa. Allegedly this protects cardholders - by training them to expect a process in which there’s absolutely no way to know whether you are being phished or not.
- Send Me Home - World Peace through Wandering Items sendmehome.com
A free tool that lets you assign a unique code to anything.
- Password Manager + Automatic Form Filler for Mac OS X agilewebsolutions.com
Probably a better bet than passwordmaker. "use strong and unique passwords for every site and never forget any of them".
- Role Manager - Wordpress im-web-gefunden.de
WordPress Version 2.0 introduces the concept of Roles. Each Role is allowed to perform a set of tasks called Capabilities. This Plugin allows you to define and manage multiple subscriber profiles - called Roles and their Capabilities.
- Police vet live music, DJs for 'terror risk' • The Register theregister.co.uk
"A dozen London boroughs have implemented a "risk assessment" policy for live music that permits the police to ban any live music if they fail to receive personal details from the performers 14 days in advance."
Via headlessness.
"I have been asked by my work place to provide my passport." Not just employers; looks like it's becoming standard practice for recruiters to ask even if trading as a limited company. Something to do with the Immigration, Asylum and Nationality Act 2006.
Via scrubadub.
- The point of “Open” in OpenID simonwillison.net
Open means that providers and consumers are free to use the protocol in whatever way they wish. If they want to only accept OpenID from a trusted subset of providers, they can go ahead.
- Clickpass clickpass.com
"Log into websites with the click of a button - never again be locked out". Powered by OpenID.
- Orbicule | Weblog orbicule.com
I always have this problem: "It turns out that all you have to do is hold down the option (alt) key during startup and once you enter your firmware password you will be able to select a disk."
- Securing Leopard - Checklist - Securethoughts securethoughts.net
- Sniff browser history for improved user experience niallkennedy.com
Clever, well-meaning but crosses the privacy line.
- dormando - Dormando's [crappy] Operations Mantras dormando.livejournal.com
An omega post of all of the generalized one off mantras I find valuable when approaching operations management.
- SSHKeychain sshkeychain.org
Painless ssh key management for OS X
Create as many encrypted vaults as you want, each with separate passwords. Then schedule automatic backups. You can even reformat USB sticks and external drives as encrypted Knox vaults.
"When building a web site with HTTPS pages, one of the annoying tasks is to ensure that those pages make no references to HTTP resources. If they do, then Internet Explorer will pop up alarming messages about mixing secure and insecure content". Great tip
- Adactio: Journal - The password anti-pattern adactio.com
Asking users to input their email address and password from a third-party site like GMail or Yahoo Mail is completely unacceptable. Here’s why: It teaches people how to be phished.
- The Identity Corner » The problem(s) with OpenID idcorner.org
Comprehensive listing of problems with OpenID. FUD? Not FUD? Couldn't say myself but author competes in that space. OpenID + Passwordmaker.org is working well for me.
- PasswordMaker. One Password To Rule Them All.™ passwordmaker.org
A small, lightweight, free, extension for Internet Explorer, Firefox, Mozilla, Netscape, Flock, and Yahoo! Widgets which creates unique, secure passwords that are very easy for you to retrieve but no one else.
- Substitute Teacher Faces Jail Time Over Spyware - Security Fix blog.washingtonpost.com
Absolutely insane.
- O'Reilly Radar > Pros and Cons of OpenID radar.oreilly.com
What are the Pros and Cons of OpenID currently? Here's a crack at it (from the Radar Team)
- How to turn your blog in to an OpenID simonwillison.net
"An OpenID is simply a URL. My OpenID is simonwillison.net, the address of my weblog. I can use it to sign in to any site that supports OpenID, and because I’m the only person with control over my weblog’s homepage I’m the only person who can use th
- Sxipper: Sxipper sxipper.com
"A free Firefox plug-in, Sxipper saves you time by keeping track of all of your user IDs, passwords, and personal data." OpenID ready.
A mechanism for non-Yahoo applications to access Yahoo’s authentication mechanism and user data in a secure manner.
OpenID is an open, decentralized, free framework for user-centric digital identity.
By encrypting messages before they leave your computer to the Internet, SimpLite-MSN prevents eavesdroppers from reading your MSN Messenger conversations.
- Why phishing catches punters | The Register theregister.co.uk
Scary. "If you haven't read Why Phishing Works (850Kb PDF) - written by Rachna Dhamija, J D Tygar, and Marti Hearst - stop what you're doing now and go get it (or at the very least, read a short summary of what it offers)."
- Mail relay testing abuse.net
- jesus is a pervert: Protecting yourself against the BitTorrent bandits! jesus-is-a-pervert.blogspot.com
The most common retort against privacy advocates -- by those in favor of ID checks, cameras, databases, data mining and other wholesale surveillance measures -- is this line: "If you aren't doing anything wrong, what do you have to hide?"
- Free condoms for your Windows install | MetaFilter metafilter.com
More on SVS: "Safely install software in a virtual layer".
#free #hacks #lifehacks #productivity#programs #security #software #testing #utility#win32 #xp #microsoft #apps #metafilter