Categories

Tracing a process as a user

On Linux[*], just because a process is owned by a user does not mean that user can trace the process. By trace I mean using applications such as strace or gdb to peek at the internals of the process. The process must also be dumpable, that is whether the process may generate a a core [...]

cPanel 2010 Conference

The cPanel 2010 Conference is drawing nigh, October 4th – 6th. This year I will be presenting on secure coding practices. It seems many articles are focused on cross-site scripting, cross-site request forgery and other browser-targeted exploits. My presentation will focus on the server-side aspect of secure programming practices. It is especially designed for people [...]

YAPC 2010: State of the Velociraptor

Talk URL: http://yapc2010.com/yn2010/talk/2626

Yay! Perl 6!

Reflection on State of the Onion talks/write-ups.

Perleontology

Perl 0 – Larry’s Office Mates. Perl 1 1987, Perl 2 1988, Perl 3 1989, Perl 4 1991, Perl 5 1994 ( trout was 11 )

20,000 Dists on CPAN, 130,000 Uploads. Something is only good if Netcraft declares something dead once. [...]

YAPC 2010: Gaming With Perl

Talk URL: http://yapc2010.com/yn2010/talk/2669

Requires special executable on OS X.

YAPC 2010: Writing Custom Perl::Critic Policies

Talk URL: http://yapc2010.com/yn2010/talk/2675

Perl::Critic::DEVELOPER

Walks through basics of writing a policy. Pom::POD::Web displays policies installed on system.

.perlcriticrc

Used to configure Perl::Critic, including specific behavior for policies.

Anatomy of a Policy

Sub classes Perl::Critic::Policy.

Provide DESC for description EXPL: Longer explanation of the violation applies_to: the specific PPI structure. violates: the actual rule.

ppidump shows how the source file is parsed into PPI structures.

YAPC 2010: When Scrum Isn’t Agile Enough

Talk URL: http://yapc2010.com/yn2010/talk/2650

Scrum Stand Up What did day before What doing today What blocks progress

Dedicated Bug Team

YAPC 2010:Securing Your Code

Talk URL: http://yapc2010.com/yn2010/talk/2694

Opening Files

Always specify the mode and don’t use 2 arg open. Filename is treating literally by 3-arg open. The filename can be a file handle ( e.g. ‘|-’). Piped opens allow running of code. Lesson: always validate input -> GIGO

Input Validation Taint Mode

All external data is tainted. Regexp are [...]

YAPC 2010: Extremely Low-Level Networking in Perl

Subtitle: in order to get girls

Talk URL: http://yapc2010.com/yn2010/talk/2752

Bulk of the talk focuses on making C routines available to Perl.

Talk focuses on Packet, a module maintained by the speaker. New version of Packet is supposed to hit tonight.

Slides: samy.pl

YAPC 2010: Iron Mad – The Iron Man Forfeit Talk

Talk URL: http://yapc2010.com/yn2010/talk/2628

Tongue in cheek, of course

Initial Design Notes for Perl 7

Someone ran off with the next version number 20 years ago and we haven’t seen it since. Version numbers sucks. Numbers confuse people. Two hardest problems in CS:

What to name things What to cache The Evolution of MVC from Pacman to [...]

YAPC 2010: Code Happier with the Cycle

Talk URL: http://yapc2010.com/yn2010/talk/2709

The Cycle

Commit (with passing tests) -> Modify -> Test -> Fail -> Diff -> Fix -> Tests Pass -> Commit -> Repeat

The less you do at once, the more brain power you can devote to the task. DVCS allows local commits, development, without “breaking the build.”

This was an interactive presentation that demonstrated the cycle.