Categories

Project Management Musing: the budget

According to the standard definition, a project must consist of “a sequence of unique, complex, and connected activities that have one goal or purpose and that must be completed by a specific time, within budget, and according to specification.” [epm5e]. The requirement of a budget is what captures my attention. This requires the calculation of [...]

Presentation: Secure Coding Practices

Well my presentation went off OK, although there were only about 20-30 people present. I hope all truly enjoyed the presentation.

To the person that asked “doesn’t the use of an interpreted language make race conditions more difficult to address?” I must apologize as I totally mis-handled that question.

No, an interpreted language doesn’t make [...]

Tracing a process as a user

On Linux[*], just because a process is owned by a user does not mean that user can trace the process. By trace I mean using applications such as strace or gdb to peek at the internals of the process. The process must also be dumpable, that is whether the process may generate a a core [...]

cPanel 2010 Conference

The cPanel 2010 Conference is drawing nigh, October 4th – 6th. This year I will be presenting on secure coding practices. It seems many articles are focused on cross-site scripting, cross-site request forgery and other browser-targeted exploits. My presentation will focus on the server-side aspect of secure programming practices. It is especially designed for people [...]

YAPC 2010: State of the Velociraptor

Talk URL: http://yapc2010.com/yn2010/talk/2626

Yay! Perl 6!

Reflection on State of the Onion talks/write-ups.

Perleontology

Perl 0 – Larry’s Office Mates. Perl 1 1987, Perl 2 1988, Perl 3 1989, Perl 4 1991, Perl 5 1994 ( trout was 11 )

20,000 Dists on CPAN, 130,000 Uploads. Something is only good if Netcraft declares something dead once. [...]

YAPC 2010: Gaming With Perl

Talk URL: http://yapc2010.com/yn2010/talk/2669

Requires special executable on OS X.

YAPC 2010: Writing Custom Perl::Critic Policies

Talk URL: http://yapc2010.com/yn2010/talk/2675

Perl::Critic::DEVELOPER

Walks through basics of writing a policy. Pom::POD::Web displays policies installed on system.

.perlcriticrc

Used to configure Perl::Critic, including specific behavior for policies.

Anatomy of a Policy

Sub classes Perl::Critic::Policy.

Provide DESC for description EXPL: Longer explanation of the violation applies_to: the specific PPI structure. violates: the actual rule.

ppidump shows how the source file is parsed into PPI structures.

YAPC 2010: When Scrum Isn’t Agile Enough

Talk URL: http://yapc2010.com/yn2010/talk/2650

Scrum Stand Up What did day before What doing today What blocks progress

Dedicated Bug Team

YAPC 2010:Securing Your Code

Talk URL: http://yapc2010.com/yn2010/talk/2694

Opening Files

Always specify the mode and don’t use 2 arg open. Filename is treating literally by 3-arg open. The filename can be a file handle ( e.g. ‘|-’). Piped opens allow running of code. Lesson: always validate input -> GIGO

Input Validation Taint Mode

All external data is tainted. Regexp are [...]

YAPC 2010: Extremely Low-Level Networking in Perl

Subtitle: in order to get girls

Talk URL: http://yapc2010.com/yn2010/talk/2752

Bulk of the talk focuses on making C routines available to Perl.

Talk focuses on Packet, a module maintained by the speaker. New version of Packet is supposed to hit tonight.

Slides: samy.pl