background preloader

Gauravvijayvergia

Facebook Twitter

Gaurav Vijayvergia

The danger of the trailing dot in the domain name. There is a such thing as fully qualified domain names, so each domain name in fact has a dot at the end.

The danger of the trailing dot in the domain name

Maybe you are even not aware that your website is also accessible on domain name with the dot at the end (for example www.likebtn.com and www.likebtn.com.) as browsers allow to use both ways. Possible issues If you do not consider the fact that the user can accidentally enter the domain name with a dot at the end, or follow a link received from some "well-wisher" and get on your domain name with the dot at the end, as the result it may lead to unexpected consequences: 1) If the website uses HTTPS, when navigating to the domain name with the dot at the end, the browser will display the warning on untrusted connection.

Java client certificates over HTTPS/SSL. VPN Services That Take Your Anonymity Seriously, 2013 Edition. Prompted by a high-profile case of an individual using an ‘anonymous’ VPN service that turned out to offer less than expected protection, TorrentFreak decided to ask a selection of VPN services some tough questions.

VPN Services That Take Your Anonymity Seriously, 2013 Edition

With our findings we compiled a report of VPN providers that due to their setup were unable to link their outbound IP addresses with user accounts. Ever since we have received countless emails demanding an update. Update: New 2014 update is out. Getting Started: Using Zencoder with S3. Home » Guides » Getting Started » Using Zencoder with S3 Zencoder can upload and download files from your Amazon S3 bucket.

Getting Started: Using Zencoder with S3

For Zencoder to download files, they either need to be accessible by Everyone or a bucket policy needs to be added to your bucket that will grant Zencoder access. You can save credentials to your account, which will allow us to use your account to upload files instead of ours. This means your account is the owner of the file, with full rights and priveleges over it. How To Benchmark Your System (CPU, File IO, MySQL) With sysbench. Version 1.0 Author: Falko Timme Follow me on Twitter sysbench is a benchmark suite which allows you to quickly get an impression about system performance which is important if you plan to run a database under intensive load. Preparing Your Development Environment for SSL : ScanToSecure. Posted by David Blake, Sunday, February 24, 2013 This is part 6 in our series on SSL.

Preparing Your Development Environment for SSL : ScanToSecure

By now, you should have a solid understanding of the benefits of SSL and the things that can work against you if you don't get your implementation just right. One common area for slip-ups is the deployment of SSL-based applications into production, where it is all-too-easy to overlook certain development convenience settings that effectively prevent SSL from working in the live environment. This is particularly hazardous when developing mobile applications, desktop widgets or any other application components that consume a web API from outside of a web browser. Essential Websites for Web Developers. Database security - How can I use transparent data encryption with MySQL.

eCryptfs in Launchpad. eCryptfs is a cryptographic stacked Linux filesystem. eCryptfs stores cryptographic metadata in the header of each file written, so that encrypted files can be copied between hosts; the file will be decrypted with the proper key in the Linux kernel keyring.

eCryptfs in Launchpad

1: Encryption Options. PostgreSQL offers encryption at several levels, and provides flexibility in protecting data from disclosure due to database server theft, unscrupulous administrators, and insecure networks.

1: Encryption Options

Encryption might also be required to secure sensitive data such as medical records or financial transactions. Password Storage Encryption By default, database user passwords are stored as MD5 hashes, so the administrator cannot determine the actual password assigned to the user. If MD5 encryption is used for client authentication, the unencrypted password is never even temporarily present on the server because the client MD5 encrypts it before being sent across the network. Encryption For Specific Columns The /contrib function library pgcrypto allows certain fields to be stored encrypted. Php - how to delete duplicates on mysql table. Fxosstub – a minimalist’s working example of the design guide rules for Firefox OS. This post is written by Pierre Richard, Principal, Jaxo, Inc.

fxosstub – a minimalist’s working example of the design guide rules for Firefox OS

I know, by experience and practice, the importance of the first hours—or even the first minutes—spent discovering and learning new concepts. During this period, developers take their go/no-go decision, mostly based on the apparent complexity of what they see. Webinar Recording – Live Coding an IntelliJ IDEA Plugin from Scratch (Part 2) Gitignore.io. Speed up your Front End Development - Part 1 - by Roy Barber. By Roy Barber, 3rd February 2013 I gave a talk recently at a local meet up and showed a bunch of front end developers and designers how to save a boat load of time when coding up those beautiful photoshop designs.

Speed up your Front End Development - Part 1 - by Roy Barber

Charm: Cure Customer Support Fatigue. Charm gives you back that lovin’ feelin’ (whoa-oh oh) You didn’t ever want to hate hearing from your customers.

Charm: Cure Customer Support Fatigue

You wanted to do it better. You wanted to see the difference you were making in your customers’ lives. You wanted to talk to & learn from the folks who use your products every day. UXPin. Course Listing. CSS 3D Clouds. Web Fonts. A month after switching to Macs - cd ~/jaequery. The story For most of my life, I had a deep resentment toward Macs.

A month after switching to Macs - cd ~/jaequery

I always never liked their concept of trying to do something different. Back in the days, my feelings all started with their philosophy of one-button mouse. My Kaspersky Account. On SSL. In this article you will find useful information about SSL, Certificates Chaining and the best tricks about defeating SSL (with SSL Sniff, SSL Strip, BEAST, THC-SSL-DOS). What Is SSL and how does it work? When people think about certificates, they usually think about certificates coming in pairs. Actually instead of just 2 certificates, there could be more. Some Abstract Talk - Playframework: Async, Reactive, Threads, Futures, ExecutionContexts. Creating and Uploading Server Certificates - AWS Identity and Access Management.

This section describes the process of generating a server certificate and preparing it to use with AWS products through IAM. To create a certificate, you perform the following series of tasks. Install and Configure OpenSSL Creating and uploading a certificate requires a tool that supports the SSL and TLS protocols. OpenSSL is an open-source tool that provides the basic cryptographic functions necessary to create an RSA token and sign it with your private key. If you don't already have OpenSSL installed, follow the instructions in this section. To install OpenSSL on Linux and UNIX Go to OpenSSL: Source, Tarballs ( the latest source and build the package. To install OpenSSL on Windows Go to OpenSSL: Binary Distributions ( OpenSSL for Windows.A new page displays with links to the Windows downloads.If it is not already installed on your system, select the Microsoft Visual C++ 2008 Redistributables link appropriate for your environment and click Download.

To configure OpenSSL on Linux and UNIX. IPTables redirect port 80 to port 8080 - forum.slicehost.com. How to configure liferay to use a secure channel (https resp. ssl) for login using apache httpd - bytesource public - Confluence. This how-to describes one way how to configure a liferay portal in a way that the credentials supplied (especially during the login process) are always encrypted (by using HTTPS) but still it is possible to browse the public content by HTTP for guest users. There is already a build-in property that should provide similar functionality (by setting company.security.auth.requires.https=true) but it seems to not work with the newer versions of tomcat (security feature, see the discussion on The goal of this solution is to provide the following functinality:

Howler.js - Modern Web Audio Javascript Library - GoldFire Studios. Browsers have come a long way over the years, and we are now able to achieve amazing results using all of the great new technologies often referred to as HTML5. However, generally speaking, audio still sucks. Thankfully, Google decided to create Web Audio API and make all our lives easier. The problem is that only the latest browsers support this new-fangled browser audio, so what are we to do? We were presented with this very question while developing our new HTML5 game and set out to find a library that provided the functionality we needed, without all of the bloat, while still supporting the majority of browsers. Unfortunately, we didn't find anything that met our needs.

Amazon Elastic Beanstalk with SSL. Documentation : : Video - Working FFMPEG settings for converting to WebM format. Html5 - FFMPEG Covert HTML 5 Video NOT Working.

Shortcuts

How to Tackle Three of the Toughest Interview Questions. Mesh Smart Search - Find Relevant Domain Name Suggestions Quickly. Analytics.js by segmentio. Why Good Grammar Matters — And How to Get Better. Most educated people in the US know that writing with good grammar, spelling, and punctuation — particularly in professional contexts — is obviously important. English For Non-Native Speakers. Hyphenated Words - English For Non-Native Speakers.

Full Disclosure: This is a more advanced topic, and something that most good native English writers get wrong. Mood Indigo 2012 - Asia's Largest College Cultural Festival. Around $400 million is allegedly missing from a Chinese company, and some of it may be in Vegas - Quartz. One of China Medical’s offices. Elasticsearch Java Virtual Machine settings explained. Introduction.

Git

Programming.