Showing posts with label web. Show all posts
Showing posts with label web. Show all posts

Monday, December 13, 2010

Keep Your Eyes Open

Often after a Windows cleanup or conversion to Linux the question comes up - "Is my PC secure/safe now?"  What is usually meant is "Am I safe to surf the web now?"  There is a distinction.  The short answer is no.

A relatively short and excellent example of why, written in layman's terms, was posted by Jeremiah Grossman.   Note that (at the time of this writing) visiting this site will put a harmless link in your Google history by way of demonstration, if you're logged in.

No operating system (Linux, OS X, Windows), full patched, loaded down with watchdog applications like anti virus, anti spyware, ad blockers, firewalls, etc will protect from browser based exploits.  No browser (Firefox, Safari, IE) or combination of plugins (NoScript, AdBlock) will make surfing totally secure either.  Content filtering and reputation based services (OpenDNS, SiteAdvisor) don't close the door.  Browser based exploits rely on vulnerabilities in the web sites you visit.

There are valid analogies between owning a computer and owning a car such as both requiring maintenance.  The key is that where and how you drive both can make a real difference in how safe you and your assets are.  Knowing what website to trust is very difficult, even for security professionals.  How do you make the selection - company size, market share, revenue?  Remember the exploit above - it was on Google - which ranks pretty high in each of those categories.

There is no easy single answer.  I've listed some suggestions previously for safe PC usage.  Secured operating systems, browsers and addons can help.  They just don't make things completely safe so you can close your eyes while driving web surfing.

Sunday, September 26, 2010

Struts 1.x Logical Flow

Java programmers should be familiar with Apache Struts as an extremely popular free and open-source framework for creating web applications. Although the 2.x branch of the project is the one currently being developed, the 1.x version continues to be widely used for a variety of reasons.

At one point a couple of years ago I found myself needing to explain the control flow through Struts 1 and was unable to find a visual representation that illustrated what I was thinking. Therefore I created the logical control flow shown below.


It does bear some resemblance to a spaghetti chart, but does illustrate several elements of a simple Struts control flow. While originally created for a single purpose, uses for it still surface occasionally in various forums, so I thought there may be some value in posting it for those learning or teaching Struts 1.

Permission to use, copy, modify, and distribute this graphic is freely granted, provided that the original authorship notice is preserved.

One more thing out of my GTD "Someday" category. Enjoy.