Much in the same way compilers has the dragon book, algorithms has the Cormen, and graphics has Foley & van Dam I am wondering what the book on computer security is. Not the "best" book, or the most practical, or the "hacking handbook", but the classic book on the fundamental theoretical concepts...
@Xander The first two words in that statement precisely demonstrate why the question was closed.
Don't we have a general "Security Measures for IT Sec Conferences" question somewhere? Not precisely the same as this one, but all answers are equally applicable.
I'm going every year at big IT conferences (3k->4k people). Everyone is connected to the internet with wifi on laptops. This wifi is open, everyone can read the traffic and analyse it... The risk is nearly the same on wifi in hotel, hotspot etc.. except you have a concentration of interesting inf...
Something I never would have guessed I'd ever be looking for, and would have less expected to be so hard to find: regulations and specifications regarding toilet weight limits.
I've been inspired by a question over on Code Review, which boils down to: What is the proper way to authenticate a user without a database?
Would it be the exact same process if you stored credentials in an array, or an XML file, or even just a plain ol' text file?
For example, let's examine t...
@Iszi It's effectively an app for doing assessments. You pick with standard to assess against and it'll go through the standard asking boatloads of questions. For each question you have the option to mark it as 'Met, Unmet, N/A, or ALT' as well as flag it for later review, fill in comments, or add supporting documentation.
@Iszi It'll then generate pretty reports with the metrics of how much youv'e met the standard and such.
@Iszi It looks like it assumes you're always HIGH and I'm not sure yet if it takes into account the prioritization of each control
I am confused. those here who still need to wish to be something when they grow up, mostly dont want to be developers (they want to use PHP, whatever thats called).
@AviD Well, she's not exactly wrong. Even though I, for one, will never do visual designer, or even UX design, understanding those domains does help me be better at the bits that I do build that will eventually need to mesh with the visual and UX design that somebody else has built. In the same way that I'll likely never need to write a TCP stack, but understanding how TCP works makes me a better web developer.
@Xander oh of course. I was adorabling at how that is clearly obvious to anyone who is not a crap developer (so not PHPers). And you did a better job at the nuance, etc...
How is it that I can install a 140MB Android update on my phone, without actually updating the version of Android that I'm running? 4.4.2 when I started, "Adroid successfully updated" message at the end, still running 4.4.2. Nuts.
recently pushed out a large update that didn't change android's major/minor version but made changes to all of the htc software and did change the "software number" reported in settings
@kalina Interesting. Phone manufacturers are the bane of my existence. No, phone companies are the bane of my existence. Phone manufactures are just their evil little minions.
fair point. but then why hire him in the first place?
or did you mean, they would just move offices and not tell @Simon.
hehe:
> It takes two things to make a good consultant, grey hair and hemorrhoids. The grey hair makes you look distinquished and the hemorrhoids make you look concerned.
@TerryChia Well yes, but I didn't have to modify it at all, just teach someone else how to use it(I've never even seen the damn thing before today...), if I even look at the file management part I get IPbanned on the server though...
@kalina I'll try to start playing with a DAW in a serious way this weekend and then when I get comfortable, we'll make a collab. I already have a great title: Acid, Cocaine & Turtles
We'll need an Acid synth, a distorted kick and obviously some reverse bass too.
@AviD watcha' went well. Stallmans lecture was very interest, Maty from Checkmarx had some cool JavaScript stuff and there were some cool testing tool talks as well...
@AviD IIRC the talks are all being streamed on the Internet...
Also what's even more frightening is that you can get the ingredients you want from just about anywhere. All you need to ignite it is some first fire mix, or some stump remover, or some magnesium.
I've been inspired by a question over on Code Review, which boils down to: What is the proper way to authenticate a user without a database?
Would it be the exact same process if you stored credentials in an array, or an XML file, or even just a plain ol' text file?
For example, let's examine t...
