Ajax Security Tools

Original post provide by Slashdot: IT

IdaAshley points out the latest from IBM developerWorks’ Web development section, which talks about shoring up potential weaknesses in Ajax applications. It follows another recent guide for improving Ajax performance. “In this article, you’ll learn about Ajax security tools, which you’ll be using to scan for SQL injection and cross-site scripting vulnerabilities; to set a master password; and to restore the state of all windows after crashes. You’ll take a look at tools and utilities that ensure that linked Web sites in applications are not on the blocked lists and which prevent hackers from altering browser functionality, defacing Web applications, and achieving malicious results. You’ll find these utilities divided into three types within the article: hardening tools, Firefox tools, and Firefox add-ons.”

Read more of this story at Slashdot.

Previous Articles:
Persian Calendar With Navigation In Month And Year
Package: Persian Calendar With Navigation In Month And Year Summary: Display Persian month calendars Groups: HTML, Time and Date Author: S.Mohammad Salehi Description: This class can be used to display Persian month calendars. It can display an HTML table with the current month of the Persian calendar.
Gartner Reveals Top 10 Technologies For Next Four Years
Workplace social networks and cloud computing means that the need for a centralized IT department will go away. Firms will no longer need to own/maintain the boxes that they use to run their firm's apps. With no need to touch a box, there will be no need to have the IT staff co-located with the boxes."Read more of this story at Slashdot.
When Yahoo! Says Cloud, It Means A Freakin' Big Cloud
Yahoo has tied up with Tata subsidiary Computational Research Laboratories (CRL) to do cloud computing research. Financial terms were not disclosed. What CRL brings to the party is the fourth-fastest supercomputer in the world, a beast that Yahoo figures has 'substantially more processors than any other supercomputer currently available for cloud research' - 14,400 of them to be precise along with 28TB of memory, 140TB of disk space, a peak performance of 180 trillion calculations a second and sustained computation capacity of 120 teraflops.
AJAX RIA News - Well, Qualcomm Likes Flash
Steve Jobs may not think much of Flash but Qualcomm apparently feels differently and has been collaborating with Adobe on a mobile platform that integrates Flash with its Binary Runtime Environment for Wireless (BREW) client software and, voilĂ , the BREW Mobile Platform, which the pair says will create a 'new standard for mass-market handset platforms.'
Stoneware Named "Silver Sponsor" Of SYS-CON's Virtualization Conference
Based on Web 2.0 technology, Stoneware's webOS is an offering in the virtualization market, focusing on the growth of web applications and the shift from client/server to cloud computing. The company services various sectors including education, manufacturing, medical, and legal industries.
More Articles:
Bank Of NY Loses Tapes With 4.5 Million Clients' Data
The tapes contained personal information for over 4.5 million people. From Computerworld: "The bank informed the Connecticut State Attorney General's Office that the tapes ... were lost in transport by off-site storage firm Archive America on Feb. 27.
A Look At The Workings Of Google's Data Centers
If you're running 10,000 machines, something is going to die every day.' Bringing a new cluster online shows just how fallible hardware is, Dean said. In each cluster's first year, it's typical that 1,000 individual machine failures will occur; thousands of hard drive failures will occur; one power distribution unit will fail, bringing down 500 to 1,000 machines for about 6 hours; 20 racks will fail, each time causing 40 to 80 machines to vanish from the network; 5 racks will "go wonky," with half their network packets missing in action; and the cluster will have to be rewired once, affecting 5 percent of the machines at any given moment over a 2-day span, Dean said.
Microsoft Urges Windows Users To Shun Safari
This controversy comes after Apple has officially refused to promise to do anything about the carpet bombing vulnerability in the Safari browser. Essentially, Apple does not see unsolicited downloads of hundreds or even thousands of executable files to users' desktops as being a security problem." Now while downloading a hundred files to your desktop won't automatically execute them, Microsoft's position is that a secondary attack could execute them for you.Read more of this story at Slashdot.
Full Disclosure And Why Vendors Hate It
An anonymous reader writes "Well known iPhone hacker Jonathan Zdziarski gave a talk at O'Reilly's Ignite Boston 3 this week in which he called for the iPhone hacking community to embrace full disclosure and stop keeping secrets that were leading to the iPhone's demise.
Is UML Really Dead, Or Only Cataleptic?
The author suggests UML was killed by, among other causes, greed, heavy process, and design-by-committee. Is UML really a fading technology? Is it useful beyond a whiteboard notation for designers? Is there any value in code generation?"Read more of this story at Slashdot.

Leave a Reply