Archive for the 'web' Category

Automated HTTPS Cookie Hijacking | fscked.org

Wednesday, September 17th, 2008

a note from security ppl that session/login cookies that normally delivered via https have to be explisidly marked as “secure” so they _only_ delivered via https. Otherwise bad ppl can hijack them.

Leisink Projects – Hiawatha [simple small secure web server ]

Thursday, July 3rd, 2008

Hiawatha is a webserver for Unix. It has been writting with ‘being secure’ as its main goal.

How to Share Session State Between Classic ASP and ASP.NET

Wednesday, July 2nd, 2008

the subj. soluton creates COM object in .net that then is used by classic ASP to store sessions. ASP.net object stores session in SQL database

reddit – Trac [source code for reddit.com]

Thursday, June 19th, 2008

Interesting to look when u have a time. PS: looks like they are using git and found a way to integrate it into Trac, which is pretty cool

Don’t use Pound for load balancing – Optimize Prime [use Ngnix]

Saturday, May 31st, 2008

another evidence that if u need a loadbalancer — ngnix is the answer these days [and maybe perlball]

InfoQ: Scalability Best Practices: Lessons from eBay

Friday, May 30th, 2008

the subj says it. good article

Apache2::UploadProgress – Track the progress and give realtime feedback of file uploads – search.cpan.org

Thursday, May 29th, 2008

module that allows u to make upload progress bars

James Henstridge » OpenID Attribute Exchange

Tuesday, May 27th, 2008

notes about what is Attribute Exchange (ax) in OpenID

protocols08cookies.pdf (application/pdf Object)

Thursday, May 22nd, 2008

[yet another one] proposal for secure session cookies

‘threads::shared’ in apache-modperl – MARC

Thursday, May 22nd, 2008

Links to some discussions and code samples, if you need to implement ‘use Threads’ in mod_perl apache (prefork MPM )