SSH (Secure SHell) is a network protocol which provides a replacement for insecure remote login and command execution facilities, such as telnet, rlogin and rsh. SSH encrypts traffic in both directions, preventing traffic sniffing and password theft. SSH also offers several additional useful features:
• Compression: traffic may be optionally compressed at the stream level.
• Public key authentication: optionally replacing password authentication.
• Authentication of the server: making ”man-in-the-middle” attack more difficult
• Port forwarding: arbitrary TCP sessions can be forwarded over an SSH connection.
• X11 forwarding: SSH can forward your X11 sessions too.
• File transfer: the SSH protocol family includes two file transfer protocols.
Read the rest of this entry »
17 Apr
Posted by jj as Development, Operating System
Sun and Amazon Web Services opened a private beta program starting on May 5, 2008. Approved beta users get access to OpenSolaris™ operating system (OS) at http://www.opensolaris.org/ on Amazon Elastic Compute Cloud (EC2). OpenSolaris on Amazon EC2 is an Amazon Web service that incorporates hardware virtualization technologies based on the Sun™ xVM software and the Xen open source community work. Information about Amazon EC2 is located at: http://aws.amazon.com/ec2
Read the rest of this entry »
The tone of recent news stories about the dangers of Facebook has been quite hysterical and many IT directors can be forgiven for feeling under threat from the phenomenon. But is a blanket ban for the site the best approach or merely a knee-jerk reaction, perhaps a more tailored approach with network management tools is appropriate?
Read the rest of this entry »
This How To shows you how to create and configure a custom least-privileged service account to run an ASP.NET Web application. By default, an ASP.NET application on Microsoft Windows Server 2003 and IIS 6.0 runs using the built-in Network Service account. In production environments, you usually run your application using a custom service account. By using a custom service account, you can audit and authorize your application separately from others, and your application is protected from any changes made to the privileges or permissions associated with the Network Service account. To use a custom service account, you must configure the account by running the Aspnet_regiis.exe utility with the -ga switch, and then configure your application to run in a custom application pool that uses the custom account’s identity.
Read the rest of this entry »
This paper details various security concerns and risks associated with web 2.0 technologies such as Asynchronous Java script and XML (AJAX), Syndication, aggregation and notification of data in RSS or Atom feeds, mashups created by merging content from different sources. This paper also describes the security implications leading with the usage of web 2.0 technologies such as AJAX, RSS, and Mashups. Increase in application functionality leading to the emerging new web technologies (web 2.0). These new web technologies open more avenues to security threats to the online applications and users. Efficient protection mechanisms should be considered when dealing with web 2.0 technologies usage.
Read the rest of this entry »
During the 25 years that I have delivered professional development activities for educators, I have always tried to model the technologies and techniques that I was teaching. In recent years, the efforts have had less to do with specific technologies, software products, services, and much more to do with philosophies where learning happens as part of continuing and multi-dimensional conversations among learners and teachers, and others on the Net. This is what the emerging new web, web 2.0 has done to my vision of education.
Read the rest of this entry »
Bugzilla is a bug? or issue?tracking system. Bug?tracking systems allow individual or groups of developers effectively to keep track of outstanding problems with their product. Bugzilla was originally written by Terry Weissman in a programming language called TCL, to replace a rudimentary bug?tracking database used internally by Netscape Communications. Terry later ported Bugzilla to Perl from TCL, and in Perl it remains to this day. Most commercial defect?tracking software vendors at the time charged enormous licensing fees, and Bugzilla quickly became a favorite of the open?source crowd (with its genesis in the open?source browser project, Mozilla). It is now the de?facto standard defect?tracking system against which all others are measured.
Read the rest of this entry »
15 Oct
Posted by jj as Database, SQL Server
This manual was compiled by Project A Web Development as a project supported by Jim Teece. It was written by Ethan Townsend as a documented means of migrating our ADO ASP application, SIB (Siteinabox), from Microsoft SQL Server 7.0 to an open source database. SIB is a large database driven application that includes many views, stored procedures, and complex SQL executed from the ASP pages.
Read the rest of this entry »