Archive for the 'Implementation' Category

Google releases web security scanner

Google has released an open source scanner that allows web application developers to test their applications for security holes. The application, called Skipfish , offers a similar functionality to that of tools such as Nmap or Nessus , but it’s said to be much faster. Using fully automated heuristics, it detects code that is vulnerable to cross-site scripting attacks (XSS), SQL and XML injection attacks and many other attack types. The tool’s comprehensive post-processing of the individual test results is designed to help with the interpretation of the final report. Skipfish is a pure C implementation and according to Google, can easily process 2,000 HTTP requests per second – provided the tested server can handle such a high load. In individual tests across local networks, 7,000+ requests per second have reportedly been sent with a modest CPU load and memory footprint

TegoNuke(tm) Twitter Block 0.1.0 (Beta) Released

Montego Scripts proudly presents TegoNuke(tm) TegoTwitter, a fresh Twitter block for your RavenNuke(tm) CMS!

What enterprise still uses IE 6? Try Intel

Internet Explorer 6 is a relic, but corporations continue to cling to it. At this point, IE 6 in the enterprise is common, but it’s nonetheless surprising when Intel—Microsoft’s long-time partner—is still using the ancient browser. In a blog post walking through its implementation of Windows 7, Intel talked a lot about the “heavy lifting” involved with moving from XP to Windows 7. Turns out the browser is part of the heavy lifting. Read the entire article at What enterprise still uses IE 6? Try Intel

Meet the latest open source software developer: Facebook?

‍ That’s right. Facebook is a technology company, serving billions and billions of pages each week (actually, over 100 billion per week, but I couldn’t resist a nod to Carl Sagan and McDonald’s). And doing so efficiently. So it should come as no surprise that the company has developed some unique software. On Feb. 2, the company released HipHop for PHP . What is HipHop for PHP? Facebook describes it as: …a source code transformer. HipHop programmatically transforms your PHP source code into highly optimized C++ and then uses g++ to compile it

SRP-Hermetic, New Ajax Security Library

SRP-Hermetic, a JavaScript library which aims at providing a highly secure Ajax channel implementation (MIT license). Authentication is based on the SRP protocol, and messages can be signed using HMAC or fully encrypted using AES. An interesting implementation providing secure user authentication, communication integrity and communication privacy to AJAX applications, with main focus on efficiency, scalability and customisable secure channel as an alternative to HTTPS. Your feedback is very welcome to review current implementation and develop it further. More information could be found on this blog post .

Microsoft to Release Documentation for Outlook Personal Folders Format

Many a Linux user has already stumbled upon .pst documents, such as attached to emails in “Outlook Format.” Microsoft now wants to publish documentation for the file format. Under the keyword “interoperability,” Microsoft group manager Paul Lorimer indicated in his blog that the company will make its Outlook Personal Folders format (.pst) specification available to more than just its developers. The publication should make it easier for anyone to write a program or library to handle the file format without needing written permission from Microsoft. However, releasing the documentation is not under a free license, but under the Microsoft Open Specification Promise , an intellectual property rights implementation initiated in 2006 whereby Microsoft promises not to file claims against use of certain of their licensed or patented technologies

PMRPC, HTML5-based Inter-window Cross-Domain RPC Librar

Pmrpc is a HTML5 inter-window cross-domain JSON-RPC based remote procedure call JavaScript library. The library provides a simple API for exposing and calling procedures from windows or iFrames on different domains, without being subject to the same-origin policy. Pmrpc also provides several advanced features: callbacks similar to AJAX calls, ACL-based access control, asynchronous procedure support and fault-tolerance via retries. The implementation of the library is based on the HTML5 postMessage API , the JSON-RPC protocol and the JSON data format . Pmrpc uses the postMessage API as an underlying communication mechanism and extends it to a RPC model using the JSON-RPC, a transport-independent protocol that uses JSON for formatting messages. The library is compatible with Firefox 3, Google Chrome, Internet Explorer 8, released under Apache v2.0 license.

Google released Wave Protocol Code

While I’m still waiting for my Wave invitation, Google released today code for the wave protocol with installation instructions to create your own wave servers, and how to generate a Self-Signed Wave Federation Certificate The open source Wave Federation Prototype Server is delivered as a Java application that conforms to XEP-0114, the Jabber Component Protocol. In the examples below we show how to install the Wave Federation Prototype Server as an extension to the Openfire XMPP server, but it should run against any XEP-0114 compliant server. The wave protocol specification draft defines Google Wave as a communication and collaboration platform based on hosted conversations, called waves. A wave consists of XML documents and supports concurrent modifications and low-latency updates between participants on the wave. The wave federation protocol enables everyone to become a wave provider and share waves with others. For instance, an organization can operate as a wave provider for its members, an individual can run a wave server as a wave provider for a single user or family members, and an Internet service provider can run a wave service as another Internet service for its users as a supplement to email, IM, ftp, etc. A decentralized architecture that makes Google wave implementations limited only to your imagination.

Innomatic, Distributed PHP 5 Web Applications Container

Innomatic is a mature and easy-to-use distributed container for PHP 5 Web applications. It is particularly oriented towards business and administrative applications such as CRM, CMS, Web-based frontends for legacy applications, and so on. It can contain multiple applications and customers or sites. It introduces a new way to distribute and manage Web applications through AppCentral. Main high-level features and benefits : Container of multiple applications and customers/sites: a single installation of Innomatic is able to contain and manage multiple shared PHP applications and separately enable them to multiple customers/sites

CitrusDB, PHP-based Customer Care And Billing Solution

If you are looking for an easy to use solution including CRM, customer care, and billing; you should definitely try out CitrusDB. CitrusDB is a Web based customer care and billing solution that uses PHP and a database backend to keep track of customer information, operational CRM, services, products, billing invoices and credit cards, and support information. I find it very suitable for small and medium companies. CitrusDB require PHP 5.0.4 or greater with register_globals turned off in your php.ini, any database supported by ADOdb (MySQL, Oracle, MsSQL, ODBC…). I did not tested security of the application, but there are some recommendation in the website to keep your server secure : in a private LAN with firewall, SSL protected web server with access limited to trusted IP addresses, or A Virtual Private Network or Intranet.