brice's Feed

Secure PHP environments with PHP, suexec and FastCGI (mod fcgid)

brice — Mon, 16 Nov 2009 02:30:00 -0500

You want to have a secure setup for your PHP web applications but don't want to compromise performance too much. This page is about a setup which uses FastCGI (mod_fcgid) and suexec. Tagged by brice under sysadmin, php, apache,

Ingo Molnar on exploit finding

brice — Sun, 19 Jul 2009 05:38:00 -0400

I think that such expoit-finding work should be done in an organized, in (perhaps government) sponsored setups, with proper safeguards and humane work conditions. It's useful to society at large and it's a petty that it's currently done in such an unstructured, random way, burning through and bending good and smart people fast. Tagged by brice under security, psy, societies,

Securing a shared Web Server

brice — Thu, 11 Jun 2009 11:12:00 -0400

Typical users use shared hosting for their blog, etc ... On this kind of offer, the hoster have multiple clients on the same hardware. As it is impossible to be sure that clients applications are not vulnerable, we should at least be sure that if one is vulnerable, it won't bother the others. We will show you how a bad web server configuration could lead to disaster, and how to secure such a server. Tagged by brice under sysadmin, apache, security, php,

The GCC Architecture Documents

brice — Sat, 10 Jan 2009 02:05:00 -0500

The following series of documents about GCC internals have been developed by us at I.I.T. Bombay. Tagged by brice under gcc, internals, reference,

Total Functional Programming

brice — Sat, 29 Nov 2008 12:11:00 -0500

Total Functional Programming on lambda the ultimate Tagged by brice under ltu, functional, programing, cs, survey,

MySQL Gotchas

brice — Mon, 13 Oct 2008 11:38:00 -0400

When working with the MySQL ™ database server I have repeatedly encountered situations where the results of various actions have been unexpected and/or contrary to the behaviour generally expected of an SQL relational database. The cause can usually be traced to implementation details which are documented in the manual. I have created this list in order to further a better understanding of the MySQL database server and hopefully save others unnecessary headscratching. Tagged by brice under mysql, faq,

The 90 Minute Scheme to C compiler by Mark Feeley

brice — Wed, 30 Jul 2008 02:45:00 -0400

Marc showed us how to write a simple Scheme to C compiler, in Scheme. In only 90 minutes! And although not supporting the whole Scheme standard, the compiler supports fully optimized proper tail calls, continuations, and (of course) full closures. The compiler is implemented using two important compilation techniques for functional languages: closure conversion and CPS-conversion. Tagged by brice under cs, lang:en, scheme, compiler, tutorial,

Regular Expression Matching Can Be Simple And Fast

brice — Wed, 11 Jun 2008 03:43:00 -0400

This article reviews the good theory: regular expressions, finite automata, and a regular expression search algorithm invented by Ken Thompson in the mid-1960s. It also puts the theory into practice, describing a simple implementation of Thompson's algorithm. That implementation, less than 400 lines of C, is the one that went head to head with Perl above. It outperforms the more complex real-world implementations used by Perl, Python, PCRE, and others. The article concludes with a discussion of how theory might yet be converted into practice in the real-world implementations. Tagged by brice under papers, cs, compiler, regexp,

WT a C++ webtoolkit

brice — Fri, 06 Jun 2008 06:15:00 -0400

Wt (pronounced 'witty') is a C++ library and application server for developing and deploying web applications. It is not a 'framework', which enforces a way of programming, but a library. The API is widget-centric, and inspired by existing C++ Graphical User Interface (GUI) APIs. To the developer, it offers complete abstraction of any web-specific implementation details, including event handling and graphics support. Tagged by brice under web, cplusplus, library,

Introduction to gnuplot

brice — Wed, 04 Jun 2008 10:24:00 -0400

Here I describe how to make a figure of numerical data such as experimental data or results of numerical calculations. Tagged by brice under reference, gnuplot,

Pig Latin: A Not-So-Foreign Language for Data Processing

brice — Mon, 19 May 2008 05:38:00 -0400

We describe a new language called Pig Latin that we have designed to fit in a sweet spot between the declarative style of SQL, and the low-level, procedural style of map-reduce. Tagged by brice under mapreduce, hadoop, papers, cs, dsl,

Dynamically linking with MSVCRT.DLL using Visual C++ 2005

brice — Mon, 24 Mar 2008 09:35:00 -0400

With the availability of Visual C++ .NET, Microsoft recommended and condoned deploying its CRT as a private DLL, simply a file in the directory of installed program. However, this stance of private deployment is no longer suitable or advisable in our modern world. As we have learned all too well since 2002 and especially from Microsoft’s embarrassing tool to patch a buggy gdiplus.dll across the system, deploying high profile DLLs privately does not allow for central servicing. Tagged by brice under windows, papers, visualstudio,

CERT Secure Coding Standards - CERT Secure Coding Standards

brice — Sat, 22 Mar 2008 05:11:00 -0400

This web site exists to support the development of secure coding standards for commonly used programming languages such as C and C++. These standards are being developed through a broad-based community effort including the CERT Secure Coding Initiative and members of the software development and software security communities. Tagged by brice under c, cplusplus, tips, security,

Enough With The Rainbow Tables: What You Need To Know About Secure Password Schemes

brice — Sat, 01 Mar 2008 06:51:00 -0500

Here’s what you need to know about rainbow tables: no modern password scheme is vulnerable to them. Tagged by brice under cryptography, security,

Alibabuy

brice — Tue, 29 Jan 2008 04:48:00 -0500

price comparator Tagged by brice under plane, shop,

RTA: DB-like API for Daemons

brice — Wed, 19 Dec 2007 05:57:00 -0500

RTA is a library that you can attach to your program to expose your program's internal arrays and data structures as if they were tables in a database. The database interface uses a subset of the Postgres protocol and is compatible with the Postgres bindings for C, PHP, and the Postgres command line tool, psql. Tagged by brice under development, db, daemon, library, postgresql,

Haskell for C Programmers

brice — Sun, 16 Dec 2007 10:13:00 -0500

Many people are accustomed to imperative languagues, which include C, C++, Java, Python, and Pascal. For computer science students, Haskell is weird and obtuse. This tutorial assumes that the reader is familiar with C/C++, Python, Java, or Pascal. I am writing for you because it seems that no other tutorial was written to help students overcome the difficulty of moving from C/C++, Java, and the like to Haskell. I write this assuming that you have checked out the Gentle Introduction to Haskell, but still don't understand what's going on. Tagged by brice under haskell, tutorial,

Mathématiques en prépas TSI

brice — Sat, 15 Dec 2007 04:29:00 -0500

Vous êtes les bienvenus sur mon site personnel qui contient un cours de Spé TSI et un résumé de cours de Sup et Spé TSI. Tagged by brice under lang:fr, maths, course, scolar,

md5(); - reverse engineer md5 hashes - powered by rednoize.com

brice — Fri, 23 Nov 2007 04:43:00 -0500

Because of the long time it takes today to reverse enigneer a MD5 hash (with brute force methods), the idea for md5(); was born. This website is connected to a database of md5 hashes and their original counterpart. This makes the search for the counterpart of a given md5 hash extremly fast. Additionaly everytime when you enter a non-md5 hash string into the search field, the md5 result for that search strings gets stored in our database for future use. Tagged by brice under security, algorithm, cryptography,

Recover MySQL database root password

brice — Tue, 20 Nov 2007 05:37:00 -0500

You can recover MySQL database server password with following five easy steps. Tagged by brice under admin, sql,