mislav.uniqpath.com

jasoncodes.com

CSRF vulnerability in Ruby on Rails 2.3.10 & 3.0.3 – Jason Codes

http://jasoncodes.com/posts/rails-csrf-vulnerability

CSRF vulnerability in Ruby on Rails 2.3.10 and 3.0.3. Yesterday Rails 3.0.4 and Rails 2.3.11 were released with patches for a few security issues. The two youre most likely to be affected by are CSRF Protection Bypass in Ruby on Rails (CVE-2011-0447). And Potential SQL Injection in Rails 3.0.x (CVE-2011-0448). Ill be looking at the CSRF issue here. The Riding Rails blog. Has a post on the CSRF protection patch. Which is worth reading. And the same origin policy prevents. Requests from other sites. Respec...

supermar.in

After giving a talk

http://www.supermar.in/after-giving-a-talk

After giving a talk. Recently, I gave my first workshop at Eurucamp 2013. About building native iOS apps using RubyMotion. It went pretty well, but there was one constructive feedback, from Mislav. Why am I writing about this? Because that feedback helped me realize something important. The majority of audience have never touched RubyMotion before, so Ive thought its a good idea to explain how it works, how do you translate ObjC methods into Ruby, etc. What do they really want? You may want to Tweet.

odysseyandmuse.com

Ep 6: Mislav Marohnić – Vagabond Programmer | Odyssey & Muse

http://odysseyandmuse.com/ep-6-mislav-marohnic

Ep 6: Mislav Marohnić – Vagabond Programmer. Posted on Feb 17, 2015 No Comments. In this episode I talk with my friend, Mislav Marohnić. He’s a software craftsman from Croatia. He programs, works for GitHub and enjoys traveling the world. We talk about working on the road, Burning Man, and the experience and effects of longterm travel. If you want to hear more shows like this, rate us on iTunes and let us know. The 10 Principles of Burning Man. Share on Google Plus. Subscribe & Rate. Support & Donate.

danwebb.net

danwebb.net - Put that data-* attribute away, son...You might hurt someone

http://danwebb.net/2010/1/27/put-that-data-attribute-away-son-you-might-hurt-someone

Put that data-* attribute away, son.You might hurt someone. Data-* attributes allow us to add custom attributes. To elements as long as they are prefixed with ‘data-’ and since this was first discussed on John Resig’s blog. I’ve been interested in how people will use and abuse this feature. I greeted the feature with mixed feelings. It’s definitely a simple way to enrich the semantic value of HTML. Pages as well as helping to improve some of the more toxic parts. Of Microformats. XML. And now that we hav...

mir.aculo.us

mir.aculo.us JavaScript with Thomas Fuchs

http://mir.aculo.us/page/2

Hi, I'm Thomas Fuchs. I'm the author of Zepto.js. Of script.aculo.us. And I'm a Ruby on Rails core alumnus. I'm building cheerful software, like Freckle Time Tracking. And Every Time Zone. And write books like Retinafy.me. Want me to speak at your conference? Let it snow with Zepto again! December 24th, 2013. Updated with the latest and greatest Zepto.js Let it snow! If you’re interested how this works, grab the source. Use coupon “hiresholidays” for 15% off. But only on December 24th and 25th! Modules f...

del.icio.us

Siddharth Venkatesan's Bookmarks (User neotamizhan)

http://del.icio.us/neotamizhan

Sign in with Twitter. Sign in with Facebook. Sign in with Google. Type tags to add. Common tags to remove. Select a tag to rename. Share It With Others! Type Emails or User Names (comma-separated). Link shares via email will come from your email address so recipients know it's you and can reply. Lowercase tags are recommended:. Spaces are allowed but not recommended:. Reuse your tags and the tags of the community as much as possible. At the start of a tag if it's unrelated to the link content:. Link shar...

debuggable.com

Understanding node.js » Debuggable - Node.js Consulting

http://debuggable.com/posts/understanding-node-js:4bd98440-45e4-4a9a-8ef7-0f7ecbdd56cb

Posted on 29/4/10 by Felix Geisendörfer. Has generally caused two reactions in people I've introduced it to. Basically people either "got it" right away, or they ended up being very confused. If you have been in the second group so far, here is my attempt to explain node:. It is a command line tool. You download a tarball, compile and install the source. It let's you run JavaScript programs by typing 'node my app.js' in your terminal. The JS is executed by the V8 javascript engine. Get to the point!

rv.foi.hr

Prošle razmjene - Razmjena Vještina @ FOI

http://rv.foi.hr/index.php/Prošle_razmjene

Izvor: Razmjena Vještina @ FOI. 10122010, 19:00 Caffe Bar INFO - Fakultet Organizacije i Informatike:. Vlatko Košturjak (IBM) - Skeniranje cijelog interneta: OWASP favicon projekt. Dobrica Pavlinušić (Knjižnica FFZG) - Post-relacijske baze podataka i što fali razvoju web aplikacija? Alan Pavičić (Gensym) - Uvod u alternativne programske jezike. Ivan Voras (FER) - mdcached - razvoj novog web catching servera. Alen Lovrenčić (FOI) - Kako i zašto deduktivne baze podataka u open sourceu. Milivoj Mimi Kuhar (...

admin.virt.io

[Virt.io] VirtAdmin

https://admin.virt.io/about

English localization is considered as experimental. Some of the texts could be untranslated. To creators of the following languages, gems and scripts. It would be hell without them! Framework Ruby On Rails. Ruby One Time Password library (rotp). Together with Python proxy websockify. These people helped us with valuable advices, comments and testing. Thank you! Michal “xHire” Zima. Jana “jana4u” Dvořáková. Tomáš “Heron” Crhonek.