Kamis, 08 Desember 2011

6 new posts


6 new posts

Link to Wow! eBook - Blog

The Tangled Web: A Guide to Securing Modern Web Applications

Posted: 08 Dec 2011 09:56 AM PST

The Tangled Web: A Guide to Securing Modern Web Applications

Book Description

“Thorough and comprehensive coverage from one of the foremost experts in browser security.”
—Tavis Ormandy, Google Inc.

Modern web applications are built on a tangle of technologies that have been developed over time and then haphazardly pieced together. Every piece of the web application stack, from HTTP requests to browser-side scripts, comes with important yet subtle security consequences. To keep users safe, it is essential for developers to confidently navigate this landscape.

In The Tangled Web, Michal Zalewski, one of the world’s top browser security experts, offers a compelling narrative that explains exactly how browsers work and why they’re fundamentally insecure. Rather than dispense simplistic advice on vulnerabilities, Zalewski examines the entire browser security model, revealing weak points and providing crucial information for shoring up web application security. You’ll learn how to:

  • Perform common but surprisingly complex tasks such as URL parsing and HTML sanitization
  • Use modern security features like Strict Transport Security, Content Security Policy, and Cross-Origin Resource Sharing
  • Leverage many variants of the same-origin policy to safely compartmentalize complex web applications and protect user credentials in case of XSS bugs
  • Build mashups and embed gadgets without getting stung by the tricky frame navigation policy
  • Embed or host user-supplied content without running into the trap of content sniffing

For quick reference, “Security Engineering Cheat Sheets” at the end of each chapter offer ready solutions to problems you’re most likely to encounter. With coverage extending as far as planned HTML5 features, The Tangled Web will help you create secure web applications that stand the test of time.

Table of Contents
Chapter 1 Security in the World of Web Applications

Part I: Anatomy of the Web
Chapter 2 It Starts with a URL
Chapter 3 Hypertext Transfer Protocol
Chapter 4 Hypertext Markup Language
Chapter 5 Cascading Style Sheets
Chapter 6 Browser-Side Scripts
Chapter 7 Non-HTML Document Types
Chapter 8 Content Rendering with Browser Plug-ins

Part II: Browser Security Features
Chapter 9 Content Isolation Logic
Chapter 10 Origin Inheritance
Chapter 11 Life Outside Same-Origin Rules
Chapter 12 Other Security Boundaries
Chapter 13 Content Recognition Mechanisms
Chapter 14 Dealing with Rogue Scripts
Chapter 15 Extrinsic Site Privileges

Part III: A Glimpse of Things to Come
Chapter 16 New and Upcoming Security Features
Chapter 17 Other Browser Mechanisms of Note

Chapter 18 Common Web Vulnerabilities

Appendix Epilogue
Notes
UPDATES

Book Details

  • Paperback: 320 pages
  • Publisher: No Starch Press (November 2011)
  • Language: English
  • ISBN-10: 1593273886
  • ISBN-13: 978-1593273880
Note: There is a file embedded within this post, please visit this post to download the file.

Related Posts

Building Hypermedia APIs with HTML5 and Node

Posted: 08 Dec 2011 09:56 AM PST

Building Hypermedia APIs with HTML5 and Node

Book Description

With this concise book, you'll learn the art of building hypermedia APIs that don't simply run on the Web, but that actually exist in the Web. You'll start with the general principles and technologies behind this architectural approach, and then dive hands-on into three fully-functional API examples.

Too many APIs rely on concepts rooted in desktop and local area network patterns that don't scale well—costly solutions that are difficult to maintain over time. This book shows system architects and web developers how to design and implement human- and machine-readable web services that remain stable and flexible as they scale.

  • Learn the H-Factors for representing application metadata across all media types and formats
  • Understand the four basic design elements for authoring hypermedia types
  • Convert a simple read-only XML-based media type into a successful API design
  • Examine the challenges and advantages of designing a hypermedia type with JSON
  • Use HTML5's rich set of hypermedia controls in the API design process
  • Learn the details of documenting, publishing, and registering media type designs and link-relation types

Table of Contents
Chapter 1 Understanding Hypermedia
Chapter 2 XML Hypermedia
Chapter 3 JSON Hypermedia
Chapter 4 HTML5 Hypermedia
Chapter 5 Documenting Hypermedia

Appendix Afterword
Appendix References
Appendix Additional Reading
Appendix Maze+XML Media Type
Appendix Collection+JSON Media Type
Appendix Microblogging HTML Semantic Profile
Appendix IANA Media Type Registration Document
Appendix IETF Link Relations Internet Draft
Appendix Source Code, Software, and Installation Notes

Book Details

  • Paperback: 242 pages
  • Publisher: O’Reilly Media (November 2011)
  • Language: English
  • ISBN-10: 1449306578
  • ISBN-13: 978-1449306571
Note: There is a file embedded within this post, please visit this post to download the file.

Related Posts

Programming Entity Framework: Code First

Posted: 08 Dec 2011 09:55 AM PST

Programming Entity Framework: Code First

Book Description

Take advantage of the Code First data modeling approach in ADO.NET Entity Framework, and learn how to build and configure a model based on existing classes in your business domain. With this concise book, you'll work hands-on with examples to learn how Code First can create an in-memory model and database by default, and how you can exert more control over the model through further configuration.

Code First provides an alternative to the database first and model first approaches to the Entity Data Model. Learn the benefits of defining your model with code, whether you're working with an existing database or building one from scratch. If you work with Visual Studio and understand database management basics, this book is for you.

  • Learn exactly what Code First does—and does not—enable you to do
  • Understand how property attributes, relationships, and database mappings are inferred from your classes by Code First
  • Use Data Annotations and the Fluent API to configure the Code First data model
  • Perform advanced techniques, such as controlling the database schema and overriding the default model caching

This book is a continuation of author Julia Lerman's Programming Entity Framework, widely recognized as the leading book on the topic.

Table of Contents
Chapter 1 Welcome to Code First
Chapter 2 Your First Look at Code First
Chapter 3 Using Conventions and Configurations for Property Attributes
Chapter 4 Using Convention and Configuration for Relationships
Chapter 5 Using Conventions and Configurations for Database Mappings
Chapter 6 Controlling Database Location, Creation Process, and Seed Data
Chapter 7 Advanced Concepts
Chapter 8 What's Coming Next for Code First

Book Details

  • Paperback: 192 pages
  • Publisher: O’Reilly Media (November 2011)
  • Language: English
  • ISBN-10: 1449312942
  • ISBN-13: 978-1449312947
Note: There is a file embedded within this post, please visit this post to download the file.

Related Posts

Sinatra: Up and Running

Posted: 08 Dec 2011 09:55 AM PST

Sinatra: Up and Running

Book Description

Take advantage of Sinatra, the Ruby-based web application library and domain-specific language used by GitHub, LinkedIn, Engine Yard, and other prominent organizations. With this concise book, you will quickly gain working knowledge of Sinatra and its minimalist approach to building both standalone and modular web applications.

Sinatra serves as a lightweight wrapper around Rack middleware, with syntax that maps closely to functions exposed by HTTP verbs, which makes it ideal for web services and APIs. If you have experience building applications with Ruby, you'll quickly learn language fundamentals and see under-the-hood techniques, with the help of several practical examples. Then you'll get hands-on experience with Sinatra by building your own blog engine.

  • Learn Sinatra's core concepts, and get started by building a simple application
  • Create views, manage sessions, and work with Sinatra route definitions
  • Become familiar with the language's internals, and take a closer look at Rack
  • Use different subclass methods for building flexible and robust architectures
  • Put Sinatra to work: build a blog that takes advantage of service hooks provided by the GitHub API

Table of Contents
Chapter 1 Taking the Stage
Chapter 2 Fundamentals
Chapter 3 A Peek Behind the Curtain
Chapter 4 Modular Applications
Chapter 5 Hands On: Your Own Blog Engine

Book Details

  • Paperback: 120 pages
  • Publisher: O’Reilly Media (November 2011)
  • Language: English
  • ISBN-10: 1449304230
  • ISBN-13: 978-1449304232
Note: There is a file embedded within this post, please visit this post to download the file.


Make: Ultimate Kit Guide

Posted: 08 Dec 2011 09:55 AM PST

Make: Ultimate Kit Guide

Book Description

MAKE's Ultimate Kit Guide brings you the top kits of all kinds, from beginner's crafts to wooden kayaks to advanced robotics and everything in between! Whether you need a gift for the do-it-yourselfer who loves making things, or you want to find the best kits to build yourself, this special issue shows the way, with reviews of 175+ kits selected by the editors of MAKE magazine. In this special issue, we cover:

RobotsElectronics & MicrocontrollersLEDsR/C VehiclesTools & WorkshopOutdoor & SportClocksHome & ShelterScienceToys & GamesCraftSiege & BallisticsWheelsRocketsKit Party!FoodBeveragesAudio GearMusical Instruments

In MAKE Ultimate Kit Guide 2012, you'll also find:

  • The Rally Fighter, the radical DIY car you build at the micro-factory
  • How kits drive innovation, from steam engines to computers to 3D printing and microcontrollers
  • DIY Drones – autonomous plane and copter kits
  • Classic Heathkits and Erector Sets
  • Most Dangerous Kits, and more

At MAKE we're crazy about kits. They're fun, inspiring, and they are great gifts for any maker. In this special MAKE issue we’ve searched out over 175 of the top kits of all kinds and rated them on quality, instructions, community, and more. Find a kit worth making this season; some of which you never knew existed!

Find the top rated kits for Robots, Rockets, Food, Electronics, Home, Tools, Arduino, Toys, Crafts, R/C, Outdoors, Siege Weapons, and much more.

And check out our new Make: Kit Reviews website, your trusted online source to learn about the best kits on the market.

Book Details

  • Paperback: 97 pages
  • Publisher: O’Reilly Media / Make (November 2011)
  • Language: English
  • ISBN-10: 1449323723
  • ISBN-13: 978-1449323721
Note: There is a file embedded within this post, please visit this post to download the file.


iPod: The Missing Manual, 10th Edition

Posted: 08 Dec 2011 09:54 AM PST

iPod: The Missing Manual, 10th Edition

Book Description

Apple’s iPod still has the world hooked on portable music, pictures, videos, movies, and more, but one thing it doesn't have is a manual that helps you can get the most out this amazing device. That's where this book comes in. Get the complete scoop on the latest line of iPods and the latest version of iTunes with the guide that outshines them all—iPod: The Missing Manual.

The 10th edition is as useful, satisfying, and reliable as its subject. Teeming with high-quality color graphics, each page helps you accomplish a specific task—everything from managing your media and installing and browsing iTunes to keeping calendars and contacts. Whether you have a brand-new iPod or an old favorite, this book provides crystal-clear explanations and expert guidance on all of the things you can do:

  • Fill 'er up. Load your Nano, Touch, Classic, or Shuffle with music, movies, and photos, and learn how to play it all back.
  • Tour the Touch. Surf the Web, use web-based email, collect iPhone apps, play games, and more.
  • Share music and movies. Copy music between computers with Home Sharing, beam playlists around the house, and whisk your Nano's videos to YouTube.
  • iTunes, tuned up. Pick-and-choose which music, movies, and photos to sync; create instant playlists with Genius Mix; and auto-rename "Untitled" tracks.
  • iPod power. Create Genius playlists on your iPod, shoot movies on your Nano, use the Nano's FM radio and pedometer, and add voice memos to your Touch.
  • Shop the iTunes Store. Find what you're looking for in a snap, whether it's music, movies, apps, lyrics, or liner notes.

Table of Contents
Chapter 1 Meet the iPod: Out of the Box and Into Your Ears in 15 Minutes
Chapter 2 Bopping Around the iPod Nano, Shuffle, and Classic
Chapter 3 Touring the Touch
Chapter 4 iTunes Basics
Chapter 5 iTunes Power Moves
Chapter 6 The Power of Playlists
Chapter 7 Shop the iTunes Store
Chapter 8 It's Showtime: Video on the iPod
Chapter 9 Picture Your Photos On the iPod
Chapter 10 The iPod as Personal Assistant
Chapter 11 Surf the Web and More with the iPod Touch
Chapter 12 iPod and iTunes Out Loud
Chapter 13 What to Do When Your iPod Isn't Working Right

Book Details

  • Paperback: 320 pages
  • Publisher: O’Reilly Media; 10th Edition (November 2011)
  • Language: English
  • ISBN-10: 1449312853
  • ISBN-13: 978-1449312855
Note: There is a file embedded within this post, please visit this post to download the file.


Diposting oleh dummy di 21.32

Tidak ada komentar:

Posting Komentar

Langganan: Posting Komentar (Atom)