Monthly Archives: January 2014

font-family – social icons

Found a nice font-face of social icons!

MONO SOCIAL ICONS FONT

It’s free for whatever use ( commercial or personal ), both for web or for printing purpose. Licensed under the Open Font License. It is also hosted on GitHub.

This font is based on Mono Social Icons byIconDock and Double-J Design. It adds two more icons to the set : Google Plus andGitHub Alternative Icon.

See it: http://drinchev.github.io/monosocialiconsfont/

The first-ever botwall could change the economics of hacking forever

A denial of service attack is probably the most well known kind of attack using botnets. But for $200, you can put 10,000 computers around the world to work on whatever nefarious purpose you prefer.
 (…)
When you log into a site like an online bank or Facebook, you are connecting to a secure web application—a piece of code that runs on the web and handles the secure transfer of information such as a password. With an application installed on a phone or computer, hackers would need to reverse-engineer (i.e. figure out how it works from what it does) the code to learn how it works. But a web app’s code is visible to anyone who looks so web browsers can run them. Hackers seeking to crack systems can look at that code and write scripts to exploit it—maybe they purchased some of the credit card info stolen from Target, for instance, and want to exploit the code at an online shopping site to make as many online purchases as fast as they can. Or perhaps, unbeknownst to you, some malware is tracking your keystrokes as you log into your bank account.

Read more
at http://qz.com/168264/this-start-up-turned-hackers-greatest-trick-around-on-the-to-make-botnets-obsolete/

 

“By preventing automation against any website’s user interface, Shape’s technology allows enterprises to block dozens of attack categories, such as account takeover, application DDoS, and Man-in-the-Browser, with a single product. This is not only a powerful new tool for enterprises but a potentially disruptive technology for multiple sectors of the cybersecurity industry.”

Robert Lentz, former Chief Information Security Officer of the United States Department of Defense

 

How to use PostgreSQL Foreign Data Wrappers for external data management

 

Often times, huge web projects use multiple programming languages and even multiple databases. While relational database management systems (RDBMS) are common, they have limitations when it comes to the management of highly variable data. For such applications, NoSQL databases are a better alternative. The PostgreSQL RDBMS now provides Foreign Data Wrappers (FDW) that let PostgreSQL query non-relational external data sources.

FDWs are drivers that allow PostgreSQL database administrators to run queries and get data from external sources, including other SQL databases (Oracle, MySQL), NoSQL databases(MongoDBRedisCouchDB), text files in CSV and JSON formats, and content from Twitter. A few of the wrappers, such as the one for Kyoto Tycoon, allow PostgreSQL to handle both read and write operations on remote data.

Read full article on http://www.openlogic.com/wazi/bid/331001/how-to-use-postgresql-foreign-data-wrappers-for-external-data-management

HipChat – stats and platform

This is a really good article where they talk about REDIS and ElasticSearch.
http://highscalability.com/blog/2014/1/6/how-hipchat-stores-and-indexes-billions-of-messages-using-el.html

Stats

  • 60 messages per second.

  • 1.2 Billion documents stored

  • 4TB of EBS Raid

  • 8 ElasticSearch servers on AWS

  • 26 front end proxy serves. Double that in backend app servers.

  • 18 people

  • .5 terabytes of search data.

Platform

  • Hosting: AWS EC2 East with 75 Instance currently all Ubuntu 12.04 LTS

  • Database: CouchDB currently for Chat History, transitioning to ElasticSearch.  MySQL-RDS for everything else

  • Caching: Redis

  • Search: ElasticSearch

  • Queue/Workers server: Gearman (queue) and Curler, (worker)

  • Language: Twisted Python (XMPP Server) and PHP (Web front end)

  • System Configure: Open Source Chef + Fabric

  • Code Deployment: Capistrano

  • Monitoring: Sensu and monit pumping alerts to Pagerduty

  • Graphing: statsd + Graphite

    Read more at: http://highscalability.com/blog/2014/1/6/how-hipchat-stores-and-indexes-billions-of-messages-using-el.html

 

Snowden and Clouds – will Snowden kill the cloud vipe?

This tension became evident in a recent HipChat interview where HipChat, makers of an AWS based SaaS chat product, were busy creating an on-premises version of their product that could operate behind the firewall in enterprise datacenters. This is consistent with other products from Atlassian in that they do offer hosted services as well as installable services, but it is also an indication of customer concerns over privacy and security.

Read more at: http://highscalability.com/blog/2014/1/8/under-snowdens-light-software-architecture-choices-become-mu.html

 

Codeigniter – remove index.php

Bootstrap & Apache! you can see the .htaccess

nginx
Add the following lines on your /etc/nginx/sites-enable/domain.com or default.

# removes trailing "index" from all controllers
 if ($request_uri ~* index/?$)
 {
 rewrite ^/(.*)/index/?$ /$1 permanent;
 }

More details how to set up a nginx environment for CI.
http://wiki.nginx.org/Codeigniter

Apache

Create a .htaccess file on the root of your CI installation (in the same directory where you have system, application, etc).

RewriteEngine on
RewriteCond $1 !^(index\.php|images|robots\.txt)
RewriteRule ^(.*)$ /index.php/$1 [L]

 

Awesome tutorial about mod-rewrite / pretty links
http://stackoverflow.com/questions/20563772/reference-mod-rewrite-url-rewriting-and-pretty-links-explained

 

Thats kinda it!
Basically is a pretty url rewrite condition, for nginx must be also simple as that.
Simple as that!

Setting the http referer with PHP CURL – webscrapping

This is how we simply trick the server with a fake referer!
On webscrapping we can try to hide or make them think that we aren’t performing webscrapping on them!

$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, 'http://www.webscrappingthis.com/');
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_REFERER, 'http://www.linkedfrom.com/');
$html = curl_exec($ch);