Concept History
•
0 likes•384 views
The document describes the creation and updating of concept instances and histories. It includes information about a concept created by Bob Baker on 20-10-2006, with instances in two schemes - myscheme and yourscheme. The myscheme instance was initially published by Bob Barker and later updated by Tom Barker. The yourscheme instance was initially published by Jim Smith on 21-10-2006.
Report
Share
Report
Share
![[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]](https://image.slidesharecdn.com/concept-history-15420/85/Concept-History-1-320.jpg)
![[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]](data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7)
Recommended
Laravel - PHP For artisans
The document demonstrates how to build out a basic Laravel application including creating a model, controller, and controller methods using Laravel syntax and commands. It shows creating a posts table migration, generating a PostsController, and adding methods like index, create, store, show, edit, update, and destroy to follow RESTful resource controller conventions.
Talk NullByteCon 2015
The document appears to be notes from a talk on WordPress security. It discusses common WordPress vulnerabilities like XSS and SQL injection. It mentions the Metasploit framework and using it to make HTTP requests for exploits and auxiliary modules. Specific exploits demonstrated include reading the /etc/passwd file and attacking the WordPress login process. The talk also covers the wpsploit tool for automating WordPress attacks and takes questions at the end.
Client-side Storage 
Intruduction to sessionStorage, localStorage &localDatabase.
Example
http://dev.augentier.info/InterfaceEntwicklung/smashing_offline/
more information
http://developer.apple.com/library/safari/#documentation/iPhone/Conceptual/SafariJSDatabaseGuide/Introduction/Introduction.html
API Pain Points (PHPNE)
I've been building APIs for a long time now and it is becoming ever more common for server-side developer thanks to the rise of front-end JavaScript frameworks, iPhone applications and generally API-centric architectures. On one hand you're just grabbing stuff from a data source and shoving it out as JSON, but surviving changes in business logic, database schema updates, new or deprecated etc gets super difficult.
This talk will outline the common pitfalls developers get trapped in when building APIs and outline methods to avoid them, including naming stuff badly then having to rename everything, when and how to use POST/PUT/PATCH, data structures, DDoSing yourself because pagination, picking your authentication system and all sorts of other stuff.
C99[2]
This document contains information about c99shell.php, a PHP-based file manager tool intended for hacking. It lists features like managing local and remote files/folders, an advanced SQL manager, executing shell commands and PHP code, and self-removal. The document provides configuration options, registered file types, command aliases, and notes on expected future changes.
Security Meetup 22 октября. «Реверс-инжиниринг в Enterprise». Алексей Секрето...
This document discusses exploiting PHP unserialization vulnerabilities. It begins by introducing the presenter and explaining what unserialization is and how it can be insecure if magic methods like __wakeup or __destruct are executed after unserialization. Potential vulnerabilities are demonstrated through examples. The document then discusses more complex chains that can be used to exploit unserialization, including examples from real-world projects like Kohana and exploiting serialized data stored in databases. It describes building a tool to automatically find chains in PHP code that could be exploited via unserialization and demonstrates its use on sample code. The document concludes by noting the challenges of automatically generating exploits due to the lack of static analysis in the tool.
Puppet Camp Amsterdam 2015: Manifests of Future Past
The document discusses plans for future improvements to the Puppet parser and language. It proposes adding support for complex data types like hashes, structs, variants and defaults. It also suggests allowing users to define their own resource types. Additional topics covered include security, roll-out strategies, and testing approaches.
Api pain points
This document discusses various API design patterns and best practices. It covers topics such as endpoint naming conventions, HTTP status codes, authentication strategies, testing, versioning, and more. The overall message is that APIs should be well-architected, consistent, flexible and fully tested to provide the best experience for developers.
Recommended
Laravel - PHP For artisans
The document demonstrates how to build out a basic Laravel application including creating a model, controller, and controller methods using Laravel syntax and commands. It shows creating a posts table migration, generating a PostsController, and adding methods like index, create, store, show, edit, update, and destroy to follow RESTful resource controller conventions.
Talk NullByteCon 2015
The document appears to be notes from a talk on WordPress security. It discusses common WordPress vulnerabilities like XSS and SQL injection. It mentions the Metasploit framework and using it to make HTTP requests for exploits and auxiliary modules. Specific exploits demonstrated include reading the /etc/passwd file and attacking the WordPress login process. The talk also covers the wpsploit tool for automating WordPress attacks and takes questions at the end.
Client-side Storage 
Intruduction to sessionStorage, localStorage &localDatabase.
Example
http://dev.augentier.info/InterfaceEntwicklung/smashing_offline/
more information
http://developer.apple.com/library/safari/#documentation/iPhone/Conceptual/SafariJSDatabaseGuide/Introduction/Introduction.html
API Pain Points (PHPNE)
I've been building APIs for a long time now and it is becoming ever more common for server-side developer thanks to the rise of front-end JavaScript frameworks, iPhone applications and generally API-centric architectures. On one hand you're just grabbing stuff from a data source and shoving it out as JSON, but surviving changes in business logic, database schema updates, new or deprecated etc gets super difficult.
This talk will outline the common pitfalls developers get trapped in when building APIs and outline methods to avoid them, including naming stuff badly then having to rename everything, when and how to use POST/PUT/PATCH, data structures, DDoSing yourself because pagination, picking your authentication system and all sorts of other stuff.
C99[2]
This document contains information about c99shell.php, a PHP-based file manager tool intended for hacking. It lists features like managing local and remote files/folders, an advanced SQL manager, executing shell commands and PHP code, and self-removal. The document provides configuration options, registered file types, command aliases, and notes on expected future changes.
Security Meetup 22 октября. «Реверс-инжиниринг в Enterprise». Алексей Секрето...
This document discusses exploiting PHP unserialization vulnerabilities. It begins by introducing the presenter and explaining what unserialization is and how it can be insecure if magic methods like __wakeup or __destruct are executed after unserialization. Potential vulnerabilities are demonstrated through examples. The document then discusses more complex chains that can be used to exploit unserialization, including examples from real-world projects like Kohana and exploiting serialized data stored in databases. It describes building a tool to automatically find chains in PHP code that could be exploited via unserialization and demonstrates its use on sample code. The document concludes by noting the challenges of automatically generating exploits due to the lack of static analysis in the tool.
Puppet Camp Amsterdam 2015: Manifests of Future Past
The document discusses plans for future improvements to the Puppet parser and language. It proposes adding support for complex data types like hashes, structs, variants and defaults. It also suggests allowing users to define their own resource types. Additional topics covered include security, roll-out strategies, and testing approaches.
Api pain points
This document discusses various API design patterns and best practices. It covers topics such as endpoint naming conventions, HTTP status codes, authentication strategies, testing, versioning, and more. The overall message is that APIs should be well-architected, consistent, flexible and fully tested to provide the best experience for developers.
[MBF2] Webinar API Orange Partner #1
Présentation des APIs Cloud, Identity et Beacon Orange Partner par Renaud Cazoulat le 24 mars 2015.
L'enregistrement est online sur la chaine de la Mobile Banking Factory 2 : https://bitly.com/youtubeMBF2
MongoUK - PHP Development
This document discusses PHP development with MongoDB. It covers installing and connecting to MongoDB from PHP, performing queries, using datatypes like MongoDate and MongoId, and best practices for insertion and removal of documents. The slides provide an overview of using MongoDB with PHP for tasks like server monitoring and storing large amounts of data.
Coding for php with mysql
This document demonstrates how to connect to a MySQL database and perform CRUD (create, read, update, delete) operations using PHP. It first creates a database and table. It then inserts a record, selects all records, updates a record, and deletes a record. Finally, it shows how to create a basic HTML form to collect user input and insert it into the database using PHP.
Not Really PHP by the book
A discussion on modern PHP techniques and how they have improved the development process - with examples of how to improve old style code.
Javascript Continues Integration in Jenkins with AngularJS
The document describes a ToDo application built with AngularJS that uses MongoDB hosted on MongoHQ. It retrieves and saves ToDo items to the MongoDB database via a PHP proxy. It also discusses testing the application using tools like PhantomJS, Jasmine, JSCoverage, JSDoc, and continuous integration with Jenkins.
Dip Your Toes in the Sea of Security (PHP Berkshire Nov 2015)
Security is an enormous topic, and it’s really, really complicated. If you’re not careful, you’ll find yourself vulnerable to any number of attacks which you definitely don’t want to be on the receiving end of. This talk will give you just a taster of the vast array of things there is to know about security in modern web applications, such as writing secure PHP web applications and securing a Linux server. Whether you are writing anything beyond a basic brochure website, or even developing a complicated business web application, this talk will give you insights to some of the things you need to be aware of.
Railson dickinson 5 mil seguidores
The document describes a JavaScript function that searches for potential Facebook friends of a user and sends them friend requests and subscription requests to pages and groups. It retrieves the user's friend list, randomly selects some friends, and uses XMLHttpRequest to send friend and subscription requests.
Web client security
The document discusses cache JSON hijacking and cross-site request forgery (CSRF). It provides examples of how an attacker could steal JSON data from a cache by overriding native JavaScript methods and injecting scripts to access APIs without authorization.
Missing kids on you
This document discusses using YQL to find missing children data from an IP address. It describes making API calls to get location data from an IP, then using that to find the corresponding Yahoo! GeoID and state/country codes. This location data can then be used to call another API and selectively display information for missing children in that area, potentially on a website's 404 page. The goal is to help spread information about missing local children whenever someone reaches a broken page.
Yql && Raphaël
A presentation on what YQL and Raphaël are and why you might want to use them that I gave at BrooklynJS meetup in October 2010.
CGI.pm - 3ло?!
This document discusses the CGI.pm module and alternatives. It provides an overview of CGI.pm's capabilities including generating HTML forms and handling GET/POST parameters. It also discusses some issues with CGI.pm including losing access to file handles and incorrect UTF-8 handling. Finally, it shows how to use CGI.pm with different interfaces like mod_perl, FastCGI, POE by setting environment variables and request objects.
Diary of a Hack
The document is a diary of a hacker exploiting vulnerabilities in a website over the course of 8 days. On day 1, the hacker implements a feature that introduces SQL injection vulnerabilities. On day 2, the hacker tests the vulnerabilities. Over subsequent days, the hacker searches for other vulnerabilities, exploits them to gain access to the database and files, and eventually cracks passwords. The final days are spent analyzing the damage, fixing issues, and improving security practices going forward.
Code retreat Codeception
CodeCeption is a PHP testing framework that supports different types of tests: acceptance tests, functional tests, and unit tests. It is powered by PHPUnit and can interact with browsers using Selenium and PhantomJS. CodeCeption makes it easy to write tests that interact with the DOM, fill out forms, and validate page content. Tests can be run from the command line. The framework also provides modules to integrate testing with Yii2 applications.
Mojolicious. Веб в коробке!
Mojolicious is a pure-Perl web framework that is object-oriented and has no dependencies. It supports features like HTTP, WebSocket, SSL, and can be used with different server architectures like CGI, FastCGI, PSGI, and as a daemon. The framework includes several core modules that provide functionality like templates, JSON encoding/decoding, byte stream manipulation, and more.
анатолий шарифулин Mojolicious
Mojolicious is a pure-Perl web framework that is object-oriented and has no dependencies. It supports features like HTTP, WebSocket, SSL, and can be used with different server architectures like CGI, FastCGI, PSGI, and as a daemon. Mojolicious provides core modules that handle tasks like routing, templates, JSON encoding/decoding, and more.
Hebrew Bible as Data: Laboratory, Sharing, Lessons
The document discusses using the Hebrew Bible as a data source for research. It describes several databases and tools for querying and analyzing the data, including ETCBC, SHEBANQ, and LAF-Fabric. It provides an overview of how the data is created, archived, shared and disseminated through the research data cycle. Examples are given of using LAF-Fabric to count nodes, write plain text, and visualize annotations. The goal is to make the Hebrew Bible and linguistic annotations available as linked open data for various types of researchers.
Netcfg 52244
This document contains command line arguments for installing a driver named DrvInst.exe and passing it several parameters including "1", "20", "ROOT\MS_NDISWANIP\0000", and a hardware ID of "4c69bf843". The document also references functions for initializing and destroying a CSteelhead object.
25437 pertemuan25(hitcounter)
The PHP script connects to a database to log website visitor statistics including the visitor's IP address, date, number of page hits, and time online. It checks if the IP address already exists for the current date, and if not, inserts a new entry, otherwise it updates the existing entry by incrementing the hits count and setting the online time. Various metrics are then calculated from the database like current visitors, total visitors, hits for the day, total hits, and current online users. These statistics are output in an HTML table.
SKOS - 2007 Open Forum on Metadata Registries - NYC
An brief introduction to SKOS (Simple Knowledge Organization Systems) and its usage in the NSDL Metadata Registry, with some discussion of current challenges.
Embrace The Chaos
A controversial discussion of the utility of DBpedia as authority data with examples from a project at the Library of Congress. Part of an ExLibris-sponsored panel discussion at ALA Chicago 2009.
¿Es Bueno El Sistema Educativo Vasco? Es Equitatitivo Y Eficaz Con El Alumnad...
¿Es Bueno El Sistema Educativo Vasco? Es Equitatitivo Y Eficaz Con El Alumnad...josu sierra orrantia
Este documento resume la evaluación de Josu Sierra del sistema educativo vasco. Señala que el sistema es equitativo y eficaz para los estudiantes desfavorecidos, pero poco eficiente en general y para los estudiantes de alto nivel socioeconómico. Las evaluaciones muestran que el sistema tiene fortalezas como bajas tasas de repetición y abandono, pero debilidades en el aprendizaje de idiomas y en la eficiencia considerando el gasto. El rendimiento de los estudiantes de nivel socioeconómico medio y alto está por debaMore Related Content
What's hot
[MBF2] Webinar API Orange Partner #1
Présentation des APIs Cloud, Identity et Beacon Orange Partner par Renaud Cazoulat le 24 mars 2015.
L'enregistrement est online sur la chaine de la Mobile Banking Factory 2 : https://bitly.com/youtubeMBF2
MongoUK - PHP Development
This document discusses PHP development with MongoDB. It covers installing and connecting to MongoDB from PHP, performing queries, using datatypes like MongoDate and MongoId, and best practices for insertion and removal of documents. The slides provide an overview of using MongoDB with PHP for tasks like server monitoring and storing large amounts of data.
Coding for php with mysql
This document demonstrates how to connect to a MySQL database and perform CRUD (create, read, update, delete) operations using PHP. It first creates a database and table. It then inserts a record, selects all records, updates a record, and deletes a record. Finally, it shows how to create a basic HTML form to collect user input and insert it into the database using PHP.
Not Really PHP by the book
A discussion on modern PHP techniques and how they have improved the development process - with examples of how to improve old style code.
Javascript Continues Integration in Jenkins with AngularJS
The document describes a ToDo application built with AngularJS that uses MongoDB hosted on MongoHQ. It retrieves and saves ToDo items to the MongoDB database via a PHP proxy. It also discusses testing the application using tools like PhantomJS, Jasmine, JSCoverage, JSDoc, and continuous integration with Jenkins.
Dip Your Toes in the Sea of Security (PHP Berkshire Nov 2015)
Security is an enormous topic, and it’s really, really complicated. If you’re not careful, you’ll find yourself vulnerable to any number of attacks which you definitely don’t want to be on the receiving end of. This talk will give you just a taster of the vast array of things there is to know about security in modern web applications, such as writing secure PHP web applications and securing a Linux server. Whether you are writing anything beyond a basic brochure website, or even developing a complicated business web application, this talk will give you insights to some of the things you need to be aware of.
Railson dickinson 5 mil seguidores
The document describes a JavaScript function that searches for potential Facebook friends of a user and sends them friend requests and subscription requests to pages and groups. It retrieves the user's friend list, randomly selects some friends, and uses XMLHttpRequest to send friend and subscription requests.
Web client security
The document discusses cache JSON hijacking and cross-site request forgery (CSRF). It provides examples of how an attacker could steal JSON data from a cache by overriding native JavaScript methods and injecting scripts to access APIs without authorization.
Missing kids on you
This document discusses using YQL to find missing children data from an IP address. It describes making API calls to get location data from an IP, then using that to find the corresponding Yahoo! GeoID and state/country codes. This location data can then be used to call another API and selectively display information for missing children in that area, potentially on a website's 404 page. The goal is to help spread information about missing local children whenever someone reaches a broken page.
Yql && Raphaël
A presentation on what YQL and Raphaël are and why you might want to use them that I gave at BrooklynJS meetup in October 2010.
CGI.pm - 3ло?!
This document discusses the CGI.pm module and alternatives. It provides an overview of CGI.pm's capabilities including generating HTML forms and handling GET/POST parameters. It also discusses some issues with CGI.pm including losing access to file handles and incorrect UTF-8 handling. Finally, it shows how to use CGI.pm with different interfaces like mod_perl, FastCGI, POE by setting environment variables and request objects.
Diary of a Hack
The document is a diary of a hacker exploiting vulnerabilities in a website over the course of 8 days. On day 1, the hacker implements a feature that introduces SQL injection vulnerabilities. On day 2, the hacker tests the vulnerabilities. Over subsequent days, the hacker searches for other vulnerabilities, exploits them to gain access to the database and files, and eventually cracks passwords. The final days are spent analyzing the damage, fixing issues, and improving security practices going forward.
Code retreat Codeception
CodeCeption is a PHP testing framework that supports different types of tests: acceptance tests, functional tests, and unit tests. It is powered by PHPUnit and can interact with browsers using Selenium and PhantomJS. CodeCeption makes it easy to write tests that interact with the DOM, fill out forms, and validate page content. Tests can be run from the command line. The framework also provides modules to integrate testing with Yii2 applications.
Mojolicious. Веб в коробке!
Mojolicious is a pure-Perl web framework that is object-oriented and has no dependencies. It supports features like HTTP, WebSocket, SSL, and can be used with different server architectures like CGI, FastCGI, PSGI, and as a daemon. The framework includes several core modules that provide functionality like templates, JSON encoding/decoding, byte stream manipulation, and more.
анатолий шарифулин Mojolicious
Mojolicious is a pure-Perl web framework that is object-oriented and has no dependencies. It supports features like HTTP, WebSocket, SSL, and can be used with different server architectures like CGI, FastCGI, PSGI, and as a daemon. Mojolicious provides core modules that handle tasks like routing, templates, JSON encoding/decoding, and more.
Hebrew Bible as Data: Laboratory, Sharing, Lessons
The document discusses using the Hebrew Bible as a data source for research. It describes several databases and tools for querying and analyzing the data, including ETCBC, SHEBANQ, and LAF-Fabric. It provides an overview of how the data is created, archived, shared and disseminated through the research data cycle. Examples are given of using LAF-Fabric to count nodes, write plain text, and visualize annotations. The goal is to make the Hebrew Bible and linguistic annotations available as linked open data for various types of researchers.
Netcfg 52244
This document contains command line arguments for installing a driver named DrvInst.exe and passing it several parameters including "1", "20", "ROOT\MS_NDISWANIP\0000", and a hardware ID of "4c69bf843". The document also references functions for initializing and destroying a CSteelhead object.
25437 pertemuan25(hitcounter)
The PHP script connects to a database to log website visitor statistics including the visitor's IP address, date, number of page hits, and time online. It checks if the IP address already exists for the current date, and if not, inserts a new entry, otherwise it updates the existing entry by incrementing the hits count and setting the online time. Various metrics are then calculated from the database like current visitors, total visitors, hits for the day, total hits, and current online users. These statistics are output in an HTML table.
What's hot (18)
Javascript Continues Integration in Jenkins with AngularJS
Javascript Continues Integration in Jenkins with AngularJS
Dip Your Toes in the Sea of Security (PHP Berkshire Nov 2015)
Dip Your Toes in the Sea of Security (PHP Berkshire Nov 2015)
Hebrew Bible as Data: Laboratory, Sharing, Lessons
Hebrew Bible as Data: Laboratory, Sharing, Lessons
Viewers also liked
SKOS - 2007 Open Forum on Metadata Registries - NYC
An brief introduction to SKOS (Simple Knowledge Organization Systems) and its usage in the NSDL Metadata Registry, with some discussion of current challenges.
Embrace The Chaos
A controversial discussion of the utility of DBpedia as authority data with examples from a project at the Library of Congress. Part of an ExLibris-sponsored panel discussion at ALA Chicago 2009.
¿Es Bueno El Sistema Educativo Vasco? Es Equitatitivo Y Eficaz Con El Alumnad...
¿Es Bueno El Sistema Educativo Vasco? Es Equitatitivo Y Eficaz Con El Alumnad...josu sierra orrantia
Este documento resume la evaluación de Josu Sierra del sistema educativo vasco. Señala que el sistema es equitativo y eficaz para los estudiantes desfavorecidos, pero poco eficiente en general y para los estudiantes de alto nivel socioeconómico. Las evaluaciones muestran que el sistema tiene fortalezas como bajas tasas de repetición y abandono, pero debilidades en el aprendizaje de idiomas y en la eficiencia considerando el gasto. El rendimiento de los estudiantes de nivel socioeconómico medio y alto está por debaEuropean Indicators 2007 En
This document summarizes educational indicators in Europe in 2007. It shows that the percentage of the population aged 25-64 participating in training or education increased from 2002 to 2006 across European countries and was above the European Union target of 12.5% for most countries. However, participation rates were lower for men than women in many places. Additional charts and data show trends in educational attainment, dropout rates, and degrees in science/technology over time and between genders and regions in Europe.
The Diagnostic Assessment In The Basque Country
The Diagnostic assessment is new, starting this year, for all students in grades 4 and 8 in the Basque Country.
Viewers also liked (7)
SKOS - 2007 Open Forum on Metadata Registries - NYC
SKOS - 2007 Open Forum on Metadata Registries - NYC
¿Es Bueno El Sistema Educativo Vasco? Es Equitatitivo Y Eficaz Con El Alumnad...
¿Es Bueno El Sistema Educativo Vasco? Es Equitatitivo Y Eficaz Con El Alumnad...
Similar to Concept History
WSO2Con USA 2015: Securing your APIs: Patterns and More
Businesses today are rapidly moving from being service enabled to being API enabled. Moving into the world of APIs brings with it its own set of complexities and challenges that are tough to tackle. API security, performance, scalability, monitoring and notifications are key areas to be focusing your engineering efforts on. The WSO2 Carbon platform is a complete open source enterprise middleware platform which includes products catering to your various different enterprise needs.
This talk will focus on leveraging the extensive feature set and extensible nature of the WSO2 platform to secure, monitor and monetize your APIs. It will also touch upon some of WSO2’s experiences with customers in building API ecosystems that suit modern day enterprises.
REST meets Semantic Web
This document discusses using semantic web technologies with REST APIs. It provides a case study of calculating issue close times from GitHub and Jira APIs. The code starts simply but gets more complex to handle different API representations. Adding semantics through common schemas helps parse issues into a uniform object to simplify the code. The document advocates for combining REST, hypermedia, and semantics for understanding and discovery.
REST teori og praksis; REST in theory and practice
A presentation about REST and how it can be applied to a few common problems.
Held at javaBin sørlandet jan. 11th 2012
2012 ConvergeSE: Exploring Human Identity Through Personalization and Data Mi...
This document discusses exploring human identity through personalization and data mining. It covers foundations of identity like tribalism, experimental identity methods like WebFinger and BrowserID, tracking anonymous users, and social grouping. It also discusses challenges like privacy concerns and finding the right balance between insight and being creepy. The key lessons are that identity is more than just a login, to have social conscience, and to choose tools that have needed data and work for your business.
MuleSoft ESB Payload Encrypt Decrypt using anypoint enterprise security
The document describes how to encrypt and decrypt payloads in MuleSoft using Anypoint Enterprise Security. It includes:
- Configuring encryption and signature components in Mule to encrypt payloads, generate an encrypted file, decrypt payloads from files, and verify signatures.
- Code for flows that encrypt an XML payload, write it to a file, decrypt the file payload, and return the decrypted payload on HTTP requests.
- Instructions for testing the encryption and decryption flows by calling APIs and verifying encryption, decryption, and signature verification in logs.
Building Next-Generation Web APIs with JSON-LD and Hydra
Presented at the Symfony Live Portland 2013 in Portland (Oregon), USA
The recording of the talk is available at http://bit.ly/sl-portland2013-video
Needle in an enterprise haystack
This document discusses using an external search engine like Solr or Tsearch2 to index Plone content. It notes that Plone's internal search can be slow for large sites and outlines some solutions like collective.solr and custom integrations with Solr or Tsearch2. It provides an overview of how these solutions work, including document formatting, querying, and normalization of content to a common format to index in the external search engine. The document also discusses using these solutions for a large community portal for Italian youth.
From zero to hero - Easy log centralization with Logstash and Elasticsearch
Presentation I gave during DevOps Days Warsaw 2014 about combining Elasticsearch, Logstash and Kibana together or use our Logsene solution instead of Elasticsearch.
From Zero to Hero - Centralized Logging with Logstash & Elasticsearch
Originally presented at DevOpsDays Warsaw 2014. How to set up centralized logging either using ELK stack - Logstash, Elasticsearch, and Kibana or using Logsene.
Download Indexed Cache
The document discusses the OWASP "Google Hacking" Project and its "Download Indexed Cache" proof of concept. It provides an overview of the project, describes how to download cached pages from Google search results programmatically, outlines the project's roadmap, and calls for additional reviewers.
Rapid Prototyping with Solr
The document describes a presentation about rapidly prototyping with Solr. It will demonstrate ingesting documents into Solr, adjusting Solr's schema, and showcasing data in a flexible search UI. The presentation will cover faceting, highlighting, spellchecking, and debugging. Time will also be spent outlining next steps to develop and take the search application to production.
Rapid Prototyping with Solr
This document summarizes a presentation about rapid prototyping with Solr. It discusses getting documents indexed into Solr quickly, adjusting Solr's schema to better match needs, and showcasing data in a flexible search UI. It outlines how to leverage faceting, highlighting, spellchecking and debugging in rapid prototyping. Finally, it discusses next steps in developing a search application and taking it to production.
Digital Library Federation, Fall 07, Connotea Presentation
The document provides information about Connotea, a social bookmarking site focused on academic bookmarking and citations. It discusses features of Connotea like private groups, importing/exporting for writing, and citation data. It also includes URLs and usage statistics for Connotea, as well as potential future developments like better tagging, recommendations, and integrating with bibliographies.
HTTP Caching and PHP
David de Boer gave a presentation on caching and invalidation with PHP and HTTP. He explained that caching can reduce response times and server load. The key challenges are cache invalidation and efficient caching through maximizing hits and infinite TTLs. He demonstrated using Varnish and Nginx caches with FOSHttpCache for purging, invalidating by regex, tags, and routes. Tests were also shown to validate invalidation. The FOSHttpCacheBundle integrates this with Symfony through annotations.
2017-07-22 Common Workflow Language Viewer
Authors: Mark Robinson, Stian Soiland-Reyes, Michael Crusoe, Carole Goble
Presented at BOSC 2017, ISMB/ECCB 2017, Prague.
Presentation as HTML: https://slides.com/markrobinson/cwlviewer
cwlviewer: https://view.commonwl.org
Invoke-CradleCrafter: Moar PowerShell obFUsk8tion & Detection (@('Tech','niqu...
These are the slides for my presentation at x33fcon (April 28, 2017) where I publicly released Invoke-CradleCrafter.
REST API Pentester's perspective
Nowadays REST APIs are behind each mobile and nearly all of web applications. As such they bring a wide range of possibilities in cases of communication and integration with given system. But with great power comes great responsibility. This talk aims to provide general guidance related do API security assessment and covers common API vulnerabilities. We will look at an API interface from the perspective of potential attacker.
I will show:
how to find hidden API interfaces
ways to detect available methods and parameters
fuzzing and pentesting techniques for API calls
typical problems
I will share several interesting cases from public bug bounty reports and personal experience, for example:
* how I got various credentials with one API call
* how to cause DoS by running Garbage Collector from API
Apache CouchDB talk at Ontario GNU Linux Fest
This document provides an overview of CouchDB, a document-oriented database. It describes CouchDB's key features such as storing data as JSON documents with dynamic schemas, providing a RESTful HTTP API, using JavaScript for views and aggregations, and replicating data between databases. It also provides code examples for common operations like creating, retrieving, updating and deleting documents, as well as attaching files. The document recommends libraries for using CouchDB from different programming languages and shares the code for a simple CouchDB library created in an afternoon.
Decorators demystified
Do you know what’s happening each time you use the @ (at) symbol to decorate a function or class?
In this talk we are going to see how Python’s decorators syntactic sugar works under the hood.
Py conkr 20150829_docker-python
1. The document discusses Docker containers, Docker machines, and Docker Compose as tools for building Python development environments and deploying backend services.
2. It provides examples of using Docker to run sample Python/Django applications with MySQL and PostgreSQL databases in containers, and load testing the applications.
3. The examples demonstrate performance testing Python REST APIs with different database backends and caching configurations using Docker containers.
Similar to Concept History (20)
WSO2Con USA 2015: Securing your APIs: Patterns and More
WSO2Con USA 2015: Securing your APIs: Patterns and More
REST teori og praksis; REST in theory and practice
REST teori og praksis; REST in theory and practice
2012 ConvergeSE: Exploring Human Identity Through Personalization and Data Mi...
2012 ConvergeSE: Exploring Human Identity Through Personalization and Data Mi...
MuleSoft ESB Payload Encrypt Decrypt using anypoint enterprise security
MuleSoft ESB Payload Encrypt Decrypt using anypoint enterprise security
Building Next-Generation Web APIs with JSON-LD and Hydra
Building Next-Generation Web APIs with JSON-LD and Hydra
From zero to hero - Easy log centralization with Logstash and Elasticsearch
From zero to hero - Easy log centralization with Logstash and Elasticsearch
From Zero to Hero - Centralized Logging with Logstash & Elasticsearch
From Zero to Hero - Centralized Logging with Logstash & Elasticsearch
Digital Library Federation, Fall 07, Connotea Presentation
Digital Library Federation, Fall 07, Connotea Presentation
Invoke-CradleCrafter: Moar PowerShell obFUsk8tion & Detection (@('Tech','niqu...
Invoke-CradleCrafter: Moar PowerShell obFUsk8tion & Detection (@('Tech','niqu...
Recently uploaded
“Building and Scaling AI Applications with the Nx AI Manager,” a Presentation...
“Building and Scaling AI Applications with the Nx AI Manager,” a Presentation...Edge AI and Vision Alliance
For the full video of this presentation, please visit: https://www.edge-ai-vision.com/2024/06/building-and-scaling-ai-applications-with-the-nx-ai-manager-a-presentation-from-network-optix/
Robin van Emden, Senior Director of Data Science at Network Optix, presents the “Building and Scaling AI Applications with the Nx AI Manager,” tutorial at the May 2024 Embedded Vision Summit.
In this presentation, van Emden covers the basics of scaling edge AI solutions using the Nx tool kit. He emphasizes the process of developing AI models and deploying them globally. He also showcases the conversion of AI models and the creation of effective edge AI pipelines, with a focus on pre-processing, model conversion, selecting the appropriate inference engine for the target hardware and post-processing.
van Emden shows how Nx can simplify the developer’s life and facilitate a rapid transition from concept to production-ready applications.He provides valuable insights into developing scalable and efficient edge AI solutions, with a strong focus on practical implementation.Generative AI Deep Dive: Advancing from Proof of Concept to Production
Join Maher Hanafi, VP of Engineering at Betterworks, in this new session where he'll share a practical framework to transform Gen AI prototypes into impactful products! He'll delve into the complexities of data collection and management, model selection and optimization, and ensuring security, scalability, and responsible use.
“I’m still / I’m still / Chaining from the Block”
“An Outlook of the Ongoing and Future Relationship between Blockchain Technologies and Process-aware Information Systems.” Invited talk at the joint workshop on Blockchain for Information Systems (BC4IS) and Blockchain for Trusted Data Sharing (B4TDS), co-located with with the 36th International Conference on Advanced Information Systems Engineering (CAiSE), 3 June 2024, Limassol, Cyprus.
GraphSummit Singapore | Neo4j Product Vision & Roadmap - Q2 2024
Maruthi Prithivirajan, Head of ASEAN & IN Solution Architecture, Neo4j
Get an inside look at the latest Neo4j innovations that enable relationship-driven intelligence at scale. Learn more about the newest cloud integrations and product enhancements that make Neo4j an essential choice for developers building apps with interconnected data and generative AI.
Communications Mining Series - Zero to Hero - Session 1
This session provides introduction to UiPath Communication Mining, importance and platform overview. You will acquire a good understand of the phases in Communication Mining as we go over the platform with you. Topics covered:
• Communication Mining Overview
• Why is it important?
• How can it help today’s business and the benefits
• Phases in Communication Mining
• Demo on Platform overview
• Q/A
GraphSummit Singapore | Enhancing Changi Airport Group's Passenger Experience...
Dr. Sean Tan, Head of Data Science, Changi Airport Group
Discover how Changi Airport Group (CAG) leverages graph technologies and generative AI to revolutionize their search capabilities. This session delves into the unique search needs of CAG’s diverse passengers and customers, showcasing how graph data structures enhance the accuracy and relevance of AI-generated search results, mitigating the risk of “hallucinations” and improving the overall customer journey.
Removing Uninteresting Bytes in Software Fuzzing
Imagine a world where software fuzzing, the process of mutating bytes in test seeds to uncover hidden and erroneous program behaviors, becomes faster and more effective. A lot depends on the initial seeds, which can significantly dictate the trajectory of a fuzzing campaign, particularly in terms of how long it takes to uncover interesting behaviour in your code. We introduce DIAR, a technique designed to speedup fuzzing campaigns by pinpointing and eliminating those uninteresting bytes in the seeds. Picture this: instead of wasting valuable resources on meaningless mutations in large, bloated seeds, DIAR removes the unnecessary bytes, streamlining the entire process.
In this work, we equipped AFL, a popular fuzzer, with DIAR and examined two critical Linux libraries -- Libxml's xmllint, a tool for parsing xml documents, and Binutil's readelf, an essential debugging and security analysis command-line tool used to display detailed information about ELF (Executable and Linkable Format). Our preliminary results show that AFL+DIAR does not only discover new paths more quickly but also achieves higher coverage overall. This work thus showcases how starting with lean and optimized seeds can lead to faster, more comprehensive fuzzing campaigns -- and DIAR helps you find such seeds.
- These are slides of the talk given at IEEE International Conference on Software Testing Verification and Validation Workshop, ICSTW 2022.
Let's Integrate MuleSoft RPA, COMPOSER, APM with AWS IDP along with Slack
Discover the seamless integration of RPA (Robotic Process Automation), COMPOSER, and APM with AWS IDP enhanced with Slack notifications. Explore how these technologies converge to streamline workflows, optimize performance, and ensure secure access, all while leveraging the power of AWS IDP and real-time communication via Slack notifications.
Essentials of Automations: The Art of Triggers and Actions in FME
In this second installment of our Essentials of Automations webinar series, we’ll explore the landscape of triggers and actions, guiding you through the nuances of authoring and adapting workspaces for seamless automations. Gain an understanding of the full spectrum of triggers and actions available in FME, empowering you to enhance your workspaces for efficient automation.
We’ll kick things off by showcasing the most commonly used event-based triggers, introducing you to various automation workflows like manual triggers, schedules, directory watchers, and more. Plus, see how these elements play out in real scenarios.
Whether you’re tweaking your current setup or building from the ground up, this session will arm you with the tools and insights needed to transform your FME usage into a powerhouse of productivity. Join us to discover effective strategies that simplify complex processes, enhancing your productivity and transforming your data management practices with FME. Let’s turn complexity into clarity and make your workspaces work wonders!
Pushing the limits of ePRTC: 100ns holdover for 100 days
At WSTS 2024, Alon Stern explored the topic of parametric holdover and explained how recent research findings can be implemented in real-world PNT networks to achieve 100 nanoseconds of accuracy for up to 100 days.
Securing your Kubernetes cluster_ a step-by-step guide to success !
Today, after several years of existence, an extremely active community and an ultra-dynamic ecosystem, Kubernetes has established itself as the de facto standard in container orchestration. Thanks to a wide range of managed services, it has never been so easy to set up a ready-to-use Kubernetes cluster.
However, this ease of use means that the subject of security in Kubernetes is often left for later, or even neglected. This exposes companies to significant risks.
In this talk, I'll show you step-by-step how to secure your Kubernetes cluster for greater peace of mind and reliability.
Encryption in Microsoft 365 - ExpertsLive Netherlands 2024
In this session I delve into the encryption technology used in Microsoft 365 and Microsoft Purview. Including the concepts of Customer Key and Double Key Encryption.
20 Comprehensive Checklist of Designing and Developing a Website
Dive into the world of Website Designing and Developing with Pixlogix! Looking to create a stunning online presence? Look no further! Our comprehensive checklist covers everything you need to know to craft a website that stands out. From user-friendly design to seamless functionality, we've got you covered. Don't miss out on this invaluable resource! Check out our checklist now at Pixlogix and start your journey towards a captivating online presence today.
A tale of scale & speed: How the US Navy is enabling software delivery from l...
Rapid and secure feature delivery is a goal across every application team and every branch of the DoD. The Navy’s DevSecOps platform, Party Barge, has achieved:
- Reduction in onboarding time from 5 weeks to 1 day
- Improved developer experience and productivity through actionable findings and reduction of false positives
- Maintenance of superior security standards and inherent policy enforcement with Authorization to Operate (ATO)
Development teams can ship efficiently and ensure applications are cyber ready for Navy Authorizing Officials (AOs). In this webinar, Sigma Defense and Anchore will give attendees a look behind the scenes and demo secure pipeline automation and security artifacts that speed up application ATO and time to production.
We will cover:
- How to remove silos in DevSecOps
- How to build efficient development pipeline roles and component templates
- How to deliver security artifacts that matter for ATO’s (SBOMs, vulnerability reports, and policy evidence)
- How to streamline operations with automated policy checks on container images
Why You Should Replace Windows 11 with Nitrux Linux 3.5.0 for enhanced perfor...
The choice of an operating system plays a pivotal role in shaping our computing experience. For decades, Microsoft's Windows has dominated the market, offering a familiar and widely adopted platform for personal and professional use. However, as technological advancements continue to push the boundaries of innovation, alternative operating systems have emerged, challenging the status quo and offering users a fresh perspective on computing.
One such alternative that has garnered significant attention and acclaim is Nitrux Linux 3.5.0, a sleek, powerful, and user-friendly Linux distribution that promises to redefine the way we interact with our devices. With its focus on performance, security, and customization, Nitrux Linux presents a compelling case for those seeking to break free from the constraints of proprietary software and embrace the freedom and flexibility of open-source computing.
Microsoft - Power Platform_G.Aspiotis.pdf
Revolutionizing Application Development
with AI-powered low-code, presentation by George Aspiotis, Sr. Partner Development Manager, Microsoft
Video Streaming: Then, Now, and in the Future
In his public lecture, Christian Timmerer provides insights into the fascinating history of video streaming, starting from its humble beginnings before YouTube to the groundbreaking technologies that now dominate platforms like Netflix and ORF ON. Timmerer also presents provocative contributions of his own that have significantly influenced the industry. He concludes by looking at future challenges and invites the audience to join in a discussion.
Recently uploaded (20)
“Building and Scaling AI Applications with the Nx AI Manager,” a Presentation...
“Building and Scaling AI Applications with the Nx AI Manager,” a Presentation...
Generative AI Deep Dive: Advancing from Proof of Concept to Production
Generative AI Deep Dive: Advancing from Proof of Concept to Production
GraphSummit Singapore | Neo4j Product Vision & Roadmap - Q2 2024
GraphSummit Singapore | Neo4j Product Vision & Roadmap - Q2 2024
Communications Mining Series - Zero to Hero - Session 1
Communications Mining Series - Zero to Hero - Session 1
GraphSummit Singapore | Enhancing Changi Airport Group's Passenger Experience...
GraphSummit Singapore | Enhancing Changi Airport Group's Passenger Experience...
Let's Integrate MuleSoft RPA, COMPOSER, APM with AWS IDP along with Slack
Let's Integrate MuleSoft RPA, COMPOSER, APM with AWS IDP along with Slack
Essentials of Automations: The Art of Triggers and Actions in FME
Essentials of Automations: The Art of Triggers and Actions in FME
Pushing the limits of ePRTC: 100ns holdover for 100 days
Pushing the limits of ePRTC: 100ns holdover for 100 days
Securing your Kubernetes cluster_ a step-by-step guide to success !
Securing your Kubernetes cluster_ a step-by-step guide to success !
Encryption in Microsoft 365 - ExpertsLive Netherlands 2024
Encryption in Microsoft 365 - ExpertsLive Netherlands 2024
20 Comprehensive Checklist of Designing and Developing a Website
20 Comprehensive Checklist of Designing and Developing a Website
A tale of scale & speed: How the US Navy is enabling software delivery from l...
A tale of scale & speed: How the US Navy is enabling software delivery from l...
Why You Should Replace Windows 11 with Nitrux Linux 3.5.0 for enhanced perfor...
Why You Should Replace Windows 11 with Nitrux Linux 3.5.0 for enhanced perfor...