Mobile Smart Fundamentals Mma Members Edition May 2012
Total Page:16
File Type:pdf, Size:1020Kb
Load more
Recommended publications
-
HTTP Cookie - Wikipedia, the Free Encyclopedia 14/05/2014
HTTP cookie - Wikipedia, the free encyclopedia 14/05/2014 Create account Log in Article Talk Read Edit View history Search HTTP cookie From Wikipedia, the free encyclopedia Navigation A cookie, also known as an HTTP cookie, web cookie, or browser HTTP Main page cookie, is a small piece of data sent from a website and stored in a Persistence · Compression · HTTPS · Contents user's web browser while the user is browsing that website. Every time Request methods Featured content the user loads the website, the browser sends the cookie back to the OPTIONS · GET · HEAD · POST · PUT · Current events server to notify the website of the user's previous activity.[1] Cookies DELETE · TRACE · CONNECT · PATCH · Random article Donate to Wikipedia were designed to be a reliable mechanism for websites to remember Header fields Wikimedia Shop stateful information (such as items in a shopping cart) or to record the Cookie · ETag · Location · HTTP referer · DNT user's browsing activity (including clicking particular buttons, logging in, · X-Forwarded-For · Interaction or recording which pages were visited by the user as far back as months Status codes or years ago). 301 Moved Permanently · 302 Found · Help 303 See Other · 403 Forbidden · About Wikipedia Although cookies cannot carry viruses, and cannot install malware on 404 Not Found · [2] Community portal the host computer, tracking cookies and especially third-party v · t · e · Recent changes tracking cookies are commonly used as ways to compile long-term Contact page records of individuals' browsing histories—a potential privacy concern that prompted European[3] and U.S. -
The Art, Science, and Engineering of Fuzzing: a Survey
1 The Art, Science, and Engineering of Fuzzing: A Survey Valentin J.M. Manes,` HyungSeok Han, Choongwoo Han, Sang Kil Cha, Manuel Egele, Edward J. Schwartz, and Maverick Woo Abstract—Among the many software vulnerability discovery techniques available today, fuzzing has remained highly popular due to its conceptual simplicity, its low barrier to deployment, and its vast amount of empirical evidence in discovering real-world software vulnerabilities. At a high level, fuzzing refers to a process of repeatedly running a program with generated inputs that may be syntactically or semantically malformed. While researchers and practitioners alike have invested a large and diverse effort towards improving fuzzing in recent years, this surge of work has also made it difficult to gain a comprehensive and coherent view of fuzzing. To help preserve and bring coherence to the vast literature of fuzzing, this paper presents a unified, general-purpose model of fuzzing together with a taxonomy of the current fuzzing literature. We methodically explore the design decisions at every stage of our model fuzzer by surveying the related literature and innovations in the art, science, and engineering that make modern-day fuzzers effective. Index Terms—software security, automated software testing, fuzzing. ✦ 1 INTRODUCTION Figure 1 on p. 5) and an increasing number of fuzzing Ever since its introduction in the early 1990s [152], fuzzing studies appear at major security conferences (e.g. [225], has remained one of the most widely-deployed techniques [52], [37], [176], [83], [239]). In addition, the blogosphere is to discover software security vulnerabilities. At a high level, filled with many success stories of fuzzing, some of which fuzzing refers to a process of repeatedly running a program also contain what we consider to be gems that warrant a with generated inputs that may be syntactically or seman- permanent place in the literature. -
Freedom: Engineering a State-Of-The-Art DOM Fuzzer
FreeDom: Engineering a State-of-the-Art DOM Fuzzer Wen Xu Soyeon Park Taesoo Kim Georgia Institute of Technology Georgia Institute of Technology Georgia Institute of Technology [email protected] [email protected] [email protected] ABSTRACT ACM Reference Format: The DOM engine of a web browser is a popular attack surface and Wen Xu, Soyeon Park, and Taesoo Kim. 2020. FreeDom: Engineering a State- has been thoroughly fuzzed during its development. A common of-the-Art DOM Fuzzer. In Proceedings of the 2020 ACM SIGSAC Conference on Computer and Communications Security (CCS ’20), November 9–13, 2020, approach adopted by the latest DOM fuzzers is to generate new Virtual Event, USA. ACM, New York, NY, USA, 16 pages. https://doi.org/10. inputs based on context-free grammars. However, such a generative 1145/3372297.3423340 approach fails to capture the data dependencies in the inputs of a DOM engine, namely, HTML documents. Meanwhile, it is unclear whether or not coverage-guided mutation, which is well-known to 1 INTRODUCTION be effective in fuzzing numerous software, still remains to beeffec- A DOM (Document Object Model) engine is a core component of tive against DOM engines. Worse yet, existing DOM fuzzers cannot every modern web browser, which is responsible for displaying adopt a coverage-guided approach because they are unable to fully HTML documents in an interactive window on an end-user device. support HTML mutation and suffer from low browser throughput. Considering its giant code base and extraordinary complexity, a To scientifically understand the effectiveness and limitations of DOM engine has always been one of the largest bug sources in a web the two approaches, we propose FreeDom, a full-fledged cluster- browser. -
RSA Adaptive Authentication
RSA Adaptive Authentication (Hosted) Data Gathering Techniques Guide Contact Information Go to the RSA corporate web site for regional Customer Support telephone and fax numbers: www.rsa.com Trademarks RSA, the RSA Logo and EMC are either registered trademarks or trademarks of EMC Corporation in the United States and/or other countries. All other trademarks used herein are the property of their respective owners. For a list of RSA trademarks, go to www.rsa.com/legal/trademarks_list.pdf. License agreement This software and the associated documentation are proprietary and confidential to EMC, are furnished under license, and may be used and copied only in accordance with the terms of such license and with the inclusion of the copyright notice below. This software and the documentation, and any copies thereof, may not be provided or otherwise made available to any other person. No title to or ownership of the software or documentation or any intellectual property rights thereto is hereby transferred. Any unauthorized use or reproduction of this software and the documentation may be subject to civil and/or criminal liability. This software is subject to change without notice and should not be construed as a commitment by EMC. Note on encryption technologies This product may contain encryption technology. Many countries prohibit or restrict the use, import, or export of encryption technologies, and current use, import, and export regulations should be followed when using, importing or exporting this product. Distribution Use, copying, and distribution of any EMC software described in this publication requires an applicable software license. EMC believes the information in this publication is accurate as of its publication date. -
Appendix a the Ten Commandments for Websites
Appendix A The Ten Commandments for Websites Welcome to the appendixes! At this stage in your learning, you should have all the basic skills you require to build a high-quality website with insightful consideration given to aspects such as accessibility, search engine optimization, usability, and all the other concepts that web designers and developers think about on a daily basis. Hopefully with all the different elements covered in this book, you now have a solid understanding as to what goes into building a website (much more than code!). The main thing you should take from this book is that you don’t need to be an expert at everything but ensuring that you take the time to notice what’s out there and deciding what will best help your site are among the most important elements of the process. As you leave this book and go on to updating your website over time and perhaps learning new skills, always remember to be brave, take risks (through trial and error), and never feel that things are getting too hard. If you choose to learn skills that were only briefly mentioned in this book, like scripting, or to get involved in using content management systems and web software, go at a pace that you feel comfortable with. With that in mind, let’s go over the 10 most important messages I would personally recommend. After that, I’ll give you some useful resources like important websites for people learning to create for the Internet and handy software. Advice is something many professional designers and developers give out in spades after learning some harsh lessons from what their own bitter experiences. -
Skyfire: Data-Driven Seed Generation for Fuzzing
Skyfire: Data-Driven Seed Generation for Fuzzing Junjie Wang, Bihuan Chen†, Lei Wei, and Yang Liu Nanyang Technological University, Singapore {wang1043, bhchen, l.wei, yangliu}@ntu.edu.sg †Corresponding Author Abstract—Programs that take highly-structured files as inputs Syntax Semantic normally process inputs in stages: syntax parsing, semantic check- Features Rules ing, and application execution. Deep bugs are often hidden in the <?xml version="1.0" application execution stage, and it is non-trivial to automatically encoding="utf- pass pass pass 8"?><xsl:stylesheet version="1.0" Syntax Semantic Application xmlns:xsl="http://www.w3 .org/1999/XSL/Transform" generate test inputs to trigger them. Mutation-based fuzzing gen- ><xsl:output xsl:use- √ attribute- Parsing Checking Execution erates test inputs by modifying well-formed seed inputs randomly sets=""/></xsl:stylesheet> Parsing Semantic or heuristically. Most inputs are rejected at the early syntax pars- Inputs Crashes ing stage. Differently, generation-based fuzzing generates inputs Errors Violations from a specification (e.g., grammar). They can quickly carry the ! ! X fuzzing beyond the syntax parsing stage. However, most inputs fail to pass the semantic checking (e.g., violating semantic rules), Fig. 1: Stages of Processing Highly-Structured Inputs which restricts their capability of discovering deep bugs. In this paper, we propose a novel data-driven seed generation approach, named Skyfire, which leverages the knowledge in the analysis [8, 9] that identifies those interesting bytes to mutate, vast amount of existing samples to generate well-distributed seed symbolic execution [10, 11, 12] that relies on constraint solving inputs for fuzzing programs that process highly-structured inputs. -
Otaniemi – Keilaniemi- Kaupunkisuunnittelulautakunnan
Täydennetty palautteen perusteella 1 (10) 20.8.2013 Otaniemi – Keilaniemi: Kaupunkisuunnittelulautakunnan teesit ja jatkotoimenpiteitä ohjaavat muut linjaukset Tämä muistio ohjaa kaupunkisuunnittelun tulevien päätösten valmistelua. Muistio on laadittu lautakunnan työseminaarissa 18.4.2013 pidettyjen esitysten ja pöytätyöskentelyn perusteella. Lisäksi muistiota laaditta- essa on hyödynnetty kaupungin eri hallintoelinten aikaisempia päätöksiä, kaupunkikehitysyksikön vuonna 2012 tuottamaa Otaniemi-visiota, kaupungin muita asiakirjoja, Energizing Urban Ecosystems EUE– tutkimusohjelman tuotoksia sekä muiden toimijoiden tästä alueesta tuottamia selvityksiä ja suunnitelmia. Väliotsikot on muokattu työseminaarin teemojen perusteella. Em. Otaniemi-vision esipuheessa kaupunki toteaa, että visiotyön aikana ”on käynyt selvästi ilmi, että yhtei- sen linjan puuttuminen tai kykenemättömyys siihen sitoutumiseen nähdään suurimmiksi esteiksi innovaa- tiokeskittymän kehittymiselle”. Tämä on käynyt ilmi myös kaupunkisuunnittelussa. Vaikka eri tahot ovat yksimielisiä perustavoitteista, niin samoja haasteita käsitellään yhä uudelleen ja samat linjaukset määritel- lään moneen kertaan. Selkeä kaikkien toimijoiden yhteinen ohjelma puuttuu. Lautakunnan työseminaarin tavoitteeksi oli asetettu saada aikaan tarvittavat elementit lautakunnalle ja kau- punginhallituksen elinkeino- ja kilpailukykyjaostolle päätöksiin ja toimenpideohjelmaan, joiden avulla kye- tään yhteisin toimenpitein etenemään kaupungin tätä aluetta koskeviin strategisiin tavoitteisiin. Tämä muis- -
Bill Huynh Playphone, S Unnyvale CA — Senior Frontend Engineer Software Engineer May 2014 - April 2019 Msports Project - 3 Years
EXPERIENCE Bill Huynh Playphone, Sunnyvale CA — Senior Frontend Engineer Software Engineer May 2014 - April 2019 msports Project - 3 Years Personal Info Tech Stack: Angular 6, SASS, CSS3, HTML5, Typescript, Javascript, Bootstrap, jQuery, REST Daly City, CA 94015 Link: http://bhuynh.org/#/projects/msports 415-632-6035 ● Designed and implemented the msports HTML5 SDK which is also used as the [email protected] main component of the Android and iOS SDK. http://bhuynh.org ● Designed and implemented the tutorial framework. ● Designed and implemented the localization framework. Skills - Expert ● Implemented the UI for the msports homepage and main msports app. ● Worked on msports developer’s portal and admin tools. JavaScript Loot 2.0 Project - 3 Months TypeScript Tech Stack: Angular 6, SASS, CSS3, HTML5, Typescript, Javascript, Bootstrap, jQuery, ECMAScript 5 REST ECMAScript 6 Link: http://bhuynh.org/#/projects/loot Angular 2.0 ● Designed and implemented the HTML5 SDK which is also used as the main Bootstrap component of the Android SDK. jQuery ● Worked on the UI for some of the pages/features we have in the Loot homepage HTML5 and Loot app. CSS3 Mobile Game Store Project - 2 Years SASS Tech Stack: Java, Android SDK, Php, Javascript, MySQL, HTML5, CSS3 REST Link: http://bhuynh.org/#/projects/css_framework Action Script ● Implemented the UI for some of the features we have in the Playphone mobile Flex game store. Flash ● Designed and developed the tutorial framework. ● Implemented the Battle feature UI. Skills - Intermediate ● Designed and implemented the events system used for notifying users of new events and promotions. ● Implemented the CSS framework used for the game store developer portal. -
Aalto University Campus Journal, Pdf, Attachment
What will Otaniemi look More green on campus – University at the heart of the like in 2050? p. 20 transforming outdoor spaces p. 4 startup ecosystem p. 24 WINTER 2018–2019 3 AALTO UNIVERSITY CAMPUS Green and urban 4 From an ancient 26 village to an Into a new era innovation hub Map of Aalto University campus development 6 Otaniemi has over the years become an increasingly vibrant and open community, a truly unique place in Europe. From village The latest additions have made our campus a home for the 10 to campus entire Aalto community. A BRAND-NEW building invited the rest of the stu- of the community has been able to present their dents of the School of Arts, Design and Architec- ideas about the Centre’s services and functions. Architectural gems ture from Arabia to the Otaniemi campus from the Aside from the student restaurant and worksta- beginning of the new academic year 2018. In the tions, even minigolf and drone rental were added beginning of 2019, we will welcome the students on the wishlist. and staff of the School of Business from Töölö At the same time, a vision is being prepared to (pages 6–9). carry out the development of the campus up to 12 We are much closer to our dream of a university year 2050. This is where we need your help. On where different fields of science, identities, cultures, pages 20–23 you will be able to familiarize yourself and perspectives can meet in the same place. with three alternate future scenarios that we wish For students, this means new opportunities. -
Hrm Life Cycle at Nokia - Strategic and Operational Implications
HUMAN RECOURSES MANAGEMENT PROJECT HRM LIFE CYCLE AT NOKIA - STRATEGIC AND OPERATIONAL IMPLICATIONS Submitted by Group 11 Section B Rohan Mishra Riaz Khan Aritra Banerjee Asit Balwantrai Acharya GROUP 11 SECTION B Page 1 Gajendra Yadav Ravi Kumar Bable Conrad Janong Sooting CONTENTS Contents .................................................................................................................................. 2 BRIEF COMPANY Description ................................................................................................... 4 Job analysis ............................................................................................................................. 4 Recruitment and Selection ...................................................................................................... 5 Global Recruiting Principles: ................................................................................................. 5 Resource Planning Focus ...................................................................................................... 5 Objectives of the global recruitment process: ..................................................................... 6 Performance Management system at Nokia: ........................................................................... 6 Goal and objective planning: ............................................................................................... 6 Performance evaluation/achievement review ..................................................................... 6 -
0789747189.Pdf
Mark Bell 800 East 96th Street, Indianapolis, Indiana 46240 Build a Website for Free Associate Publisher Copyright © 2011 by Pearson Education Greg Wiegand All rights reserved. No part of this book shall be Acquisitions Editor reproduced, stored in a retrieval system, or transmit- Laura Norman ted by any means, electronic, mechanical, photo- copying, recording, or otherwise, without written Development Editor permission from the publisher. No patent liability is Lora Baughey assumed with respect to the use of the information contained herein. Although every precaution has Managing Editor been taken in the preparation of this book, the Kristy Hart publisher and author assume no responsibility for Senior Project Editor errors or omissions. Nor is any liability assumed for Betsy Harris damages resulting from the use of the information contained herein. Copy Editor ISBN-13: 978-0-7897-4718-1 Karen A. Gill ISBN-10: 0-7897-4718-9 Indexer The Library of Congress Cataloging-in-Publication Erika Millen data is on file. Proofreader Williams Woods Publishing Services Technical Editor Christian Kenyeres Publishing Coordinator Cindy Teeters Book Designer Anne Jones Compositor Nonie Ratcliff Trademarks All terms mentioned in this book that are known to be trademarks or service marks have been appropriately capitalized. Que Publishing cannot attest to the accuracy of this infor- mation. Use of a term in this book should not be regarded as affecting the validity of any trademark or service mark. Warning and Disclaimer Every effort has been made to make this book as complete and as accurate as possible, but no warranty or fitness is implied. The information provided is on an “as is” basis. -
Kaupunkipolut Tapiola.Pdf
Espoon kaupunkipolut TAPIOLA Tapiola o Eliel Saarisen modernissa Suur-Helsinki-suunnitelmassa vuonna 1918 Björn- vikiin ja Albergaan oli sijoitettu puutarhakaupungit, jotka liittyivät Helsinkiin raideyhteyksin. Jorvaksentien avauduttua professori Otto-Iivari Meurman aloitti Hagalundin kartanon maiden asemakaavoituksen vuonna 1940. Sitä seurannut Teknilli- sen korkeakoulun siirtopäätös Otaniemeen 1949 vauhditti myös osaltaan Tapiolan suun- nittelua. Itäkartanon–Otaniemen polku K E niemen Otaniemi H a tie t Ä Otnäs O 1 T e H k n a n ge g i Kalevalavä a ik l an u t n i Maari e O d t in nä t Maren sv ie äg en Kalevalantie Tek ni kv äg P e oh n ja H n a t g i a e lu nd gen sv svä äg lm gen en ho olavä rn Tapi jö B N o r d v ä Keilaniemi ge n Kägeludden Tapiola Hagalund ird vsv svägen a e H i t e i n t M a n erituul e Keilalahti entie ol r Otsolahti a a Kägelviken api s T Björnviken u h r a K E t e l ä t uul e n t i e iväylä Väst Läns erleden Karhusaari Westend Björnholm Hanasaari Hanaholmen Länsikorkeen– Tuulimäen–Otsolahden polku Suvikummun polku Kaupunkipolut on suunniteltu kuljettavaksi kävellen ja saattavat sisältää metsä- tai mäkiosuuksia, jotka eivät kaikissa olosuhteissa sovellu liikuntarajoitteisille tai mahdollista kulkua esimerkiksi lastenrattaiden tai apuvälineiden kera. 2 ITÄKARTANO–OTANIEMI (noin 6 km) Sodanjälkeinen asuntopula oli saa- nut useat eri kansalaispiirit ja järjes- töt perustamaan Väestö liiton johdolla e i Asuntosäätiön. Sen johtajana Heikki t n ie i t r nt i von Hertzen toteutti aikansa parhai- u p d ä s u t den arkkitehtien ja ympäristösuunnit- a e R telijoiden avulla utopistisen hankkeen M Valkjärventie 40 paremmasta asuinympäristöstä kaikil- Vaisa lant i le yhteiskuntaluokille ja eri elämän- e 41 vaiheessa oleville ihmisille.