Random Records From Database

A very quick (1:22) demonstration on how to get a random set of records from a SQL statement.

▶ Random Records From Database - YouTube

A very quick demonstration on how to get a random set of records from a SQL statement.

▶ Random Records From Database - YouTube

Researchers notice massive increase in malicious jQuery libraries | CSO Blogs

This had to happen sooner or later.

So many developers out there are blindly bringing in these massive JavaScript libraries so they can put the newest thing-a-ma-gig on a web page that the soft spot has now become the thousands of lines of code that are not necessary, never reviewed or even understood by 90% of the web developers out there.

Researchers notice massive increase in malicious jQuery libraries | CSO Blogs

Hackers Swiped 70,000 Records from Healthcare.gov in Four Minutes (Updated)

Oh My…. why didn’t this hit the national news?

Hackers Swiped 70,000 Records from Healthcare.gov in Four Minutes (Updated)

2013 was a very hacked year- The Inquirer

It troubles me that people are still using “password” as their actual password to their applications, banking websites and more.

2013 was a very hacked year- The Inquirer

Proper Case for Names using ColdFusion REReplace

Format a string so that it appears like a properly formatted name. For example: "jaMes" becomes "James" or "dr. spock" becomes "Dr. Spock".

The code uses a single line of semi-complex Regex through the REReplace() function.

First it changes the input string to lower case, then it searches for all instances of:

• a character at the beginning of the string
• a character preceded by a blank (tab or space) ..and replaces the match with it's uppercase equivalent..

Associated Code :
<CFPARAM name="fullName" default="dr. spock">

<CFSETformattedName = REReplace(LCase(fullName), "(^[[:alpha:]]|[[:blank:]][[:alpha:]])", "\U\1\E", "ALL")>

<CFOUTPUT>#formattedName#</CFOUTPUT>

Intrusion detection honeypots simplify network security | Security Central - InfoWorld

You should see the look on people’s faces when I tell them certain aspects of applications I write are actually honeypots designed to make hackers waste time trying to figure out what a particular value represents.

One cool trick I use is in the links that pass values from one page in an application to the next.

The real value has a Base64 hashed value – it looks simply like a bunch of characters thrown together. Then there is another value in the link that simply says RecordID=123456.

Of course ‘RecordID’ is the honeypot.

The value is simply a RandRange() command producing a random number.

The idea is that the would-be hacker will first go for the easy numeric value and try to figure out what that is for before they try to take apart the Base64 (salted of course) value.

Anyway, give this article on InfoWorld a read, it has other nice information about how to employ honeypots.

Intrusion detection honeypots simplify network security | Security Central - InfoWorld