Eddie Awad's Blog » Interesting Stuff

6 Interesting Things You May Have Missed on 2010-07-28

Eddie Awad — Wed, 28 Jul 2010 14:03:23 +0000

We All Are One (Oracle Technology Network Blog)

On July 27, Oracle completed the migration of all non-obsolete content from developers.sun.com, java.sun.com, and BigAdmin to a completely re-architected, re-designed Oracle Technology Network site. This site – which offers different entry points for Java Developers, Database Admins and Developers, System Admins and Developers, and Architects – reflects the full diversity of this huge technical end-user community.
Oracle's Ellison Tops List of 25 Highest Paid CEOs of Decade

Larry Ellison, founder and chief executive of software maker Oracle Corp., topped the list of best-paid executives of public companies during the past decade, receiving $1.84 billion in compensation, according to a Wall Street Journal analysis of CEO pay.
How to Conduct Effective Code Reviews

Code reviews are very important in any software project. More often only "superficial" reviews happen, the types where you get review comments like, "You know the documentation for that method doesn't have the version number", or "this variable is unused", etc. Although this is an essential part of any code review, it doesn't cover the subtle aspects of a real code review. It takes more than just a static code analyzer to perform a good code review. In this article the author shares a few points on how to make code reviews really effective.
How I Learned to Stop Worrying and Love SSH

Before there were VPNs, there was ssh. And when you don’t have access to your VPN or can’t set one up, you can still get most of the functionality over ssh.
Firebug is beautiful

Firebug is one of the most famous extension for the Firefox web browser. In the past years, the functionalities offered by this plugin alone sold Firefox as the platform for web development over Internet Explorer (besides the respect of W3C standards that characterized Firefox). Then, Chrome had not been invented yet and when it was released, it incorporated some of the innovations of Firebug like a functional JavaScript console.
Tuning Linux for Oracle

Partition Alignment, Choosing a file system, Optimizing ext3, Enabling Huge Pages, Using Async and Direct IO, Tuning Swapping Priority and more.

The Hello World Collection

Eddie Awad — Sun, 14 Mar 2010 02:37:18 +0000

“Hello World” is the first program one usually writes when learning a new programming language. The first Hello World program appeared in chapter 1.1 of the first edition of The C Programming Language, in 1978. Since then, Hello World has been implemented in just about every programming language on the planet.

The Hello World collection includes 428 Hello World programs in many more-or-less well known programming languages, plus 63 human languages.

Can you name the programming language based on its Hello World syntax? Take this quiz and let us know. (via)

Top 25 Most Dangerous Programming Errors

Eddie Awad — Thu, 18 Feb 2010 05:56:15 +0000

The 2010 CWE/SANS Top 25 Most Dangerous Programming Errors is a list of the most widespread and critical programming errors that can lead to serious software vulnerabilities. They are often easy to find, and easy to exploit. They are dangerous because they will frequently allow attackers to completely take over the software, steal data, or prevent the software from working at all.

Rank Score ID Name

[1] 346 CWE-79 Failure to Preserve Web Page Structure (‘Cross-site Scripting’)

[2] 330 CWE-89 Improper Sanitization of Special Elements used in an SQL Command (‘SQL Injection’)

[3] 273 CWE-120 Buffer Copy without Checking Size of Input (‘Classic Buffer Overflow’)

[4] 261 CWE-352 Cross-Site Request Forgery (CSRF)

[5] 219 CWE-285 Improper Access Control (Authorization)

[6] 202 CWE-807 Reliance on Untrusted Inputs in a Security Decision

[7] 197 CWE-22 Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’)

[8] 194 CWE-434 Unrestricted Upload of File with Dangerous Type

[9] 188 CWE-78 Improper Sanitization of Special Elements used in an OS Command (‘OS Command Injection’)

[10] 188 CWE-311 Missing Encryption of Sensitive Data

[11] 176 CWE-798 Use of Hard-coded Credentials

[12] 158 CWE-805 Buffer Access with Incorrect Length Value

[13] 157 CWE-98 Improper Control of Filename for Include/Require Statement in PHP Program (‘PHP File Inclusion’)

[14] 156 CWE-129 Improper Validation of Array Index

[15] 155 CWE-754 Improper Check for Unusual or Exceptional Conditions

[16] 154 CWE-209 Information Exposure Through an Error Message

[17] 154 CWE-190 Integer Overflow or Wraparound

[18] 153 CWE-131 Incorrect Calculation of Buffer Size

[19] 147 CWE-306 Missing Authentication for Critical Function

[20] 146 CWE-494 Download of Code Without Integrity Check

[21] 145 CWE-732 Incorrect Permission Assignment for Critical Resource

[22] 145 CWE-770 Allocation of Resources Without Limits or Throttling

[23] 142 CWE-601 URL Redirection to Untrusted Site (‘Open Redirect’)

[24] 141 CWE-327 Use of a Broken or Risky Cryptographic Algorithm

[25] 138 CWE-362 Race Condition

Rank	Score	ID	Name
[1]	346	CWE-79	Failure to Preserve Web Page Structure (‘Cross-site Scripting’)
[2]	330	CWE-89	Improper Sanitization of Special Elements used in an SQL Command (‘SQL Injection’)
[3]	273	CWE-120	Buffer Copy without Checking Size of Input (‘Classic Buffer Overflow’)
[4]	261	CWE-352	Cross-Site Request Forgery (CSRF)
[5]	219	CWE-285	Improper Access Control (Authorization)
[6]	202	CWE-807	Reliance on Untrusted Inputs in a Security Decision
[7]	197	CWE-22	Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’)
[8]	194	CWE-434	Unrestricted Upload of File with Dangerous Type
[9]	188	CWE-78	Improper Sanitization of Special Elements used in an OS Command (‘OS Command Injection’)
[10]	188	CWE-311	Missing Encryption of Sensitive Data
[11]	176	CWE-798	Use of Hard-coded Credentials
[12]	158	CWE-805	Buffer Access with Incorrect Length Value
[13]	157	CWE-98	Improper Control of Filename for Include/Require Statement in PHP Program (‘PHP File Inclusion’)
[14]	156	CWE-129	Improper Validation of Array Index
[15]	155	CWE-754	Improper Check for Unusual or Exceptional Conditions
[16]	154	CWE-209	Information Exposure Through an Error Message
[17]	154	CWE-190	Integer Overflow or Wraparound
[18]	153	CWE-131	Incorrect Calculation of Buffer Size
[19]	147	CWE-306	Missing Authentication for Critical Function
[20]	146	CWE-494	Download of Code Without Integrity Check
[21]	145	CWE-732	Incorrect Permission Assignment for Critical Resource
[22]	145	CWE-770	Allocation of Resources Without Limits or Throttling
[23]	142	CWE-601	URL Redirection to Untrusted Site (‘Open Redirect’)
[24]	141	CWE-327	Use of a Broken or Risky Cryptographic Algorithm
[25]	138	CWE-362	Race Condition

via cwe.mitre.org

Posted via web from EddieAwad.com

If You Have These 5 Attributes, You’re an Expert

Eddie Awad — Tue, 06 Oct 2009 14:00:01 +0000

An expert is:

One who has tried, who has practical experience in a field.

Conversely, one who has been tried has a few wounds to show for it. If you don’t have a glorious failure or two under your belt, you’re probably not ready to be an “expert” for others hoping to avoid the same thing.

One who has acquired comprehensive knowledge and continues to learn about a field.

One who has authority as appointed to them by the community for having demonstrated they know their stuff.

One who experiments – taking the field further. I call them thinkers and tinkerers.

via Conversation Agent.

Some interesting comments:

DJ: I personally don’t love the word expert. After all, experts are usually wrong more then they are right.

Taylor: I typically assume that an expert is not open to embracing ideas which challenge their “expertness”.

Carolyn: A cynic once told me that an expert was someone who knew more and more about less and less until they knew absolutely everything about absolutely nothing!

Gavin: I guess we’re all experts in something!

Well, I can tell you one thing: Believe in proof not experts.

Can You Read This?

Eddie Awad — Mon, 21 Sep 2009 05:37:43 +0000

via friends.hosted.pl

Twitter Updates for 2007-12-28

Eddie Awad — Sat, 29 Dec 2007 07:59:59 +0000

Watching a video on how to use Skype for interviews http://snurl.com/1vwi5 #
Has http://getsatisfaction.com/oracle been abandoned in favor of https://mix.oracle.com/ ? It looks like it. #
AOL has killed Netscape Navigator! Was it alive in the first place?! Too bad, when I first experienced a browser, it was with Netscape Nav. #

Twitter Updates for 2007-12-27

Eddie Awad — Fri, 28 Dec 2007 07:59:59 +0000

Hello everyone. I’m back from my Orlando vacation. I Arrived home today at 2:30 AM after a 3 hour delay at Chicago O’Hare. Glad to be home. #
Even though we had fun in Disney World, we wasted hours just waiting in line. There was a line for everything, even the restrooms. #
Next time I go on vacation it is going to be somewhere that very few people know about. But I doubt such a place exists. #
@bigjim Thanks for the tip Jim. I figure anytime other than official holidays is the best time to take a vacation. #
I have just activated Twitter Tools, a WordPress plugin, on my blog. Now my micro-blogging will be nicely digested into my normal blogging. #
@Radu43 Yes I missed Twitter. Disney gets -2.0 with all the lines. Waiting in line with two kids is not fun #
I have to go and make up for lost sleep. You all have a good night and sweet dreamzzzzzzzz. #

Quick Posts from Twitter – 2007-12-22

Eddie Awad — Sun, 23 Dec 2007 07:59:59 +0000

and the vacation continues. Now in MGM studios watching The Fantastic with…oh…50000 other people. #
it’s very hard to twitter or blog while you’re on vacation. I’ll be resuming my normal online activities after Xmas. Have a merry one. #
@mkrigsman thanks. I will. It’s 80 here during the day. Oh, the show is starting now. Later. #

Quick Posts from Twitter – 2007-12-19

Eddie Awad — Thu, 20 Dec 2007 07:59:59 +0000

at PDX waiting to board my flight to LAX. #
let’s see if I can survive the next 7 days without a computer. I still have my iPhone though. It’s the next best thing. #
in LAX now. It’s one huge airport. But I like PDX better. I miss the free WIFI in PDX. Off to Orlando in an hour. #
Made it to Orlando. In a taxi heading to our vacation home. 6:50am now but still 3:50am according to my body clock. #

Quick Posts from Twitter – 2007-12-18

Eddie Awad — Wed, 19 Dec 2007 07:59:59 +0000

@marshallk looks like you have an HTML error in the link to Oracle AppsLab blog. #
Off to my interview at the USCIS in downtown Portland. It’s a pretty wet day today. #
thanks all for the good luck wishes. Now at the USCIS waiting to be called for the interview. #
I passed the interview. It was so easy. My naturalization oath ceremony is 3 hours from now. Then I’m off to Florida for vacation #
Thanks @topperge, @ccmehil, @oracletechnet, @mkrigsman, @carlback, @OracleJulio, @oemperor and everyone else I missed. #
Now, I gotta go pack and eat. I feel like I want to eat American cuisine today, or maybe Lebanese. #
I am in the ceremony now watching a short presentation. Will take the oath in a few minutes. #
Photo: Receiving my US citizenship certificate http://tinyurl.com/3axxr5 #