Ask MetaFilter questions tagged with web and resolved

Any good books on web penetration testing?

jacobian — Sun, 18 Oct 2009 08:28:13 -0800

Any good books on web penetration testing? I'm a web developer and consultant, and I often deal with web application security. Everything I know about penetration testing I've learned in a pretty ad hoc manner, and I think it's time to give myself a bit of a more formal background.

I'm familier enough with the concepts (SQL injection, XSS, CSRF, etc.); I even teach classes on those subjects. I've got decent knowledge crypto and digital security in general. I also have a few tools I sorta know how to use (Burp Suite being the main one). But I don't really have any good grasp on the "right" way to actually conduct a formal web penetration test -- I usually just flail around for a while trying different things until I "feel" satisfied. Doesn't really make for a very scientific process, I know.

So: any suggestions for books (or any other sort of learning material) on web penetration testing? I'd prefer something more on the advanced side of the spectrum; I'd rather be overwhelmed than bored.

Where did my Little Java Link Go ?

duckus — Wed, 14 Oct 2009 08:36:21 -0800

I found a great Java programming site awhile back. I was given a programming task and could get immediate feedback on whether or not it was correct. Tasks were things like, test if two integers are equal and 'reverse a string'. It was targeted toward learning .. but I seem to recall the tasks had advancing levels of complexity. This is not Java BlackBelt. I can't believe I didn't bookmark it. Anyone know what I'm talking about?

Worth improving my web skills to get a job?

wyn — Sat, 03 Oct 2009 08:05:42 -0800

At 35, if I made the effort to acquire the skills, could I get a web developer job? I learnt HTML and CSS about six years ago. I used to work for an online news service (I wasn't a web developer). For the past few years, I've been teaching English as a foreign language in different countries. Now back in the UK, I'm thinking about spending my free (unemployed) time learning XML, PHP, MySql and other web development stuff (any suggestions?). But would it all actually be worth the effort? If all I end up having to show potential employers is a portfolio of personal websites, what are the chances of somebody of my age (without relevant professional experience) getting a decent web developer job?

Researching website options

titanium_geek — Thu, 01 Oct 2009 07:03:04 -0800

Researching options for all things website: hosting, domain name registration and DNS. Can you help me narrow it down? Hello Mefites, this is my first ask.mefi question. I'm writing a report for a 'professional writing' course. We will be assessed on the quality of the writing, not the content.

Scenario: you say "I would like a website for my small company."
I say: "Well, you need content (I have this covered), a domain name, and hosting."

What do I say next? I know I can google web hosting providers, but there are lots! What are the good and/or popular companies out there?

I have on the list already: GoDaddy (my own domain bought through them, looking to change.)
nearlyfreespeech.net
mediatemple

These are companies I've seen mentioned on my journeys around the web, but I'd like more recommendations please.

How does HuffPo append URLs to copied text?

eyeballkid — Fri, 25 Sep 2009 10:05:39 -0800

I noticed today that text copied from articles on The Huffington Post appends the article URL when pasted and I'm wondering how it's done. Here's an example of copying and pasting text from the current front page story of the G20 meeting:

The three leaders, in their dramatic joint statement that overshadowed the G-20 economic summit here, hoped the disclosure would increase pressure on the global community to impose new sanctions on Iran if it refuses to stop its nuclear program.

Read more at: http://www.huffingtonpost.com/2009/09/25/obama-iran-has-secret-nuc_n_299556.html

The "Read more at:..." portion never appeared on the page.

Repro steps:

1) Copy any random paragraph from a HuffPo story.
2) Paste elsewhere.

I'm using FireFox 3.5.3 on Windows 7. I don't see this behavior when copying from other sites.

How to create a dot background pattern for a blog / website??

arbor day — Fri, 11 Sep 2009 20:44:17 -0800

I'm looking to create a very subtle dot background pattern, like the one on this site. I'm pretty familiar with Photoshop and Illustrator and have been able to produce a dot pattern, but the scale is much too big, and when I try to create a smaller pattern using a smaller circle, it simply disappears, or becomes a solid gray once I import it as a background. Does anyone have any idea how to make a pattern like the one on that site? It seems like it should be pretty straightforward, but I haven't been able to figure it out.

"Proactive? Paradigm? Aren't those just words dumb people use to sound smart?"

drjimmy11 — Fri, 11 Sep 2009 08:49:10 -0800

Where does one proactively look for software (specifically Flex) jobs these days? So I'm on the market. I have about ten years web/software development experience overall, with the last 3 focused in Flex. I'm in Los Angeles and not keen to move.

In the past I would just put my resume up on Dice and get bombarded by recruiters. This time though, the response has been a little more sparse, and I'd like to find something sooner than later.

So:

Are the major search sites (Monster, Careerbuilder) as useless as I remember them for tech jobs?

Is there anywhere tech-specific besides Dice I should post my resume, or search for jobs? This would include job sites or message boards or whatever.

Are there any other strategies I'm missing, or should I just browse the websites of specific employers who i think I might like?

Thanks!

Incey Wincey

Megami — Tue, 08 Sep 2009 13:35:57 -0800

Are all spiders of the same species equally adept at spinning webs? Watch any nature documentary about spiders, and you can't help but be amazed at how spiders seem to just 'know' how to spin their webs. But I was wondering - are all spiders as good as each other? For example - some humans seem to have more ability at certain skills than others. Does anyone know if this is also the case with other animals? I would also be interested in the same question for things like birds and their nests.

Note: I know that spiders can get parasites or diseases that affect their nervous system that will mean they are unable to spin webs properly.

How much does it typically cost for a good logo and front page for a web application?

tomargue — Mon, 07 Sep 2009 23:13:25 -0800

Okay, I'm designing a web application with a minimalist look-and-feel. I want a simple, clean, cute logo, and a simple, clean, cute front page. What's a ball-park figure as to what this may cost? A little more detail as to what I'm thinking of...

I'd like the front page to have about maybe 4 main ideas, and when hovering over each idea, more information about the web-application is displayed. However, this idea may change when I start talking to a graphic/web designer about effective front pages. And it may change depending on how much it all costs.

Obviously the price is going to change dependent on my requirements, but at the moment, I don't know whether this is going to cost me $100, $1000 or $10,000. What's an order of magnitude estimate of what it may cost?

What software should I use to design a Webpage logo?

hellodonna — Wed, 26 Aug 2009 10:09:42 -0800

I am trying to create a professional looking logo for a Web site. I am using GIMP but finding I am very limited in terms of what I can do with it. Is there a software package that I should be using that will allow me to create a good looking logo/header image? I understand Photoshop is the best however, it's really expensive (700.00). Are there any software alternatives or do I just have to pony up for Photoshop? By the way, I have a PC.

Momma needs a brand new phone

bunny hugger — Thu, 20 Aug 2009 06:29:13 -0800

Boyfriend is getting a phone upgrade and handing over to me (same company). Do I buy Internet package for his account or mine? Phone upgrade question (T-mobile). My boyfriend is offered an upgrade for a new phone at a significantly reduced price if he signs up for another two years. He is going to, so that's not the thing. When he gets the phone upgrade (to a blackberry), he will give it to me (also T-mobile) because he doesn't need a new phone and because he's awesome. I've done this for him before with no hitch. Question is: I will have to upgrade to an plan option with Internet included. But do I do that for his account or mine (since I'll be the one using the phone)? Don't really want to call T-mobile and explain this, since they might have a problem with it. I'm thinking it will just be my account, but just double-checking here. Thanks.

Help me create an RSS feed from a site updated daily

Merlin144 — Sun, 16 Aug 2009 12:12:24 -0800

How can I create an RSS feed from a wordpress site that doesn't add new posts, only updates the SAME post every day? Please direct me to online tools I can utilize based on specifics below. Specifics:
1. The website I want to create the feed from is: www.serveraday.com, which is updated every morning with a great dedicated server deal.
2. They update the SAME wordpress post from 6/25/2008 with the NEW information in this post each and every day. This prevents most feed creation tools, including feedburner, from updating a feed, as they think it's the same post.
3. I need to be able to set the tool I end up using to refresh on a daily basis, to capture the update on the site as soon as possible after it's posted.
4. I am not the owner of this site, just a person that wants to find great deals and share them through an RSS feed!

Thank you!!

Is it possible to create a region in a Dreamweaver template where the content repeats?

xetere — Tue, 11 Aug 2009 16:41:52 -0800

Is it possible to create a region in a Dreamweaver template where the *content* repeats? I have a bunch of dreamweaver templates for a new site - CS4 to be precise. While there is a div that pulls db driven data, most of the content of the pages themselves are static. Each page will a contain a headline and body content containing 3 tabbed sections. The user will be able to tab between the three sections on the page.

There is a "blurb" below each tab that is not part of the tab, a sort of subheadline. The blurb's content is the same below each tab. In Dreamweaver, I have the tab content is an editable region. What I would like to do is make the blurb an editable region but one where the content person can add the blurb's content once (say on the first tab) and then the second and third blurb regions will automatically have that first blurbs content. Repeating regions won't do it.

The Interwebs and all the Dreamweaver books mention all sorts of great optional, repeating, nested regions but not specifically this.

If there is no way, perhaps using Javascript's getElementByID? or using JSON (of which I know NOTHING!) and have the user populate the first tab?

Thanks to all.

Turn on, tune in, log out?

telegraph — Sun, 09 Aug 2009 12:27:55 -0800

Webdev filter: What tools can I use to avoid developing a registration/log-in feature from scratch? I'm an amateur web developer -- I took a few programming classes in college (Java), know HTML and CSS pretty well, and can get by in PHP and SQL, albeit while checking references constantly. I'm trying to build what I think should be a pretty simple web application: the nuts and bolts of it are that it should allow member registration and login/out, and while the user is logged in, s/he can input numerical data, as well as view some statistical juggling of that data.

The data entry bit I feel fairly confident that I can do using PHP/MySQL. I've written a rudimentary registration and login system (with an email confirmation message, etc), but I can tell that it needs a lot more features and even though I am mostly n00b I can think of ways it could be compromised -- if at all possible I'd prefer to just use code that is already written and known to be fairly stable.

Is there a pre-built, standard kind of thing (I don't even know what the proper word to call it is) I can use for this? I think that Ruby on Rails could be used here, but my attempts at teaching myself how to use it have been kind of futile, and I don't really need all of the version control and other features like that. I'd like to keep this really really simple, at least for now.

As you can see I'm not very experienced and don't really know the proper terms are, so let me know if I need to clarify anything. While I'd like to learn other languages in the future, my goal is to get this thing up and running so I'd prefer advice that presupposes PHP use as opposed to telling me to go learn Python (though I guess I understand if that's the only option). Thanks.

ISO, W3C, OOXML/ODF: How do tech standards impact you?

trcook — Thu, 30 Jul 2009 00:17:06 -0800

What's your stake in international tech standards and OOXML?(I'm working up a thesis and I could use some input from the computer literate world) Ok, so I'm getting set to do my masters thesis in Public Administration, and I've decided to write about the wonderful world of international standardization-- mostly ICT(read: tech) standards (eg. HTML5, CSS3, domain naming/registering rules via ICANN, OOXML, ODF, PDF, anything from IEC ISO IEEE JTC1, etc.)

One area that I am exploring is output legitimacy in the standardization process. I have a pretty good theory, but I need some ideas about where to investigate for evidence...

This is where you come in. If you feel inclined, shout out about any of the following:
Why are standards important(to you)?

How have ICT standards impacted you/your job?

Are there International standards you have resisted implementing at your job or on a project? why?

Any first-hand accounts of political manipulation of the standards development process.

What's your take on the OOXML/ODF controversy? How will it impact you/your work? What long-term effects do you think the controversy will be?

Much thanks all,
Tom

Painted my self into a technical corner with theory paint. Help.

lottie — Thu, 23 Jul 2009 04:54:39 -0800

I'm here to enrol in web kindergarten. How do I get started on a likely-to-become-extremely-complex website build when I... ahem... haven't designed anything for the web before? I'm a Graphic Designer researching Design at PhD level, and my project has arrived at a point where I have proposed that I create a website as an interactive part of my practise-based research.

Please consider me a complete and utter noob, and by extension wonder why the hell I would propose doing something that I don't know how to do. Imagine I just fell to earth and decided to create a website. Assume also that I'm a quick learner.

The reason I've elected to do something I have no expertise in, is that it is the best way to investigate certain theories in my proposal, so really, I just have to make it happen.

There are two factors to consider before I ask my extremely daft question:

1. I will be very sure about how I want things to look and behave from a design and function perspective. I'm scared to death of this project because my only web experience is dicking around with a small WYSIWYG application at work, and going out of my mind in very short order because I couldn't control the visual elements and functionality to my liking.

2.The site will need to be up and running pretty soon, even at a basic clunky level, but will need to have room to accomodate lots of slick, well executed complexity in the future as my skills grow; complexity of the user participation/upload of content/chat/message board kind, all encapsulated in aesthetic theatrics appropriate to the content and the design-loving audience.

Basically, I have a pretty good idea of what would be cool, a grasp of what the site needs to be able to do funtionally, and absolutely no idea where to start.

An IT Guy friend said to me "Just get hosting and go from there" but I'm afraid he lost me, and I need someone to just give me the first boost up - please tell me what I need to do to get started. The basic step-by-step start, always keeping in mind that I must be able to accomodate greater complexity later.

I have read this thread and noted the various things people have said to learn, but still don't know where to start. What do I do - am I using software here? What do I need to learn in extremely short order?

If it helps at all, I learned a bit of Flash at Animation School, and "got it". I know not to build a Flash site, for fear of making people cry, but I would like to incorporate some of the trickery. My skills are animation, graphic design, fine art techniques and illustration. I know that a template-type thing is not going to work for me, unless I can fuss with it, and bend it to my will.

And hey... if you think I just need to go back to Uni to learn a whole new trade, be sure and tell me that too. I can handle the truth and would rather know if there's just no way to do what I have in mind without a computer science degree. I won't be able to do that, but at least I will know that pro assistance is in order.

Happy to answer any questions about the likely content if it will help in the answering.

I should also mention that I really do want to learn this, so I'm willing to work hard to get it done.

A metaphor for the Web

fifigyuri — Mon, 20 Jul 2009 04:00:55 -0800

If could compare the Web to something tangible what would it be? Do you find any metaphor suiting the Web as it is, as it developed and what it might become?

Do I need insurance for my web business?

tomargue — Sun, 12 Jul 2009 22:47:04 -0800

Do I need to insure my web business? I am setting up a to-do list + calendar web application that holds users' data. Do I need to insure against data loss, or down time? Or can I put all that in a EULA (e.g., [web application] will not be responsible for any data loss, down time, data corruption etc)? I plan to speak to a lawyer in about two months time about all the legal requirements prior to my web application "going live", but I want to get a bit of a feel of the risks associated before speaking to a lawyer and forking over $1000s or more.

If I do need insurance for my web app, what's the best way of finding insurance? (I've never looked at finding insurance before...my housemates have always taken care of home and contents insurance, and I've never owned a car). If insurance does exist for data loss etc, what's the ball-park figure on how much such a scheme would cost? Would I need to go with an multinational insurer, since the site will be available world-wide? Or would a small local insurer do (I live in Melbourne, Australia)? Or can I simply have an End User License Agreement and make my users agree not to sue me if I accidently lose their data. I know, even to this day, that Hotmail deletes user accounts if left idle for a few months....

When registering a domain name, should I pay - annually - to hide these details from the Whois database?

Kirn — Mon, 06 Jul 2009 05:16:22 -0800

When registering a domain name, should I pay - annually - to hide these details from the Whois database? I'm in the process of registering 2 domain names (with fasthosts.co.uk/ukreg) and have been presented with the following option:

Hide your contact details for this domain
£4.99 pa per domain
Activate domain privacy to stop these contact details being displayed in the publically-accessible WhoIs database.

£10/year isn't a massive amount of money, but it isn't nothing. Should I tick this option? Do people, generally? Do you? What am I getting by doing it, and what am I risking if I don't? Is there a serious risk of identity fraud? (FWIW, the domain names I'm registering would both have my full name in them.)

Thanks!

Web graphics and ads filter?

jpg15 — Wed, 01 Jul 2009 18:53:11 -0800

Web filter filter: I seem to remember a link to an NYT article that just contained the full text of the article in nice big letters, with no graphics, banners, or ads. It was fully attributed, with links to the original, but it was much more pleasant to read, especially for a long article. Is there a website that will filter out the clutter and provide links that can be forwarded?

web promotion for architecture?

ebesan — Wed, 24 Jun 2009 09:30:51 -0800

How to promote my work online. I am an architect. NY and Mexico. I am trying to figure ways to build myself/my work. How to submit your work/name to design blogs, etc. w/out being a jerk? No name here; I'm not using this place for that purpose.

Photo Contest Set-up Help Needed

SuperErin — Thu, 18 Jun 2009 15:30:40 -0800

PhotoFilter: I need to create a monthly photo contest for my clients to participate in. Help me find the easiest way to do this. I've already seen this question, but it is from 2007, and I know things have changed many times since then. I looked at the two programs suggested, but would prefer something online that I don't have to upload to my website.

I'd like to just set the thing up, give out a link, and have my clients upload photos of their dogs and vote on the best each month. I'd prefer an actual voting mechanism, rather than just writing "vote" in the comments.

I'd prefer free, or at least inexpensive for me, free for my clients to use.

I've googled this, but there's a lot of junk to slog through, so I was hoping to get some Mefite expertise!

Thanks in advance.

Where to find vector graphic website backgrounds?

Merlin144 — Tue, 16 Jun 2009 13:54:46 -0800

Where can I find/buy great website backgrounds such as the examples below? Or, where can I find good vector graphics to tile and make my own? I want to download/buy/create a few backgrounds similar to:
http://ecozenboutique.com/
http://babybearshop.com/shop5-welcome.htm

Please let me know where to find similar, or if you have ideas for vector graphics sites where I could find something to tile-ize.

Thank you!

Where can I find historical data of which were the most popular or most visited web sites around a particular time?

procrastination — Mon, 08 Jun 2009 09:52:43 -0800

Where can I find historical data of which were the most popular or most visited web sites around a particular time in the past? Looking specifically for April, 2007. I am working on a research project and am trying to find out what the top N most visited sites on the Internet were in April 2007. For example, there is current data from Alexa here, but I don't see any way to find older versions of the data. I checked the Internet Archive as well, to no avail. Apparently the free list of 1M sites is recent.

Any ideas on where to look?

How do I get my files from Point A to Point B?

reenum — Thu, 23 Apr 2009 15:10:14 -0800

I need to move several gigs of music files from one external hard drive to another. But, there are a few problems... I have a 250GB WD HD in an enclosure and recently bought a WD Elements 640GB drive. I now want to back up all my music files from the 250GB to the 640GB drive. They total about 33GB.

Problem is, my computers do not have USB 2.0 drives. Every time I begin the backup process, it goes for a while, and then terminates due to an error in writing from the 250GB drive.

Is there an easy way to do this backup?