I ordered some alex drawers, some linmon desktops (the 2m versions) and some little stands from Ikea for some ikea desk hacks, and three 4×2 kallax units for storing books on the other wall. The first thing to do was Read more…
300 word summary: What is the paper about? Defending Against Injection Attacks Through Context-Sensitive String Evaluation introduces CSSE – Context-Sensitive String Evaluation – a way to detect sqlI in php at runtime – essentially an intrusion detection platform for php apps Read more…
What is an API (Introduction to API’s) Carrying on from my previous posts on SOA here and here I thought it may be useful to write a post on what an API is, giving some lower level information on my Read more…
300 word summary: AMNESIA: analysis and monitoring for NEutralizing SQL-injection attacks. Provides a valuable background section on the countermeasures for SQL injection attacks: Defensive Programming General Techniques against SQLi Static Analysis techniques Provides examples of SQL injection attacks, with sql Read more…
My MSc Thesis in 2016 was titled Evaluation of SQL injection testing tools and techniques. I had a quick look through all my old uni work looking for content to put on my blog, and decided to see if I Read more…
My research notes about the different types of sqli – sql injection attack types; inband (eg reading errors from the screen) out-of-band (getting information from a different channel eg from an email after the attack) inferrential (or blind) – getting Read more…
What is the paper about? a holistic approach for a static analysis algorithm to detect sqli in web applications using run-time inspection Who is the intended audience? researchers Is title/abstract accurate yes Is the big ‘point’ of the work clear? Read more…
This paper (A Classification of SQL Injection Attacks and Countermeasures) has an excellent section on Injection mechanisms – the way that sql code is modified to actually perform the injection attack – the attack vectors – user inputs cookies server Read more…
There are limited opportunities for adventure during covid. This adventure took place less than 2 miles from our house, and for the government mandated 1 hour. 😳 https://blantyreproject.com/2016/12/blantyreferme-anti-aircraft-battery/
Our new house came with decking, but it was in need of a coat of paint. It lasted the inter fine, but was in need of some TLC. Just before lockdown I managed to get some grey paint (our shed Read more…
Our new house has a garage, which I’m going to use as a study room / workshop area / music area (though I wont be changing its actual use from a garage, it will still be a garage, only with Read more…
It’s time for a new phone again, and I decided to get a little Huawei phone this time. So far it’s a great wee phone. Does everything my old umidigi one max did, except wireless charging (which I never used Read more…
Since moving to our new house we have been doing a number of DIY jobs, including this makeover of our little girls bedroom, and turning the spare room into a permanent playroom so that she had somewhere to draw, play Read more…
Corona Lockdown 2020. We have been WFH for 3 weeks, Olivia is starting to get bored (she has completed netflix) I decided to put up the tent after reading about a guy walking the west highland way in his garden Read more…
At work we use myzone as an incentive to keep people fit – we have challenges each month to see who can do the most :) Ive used Huel in the past, but the white version has lots of carbs Read more…
It (unexpectedly) works, first time, no messing! More info here: https://www.britishtelephones.com/t746.htm Dialing a mobile from it is a pain though!
I recently saw this tweet from kali linux https://twitter.com/kalilinux/status/1209615382224547840?s=19 on installing rootless nethunter on an unrooted android device. This is my attempt to do so. The tweet linked here: https://www.kali.org/docs/nethunter/nethunter-rootless/ The instructions are pretty easy to follow Install the NetHunter-Store Read more…
This time its a generic non-branded chinese bluetooth speaker. I got this one from amazon, for less than £10. Its fabric covered so looks good, and is very loud. It plays audio recordings when you pair and un pair (its Read more…
Ive been spurned by expensive headphones in the past, but still burn through them. This time I decided to get some cheap ($10) bluetooth earpod style headphones from China. They are pretty good. Bass isnt great (they were ten bucks Read more…
We went to Edinburgh and had a look round the xmas market – we stayed at the Premier inn, in Leith (thanks Jane) The christmas market was very busy, and it rained (it always seems to rain in Edinburgh) but Read more…
I ordered a set of cheap WiFi enabled LED light strips from Amazon. They are perfect – they stick to the back of the TV (or anything really) and the colour can be set using google assistant (or alexa) They Read more…
By now in out Building a PWA vuejs app with wordpress API journey, we have a basic vuejs app which can fetch data from a WordPress API using axios and can display the data.The aim of this Building a PWA Read more…
Conditional rendering. Our category system is a bit basic right now – it doesnt check to see which categories actuall have posts (and which categories have child-categories), so in this post we will be adding these checks – checking if Read more…
I picked up a (very) cheap umidigi smart watch from amazon It has a ton of features, but isnt androidwear, so its a bit limited That said, it has heart rate measurement, weather, step counter, sleep counter, it can alert Read more…
As an incentive for healthier lifestyles from work, we have been offered myzone blaze heart rate monitors (more gadgets=win for me) its pretty cool and calculates your workouts based on your age, weight, etc (which I fed in from the Read more…
use domain driven design (common in microservice architectires)use DRYexisting code exerts a powerful influence! people try to copy the existing code – it backs you into a corner.write tests. always.refactor. always.refactor tests too. think of tests as i/o something in, Read more…
make users feel smart, not stupidfreeagent – bought over by RBSThey are a tech company, so have a strong engineering team1. Hiring is #1the hiring process needs to be good – there is a huge portion needed o be dedicated Read more…
