This is True®
by Randy Cassingham

Randy Cassingham's Bonzer Web Sites of the Week: Recognizing Interesting Sites that are Beyond the Microsoft/AOL-Time Warner/Media Megalith

Gibson Research

Steve Gibson is the geekiest of computer nerds: he codes programs in assembly language. The practical result: he knows what he's doing, and the programs he writes are tiny. Of particular interest on his site is the "ShieldsUP!" security test routine. Go there and test your "shields" to see if your 'net-connected computer is secure or not. You might be very surprised what a determined hacker can do on your system if you're not properly set up. It's especially critical if you have a broadband connection (DSL, cable modem, etc.), but you can be vulnerable even if you're only connected with a modem.

For ongoing interest, be sure to check his Security Now! podcast.

Note: Steve can sometimes be ...well... a bit overzealous in his warnings -- don't let anything you find on his site panic you. If his scans show vulnerabilities, read carefully about what it really means as well as how to fix it. You can't be too safe when it comes to security, but you can overpanic. Just stay calm and, if you're ever confused, do some research on Google or Ask Leo before deciding what to do.

From This is True for 23 November 2003

Suggestions for further reading:

Digital Fortress: A Thriller
By: Dan Brown
List Price: $14.00
Amazon Price: $9.99
Editorial Review:
Digital Fortress is the best and most realistic techno-thriller to reach the market in years. Dan Brown's ability to paint in living color the gray area between personal freedom vs. National security is awesome. The story line is so good, readers will feel a chilling thrill a minute as the book makes one think who is truly the terrorist and who is actually freedom's guardian. In most thrillers, "hardware" consists of big guns, airplanes, military vehicles, and weapons that make things explode. Dan Brown has written a thriller for those of us who like our hardware with disc drives and who rate our heroes by big brainpower rather than big firepower. It's an Internet user's spy novel where the good guys and bad guys struggle over secrets somewhat more intellectual than just where the secret formula is hidden--they have to gain understanding of what the secret formula actually is.

In this case, the secret formula is a new means of encryption, capable of changing the balance of international power. Part of the fun is that the book takes the reader along into an understanding of encryption technologies. You'll find yourself better understanding the political battles over such real-life technologies as the Clipper Chip and PGP (Pretty Good Privacy) software even though the book looks at the issues through the eyes of fiction.

Although there's enough globehopping in this book for James Bond, the real battleground is cyberspace, because that's where the "bomb" (or rather, the new encryption algorithm) will explode. Yes, there are a few flaws in the plot if you look too closely, but the cleverness and the sheer fun of it all more than make up for them. There are enough twists and turns to keep you guessing and a lot of high, gee-whiz-level information about encryption, code breaking, and the role they play in international politics. Set aside the whole afternoon and evening for it and have finger food on hand for supper--you may want to read this one straight through.


 
CISSP Certification All-in-One Exam Guide, Fourth Edition
By: Shon Harris
List Price: $79.99
Amazon Price: $50.39
Editorial Review:

All-in-One is All You Need

Fully revised for the latest exam release, this authoritative volume offers thorough coverage of all the material on the Certified Information Systems Security Professional (CISSP) exam. Written by a renowned security expert and CISSP, this guide features complete details on all 10 exam domains developed by the International Information Systems Security Certification Consortium (ISC²). Inside, you'll find learning objectives at the beginning of each chapter, exam tips, practice questions, and in-depth explanations. CISSP All-in-One Exam Guide, Fourth Edition will not only help you pass the test, but also be your essential on-the-job reference.

Covers all 10 subject areas on the exam:

Access controlApplication security Business continuity and disaster recovery planning Cryptography Information security and risk managementLegal, regulations, compliance, and investigationsOperations security Physical (environmental) security Security architecture and designTelecommunications and network security

The CD-ROM features:

Simulated exam with practice questions and answers Video training from the authorComplete electronic book
 
Little Brother
By: Cory Doctorow
List Price: $17.95
Amazon Price: $12.21
Editorial Review:
Marcus, a.k.a ?w1n5t0n,? is only seventeen years old, but he figures he already knows how the system works?and how to work the system. Smart, fast, and wise to the ways of the networked world, he has no trouble outwitting his high school?s intrusive but clumsy surveillance systems.

But his whole world changes when he and his friends find themselves caught in the aftermath of a major terrorist attack on San Francisco. In the wrong place at the wrong time, Marcus and his crew are apprehended by the Department of Homeland Security and whisked away to a secret prison where they?re mercilessly interrogated for days.

When the DHS finally releases them, Marcus discovers that his city has become a police state where every citizen is treated like a potential terrorist. He knows that no one will believe his story, which leaves him only one option: to take down the DHS himself.
 
JavaScript: The Definitive Guide
By: David Flanagan
List Price: $49.99
Amazon Price: $31.49
Editorial Review:
This Fifth Edition is completely revised and expanded to cover JavaScript as it is used in today's Web 2.0 applications. This book is both an example-driven programmer's guide and a keep-on-your-desk reference, with new chapters that explain everything you need to know to get the most out of JavaScript, including: Scripted HTTP and Ajax XML processing Client-side graphics using the canvas tag Namespaces in JavaScript--essential when writing complex programs Classes, closures, persistence, Flash, and JavaScript embedded in Java applications

Part I explains the core JavaScript language in detail. If you are new to JavaScript, it will teach you the language. If you are already a JavaScript programmer, Part I will sharpen your skills and deepen your understanding of the language.

Part II explains the scripting environment provided by web browsers, with a focus on DOM scripting with unobtrusive JavaScript. The broad and deep coverage of client-side JavaScript is illustrated with many sophisticated examples that demonstrate how to: Generate a table of contents for an HTML document Display DHTML animations Automate form validation Draw dynamic pie charts Make HTML elements draggable Define keyboard shortcuts for web applications Create Ajax-enabled tool tips Use XPath and XSLT on XML documents loaded with Ajax And much more

Part III is a complete reference for core JavaScript. It documents every class, object, constructor, method, function, property, and constant defined by JavaScript 1.5 and ECMAScript Version 3.

Part IV is a reference for client-side JavaScript, covering legacy web browser APIs, the standard Level 2 DOM API, and emerging standards such as the XMLHttpRequestobject and the canvas tag.

More than 300,000 JavaScript programmers around the world have made this their indispensable reference book for building JavaScript applications.

""A must-have reference for expert JavaScript programmers...well-organized and detailed."" -- Brendan Eich, creator of JavaScriptSince the earliest days of Internet scripting, Web developers have considered JavaScript: The Definitive Guide an essential resource. David Flanagan's approach, which combines tutorials and examples with easy-to-use syntax guides and object references, suits the typical programmer's requirements nicely. The brand-new fourth edition of Flanagan's "Rhino Book" includes coverage of JavaScript 1.5, JScript 5.5, ECMAScript 3, and the Document Object Model (DOM) Level 2 standard from the World Wide Web Consortium (W3C). Interestingly, the author has shifted away from specifying--as he did in earlier editions--what browsers support each bit of the language. Rather than say Netscape 3.0 supports the Image object while Internet Explorer 3.0 does not, he specifies that JavaScript 1.1 and JScript 3.0 support Image. More usefully, he specifies the contents of independent standards like ECMAScript, which encourages scripters to write applications for these standards and browser vendors to support them. As Flanagan says, JavaScript and its related subjects are very complex in their pure forms. It's impossible to keep track of the differences among half a dozen vendors' generally similar implementations. Nonetheless, a lot of examples make reference to specific browsers' capabilities.

Though he does not cover server-side APIs, Flanagan has chosen to separate coverage of core JavaScript (all the keywords, general syntax, and utility objects like Array) from coverage of client-side JavaScript (which includes objects, like History and Event, that have to do with Web browsers and users' interactions with them. This approach makes this book useful to people using JavaScript for applications other than Web pages. By the way, the other classic JavaScript text--Danny Goodman's JavaScript Bible--isn't as current as this book, but it's still a fantastic (and perhaps somewhat more novice-friendly) guide to the JavaScript language and its capabilities. --David Wall

Topics covered: The JavaScript language (version 1.0 through version 1.5) and its relatives, JScript and ECMAScript, as well as the W3C DOM standards they're often used to manipulate. Tutorial sections show how to program in JavaScript, while reference sections summarize syntax and options while providing copious code examples.


 
Cloud Application Architectures: Building Applications and Infrastructure in ...
By: George Reese
List Price: $29.99
Amazon Price: $19.79
Editorial Review:
If you're involved in planning IT infrastructure as a network or system architect, system administrator, or developer, this book will help you adapt your skills to work with these highly scalable, highly redundant infrastructure services. While analysts hotly debate the advantages and risks of cloud computing, IT staff and programmers are left to determine whether and how to put their applications into these virtualized services. Cloud Application Architectures provides answers -- and critical guidance -- on issues of cost, availability, performance, scaling, privacy, and security. With Cloud Application Architectures, you will:

Understand the differences between traditional deployment and cloud computing Determine whether moving existing applications to the cloud makes technical and business sense Analyze and compare the long-term costs of cloud services, traditional hosting, and owning dedicated servers Learn how to build a transactional web application for the cloud or migrate one to it Understand how the cloud helps you better prepare for disaster recovery Change your perspective on application scaling

To provide realistic examples of the book's principles in action, the author delves into some of the choices and operations available on Amazon Web Services, and includes high-level summaries of several of the other services available on the market today. Cloud Application Architectures provides best practices that apply to every available cloud service. Learn how to make the transition to the cloud and prepare your web applications to succeed.


 
About the Site
About This is True
About the Authors

Subscribe Free
to This is True
and see the Sites
when they're issued!
Your e-mail:



Find by keyword:

Prev: Popup Manager

Next: Yesterday's Tomorrows

Complete Name List

Copyright 1999-2009 ThisisTrue.Inc, all rights reserved. May not be copied or archived without express, prior, written permission. "This is True" is a registered trademark of ThisisTrue.Inc, Ridgway Colorado. 3872