Category Archives: software

Securing web application

Below are things to do to secure your web application

  1. Database user user for the system can only has access to insert, select, update, delete. Not other datase utilities like drop, create etc.
  2. Use recaptcha if wrong login attempt exceeds x times
  3. Never display id on url, use hashed id instead – checkout hashids.org
  4. Always check a user can’t view, access or update any data not belong to him/her. Especially on multi-tenant system
  5. Force at least 8 character length for user password. Better to include numbers, capital letters and special symbols
  6. If use cookies, make sure don’t save sensitive data and always save something that is encrypted that need to be decrypted by server in order to use. For example, for a remember me cookie, use user IP plus the username to construct the an encrypted “token” to be stored in cookie.
  7. Check again input at the back end even it has been check on front-end using javascript
  8. Make the 2-FA (2 factor authentication) available for user to choose
  9. Use SSL/HTTPS
  10. Always use production-standard settings. Not development-standard settings. For example, never display detail errors to the users such as sql error that show table and fields.
  11. Give developers/admins different username and access to what they can only do

Completely uninstall Atom in Mac

Can run the following scripts in terminal to completely uninstall Atom


rm -rf ~/.atom
rm -rf /usr/local/bin/atom
rm -rf /usr/local/bin/apm
rm -rf /Applications/Atom.app
rm -rf ~/Library/Preferences/com.github.atom.plist
rm -rf ~/"Library/Application Support/com.github.atom.ShipIt"
rm -rf ~/"Library/Application Support/Atom"
rm -rf ~/"Library/Saved Application State/com.github.atom.savedState"
rm -rf ~/Library/Caches/com.github.atom
rm -rf ~/Library/Caches/com.github.atom.Shipit
rm -rf ~/Library/Caches/Atom

source

Disposable email

Several providers for disposable or temporary emails. Just in case you wan to test anything and need a valid email for temporary

  1. https://mailinator.com – can set xx@mailinator.com
  2. yopmail.com – can set xx@yopmail.com
  3. https://nowmymail.com/
  4. https://getnada.com/
  5. https://mytemp.email – total random, cannot set own name
  6. https://temp-mail.org/en/ – can set own email. provide multiple @domain

 

Help Desk Software

Here are some help desk software available as SaaS. And some highlights that I can catch on each of them.

  1. groovehq.com – mail-look, neat and easy, only 2 package – free or usd5/agent/mo get all, in slack app, offer API
  2. desk.com – usd20/mo for unlimited agents
  3. cayzu.com – starts from usd12/agent/mo
  4. freshdesk – in slack app,
  5. zendesk – in slack app
  6. nethelpdesk – min 10 agents, seems bit on high side
  7. reamaze.com – usd20/agent/mo
  8. talkus.io – highly integrated with slack. support via slack, usd48/90/month for unlimited agents
  9. liveagent – ladesk.com – starts from usd12/agent/mo
  10. kayako.com – usd20/agent/mo

more

http://www.pcmag.com/article2/0,2817,2489457,00.asp

Some notes on Software Testing

  • Certification body – Malaysia Software Testing Board (MSTB)
  • Type of certs
    • Certified Tester Foundation Level (CTFL)
    • Certified Tester Advanced Level (CTAL)
    • Certified Tester Expert Level (CTEL)
  • Methods – white/black box, gray box, agile, adhoc
  • Level and method of testing
    • Functional – unit -> integration -> system -> acceptance testing – more info
    • Non-functional – performance, security, usability, compatability
  • List of test management tools – source
    • qtest
    • zephyr
    • practitest

Disable windows 10 upgrade notification

It is annoying sometimes. Use this simple freeware named Never10 to disable it.

This program will only change some configuration of windows to disallow windows to display the notification.

Excerpt from the website:

The elegance of this “Never 10” utility, is that it does not
install ANY software of its own. It simply and quickly
performs the required system editing for its user.

Windows 10 free upgrade will end on 29 July 2016