Sidejacking: How to prevent Firesheep from hijacking your session

Sidejacking, a technique of hijacking web sessions of other users in the network, has suddenly gained much attention on the Internet, thanks to a new Firefox extension Firesheep.

In a sidejacking session, the attacker sniffs data packets of the transactions over the network and steals cookie which the attacker can then use to impersonate the victim on the site the user is currently logged in. Even if they have encrypted login pages, unsecured HTTP sites use cookies to identify you during the entire session and this is what the attacker exploits. An attacker with certain tools can steal the cookie during transaction and use it to make the server treat the hijacker as the legitimate user. This vulnerability has existed since a long time but exploiting it was never so easy nor was it as alarming. Continue reading Sidejacking: How to prevent Firesheep from hijacking your session

Spread the love
  •  
  •  
  •  
  •  
  •  
  •  
  •  
  •  
  •  

Social Ego – How company branding fuels it.

Ever wondered why idol worship as a concept came into existence. If as our scriptures say that GOD is omnipresent then why was a place of worship created and why inside that a figurine of God put ?

I think it was done because to imagine God and pray in open space was not working out for people, they needed a face to imagine and a symbol or idol to look at and then attach the same reverence and awe that they had for the internal belief called God. In short we as human beings externalized our internal belief and source of inspiration so that we can easily connect with it on a frequent basis.

Point is why am I saying all this ?

I wanted to draw a correlation to another place (which is also called as a place of worship) and the need to externalize our social recognition so that we derive pride from it easily and regularly. All of us work at some place or the other and might be all or some of us would be proud to be working at that place. We are convinced that it is a good place to work and we feel proud to be there. Problem or insecurity creeps in when the name of the work place is not famous in the outside world. Whenever you move out of office and talk about your workplace and the work that you do and do not see the respect or pride in other persons eyes or behavior your social ego is badly hurt. Some of us who are more mature and who do not need someone else’s appreciation to move on in life and be happy, manage easily but for the rest of us self doubt and frustration creeps in. We tend to distrust the company/office and feel cheated or we might just decide to leave since it does not give us the recognition that we are craving for. Hurts all the more when your near and dear ones hesitate talking about your workplace because they do not feel proud saying it.

Here comes the need to externalize the brand and the values or things that you like about your office or workplace. As the brand building gathers momentum and becomes famous in itself you realize that it makes your life all the more easier. Now your social ego is massaged nicely – you just say the place you work and rest of the things are taken care of by the person you are talking to.

Even though technically it is still the same place and the same values and work standards that you are maintaining but suddenly you feel more worthy because others feel that way. Of course for the persons who were matured enough to feel good without the brand externalization hardly see the difference, they felt good earlier and would continue feeling that way.

The intent of my writing this article was to explain the concept of brand building keeping in mind the effect it has in boosting morale of people. Of course there are a host of other areas for which brand building is used for but I have tried to explain only one aspect of it.

Now the question I want to ask is – do we actually need to externalize our self respect so as to derive social recognition or just let the way things are and convince ourselves that it hardly matters what others think about us ? Please share your views.

Author – Atma Prakash Ojha

Spread the love
  •  
  •  
  •  
  •  
  •  
  •  
  •  
  •  
  •  

Future of software development and software testing

The pace at which technology is advancing and tools are being built I think in future the role of software engineer will go through a major change. Smart tools will ensure that you need not know the syntax of a language or the inner workings of how it will interact with the database server etc etc. All you would need to be a good software programmer are tons of aptitude and a thorough understanding of the business for which the application is being built.

A typical developer would not necessarily be someone who has worked on a particular technology for 5-6 years rather it would be someone who has worked in a particular business domain for 4-5 years. Unlike at present where we need people to learn and keep themselves updated about the technology they work in, say someone who claims to be an expert in .Net should know what new features .Net framework 4.0 has , going forward a software developer would need to be updated on all the applications of every technology that are in the market and which one has what good feature – from usage in business point of view. He would not be required to learn the nitty-gritty of a technology rather he would be required to learn and be updated on the features that any technology has and should have the aptitude to use the one that suits the requirement best. Every company would have only a handful of network/IT support guys to take care of the system configuration needs.

In such a scenario the role of a typical tester (in terms of the work that she does at present) gets blurred somewhere. Since the developer’s scope of work would encroach upon the testers work she has to innovate to be of good use in the software development process. In fact the future would be more favorable for testers because of their expertise on application knowledge, of course only those who have build a thorough expertise on the domain they work in and have kept themselves updated on all the different technologies that are available in the market will excel. The fact is there would not be separate roles of developers and testers – we will have only system and application specialists. Anyone who is abreast of new technologies and has a strong knowledge on 1-2 business area will rule.

Keeping such a scenario in mind I think the current testers should start preparing themselves for the future by focusing on broad system knowledge rather than knowing the syntax of only one language. Someone at present who is into testing a banking application which is built in .Net might think she has to learn about banking domain as well as something about .Net to be an expert tester but that need will no more be there in future. She would need to know about banking domain and in addition should know what the system architecture demands and which technology in the market caters to it. Development of tools and addition of developer friendly features ensure that you need not be an expert syntactically to write your application using their language rather all you need is aptitude and awareness of the features of the technology itself – so learning about these things would help.

Author – Atma Prakash Ojha

Spread the love
  •  
  •  
  •  
  •  
  •  
  •  
  •  
  •  
  •