<body><script type="text/javascript"> function setAttributeOnload(object, attribute, val) { if(window.addEventListener) { window.addEventListener('load', function(){ object[attribute] = val; }, false); } else { window.attachEvent('onload', function(){ object[attribute] = val; }); } } </script> <div id="navbar-iframe-container"></div> <script type="text/javascript" src="https://apis.google.com/js/platform.js"></script> <script type="text/javascript"> gapi.load("gapi.iframes:gapi.iframes.style.bubble", function() { if (gapi.iframes && gapi.iframes.getContext) { gapi.iframes.getContext().openChild({ url: 'https://www.blogger.com/navbar.g?targetBlogID\x3d6651501\x26blogName\x3dNotes+on+tech\x26publishMode\x3dPUBLISH_MODE_BLOGSPOT\x26navbarType\x3dBLACK\x26layoutType\x3dCLASSIC\x26searchRoot\x3dhttps://ypjain-notesontech.blogspot.com/search\x26blogLocale\x3den_US\x26v\x3d2\x26homepageUrl\x3dhttp://ypjain-notesontech.blogspot.com/\x26vt\x3d-1979808972264517134', where: document.getElementById("navbar-iframe-container"), id: "navbar-iframe" }); } }); </script>

Notes on tech

Notes on technology, business, enterpreneurship, economy, markets along with interesting general tidbits.

FooBar Search Alerts - security

9/11/2004 01:03:00 PM, posted by anand

Any web application worth its salt, would have lots of user data that is sensitive in nature. For user data to be sensitive, it doesnt always have to be something about social security or medical records. Even, simple user event logging can be sensitive data because that reveals a pattern that can be mined later on.

Guarding this data from the eyes/hands of crackers or script kiddies is very crucial. Since past 3-4 days, I have been working on strengthening the security of FooBar Search Alerts. There are various aspects of security that can be scrutinized. Currently, I am working on making sure that the front-end (ala, webpages that help you to create, cancel, view the status of alerts etc) is secure.

Does security always need to implemented in an intimidating manner? Take for example, the the banking institutions in India. They have gun totting security guards standing outside the banks. The banks in US just have high tech gadgetery like security cameras in place. The security cameras dont stop thievery, they merely take a video recording of any activity and then have the law enforcement take care of the rest. I am taking a similar approach on FooBar Search Alerts. The interface is simplistic and clean, the security is implemented behind the scenes. Any untoward activity is either logged or immediately dealt with depending upon the severity.
« Home

» Post a Comment