Showing posts with label Programming Mistake. Show all posts
Showing posts with label Programming Mistake. Show all posts

Friday, May 8, 2009

Unicode and Character Sets - Basis

I have read an great technical article by Joel Spolsky. Actually it was written on year 2003 [October 08, 2003]. But read today.

ok, coming to point. That article is about basis of “Unicode Char sets

title and URL,

The Absolute Minimum Every Software Developer Absolutely, Positively Must Know About Unicode and Character Sets (No Excuses!)

http://www.joelonsoftware.com/articles/Unicode.html

 

just tiny bit from that article,

Some people are under the misconception that Unicode is simply a 16-bit code where each character takes 16 bits and therefore there are 65,536 possible characters. This is not, actually, correct.

 

Lengthy article but worth reading.  Make you free to read this.

Saturday, February 21, 2009

Dangerous Programming Mistakes

>> Just recently I did the #1 mistake

>> Please have a time to view this list

Top 25 Most Dangerous Programming Mistakes

1. Improper Input Validation

Ensure that your input is valid. If you're expecting a number, it shouldn't contain letters. Nor should the price of a new car be allowed to be a dollar. Incorrect input validation can lead to vulnerabilities when attackers can modify their inputs in unexpected ways. Many of today's most common vulnerabilities can be eliminated, or at least reduced, with strict input validation.

2. Improper Encoding or Escaping of Output

Insufficient output encoding is at the root of most injection-based attacks. An attacker can modify the commands that you intend to send to other components, possibly leading to a complete compromise of your application - not to mention exposing the other components to exploits that the attacker would not be able to launch directly. When your program generates outputs to other components in the form of structured messages such as queries or requests, be sure to separate control information and metadata from the actual data.


http://www.codinghorror.com/blog/archives/001210.html