Apple recently announced 'Lion'; the next update for the Mac Operating system OSX. From what has been announced so far, it looks like both a beautifully designed and more friendly update from Apple aimed at bringing the feel of the iPad and it's apps interface to your desktop:
As reported on the register - grey hat hackers discovered an SQL injection vulnerability in the Daily Telegraph property website. Not only did their website allow malacious users to access information stored in their website but the site was storing users passwords in plain text. I am finding it hard to believe that there are developers out there who aren't aware of the best practice for storing passwords. Even if your site and database are secure you are taking a huge risk with someone else's private data, so many users share password across sites that if your site needs a password you have a responsibility to ensure that your user authentication does not rely on the storage of a password in plain text.
Use of SHA1 plus salt is current best practise for storing passwords and something we use in all of our development work.
Along with a lot of others I was getting frustrated with the lack of good subversion clients for a Mac. So, when not one but two new subversion clients came out for the Mac I immediately downloaded both. The two clients are Versions and Cornerstone. They will both run on Tiger and Leopard so should be available for the vast majority of Mac users.
Here's my thoughts on the two clients...
(more...)
