The Insider News

InformationWeek[^]:

It's no secret that having a smart, dedicated mentor can advance your career. According to one report, which followed Sun Microsystems' mentor program for five years, sharing your expertise as a mentor can benefit both your career trajectory and your bank account.

Wired[^]:

Munroe is finally talking about the elaborate backstory behind the minimalistic and seemingly ancient world of “Time”.

ITWorld[^]:

A researcher has released a proof-of-concept Android app that can steal 'weblogin' authentication tokens for Google accounts

News.com[^]:

Discounts come just days after the tech titan reveals that marketing the tablets has cost more than the revenue they have brought in.

Shawn Wildermuth[^]:

No I am not talking the promise that JavaScript will fix everything if you use it.

Tor.com[^]:

Now that the face of the next Doctor is known, here are three implications for what this means for the future of the show and the future of the character himself.

denniskubes.com[^]:

C is memory with syntactic sugar and as such it is helpful to think of things in C as starting from memory. One of the pieces that I think is often overlooked is variables and data types. If you have the right mental model for variables and data types it makes other concepts in C, and other langauages, easier.

grahamcluley.com[^]:

Even though I knew malware was wrong, and not to be encouraged, I had a sneaking regard for the graphical payloads some of the virus writers were building into their creations. I recognised that this *was* a form of art. And there was art in the malware’s code as well. Virus writers would often spend months, tweaking their code, using innovative new techniques in an attempt to make it undetectable by anti-virus products. I didn’t agree with what they were doing, but had to admire the coding skill deployed by some of them. Like much modern art, you didn’t necessarily have to like it to acknowledge the skills used to produce it.

ongoing by Tim Bray[^]:

You’re putting up a new app and need to sign in users, so you use whatever’s popular with the package you’re using: On Rails, typically Devise, on NodeJS Drywall or Passport, on PHP Usercake, and so on. These things will take care of storing and checking usernames and passwords for you. But storing and checking passwords is a bad thing to do. Why? There are too many passwords.

Nettuts+[^]:

When you think about people who have made an impact in the JavaScript community, I think most people would immediately think of Brendan Eich, Douglas Crockford or John Resig. And rightfully so, as their contributions have unquestionably impacted JavaScript as we know it. There's another person who I feel has made a profound difference in the way that JavaScript is viewed and has done as much as anyone to bring organization and structure to the JS community. And that's Chris Williams, the founder and organizer of JSConf.

Devhammer's Den[^]:

My purpose in this post is to introduce WebGL for those, like myself, who may be new to the technology. The short version is that WebGL brings a 3D graphics API (designed to be very similar to OpenGL) to the HTML5 Canvas element. So if you've followed my series on getting started with HTML5 Canvas, you're already aware that Canvas natively includes only a 2D drawing context. And while it was possible to play some tricks and get pseudo-3D in Canvas, it wasn't real 3D. WebGL changes all that.

Ars Technica[^]:

The HTTPS cryptographic scheme, which protects millions of websites, is susceptible to a new attack that allows hackers to pluck e-mail addresses and certain types of security credentials out of encrypted pages, often in as little as 30 seconds. The technique, scheduled to be demonstrated Thursday at the Black Hat security conference in Las Vegas, decodes encrypted data that online banks and e-commerce sites send in responses that are protected by the widely used transport layer security (TLS) and secure sockets layer (SSL) protocols.

Threatpost[^]:

Researchers have figured out how to leverage the reach of online advertising networks to distribute javascript of their choosing, creating the equivalent of a botnet of ad impressions capable of crashing underlying webservers or distributing malware on a massive scale for pennies on the dollar. Jeremiah Grossman and Matt Johansen of White Hat Security presented their research today at Black Hat USA 2013, research that did not include a zero-day vulnerability or exploit. All they had to do was buy an ad.

pcmag.com[^]:

This news couldn't wait for the Black Hat conference happening now in Las Vegas. We reported in June that Georgia Tech researchers had created a charging station that could pwn any iOS device. The full presentation revealed precise details on how they managed it. I'm never plugging my iPhone charger into a USB port in a hotel desk again.

TED.com[^]:

During a Formula 1 race, a car sends hundreds of millions of data points to its garage for real-time analysis and feedback. So why not use this detailed and rigorous data system elsewhere, like... at children’s hospitals? Peter van Manen [Managing Director of McLaren Electronics] tells us more.

Redmondmag.com[^]:

One of the biggest new features in Hyper-V is the introduction of Generation 2 VMs. Generation 2 VMs add capabilities that were previously unavailable on Hyper-V VMs, such as support for SCSI boot and Pre-Boot eXecution Environment (PXE) boot. Also, because Generation 2 VMs use Unified Extensible Firmware Interface (UEFI) instead of BIOS, they're able to perform secure boots from GUID Partition Table (GPT) disks.