Writing secure code: a practitioner's approach? [closed] - security

As it currently stands, this question is not a good fit for our Q&A format. We expect answers to be supported by facts, references, or expertise, but this question will likely solicit debate, arguments, polling, or extended discussion. If you feel that this question can be improved and possibly reopened, visit the help center for guidance.
Closed 10 years ago.
I'm looking for a good book on writing secure code, with an emphasis on mobile applications. A practitioner's approach would be better than a academic discussion of the theory/algorithms/etc.
What would you recommend?

'Writing Secure Code' by Microsoft is okay - if a tad Microsoft specific, and you could have a look at 'Developing Secure Mobile Applications for Android' by ISEC

See also Are there any coding guidelines for the Android platform that focus on security? and Android API/development security pitfalls, which are nominally focused on Android -- but actually raise issues that are relevant to every mobile application platform.

Related

choosing BPEL engine [closed]

As it currently stands, this question is not a good fit for our Q&A format. We expect answers to be supported by facts, references, or expertise, but this question will likely solicit debate, arguments, polling, or extended discussion. If you feel that this question can be improved and possibly reopened, visit the help center for guidance.
Closed 10 years ago.
I need to choose an open source BPEL engine for my work. I'm new to BPEL and I've never worked with any BPEL engine. Which engine would you recommend me that is easy to configure and use for a begginer? Brief explanation but I really have to experience at all.
We use Apache ODE at work, and it works fine. The project support we have via mailing lists is enough for us.
I used Oracle's BPEL engine about two years ago. It was both a nightmare to configure, and fairly half-baked in terms support. Even their example code didn't work properly. Things may have changed since then.

Strange Web App [closed]

As it currently stands, this question is not a good fit for our Q&A format. We expect answers to be supported by facts, references, or expertise, but this question will likely solicit debate, arguments, polling, or extended discussion. If you feel that this question can be improved and possibly reopened, visit the help center for guidance.
Closed 10 years ago.
I would like to create a web app (desktop and mobile versions) that can work with and without Internet connection but synchronizes data when Internet connection is available. The web app must be highly secure (transmission encryption and data encryption). I have though of Adobe Flex and Air as tools for development. Any other suggestions?
HTML 5 is the technology for you. Local storage is supported too.

Learning NodeJS [closed]

As it currently stands, this question is not a good fit for our Q&A format. We expect answers to be supported by facts, references, or expertise, but this question will likely solicit debate, arguments, polling, or extended discussion. If you feel that this question can be improved and possibly reopened, visit the help center for guidance.
Closed 10 years ago.
Really need a book recommendation for mastering node.js.
From this list...or ?
http://www.chapters.indigo.ca/home/search/?keywords=nodejs&pageSize=12
I personally like http://www.nodebeginner.org/ as a foundation.
PeepCode Full Stack Node.js screencast https://peepcode.com/products/full-stack-nodejs-i helps to understand aspects of practical use.
Also Google for deploying Node.js applications to production as it is not as straightforward as with more traditional server side technologies on web and it can make an impact on your application strategy.

Is anyone using node.js with an OAuth2.0 authentication system? [closed]

As it currently stands, this question is not a good fit for our Q&A format. We expect answers to be supported by facts, references, or expertise, but this question will likely solicit debate, arguments, polling, or extended discussion. If you feel that this question can be improved and possibly reopened, visit the help center for guidance.
Closed 10 years ago.
Is there an OAuth2.0 library for Node.js, which is being used (or planned to be used) in a live, production system?
node-oauth is generally a good bet.
node-oauth provides some support for Oauth2.
"Also provides rudimentary OAuth2 support, tested against facebook connect and github. For more complete usage examples please take a look at connect-auth (http://github.com/ciaranj/connect-auth)" taken from https://github.com/ciaranj/node-oauth

JSF in Enterprise Applications [closed]

As it currently stands, this question is not a good fit for our Q&A format. We expect answers to be supported by facts, references, or expertise, but this question will likely solicit debate, arguments, polling, or extended discussion. If you feel that this question can be improved and possibly reopened, visit the help center for guidance.
Closed 10 years ago.
Is JSF being used in the enterprise, or at least growing in use?
We're using it at my company in an 'Enterprise' way, I know the previous two companies I've worked at have used it in various projects. The only other framework which was more popular was Struts 1.
This page gives some 'real world' JSF links.
Yes, it's being used.
Is the use widespread? I don't think so. It's probably being used more than Wicket but less than Spring MVC, at least from conversations with my own peers.

Resources