Top 25 Most Dangerous Programming Errors

Came across this nice article.

nk	Score	ID	Name
[1]	346	CWE-79	Failure to Preserve Web Page Structure ('Cross-site Scripting')
[2]	330	CWE-89	Improper Sanitization of Special Elements used in an SQL Command ('SQL Injection')
[3]	273	CWE-120	Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
[4]	261	CWE-352	Cross-Site Request Forgery (CSRF)
[5]	219	CWE-285	Improper Access Control (Authorization)
[6]	202	CWE-807	Reliance on Untrusted Inputs in a Security Decision
[7]	197	CWE-22	Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
[8]	194	CWE-434	Unrestricted Upload of File with Dangerous Type
[9]	188	CWE-78	Improper Sanitization of Special Elements used in an OS Command ('OS Command Injection')
[10]	188	CWE-311	Missing Encryption of Sensitive Data
[11]	176	CWE-798	Use of Hard-coded Credentials
[12]	158	CWE-805	Buffer Access with Incorrect Length Value
[13]	157	CWE-98	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP File Inclusion')
[14]	156	CWE-129	Improper Validation of Array Index
[15]	155	CWE-754	Improper Check for Unusual or Exceptional Conditions
[16]	154	CWE-209	Information Exposure Through an Error Message
[17]	154	CWE-190	Integer Overflow or Wraparound
[18]	153	CWE-131	Incorrect Calculation of Buffer Size
[19]	147	CWE-306	Missing Authentication for Critical Function
[20]	146	CWE-494	Download of Code Without Integrity Check
[21]	145	CWE-732	Incorrect Permission Assignment for Critical Resource
[22]	145	CWE-770	Allocation of Resources Without Limits or Throttling
[23]	142	CWE-601	URL Redirection to Untrusted Site ('Open Redirect')
[24]	141	CWE-327	Use of a Broken or Risky Cryptographic Algorithm
[25]	138	CWE-362	Race Condition

Full article is found here

Riding the tech wave part 1

Yes the seas are rough and time to time there are those huge trend waves. You need a good boat with right equipment and on top of that you need to train the sailor within you.

Let us share our experience riding this wave. First I will talk about the boat and the equipment. Yes I know you have already chosen your boat. Let it be proprietary technologies like Microsoft or open source technologies like PHP, Apache, etc. For those who are still at the shores trying to figure out which boat to choose, read on and you will get some directions to choose your boat.

Since I am familiar with web development using Microsoft technologies, I will brief on the equipment available for you to choose. Whichever technology you use your first and most reliable source of information is your technology provider. They know what happens under the hood and are willing to help you solve your problems because if technology is hard to use then it is safe to assume that the technology is not here to stay for a long period of time.

So if you start with the design aspect of the web application there are some great sites.

This is a great site which helps you to decide on color scheme of the site. And then there is this flexible template.
There are few other great sites like

• Six Revisions
• Smashing Magazine
• A list apart
• web designer depot
• css tricks
• web designer wall
• web design schools guide

I will continue this in another blog post.

Augmented Reality

Have you ever thought that reality is less informative? Ok let me give a simple example to give you a clear idea what I am talking about here. Back in the days when we watch cricket matches people have concerns when they see an umpire give a “Leg before Wicket” decision. Couple of years back television broadcaster displayed strip on the from bowlers end to batsman’s end. This gave viewers clear idea where the ball pitched. Get it?

Now you might think this is a simple idea, what’s so special about it? Take a moment to think about the many applications of Augmented Reality.

Here are some examples





Some applications

So why is this so important? More information (accurate, real time) there is more accurate the decision will become. Augmented Reality is the perfect candidate for this.
Web 2.0, SaaS has their own unique applications, but AR is aggressively entering their territories. At least in mobile devices.

Don’t let your eyes and ears deceive you!!

Hello World!

Hi all, welcome to my tech blog. First let me give you some background info. This is Eranga. Graduated from university of Colombo and now working at Central Finance PLC as a Developer.

I will be blogging on technology related topics. Will try my best to share my thoughts and experience with you. So visit regularly.

kthx
Eranga