Dmitry N. Medvedev Dmitry-N-Medvedev

DEPRECATED

#Linux - Running a Node Service (PM2) PM2 is a replacement for Forever which is used to run Node services (see http://devo.ps/blog/2013/06/26/goodbye-node-forever-hello-pm2.html). It has a number of advantages over forever:

The following is from scotthelme.co.uk

with Content Security Policy (CSP) enabled(and a browser that supports it(http://caniuse.com/#feat=contentsecuritypolicy), you can tell the browser that it can only download content from the domains you explicitly allow http://www.html5rocks.com/en/tutorials/security/content-security-policy/ https://www.owasp.org/index.php/Content_Security_Policy I need to change our application code so we can increase security by disabling 'unsafe-inline' 'unsafe-eval'


	from MySQLdb.cursors import SSDictCursor

	def iterate_query(query, connection, arraysize=1):
	c = connection.cursor(cursorclass=SSDictCursor)
	c.execute(query)
	while True:
	nextrows = c.fetchmany(arraysize)
	if not nextrows:
	break

	#!/bin/bash
	echo "Generating an SSL private key to sign your certificate..."
	openssl genrsa -des3 -out myssl.key 1024

	echo "Generating a Certificate Signing Request..."
	openssl req -new -key myssl.key -out myssl.csr

	echo "Removing passphrase from key (for nginx)..."
	cp myssl.key myssl.key.org
	openssl rsa -in myssl.key.org -out myssl.key

	" Don't try to be vi compatible
	set nocompatible

	" Helps force plugins to load correctly when it is turned back on below
	filetype off

	" TODO: Load plugins here (pathogen or vundle)

	" Turn on syntax highlighting
	syntax on

	# config to don't allow the browser to render the page inside an frame or iframe
	# and avoid clickjacking http://en.wikipedia.org/wiki/Clickjacking
	# if you need to allow [i]frames, you can use SAMEORIGIN or even set an uri with ALLOW-FROM uri
	# https://developer.mozilla.org/en-US/docs/HTTP/X-Frame-Options
	add_header X-Frame-Options SAMEORIGIN;

	# when serving user-supplied content, include a X-Content-Type-Options: nosniff header along with the Content-Type: header,
	# to disable content-type sniffing on some browsers.
	# https://www.owasp.org/index.php/List_of_useful_HTTP_headers
	# currently suppoorted in IE > 8 http://blogs.msdn.com/b/ie/archive/2008/09/02/ie8-security-part-vi-beta-2-update.aspx

	# on os x use brew to get ffmpeg with libfdk_aac
	brew install ffmpeg --with-fdk-aac

	# convert and use m4a as file extension
	find . -name '*.flac' -exec sh -c 'ffmpeg -i "$1" -c:a libfdk_aac -b:a 320k "${1%.flac}.m4a"' _ {} \;

	# to generate your dhparam.pem file, run in the terminal
	openssl dhparam -out /etc/nginx/ssl/dhparam.pem 2048