Daniel W. Crompton webhat

How to set up stress-free SSL on an OS X development machine

One of the best ways to reduce complexity (read: stress) in web development is to minimize the differences between your development and production environments. After being frustrated by attempts to unify the approach to SSL on my local machine and in production, I searched for a workflow that would make the protocol invisible to me between all environments.

Most workflows make the following compromises:

Use HTTPS in production but HTTP locally. This is annoying because it makes the environments inconsistent, and the protocol choices leak up into the stack. For example, your web application needs to understand the underlying protocol when using the secure flag for cookies. If you don't get this right, your HTTP development server won't be able to read the cookies it writes, or worse, your HTTPS production server could pass sensitive cookies over an insecure connection.
Use production SSL certificates locally. This is annoying

Conventions:

Defining Eloquent model (will assume that DB table named is set as plural of class name and primary key named "id"):

class Shop extends Eloquent {}

Using custom table name

protected $table = 'my_shops';

In August 2007 a hacker found a way to expose the PHP source code on facebook.com. He retrieved two files and then emailed them to me, and I wrote about the issue:

http://techcrunch.com/2007/08/11/facebook-source-code-leaked/

It became a big deal:

http://www.techmeme.com/070812/p1#a070812p1

The two files are index.php (the homepage) and search.php (the search page)

	#include <stdlib.h> // card > cjs.ppm
	#include <stdio.h>
	#include <math.h>
	typedef int i;typedef float f;struct v{
	f x,y,z;v operator+(v r){return v(x+r.x
	,y+r.y,z+r.z);}v operator*(f r){return
	v(xr,yr,z*r);}f operator%(v r){return
	xr.x+yr.y+z*r.z;}v(){}v operator^(v r
	){return v(yr.z-zr.y,zr.x-xr.z,x*r.
	y-y*r.x);}v(f a,f b,f c){x=a;y=b;z=c;}v

	# coding=UTF-8
	from __future__ import division
	import nltk
	from collections import Counter

	# This is a simple tool for adding automatic hashtags into an article title
	# Created by Shlomi Babluki
	# Sep, 2013

	// GistBin 1.0
	// By Potch http://potch.me/
	// Licensed under BSD.

	(function() {
	var thisTag = document.getElementsByTagName('script');
	thisTag = thisTag[thisTag.length - 1];
	var id = thisTag.getAttribute('data-id');
	// We kind of need one of these.
	if (!id) {

	// Just before switching jobs:
	// Add one of these.
	// Preferably into the same commit where you do a large merge.
	//
	// This started as a tweet with a joke of "C++ pro-tip: #define private public",
	// and then it quickly escalated into more and more evil suggestions.
	// I've tried to capture interesting suggestions here.
	//
	// Contributors: @r2d2rigo, @joeldevahl, @msinilo, @_Humus_,
	// @YuriyODonnell, @rygorous, @cmuratori, @mike_acton, @grumpygiant,

	# Description:
	# Anyone can have voice or op
	#
	# Commands:
	# hubot make me an op
	# hubot make <name> an op
	# hubot give me voice
	# hubot give <name> voice

	module.exports = (robot) ->

	require 'rubygems'
	require 'mechanize'

	FIRST_NAME = 'FIRST_NAME'
	LAST_NAME = 'LAST_NAME'
	PHONE = 'PHONE'
	EMAIL = '[email protected]'

	PARTY_SIZE = 2
	SCHEDULE_RANGE = { :start_time => '19:00', :end_time => '20:30' }

	module Paperclip::Storage::Redis

	def self.extended(base)
	base.instance_eval do
	@options[:path] = ":class/:attachment/:id_partition/:style/:filename"
	@options[:url] = "/dynamic/:class/:attachment/:id_partition/:style/:filename"
	@redis = Redis.new
	end
	end