Speaking online tonight at MMCFUG, on "What if no one is monitoring your DB server?"

Just wanted to share news for my readers here that tonight (Apr 9 at 7pm US Eastern time) I will be presenting at the online meeting of the Mid-Michigan CFUG, on the topic, "What if no one is monitoring your DB server?".

From: Charlie Arehart - Server Troubleshooting

Understanding RegExp Capture Groups When Using .split() In JavaScript

Ben Nadel demonstrates how regular expression capture groups work in String split() calls in JavaScript....

From: Ben Nadel

Playing With MutationObserver In JavaScript

Ben Nadel explores the MutationObserver API as a means to dynamically bind and unbind controllers in JavaScript....

From: Ben Nadel

Using VALUES / ROW To Create Derived Table From Static Values In MySQL 8.0.19

Ben Nadel demonstrates how to use the VALUES / ROW construct in MySQL 8.0.19 to provide static data as a derived table....

From: Ben Nadel

On Ending Path Variables With A Slash (Or Not) In ColdFusion

Ben Nadel pontificates on whether or not to end path variables with a trailing slash in ColdFusion....

From: Ben Nadel

Using CFModule To Render Templates With Isolation In ColdFusion

Ben Nadel demonstrates that the CFModule tag can be used to render templates with strong isolation in ColdFusion....

From: Ben Nadel

Working Code Podcast - Episode 171: Strategy Vs. Tactics

Ben Nadel and the crew talk about the difference between strategy and tactics at work....

From: Ben Nadel

Bypassing Imperva SecureSphere WAF (CVE-2023-50969)

Background Imperva SecureSphere Web Application Firewall (WAF) is an on-premise security solution to inspect, monitor and block traffic to web applications.

From: Hoya Haxa - A Security Research Blog

Speaking at CF Summit East 2024

The kind folks at Adobe have invited me back to speak at CF Summit East 2024 in Washington DC.

From: South of Shasta: Software Development, Web Design, Training

Magic Life-Cycle Test In Alpine.js

Ben Nadel explores the life-cycle of a custom magic in Alpine.js....

From: Ben Nadel

Defending Against CVE-2024-20767 (ColdFusion Arbitrary File System Read)

Technical details for CVE-2024-20767 (ColdFusion Arbitrary File System Read) from APSB24-14 have now been publicly disclosed by the researcher who reported it to Adobe PSIRT:  https://jeva.

From: Hoya Haxa - A Security Research Blog

Code Kata: Parsing Time Spans In ColdFusion

Ben Nadel demonstrates how to parse a time span back into days, hours, minutes, and seconds in ColdFusion....

From: Ben Nadel

Code Kata: Alpine.js Calendar Component

Ben Nadel tries to build a calendar component in Alpine.js....

From: Ben Nadel

HTML Templates Can Be Mutated Just Like Any Other DOM

Ben Nadel demonstrates that an HTML template can be mutated just like any other DOM mutation in JavaScript....

From: Ben Nadel

CSS Enter Animations Follow The 80/20 Rule

Ben Nadel demonstrates that CSS enter animations gives us 80% of the user experience value with only 20% of the work (if that)....

From: Ben Nadel

Fixinator fixes unscoped variables

Last week's Adobe ColdFusion security update disabled searchImplicitScopes by default.

From: Pete Freitag's Homepage

Reading Element Attributes Collection In JavaScript

Ben Nadel demonstrates how to read the collection of HTML attributes out of the DOM in JavaScript....

From: Ben Nadel

If You're Running an Intranet Connections Lucee Instance, Ensure That You've Change the Default Lucee Admin Password

Last week, researchers at Sprocket Security wrote about post-exploitation in Lucee via malicious extensions.

From: Hoya Haxa - A Security Research Blog

Working Code Podcast - Episode 170: Product Design With Thelma Van

Ben Nadel and the crew talk to Thelma Van about product design thinking....

From: Ben Nadel

Working Code Podcast - Episode 169: Earning Potential Of Spaces

Ben Nadel and the crew talk survey results that show a higher salary for developers who indent code with spaces....

From: Ben Nadel