Hispasec @unaaldia: Nubes tormentosas, archivos robados

El ataque reside en conseguir el token de contraseña, un pequeño archivo que para mayor comodidad se localiza en el dispositivo del usuario, para evitar tener que introducir la contraseña cada vez que el servicio quiera sincronizarse. Una vez que se consigue el token, para lo que puede emplearse cualquier otro tipo de ataque (p.ej. phishing o drive-by), se puede emplear para engañar a un nuevo equipo y convertir al atacante en el dueño de la cuenta. A partir de aquí ya está todo hecho, el atacante podrá acceder y robar los archivos del usuario, añadir malware en la nube del usuario, emplear la cuenta de ese usuario para otros ataques…


El token de autenticación se almacena en el sistema del usuario en el registro o en un archivo. Después de la autenticación, no se necesitan más credenciales explícitas (o almacenadas) para acceder a la cuenta del usuario. Además este token de sincronización es independiente de la máquina, puede utilizarse el mismo en máquinas diferentes.



Hispasec @unaaldia: Nubes tormentosas, archivos robados

Microsoft's new small print – how your personal data is (ab)used

Users who chose to enable Microsoft’s personal assistant software
“Cortana” have to live with the following invasion to their privacy: “To
enable Cortana to provide personalized experiences and relevant
suggestions, Microsoft collects and uses various types of data, such as
your device location, data from your calendar, the apps you use, data
from your emails and text messages, who you call, your contacts and how
often you interact with them on your device. Cortana also learns about
you by collecting data about how you use your device and other Microsoft
services, such as your music, alarm settings, whether the lock screen
is on, what you view and purchase, your browse and Bing search history,
and more.” But this is not all, as this piece of software also analyses
undefined “speech data”: “we collect your voice input, as well your name
and nickname, your recent calendar events and the names of the people
in your appointments, and information about your contacts including
names and nicknames.”



Microsoft's new small print – how your personal data is (ab)used

Free Oracle Book: "Developing Applications with NetBeans IDE 8.0" | NetBeans Zone

As you'll see, it very thoroughly covers everything that NetBeans can do for you!



Free Oracle Book: "Developing Applications with NetBeans IDE 8.0" | NetBeans Zone

Personas Make Users Memorable for Product Team Members

Persona-Focused Design

The main benefit of using personas is that they create a common, more
precise vocabulary for describing a certain type of user and thus focus
design efforts on a common goal. In meetings, the persona’s name acts as shorthand for the full set of attributes, desires, and behaviors
that need to be considered when making design decisions. If instead you
tried to reference what “the users” would want, each individual in your
meeting would interpret who those users are and their needs
differently. Further, this “user” definition would shift based on each
person’s mental model
of what is being discussed. Framing a statement around a specific
persona breaks the listeners out of self-referential thinking and
removes the speaker’s reliance on opinions, shifting the discussion away
from personal judgments toward that particular persona’s needs. Once
the team can easily picture the same set of users, it can create better
designs for them.


When making design-strategy decisions, those functionalities that
would most benefit a persona should inform which features to implement
and prioritize. Usually, one or two personas should be identified as the
main targets for a product, or for a feature set within a larger
product. Avoid wasting time designing and building extraneous features
that aren’t useful to the target persona(s). This practice of focusing
on only pleasing a particular user—or even two users—helps designers
avoid having to create an interface that handles every edge case
imaginable. You can’t design something to please everyone! But, it is
possible to design an experience that is enjoyable and usable to a
defined set of target users.



Personas Make Users Memorable for Product Team Members

Formateando language icons en horizontal

El bloque language icons en Drupal viene por defecto con un formato de lista vertical con se puede ver aquí:

 

Si queremos modificar este formato podemos jugar con las CSS del módulo locale. En concreto iriamos al fichero:

modules/locale/locale.css

En este fichero podemos encontrar diferentes clases CSS que podemos modificar para cambiar el aspecto del listado de idiomas. En nuestro caso lo que queremos es que aparezcan en horizontal, para ello insertamos este código en el fichero:

#block-locale-language ul li
{
display: inline;
list-style: none;
}

Lo que convierte el listado de idiomas en algo tal que así:



Como se puede ver hemos quitado las viñetas y formateado la lista horizontalmente.