Web technology Layers

學習一個講座,覺得梳理的不錯記錄一下,備查:

Client Layer:
Ajax, HTML/CSS , Flash/RIA
javaScript, Widgets, DOM

protocol Layer:
Soap, XML-RPC, REST
HTTP/HTTPS

Structure Layer
JSON  ,XML, RSS/ATOM
Text, JS-Object, Custom

Server Layer
SOA/WOA , SaaS, Traditional
Web Services, Open APIs ,Custom APIs

Mac下的bloger editor test

不得不承认自己的愚钝，这么好的思想不会用，在windows下面使用的是windows live writer决的不错，干活很高效，想mac下面也应该有把，果不其然，MarsEdit, ecto, 等等，试用一下MarsEdit先。

成功安裝了Pydev,運行了”Hello World”

在我的Mac上面安裝了 Eclipse插件Pydev, 運行了”Hello World”.

以後python的開發準備用這個東東了.

參考:http://ez2learn.com/index.php/python-tutorials/eclipse-pydev-tutorials/181-eclipse--pydev

What is IAF(Identity Assurance Framework)?

.Framework supporting mutual acceptance, validation and lifecycle maintenance across identity federations.

# 框架支持相互認可,校驗和跨認證聯邦的生命週期維護.

.EAP Trust Framework and US  e-Authentication Federation Credential Accessment Framework as baseline.

#以"EAP Trust Framework "和"US  e-Authentication "聯邦信用訪問框架為底線

.Harmonized, best-of-breed industry identity assurance standard

. Identity credential policy #身份信用策略

. Business procedure and rule set #業務行程和規則集

. Baseline commerical terms  #基本商業用語

. Guideline to foster inter-federation on a global scale

. it consists of 4 parts: #4個組成部份

. Assurance Levels # 保險級別

. Service Assessment Criteria # 服務評估規則

. Accreditation and Certification Model #鑒定認證模塊

. Business Rules #業務規則

IAF Assurance Levels

Four primary levels of Assurance:

. level 1 – little or no confidence in asserted identity’s validity #在身份校驗沒有機密

. level2 – Some confidence 一些機密

. level3 – High level of confidence  高級的機密

. level4 – Very high level of confidence 特高級機密

.Use of Assurance Level is determined by level of  authentication necessary to mitigate risk in the transaction, as determined by the Relying Party

AL1 – PIN and Password

AL2 – Single Factor; Prove control of token through authentication protocol

AL3 – Multi-factor auth; Cryptpgraphic protocol; “soft”, “hard”, or “OTP” tokens

AL4 – Multi-factor auth w/hard token only; crypto protocol w/keys bound to auth process

Zen of python--應該是必讀的吧

The Zen of Python

    Beautiful is better than ugly.　漂亮別醜陋強
    Explicit is better than implicit.　顯性比隱性的強
    Simple is better than complex.　簡單比複雜強
    Complex is better than complicated.　組合複雜比結構複雜強
    Flat is better than nested.　直接比嵌套強
    Sparse is better than dense.　稀疏比稠密強
    Readability counts.　可讀性
    Special cases aren't special enough to break the rules.　別壞了規矩
    Although practicality beats purity.　與簡潔合拍
    Errors should never pass silently.　有問題不能不出聲
    Unless explicitly silenced.　
    In the face of ambiguity, refuse the temptation to guess.　別叫人家猜
    There should be one-- and preferably only one --obvious way to do it.　只有一個合適的方法
    Although that way may not be obvious at first unless you're Dutch.
    Now is better than never.　馬上行動
    Although never is often better than *right* now.　
    If the implementation is hard to explain, it's a bad idea.　如果實現的沒辦法解釋，它一定是個壞想法
    If the implementation is easy to explain, it may be a good idea.　如果實現解釋起來很簡單，它也許是一個好想法
    Namespaces are one honking great idea -- let's do more of those!　

ref: http://www.python.org/dev/peps/pep-0020/

準備用Python寫點小東西,遇到的第一個問題:python 調用系統命令

python
Python 2.6.2 (r262:71600, Aug 19 2009, 12:13:04)
[GCC 4.1.2 20071124 (Red Hat 4.1.2-42)] on linux2
Type "help", "copyright", "credits" or "license" for more information.
>>> os.system('ls')
Traceback (most recent call last):
  File "<stdin>", line 1, in <module>
NameError: name 'os' is not defined
###貌似沒有找到os這個東東(module)

>>> import os
>>> os.system('ls')
Desktop             rubyStudy
>>>

出來了.

安全防護不是一種東西,而是一種系統的特性

Security is not "stuff." Security is a property of a system.

安全防護不是一種東西，而是一種系統的特性

--Web Security Testing Cookbook