#Tips and Tricks For Web Development - We have been by-and-large Mac users but most of the tools are cross-platform and available for Wind

[supercomputerdaze]

Optimize Mac For Gaming

That’s because game developers optimize their creations for PCs first. Older Mac ports also relied on Wine wrappers, which dramatically limit game performance. So long as you have the disk space to handle the partition, BootCamp is a must-have for Mac gamers. How to Optimize Mac for Gaming. Macs don’t provide the ideal gaming setup.

Optimize Mac For Gaming Laptops

Gaming On A Mac

When you think of a Mac, gaming is not always the first thing that comes to mind. That used to be the realm of PCs, but today's Macs are more powerful and tailed to the needs of gamers. Nonetheless, even if you own an old Mac desktop or laptop, there are ways to optimize it for gaming. This article shows you what you need to do in order to prepare your Mac to handle the heavy graphics and processing power that most new games require.

How to Optimize a Mac for Gaming: Use These Tips! Mac’s are capable of so much. The number one thing on how to optimize a Mac for gaming is to clear space and maintain that storage “wiggle room”. Remember, the less your Mac has to worry about as you play your games, the faster that it will run. Check The Status Of Disk Usage. This is one of the best ways to keep your Mac in good shape as. Upgrade your Graphics Drivers for an immediate FPS boost. Your graphics card is the centerpiece of. Activate the Game Mode. Sometimes, all you need to do is activate the game mode on your device.

Before we describe the three method keep in mind that finding duplicate files is a tricky thing because of different file names, different versions of the same file, different download times and so many more variables. The first method shown below will make your manual search a little easier and a little more fruitful.

Tips 1. Boost Performance by Closing Others App during Gaming

Freeing up RAM is a little trickier because it's a dynamic resource. However, there are a couple of things that can be done.

First, one of the biggest memory drains in your system is the web browser. Some are more insatiable than others, but they're all resource-hungry applications. So are Java and Flash, so make sure that all browsers and their plugins are closed when it's game time.

Also make sure that apps that start at startup aren't running in the background. Essentially, any background non-essential process should go. This can be done: Apple icon (upper left corner) -> Force Quit... Choose the apps to be closed at gaming time.

If you want to stretch it even more, you can also consider disabling some Mac OS X (macOS) features, such as Siri or animation. If you're an amateur gamer the difference will barely be noticeable, but if you have a low-RAM system, it could yield positive results. If you have an older 4GB RAM Mac computer, we would recommend doing a full housekeeping run before you opt to upgrade your hardware for gaming.

Tips 2 : Optimize Mac Running Memory for Gaming

If you have a Mac that's a year old or more, then the first thing to do is cleaning out all the junk that's been collecting over that period of time. A utility like TunesBro CleanGeeker can help with this. CleanGeeker's deep scan capabilities will help you find and remove junk, duplicates, large files you don't use and even apps that aren't relevant to you any more. In addition, it can help optimize your startup items so you have an optimized booting time.

Highlights of TunesBro CleanGeeker

Remove invisible junk anc app caches.

Find and remove duplicates files for making more room.

Clean real-time memory used by other apps.

Turn off apps being opened at the login.

Step 1Download TunesBro CleanGeeker

First, download and install TunesBro CleanGeeker on your Mac. When you launch the app, you'll see several options on the left panel, such as junk, duplicates and large files. You will also see several other utilities that you will need for this Mac optimization exercise. Just follow the steps shown below:

Step 2 Clean up Memory and Uninstall Unwanted Apps

Find 'Memory' option and click 'Deep Scan' at the bottom. You will get the memory boosted in a few seconds. The app shows up how much memory it saved this time.

In the Utilities section, click on 'Uninstaller' and remove any app that you don't use anymore. Most users will have lots of these, and some of them may be utilizing more resources and occupying more memory space than you realize. TunesBro CleanGeeker's Uninstaller will remove every remnant of the apps that are removed, freeing up significant space.

You can also use the 'Optimization' tool to prevent certain apps from launching on startup. It will make your Mac more responsive and boot faster.

Step 3Scan and Delete (Junk/Cache/Large File)

In the main 'Junk' section and click on the Quick Scan button to allow the software to get into your system and identify all the unnecessary files like temp, cache, language files and so on. Review and then delete all the files you don't need.

Tips 3. Upgrade Hardware for Mac (10X Booster)

And this is the next stop. Upgrading your RAM increases compute power by that much more. In the example just shown, upgrading your hardware to 8GB of RAM will increase your Mac's processing to handle all but the most resource-intensive games. You'll still be limited by the graphics card, but shouldn't have problems rendering game content at the required frame rate. If you're going to be doing a lot of gaming, you can even consider an upgrade to 16GB.

You might also consider putting in a SSD because it can handle system tasks and load times better than older hard drives. Of course, there's always overclocking, but that's inadvisable on a MacBook Pro or MacBook Air because of overheating problems. You could probably do it on an iMac, but that might mean replacing the stock fan for one that can cool a lot better. Nonetheless, overclocking will most likely void your warranty, and just not worth doing on a Mac.

Summary

Overall, upgrading RAM, optimizing RAM usage and keeping your Mac clean are probably the three most effective things you can do to prepare your Mac for a life of gaming. Get a tool like CleanGeeker, upgrade your RAM and keep resource-hungry processes closed during your gaming sessions. That's your best bet.

Nov 9, 2018 16:29:07 / Posted by Candie Kates to Mac Solution

Related Articles & Tips

Despite the complexities and limitations, gaming on Mac is fun. Well, you must know that Mac is quite a robust and secure system to handle your gaming speed, configurations and settings provided you know a few tricks.

From making enough space to download and run games to purging inactive memory, running terminal commands to closing all the unnecessary apps, there are various methods by which you optimize Mac for gaming. Moreover, after making all the required software updates, hardcore gamers can also think of upgrading to new hardware such as eGPU or new SSD, but that is optional. So gamers, are you ready to set up your Mac for gaming? Let’s do it!

How To Optimize Mac For Gaming

1. Check The Status Of Disk Usage

This is one of the best ways to keep your Mac in good shape as well as optimize it for gaming. If you go through the details of Mac, you can find startup apps, resource-hogging or unwanted apps or other utilities that keep running in the background without our knowledge.

Status Of Disk Usage:

For this, Disk Inventory X is a free and potential tool that has been running for years and quickly displays the status of disk usage in a textual and visual manner. This step is essential as it will help you understand how much space on your Mac is occupied. So, you will know precisely how much space you need to retrieve to play games seamlessly and get optimum performance.

Although you can also find the disk space of your Mac by clicking Apple icon > About this Mac > Storage, yet the minute details are easily covered by Disk Inventory X and hence recommended.

Clean The Clutter& Optimize Mac For Gaming:

Smart Mac Careis our favorite tool, and we highly recommend this optimization suite to all the gamers. As it keeps Mac healthy by retrieving chunks of space, improving boot time and deleting redundant data like duplicate files, unwanted apps, etc. Its automatic scanning and cleaning not just improves the overall performance of Mac but also can be helpful for Mac games.

You might also be aware of the fact that games may require a lot of gigabytes whether you play it from Steam or download them on your Mac. That’s why it is recommended that atleast 15% of free space or 18GB space is available on your Mac, even after a game is downloaded, for it to function seamlessly. Maintaining it manually can be cumbersome. For it, you must rely on a third-party tool like Smart Mac Care, which can clean your junk files, duplicate, uninstall unwanted apps, which in turn, recovers space and maintains the system health.

2. Disable OS X Features (Notification Center & Dashboard)

The native features are hardly used for everyday purposes, yet they take up the processing power and RAM, hindering the good gaming experience. Thankfully, they can be easily disabled or enabled using Terminal as and when required.

2.1 Disable/Enable Dashboard:

Optimize Mac For Gaming Laptops

To disable, click on Spotlight icon from the menu bar and type ‘terminal’ or go through Applications > Utilities > Terminal.

Enter the command: defaults write com.apple.dashboard mcx-disabled -boolean YES

Next enter: killall Dock

These two commands above will restart the Finder with the dashboard being disabled.

In case you want to enable it again, follow these steps:

To enable; defaults write com.apple.dashboard mcx-disabled -boolean NO

Next enter: killall Dock

2.2 Disable/Enable Notification Center:

To disable: Open terminal once again and enter command: launchctl load -w /System/Library/LaunchAgents/com.apple.notificationcenterui.plist

Next enter: killall NotificationCenter

To enable: Open terminal once again and enter command: launchctl load -w /System/Library/LaunchAgents/com.apple.notificationcenterui.plist

Next open Finder, press Command + Shift + G and copy-paste /System/Library/CoreServices/

Restart your Mac, and you will be able to get back your Notification Center.

As both processes keep running in the background, it is better to keep them disabled and utilize it to get better gaming experience than ever.

3. Stop The Apps From Starting Automatically

Does this happen to you as well that when you log in to the system, various apps start automatically and hog the system resources? Well, if it is happening, you can disable login items and optimize your Mac for gaming.

For this;

Go to click on Apple icon > System Preferences > Users and Groups > Login items. Here, you can select the app that you do not want to pop-up or rather select all of them and click on the ‘-’ sign below.

4. Close All Applications & Menu Bar Apps

Your Mac will inevitably run at a slow speed, and your performance of your games would not be as expected when multiple applications are running behind. Hence, this step is another necessity of the list.

Check your dock and quit all the running applications by right-clicking on them and selecting Quit. Looks like a small process but believe me it’s an effective one!

5. Configure Game Settings

Your games’ in-built settings can be tweaked side by side while you optimize Mac for gaming and learning how to make the gaming experience better. These settings can be different, depending on the game. Hence we will tell you some generalized tips here that will help you with most of them.

Go to Graphics settings from the options and select in between Low, Medium and High to suit your graphics card.

Go to Game settings or Options within and make the screen resolution settings appropriate as per the game requires.

Play the game, and you will be able to decide which settings ideally suit your game.

6. Play In Different Viewed/Windowed Mode

Not many people believe this, but playing games in different modes do help in recognizing the speed and graphics variation of the game. You can always try for both the options, including Windowed mode or full-screen mode one by one.

You can switch between modes by visiting Video or Graphics settings of the game itself. Switch the options and find the most suitable mode as per speed, texts display and transient graphics.

7. Keep Checking Activity Monitor

Activity Monitor is an in-built tool of Mac, which is capable of explaining where and how Mac is using memory, CPU usage, Energy consumption, etc. It can also show you which application is running behind when you are enjoying your favorite games on Mac.

Other than this, you can also keep track of RAM and CPU usage, especially when you hear the fans running at speed while playing games on Mac. If any of the tasks is taking a toll on resources, you can simply choose to end it right from here.

8. Keep Software Up To Date

Now, this seems obvious, but the step helps in maintaining the process of the system as well as optimizing Mac for gaming. Keep visiting the App Store to find any new update on the game as any kind of bug might be slowing down the gaming speed. You can even let Mac update all the gaming or other applications to stay up to date with a simple tweak.

Just go to System Preferences > Applications > Tick mark the ‘Automatically check for updates’.

Also, make sure that you update all software, including OS for the smooth performance of Mac, which, in turn, helps in removing any bugs or glitches as well.

And you are good to go!

9. Run Windows To Play Window-Specific Games

We know that your Windows users’ friends might be telling you the story of cool games that they enjoyed last week, but it is still not available for Mac. Even in this case, you are at luck as Mac lets you install Windows on your system and let you enjoy the same way your friends are.

There are various methods by which you can install Windows on Mac. So, check out how to run Windows on Mac?

EXTRA TIPS

We are sure that you have got all the tips and tricks on how to optimize Mac for gaming. But we have something else for you. All these methods were focused more or less on the internal settings. Yet if you are someone who wants more to enhance your gaming experience on Mac, we have some quick suggestions for you.

Upgrade HDD / SSD

While learning how to optimize Mac for gaming, this trick is good to try! Do not limit yourself to graphics or processors as hard drives play an essential role in letting your game load in no time, boots the system quickly and improves the system tasks.

It is best if you upgrade to SSD if your Mac doesn’t come with one. Learn the working mechanism of SSD and make sure you go for those SSDs which can upgrade in future and optimize Mac for gaming.

Upgrade Your RAM

RAM plays a crucial role for smooth gaming on any system and so on Mac. Explore your Mac with Activity Monitor, and if your system needs better memory, better upgrade it.

Some gamers are comfortable with 4GB of RAM, but some of them require more and upgrade their RAM to 8GB or even 16GB. Which gamer are you? Define and upgrade!

Try External Graphics Processor or eGPU

For this trick and before investing, you need to find if your Mac is compatible with Thunderbolt 3 standard by identifying the port. In addition to the internal video processor, eGPU provides additional performance for professional apps, 3D gaming, VR content and more for the enhanced gaming experience.

A good eGPU is capable of accelerating apps, allows VR headsets to connect and let you charge the MacBook Pro. It surely is a costly affair to invest in a good eGPU, but those gamers who have afforded it already are pretty content with their Mac for gaming sessions.

Additional Tip: Feeling generous, if yes, then check out the new Mac Pro, which comes with robust Xeon processors up to 28 cores, Apple Afterburner, a revolutionary Accelerator Card and more.

We Are Listening!

What do you have to say about all the tips and tricks for optimizing Mac for gaming? Let us know in the comment section below. Also, follow us on Facebook and YouTube for cool tech-updates every day.

Gaming On A Mac

What Do You Think? 6 Responses

[drupalthoughts]

Wrangling Communication Apps with Rambox Community Edition (Free and Available for Windows, Mac and Linux.)

Occasionally, I’ll hear someone mention how difficult it is to manage the dozens of communication and productivity apps many of us use daily.  

These include apps for email, project management, chat, social media, voice and video conferencing, time tracking, to-do lists, and more.

It’s difficult to manage so many open tabs in my browser between webmail, chat, and project management apps. I wind up missing important information or alerts!

Focusing on desktop computers or laptops, where we get most of our work done, here is a list of some services I use, either with their native desktop app, or in a web browser:

Daily:

Microsoft Outlook (email)

Slack (chat/conference)

Wrike (project management)

Zoom (conference/chat)

Microsoft Teams (chat/conference)

Workflowy (outlines within outlines)

Habitica (personal task/habit management)

Google Drive apps (Docs, Sheets, etc)

Feedly (RSS feed reader)

TweetDeck (social media account aggregator)

Google Hangouts (chat/conference)

Discord (chat/conference)

Facebook Messenger (chat)

Trello (list/task management)

Todoist (list/task management)

Less often:

Hootsuite (social media account aggregator)

Skype (conference/chat)

ProtonMail (e2e encrypted email)

Wire (e2e encrypted chat)

Some of these apps need to stay running nearly 100% of the workday to avoid missing any important or not-so-important notifications (managing notifications with wearables will be another story).

For me, this includes Outlook, Slack, and Wrike, though I’ll typically have Habitica open so I can quickly add or check completed tasks, and Hangouts so I don’t have to reach to unlock my phone if a family member messages me.  

One of the problems with using the web app version of these, most of which are identical to the desktop apps, as most of them are simply web pages wrapped in a desktop app wrapper, is that we are always opening and closing tabs, groups of tabs, or exiting the browser completely. Some web apps have separate browser plugins that can be installed so even if the app’s tab is closed, desktop notification popups and sounds will persist, though this also requires the browser be configured to continue running as a background service even when the browser is exited. Personally, I disable the background service option to save system resources, because I often test websites in multiple browsers, each requiring a giant memory footprint.

Each new browser tab takes up more system resources. Sometimes I have a large number of tabs open for the same app, like Wrike, which is a memory and cpu hog, causing the performance of all apps to suffer.

This is where Rambox comes in, a free and open source “workspace browser”, where multiple web apps may be contained in single permanent tabs, wrapped into a single desktop app. There are other similar apps like Stack (Mac only), Shift (pricey), and others not worth mentioning which may be free, but their development has stagnated. Rambox gets regular updates and features, and they support their free open source version (FOSS) with a “pro” paid version that includes some additional features, a slicker interface design, and a larger list of supported services. I did not find any real advantage during my recent trial of the pro version aside from its addition of tab groups, where one group could be for work and another for personal.

There aren’t any secret tricks to adding and configuring app tabs within Rambox, so I won’t go through that.  

For fun, here’s a list of all the apps the free version of Rambox supports, about 100. The pro version supports over 600, but give me a break. The free version also supports “_Custom Service”, the last option. This is how I’ve added Habitica, Feedly, Trello, and others, by simply adding the link to their respective web apps into the Custom Service settings. It opens the page, asks for your user/pass just like the respective service’s website would, and you’re in.  

Some useful global Rambox features:

Auto-run on startup whenever you reboot.

Set a master password on startup.

Set a password to lock access while Rambox is still running (can be same as master).

Change the location of the tab bar to top, left, bottom, or right.

Global toggle for “Don’t Disturb” to block popup and audio notifications for all apps.

External links clicked within Rambox from apps like Outlook, Wrike, Basecamp, Hangouts, etc, will open in your default browser.

Some Rambox tips:

Apps can be toggled on and off from the checkboxes on the main windows. Apps that are only used occasionally can be left off until you need them.  

Toggle off work related apps on the weekend and toggle off overly annoying personal apps during the workday! 

Use the zoom in/out features to keep each individual app locked at the font size and overall size you prefer.

SSO and 2FA logins using Duo Mobile have never been a problem.

Web apps that you might have installed additional browser plugins for to make them easier to interact with, like the Feedly board/bookmarks plugin or Pocket bookmarks will work best in your browser since Rambox doesn’t support browser plugins.

Social network aggregation apps like Tweetdeck or Hootsuite may be important to have running front and center during events or for general social network monitoring, and Rambox does work great with those, but I opt to keep them disabled or not add them to avoid distractions.  

There may be one trick to adding some custom apps. Apps that use your Google account or other social accounts to authenticate may trigger popups that won’t work correctly. In these instances, most services can have a password added, using the same email or username, separate from the Google or social sign-in.

And Slack...

Currently, I don’t use Slack with Rambox. I use the Slack desktop app.  

Only the desktop app supports multiple simultaneous workspaces that can be toggled from a list of icons on the left sidebar. This allows me to simultaneously receive messages and notifications from my coworkers, IT Service’s workspace, and several other workspaces. The web app only supports one at a time where switching to one workspace hides all the others. I also had an issue once with a Slack video chat popup that seemed to disappear while still producing audio, but that was a long time ago. Feel free to give it a try if you only use one workspace. You can also add individual Slack workspaces to their own Rambox tabs, but that tends to eat up memory, and defeats one of Rambox’s RAM saving purposes!

Rambox Community Edition download on Github (Available for Windows, Mac and Linux.) https://github.com/ramboxapp/community-edition

Rambox main site https://rambox.pro

[javaprogramming01-blog]

Tips and Tricks For Web Development -

We have been by-and-large, Mac users but most of the tools are cross-platform and available for Windows and Linux except CSSEdit.

  Netbeans. That is a fantastic IDE, and when used with Xdebug it provides a superb PHP development environment with line-by-line debugging and all that the opposition (Zend Studio) offers but it's free!. BTW we are fans of Zend Studio only not the price tag!

  This brings us onto Xdebug. This is a great PHP module/addon that when used with Netbeans provided fantastic debugging facilities.

  CVSDude. What is that guy? CVSDude.com! This is a very amazing SVN hosting alternative. We attempted running our SVN we tried other SVN suppliers and eventually started using CVSDude for our Subversion Requirements. Most programmers will learn how significant SVN is for team collaboration and without SVN it's nearly impossible to collaborate with a team taking care of a big job. CVSDude offer a cost effective SVN job hosting option with several extras like integrated Trac and Bugzilla. Support is great, and it can all be managed via their internet-based games console.

  SyncroSVNClient So this brings us to Subversion clients, there's allot out there, but our favourite is SyncroSVNClient, simple to use, affordable and reliable.

   We have experience of Firefox and Firebug, and these are unusual instruments but should you be a JS developer and have a Mac have a look at Safari's JS debugger. On our Macs, we discovered it took much fewer memory resources than Firebug and offered syntax highlighting in the JS code than makes it better to ready and forthwith see bugs in the code. To enable the Safari Develop menu and Web Inspector, only close Safari and type (or copy/paste) the following command into Terminal.app (/Applications/Utilities): defaults write com.apple. Safari WebKitDeveloperExtras -bool true.

  CSSEdit . Firebug for Firefox and Safari Web Inspector do an excellent job of CSS debugging group review and style overriding so they can be perfect for discovering a CSS issue. However, a tool we now have found priceless on many occasions is CSSEdit by MacRabbit. This CSS editor lets you browse any fashions and override these substantially the same as FB and Web Inspector but with much more ease. The controls and interface are simple to use. New style characteristics can be easily defined by using the GUI without the need to consider the syntax or need to go out hunting to get a sample on Google. More advice is available here: http://macrabbit.com/cssedit/.

  Hopefully, this advice helps!

[ryanssecurityengineering]

Week 7 Notes and Reflection

REFLECTION

Unfortunately I ran out of battery and lost the lectures notes for the second lecture. I had to reconstruct them using the class notes, Richard’s “slides” and what I remember. I’ll especially have to research more about Public Key Infrastructure later, it seems interesting!

Interesting lecture, I like how we found a mistake on the exam! I also liked the way Richard described Man in the middle attacks in Diffie-Hellman. There were lots of “homework” activities so I should do those! 

I thought it was pretty insane you can write to memory using %n in printf! I wonder what the designers of printf were thinking?! They were like “o ye lets scan in some stuff using our printing function!!” 

The extended lectures were cool - I found it weird that pressing that Command + S key on a Mac gives you root. There are so many interesting practical things with security... bug bounties, CTFs that you don’t really see in other areas of computing such as AI. 

NOTES

Mid Term Exam

Question 5 Solution - Can’t brute force it by hand. The answer is F - type I /Type II error tradeoff. 

Question 10 - The answer is D - easy to factorise a 64 bit number. Even 512 bit modulus is crackable. However even RSA is wrong for some reason.... All wrong!! 

Proof of liveness - Like a replay attack, challenge response. Proof that there is someone there. 

Richard expects you to go to all the lectures. Should have known Sun Tzu!

Diffie-Hellman - How do you set that shared secret up? 

5^3^7 is the same as 5^7^3. Power raising is associative. 

R -> 78125 -> S S-> 125 -> R

We don’t know R or S private key. Only the number they raised (5). Very difficult to solve the discrete log problem, to go backward to the private key. 

When both sides receive their key, they both raise the value by their private key. Both becomes the same. 

Forward Secrecy - protects the future messages.

Syria Castle - Defence in depth. The castle fell when the sieiging people forged a letter telling the castle people to surrender. Didn’t fall due to the defence of the castle.

CYBER LITERACY - VULNERABILITIES

A vulnerability is a weakness, and an exploit something that takes advantage of that.

Bug - software mistake. Sometimes bugs become vulnerability. 

Types

Memory corruption - somehow the bad guy can change something in memory to allow the program to be under the control of the bad guy.

Buffer overflow 

Stack and heap  - FIFO temporary info about the functions are on the stack. Heap for allocated memory - dynamic memory allocation. 

How functions are called in C - when control switches to another function, the function is frozen. Temporary info such as registers stored on stack. COMP1521 stuff.

Integer overflow - If you keep adding, it will go negative. This can cause it to maybe pass some tests. 

Format String - Like Bird flu - Everyone has written buffer overflow bad code in the old days! Then people started patching it. Apparently they are coming back. C has crazy way of printing stuff using printf(). In the old days when you wanted to print hello world had to use printf(”%s\n”, “Hello World”). However no ever did that. Everyone just writes printf(”Hello World\n”). However someone might write name <- get user name. Then you want to print the name you write printf(name). E.g. my name is “%s Richard Buckland”. It will try and look lower down in the stack and print that out as the argument. %s will print out the contents of the stack until a null character. You can use %x to print out the next byte and print out hexadecimal versions of the stack. Printf(”%x %x %x %x”). Shows entire contents of stack. Could have passwords, return addresses. %n WRITES TO MEMORY. You can do arbitrary writes to memory. 

Swiss Cheese - holes might line up! Holes overlapping and poke finger through. These sort of bugs are like that! Get lucky. 

Stack Canary? Research that. 

Shell Code - if you attacking a system, how nice it would be to get a private shell to come up and do whatever you want? Write some machine code that calls OS functions that makes shell pop up. This code is shell code. Put shell code into a buffer and run it.

Nop sleds - You can use buffer overflows to jump back to your buffer to run programs. However sometimes don’t know where in memory where the code is placed. Nice to have a bit of wiggle room. Just put lots of NOP operations - it will be like a slide into your code. Looking for NOP sleds - malware scanners. However whole lots of way to write NOP sleds without NOP.

If you find vulnerabilities, into will go into the National Vulnerability Database and CVN (Common Vulnerabilities and Exposures) and CNA (CVE Naming Authority). 

Responsible disclosure - If you find a vulnerability, tell the vendor then CERT(eg CERT Australia). or you can sell it to the bad guys!

OWASP Top 10 list should know for top 10 vulnerabilities. Essentially the same every year!

BUG PUZZLES - Check slides

Example 1 - Integer overflow for the length. Get_user_length is UNSIGNED, but length is signed.  Lots of implicit conversions between sign and unsigned. Then read will read the overflowed length value since read() takes in an unsigned length value, which might be bigger than 1024.

Example 2-  Optimistic indenting 

ASSETS

Security is to protect your assets. Sometimes we protect the wrong assets. Cold war - I wonder if the world will be here tomorrow?  The most important asset is to protect mankind. 

Door bell on the car - If you placed that in the car it went ding dong in his house. $5 car alarm first step into brilliance. What are you going to do when the ding dong happens? Might run down there and get killed!! The real asset is the window of the car, not the money! Leave the window open! Got wallet stolen, but got AIDS. Easy to protect the wrong thing. 

At the uni’s security review was all machines. Uni assets are students, reputation, user data, staff. The trick is, what you should do is the assets - what are you trying to protect? Ask people - junior, senior people. Review the list of assets every year/month. Real weakness is something you don’t see - blind spot. Try and find the things you haven’t seen. 

Strategies for Identifying the Assets

Regularly surveying the values of people of the involved in what you are protecting. Multiple pairs of eyes is a good asset.

Develop a sensible plan - well designed to tease this information out of them. Humans are generally poor at regurgitating everything they know, however they are generally very good critics.

Periodically revise current list of assets. Don't set and forget. Values and assets of an organisation can drift.

Examples

Team America

Richard's wallet vs Richard with AIDS

Car doorbell

Leave windows open?

Share registry - no more paper trails, everything is recorded electronically. Land title database was privatised. What are the risks?

Coke formula

Parliament - a collection of people that hold particular importance together.

Valuing the Assets - Defining what is important

Categorising types of assets

Tangible Assets: Those that are easily given a value

A gold chain valued at some relatively static amount

The jewellery in a jewellery store.

Intangible Assets: These cannot be easily and objectively be valued

Company secrets

Availability of services

Employee Morale & Security

Customer information

* Monetary + psychological/emotional costs

* Difficult <> Don't do

Examples:

Company secret - what is at stake?

QOS Guarantees

Strategies for assigning values to assets

Survey what many people think

no single person or group should be solely evaluating the assets&semi;

Examples of the information that should be gathered are as follows:

"How much money would you lose where this data center to go down for 24 hours?".

"How much will you lose if your company is disconnected to the internet for 3 hours?".

Examples

In assessing the value of a park

Picasso

Diffie-Hellman - Only provides confidentiality and integrity? Does not provide authentication. 

Web of Trust (PgP) - Research this

Public Key Infrastructure (PKI)

SSL/TLS

Read Bruce Schneier's paper https://www.schneier.com/academic/paperfiles/paper-pki.pdf

passports (links photo with name, certified by office)

x509 certificates (links public key with domain (and maybe some other info))

padlock in your browser

look at some certs

CAs, root certificates, RAs, pay money to browser manufacturer??!! (check out your web browser)

conflicts of interest

most google search pages on SSL written by vendors

it was the blockchain of the 2000s

self signed, domain verification, organisational verification, extended verification.  (ha!)

what if anything are the risks of self-signed?

safety vs identity

the green bar

session keys - the TLS handshake (4 keys)

why use session keys rather than using RSA for all?

wildcards

3 main certificate authorities: Symantec, Comodo, GoDaddy

homework : find examples of (serious) fraudulant certificates being issued

Certificates don’t protect against gooooogle.com

TLS handshake example

BUG BOUNTIES (From notes, I lost mine)

Crowd-Sourced Bug Bounty Websites

Public: Hackerone, bugcrowd

Private: Synack

Often have criteria of whats in/out of scope, as well as what kind of bugs they won’t accept. For example websites that they don’t want you touch

Tips

Learn web apps

Usea a wide scope → bigger net = more bugs

Look for software updates, or assets that have recently changed

Look for publicly disclosed reports → Can see prior bugs that have been found/exposed. If a bug has occurred once, theres a chance it will occur again

Pentesting  (From notes, I lost mine)

Fuzzing

Automate process - a program that continually adds input

Some fuzzers are aware of input structure, and some even are away of program structure

Fuzzers aren't precise, but can test a large amount of inputs

Fuzzing software - afl (the way to go apparently)

Mutation strategies - bit flips, byte flips, arithmetic, havoc (combination

Use fuzzing to test your own software

Homework: Do the fuzzing tutorial

[lovingmagazinetrash-blog]

Respawnables apk

It really is now time I'm happy to supply Respawnables secrets to you. It can be a price-free online game as you are able to training, appreciate without any determining to get anything. Thanks to very highly-competitive games person efforts that are almost each supply itself the advantages obviously with turning to purchase within sport. Especially what is outstanding you obtain endless Gold and Income only very few clicks and thus minutes. Utilizing it cheat you'll be able to attain means just rapidly. Hiring you're are cheats tooled by this Respawnables in a position to craft whatever amount of Silver and Income! I understand also how regular is always to generate means and you know the length of time. The theory frequently requires a wide range of moment and very often you even need to put in actual income to open that item. That is why we have furnished our new compromise that is contemporary. On this generator, people are capable of performing extremely mundane or simply just missions that are expanded quicker. It isn't essential to spend your finances to acquire anything inside game. Basically, start use our very own extraordinary The Respawnables silver compromise and increase into best in this excellent game. The software that is particular is just updating all the time to help keep that . Whatever smartphone you have, this Respawnables hack that is kind of works effectively employing products that are each. The most recent equipment to get a lot of our secrets is going to be the possiblity to steer clear of almost any prohibitions. All of us fear quite a lot on the subject of protective and this common supporters privateness. We curently have fixed our Respawnables platinum crack into a lot more safeness methods from barring accs, to safeguard yourself. Our personal cheats can't need present info. Therefore you should not retain fretting about your recreation report that is main to become halted. Every little thing to help ease the utilisation was conducted by we. Merely link your precise telephone up and determine the options that you desire. It is easy-to attain any form of resources simply immediately. Like every my own personal another compromise, like this useful android cheats resource has been considerably tested through many of US. Understand that sotfware is dealing with Windows and Mac. This accomplishment rate to the application is merely about 98 percent. Someone to be a guest possess 2 techniques. First thing which our firm developed is attain hiring and software that using your pc. Furthermore you are able to on line hack as part of your webbrowser. Just for obtaining Respawnables tricks that were online, you merely should enter your game label nick and set the quantity assets that were exact. Solution that is 2nd is downloading software. Employment is undoubtedly fairly simple. It i and every individual must handle that. However, experience liberated to use almost any tactic that you are pleased with. Caused by the Respawnables that is best tips you get platinum and money without losing dollars. Don't hold out and endeavor app to have large level of gear. All of us have devote many nights to generate The Respawnables cheats perfectly PC virus plus works together every features around the game that was video. It carries a good a lot of wonderful benefits and can be another resources around online. It doesn't matter what cellphone or what software you playing with this game on. Once the gaming is appropriate using your cellphone that is recent system is ideal for everyone. Make an effort my own, personal features that are refreshing, and you may becoming a skilled in this online game. It must be greatly simple for confident you shall not possess ailments with this method to perform. Furthermore a fresh signal who erases almost all marketing has been currently fitted by us. If you wish to be leading individual because sport that is particular, get this Respawnables that is preferred compromise. Along with Income & cheat and produced limitless Silver you will do everything you might want. Having this application that is amazing you will be specialist of the internet sport. Moreover, you positively don't have got to have jb or origin in a cellular phone phone for the cheat to work effectively. Our personal The tips work by working together with on the net form of the game that is video, to ensure you don't need certainly to to download an offline release on this game that is online. That's a request that have been kept-up to-date which is at this time a-one sincerely performs. This software that is phenomenal serves up incredible attributes. It will not need you to load any kind of programs in your smartphone. It is possible to forget regarding catching Respawnables hack gold from options that are undiagnosed because of the truth all compromise task is over the world wide web. This type of crack reveals everybody having an easy to understand variety that is truly a bit of meal for each person. Users push on the control key and thus merely must link mobilephone, select the level of components need to add to video game. Security is merely stimulated through avoid to put on person incognito, when you wish, but you might modify it.