phpMyAdmin Back Door

On September 25th, SourceForge became aware of a corrupted copy of phpMyAdmin being served from the ‘cdnetworks-kr-1′ mirror in Korea. This mirror was immediately removed from rotation.

The mirror provider has confirmed the attack vector has been identified and is limited to their mirror; with exploit having occurred on or around September 22nd.

via phpMyAdmin Back Door | SourceForge Community Blog.

This corrupted copy of phpMyAdmin included a backdoor which permitted execution of arbitrary commands by the web server user. The notice from phpMyAdmin may be seen at:
http://www.phpmyadmin.net/home_page/security/PMASA-2012-5.php

W3C announces plan to deliver HTML 5 by 2014, HTML 5.1 in 2016

The World Wide Web Consortium (W3C), the group that manages development of the main specifications used by the Web, has proposed a new plan that would see the HTML 5 spec positioned as a Recommendation—which in W3C’s lingo represents a complete, finished standard—by the end of 2014. The group plans a follow-up, HTML 5.1, for the end of 2016.

via W3C announces plan to deliver HTML 5 by 2014, HTML 5.1 in 2016 | Ars Technica.

The new HTML 5.1 will be smaller as a number of technologies (such as Web Workers and WebSockets) were once under the HTML 5 umbrella but have now been broken out into separate specifications. It will also have less stringent testing requirements.

Intel Confirms Decline of Server Giants HP, Dell, and IBM

But just four years later, Bryant says, the landscape has completely changed. Today, she explains, eight server makers account for 75 percent of Intel’s server chip revenues, and at least one of those eight doesn’t even sell servers. It only makes servers for itself. “Google is something like number five on that list,” Bryant told us on Monday evening, during a dinner with reporters in downtown San Francisco.

That’s right, Google is likely the world’s fifth largest server maker.

via Intel Confirms Decline of Server Giants HP, Dell, and IBM | Wired Enterprise | Wired.com.

Which SSL certificate should I buy?

SSL certificates that most web browsers can accept without grief are sold by a relatively small number of companies. That’s because the major web browsers are shipped with a certain set of “root certificate authorities” that they trust… and if your certificate isn’t signed by one of those authorities, or by a certificate “chained” from one of them, then you’re out of luck— the web browser will display a scary warning to the user or, in some cases, refuse to work with your site at all.

The cost of SSL certificates varies quite a bit, from as little as $20 to as much as $1,000 or more. Why such a big difference? There are three main reasons:

via WWW FAQs: Which SSL certificate should I buy?.

2. Some certificates are directly signed by a trusted root certificate, while others are “chained” from another “intermediate” certificate. This isn’t really a problem, as long as the company selling you the chained certificate really does own the root certificate. But some webmasters get confused by intermediate certificates, fail to install them correctly, and mistakenly think they have purchased a bad certificate. So chained certificates are usually less expensive to allow for this inconvenience, even though there is no real technical disadvantage.

Intel immerses its servers in oil — and they like it!

The idea of immersing servers in oil to keep them cool isn’t entirely new — passionate gamers have been housing their systems in vegetable oil for years. But it’s time to take notice of this trend when Intel starts singing its praises as a potentially revolutionary method for slashing the price of running a data center.

via Intel immerses its servers in oil — and they like it! — Cloud Computing News.

Most servers today follow design principles for optimal airflow, but “we could throw some of those rules out,” he said, and maybe build a better server. The obvious steps are eliminating anything to do with fans, sealing hard drives (or going to solid-state drives) and replacing any organic materials that might leech into the oil. A redesign of the heat sink probably would be in order, as would a rethinking of where things sit on the motherboard.

Building Web Services the REST Way

Representational State Transfer is intended to evoke an image of how a well-designed Web application behaves: a network of web pages (a virtual state-machine), where the user progresses through an application by selecting links (state transitions), resulting in the next page (representing the next state of the application) being transferred to the user and rendered for their use

via.  Building Web Services the REST Way

Google Compute Engine rocks the cloud

Google took its sweet time entering this corner of the cloud. While Amazon, Rackspace, and others started off with pay-as-you-go Linux boxes and other “infrastructure” services, Google began with the Google App Engine, a nice stack of Python that held your hand and did much of the work for you. Now Google is heading in the more general direction and renting raw machines too. The standard distro is Ubuntu 12.04, but CentOS instances are also available. And you can store away your own custom image once you configure it.

via Review: Google Compute Engine rocks the cloud | Cloud Computing – InfoWorld.

Is 5.3 cents per GCEU a good deal? It depends upon what you want to do with your machine. Rackspace prices its machines by the amount of RAM you get. It has stopped selling the anemic 256MB RAM VMs, but rents its 512MB boxes at only 2.2 cents per hour or $16.06 per month. If you want a machine with 4GB from Rackspace, it will cost you 24 cents each hour, about $175 per month.

And one more tidbit that needs emphasizing however this entire article is loaded with the ins and outs of renting servers in the cloud.

Keep in mind that the file system that comes with your cloud computer — be it on Amazon, Rackspace, or Google — is not backed up in any way unless you code some backup routines yourself. You can run MySQL on your cloud box, but the database won’t survive the failure of your machine, so you better find a way to keep a copy somewhere else too.

Very interesting.  Here is more about pricing.