Preview:
Citation preview
- 1. , JavaScript, . , CSS, . - , X- CoreOS - Elements Network
Sources Timeline Profiles Resources Audits Console EditThisCookie
...
- 15 14
- JavaScript- 16
- CSS 22
- 27
- 30
- Smart TV 32
: 12+ App Store Google Play: j.mp/Xakep_ipad j.mp/Xakep_android
GameLand#05(184) 2014 , !
- 2. , 2000-. - ,cvalign, . (frontend-- ) - , . -. -- . SPA
(signle page applications) frontend-- , , - -. , . , , . ,
frontend- -, backend-. . --
- 3. , JS- - . -, Node.js (: MeteorJS). frontend- - JavaScript-,
, , REST-API , . . , , , 510 . , -- . -, :). , ][ @IlyaRusanen
- 4. MEGANEWS ? PROOF-OF-CONCEPT ... DIVE INTO FRONTEND 15 3.0
JavaScript CSS 60 , Bower
- 5. , WRITE ONCE, TOUCH EVERYWHERE - WINDOWS 8 PARTY LIKE ITS
1989 , Windows 8 - Android Tasker EASY HACK , ! OSSEC - CENTOS
security- NEOQUEST -
- 6. X-TOOLS 7 - - -10 JAVA - Tesseract FANN , ! CoreOS , ? /
Linux - Hiawatha ! NoSQL FAQ ? WWW2 -
- 7. , Mifrill mifril@real.xakep.ru The OpenSSL Project -
CVE-2014-0160 - OpenSSL (1.0.1 1.0.2-beta). Heartbeat TLS/DTLS. - ,
HEARTBLEED: OPENSSL
- 8. ANDROID Google Android OpenSSL. , , - . . 64 , , - .
Heartbeat , - . - . , - , 2012 , OpenSSL 1.0.1. , , - - , . OpenSSL
- nginx Apache, , IM-- , VPN, . . OpenSSL 1.0.1 1.0.2-beta, 1.0.1f
1.0.2- beta1. 1.0.1g, , . - . - - OpenSSL -DOPENSSL_ NO_HEARTBEATS.
- , , Open Source, Heartbleed . 0 10 11 . Bloomberg, - , - OpenSSL,
- TLS (HTTPS). - Codenomicon, , , (Neel Mehta) - Google Security.
Codenomicon - Heartbleed.com .
- 9. -, - CES, . , - . Google , Android Wear, - . . , Wear - , .
Wear , , Google Glass, - OK, Google, . Google, , , - -. Android
Wear , . Android- Google: - Android TV . - Android- -. . Android
Wear LG G Watch. - Motorola, Samsung, HTC ASUS.
- 10. PWN2OWN Vupen Pwn2Own - , - CanSecWest. - : Pwn2Own . , - ,
- 850 . - , - - ZDI. , , . , Vupen, - . Vupen , , , . Vupen 300 .
Vupen 0day-- Mozilla Firefox, Adobe Flash, Microsoft Internet
Explorer Adobe Reader. , Oracle Java, Vupen (, ). 100 - Chrome,
Blink WebKit, Chrome.
- 11. , H Facebook , - , . . . Svbtle , Facebook , . . Facebook -
, - , , , . - , , . - Facebook , . , , . , - , , , - . - ,
Facebook. , . , . , . , , , - Facebook ? ? The New Yorker , , . -
Facebook . - .
- 12. , . Android Android (4.2.2, 4,3, 2.3). 387 ( appname 387000
WORDPRESS DDOS- - WordPress - . 162000
- 13. CEO Mozilla CEO H - CEO Mozilla. , , JavaScript. Mozilla
Foundation , strings.xml) - . APK Google Play Bouncer Android, - -
Google Play. XML-RPC (xmlrpc.php) , , . Sucuri, 162 - DDoS- .
- 14. - . , Mozilla . - . - , - ? , . , , , . , - . - . 2008 1000
8, , - . - CEO, - . , Mozilla , . , . , , CEO . Mozilla , , , , , ,
- . . , , - CEO. , , - . 1995 JAVASCRIPT 1998 MOZILLA.ORG. 2003 AOL
NETSCAPE, MOZILLA FOUNDATION. 1998 MOZILLA/FIREFOX , , - ,-
Firefox, .
- 15. H Novena bunnie , , , Xbox. 2012 , - - . , - , - , , , , .
NDA. , - Freescale iMX6, Freescale SoC. , , - , - - . $141485, 250
- , , .
- 16. . Novena - , : ARM Cortex-A9 1,2 . DDR3-1066 SO-DIMM 4 ,
SATA-II SSD-. - retina- LG LP129QE 12,85, 2560 1700 (239ppi). . , ,
, : crowdsupply. com/kosagi/novena-open-laptop. 18, 250 . . Novena
. - 500 , . - :4RAM,-4 Debian Wi-Fi-. 1195 , , , - . - . 1995 ,
SSD- 240 . - . , , . , , - - . Novena - IT-. , Wired : , , - - . -
- - - , - . - , - - . - Xbox One Microsoft . , , , - , - . 95% ATM
XP, , Win 7 . - - - Linux, - 67 - 51 - Metasploit 4.9. 1974 (+118).
- , Metasploit 4.9 90% -
- 17. DROPBOX , Dropbox H , - , . Rapidshare, - MegaUpload. . ,
Microsoft , SkyDrive (- OneDrive) . Microsoft - . - , - - , . -
.
- 18. Dropbox. - , - Dropbox-, , - . , Dropbox . Dropbox ( ), . -
. . , , - - , . , , , , .
- 19. 25 UNIX- Windigo, ESET CERT-Bund . - 25 , - Linux UNIX.
Windigo, ESET, Windows, . . , - , , : Linux/Ebury, Linux/Cdorked,
DNS- Linux/Onimiki - Perl/Calfbot. , , , - . , Ebury, , , , , . , -
, . 2013 7707 , 12 326, - 2014- 11 110. , 26 024 IP-, Ebury, 3794 .
ESET, 2011 , . - cPanel Linux Foundation. - , . , , Windows Mac -.
- Windows-- , . - , , - . 35 - - . , - 500 - . - , 800 - . Windigo
ESET - , - - . , , - - , , , - .
- 20. KINECT2 WINDOWS Build 2014 Kinect , - Microsoft . Kinect
Windows 2012 , Xbox. , - . 1080p Xbox One, Xbox , Kinect. . - , USB
3.0 - 110 220 . Microsoft , , - . , Kinect , - , . , SDK .
- 21. FACEBOOK , - , vouchercloud, . 2392 42% , . 23% , MP3 . 18%
, Blu-ray . 11% - , HTML , . 27% MS-DOS MS-DOS 1.1 2.0, Word for
Windows 1.1 , Microsoft - -. - , - - : MS-DOS 300 12 . 1.1 2.0 - ,
Google, Facebook, LinkedIn Twitter - WebScaleSQL. MySQL, , -
-.
- 22. HACK Hack PHP PHP KittenPHP, - , . Facebook. Hack PHP, , -
Hack , C++, Java . , , . , Hack Hack - ( PHP). - , Hack, HHVM, PHP
Hack. Hack , . Hack HHVM Ubuntu 12.04 LTS, Ubuntu 13.10 Debian 7.
Hack - .
- 23. Header ? . , , 2014 , SSH , - Telnet. - .
- 24. , - ( ) (, screen). , , - (, Wi-Fi- VPN) - . : - ,
copy-paste, , . 90% OS X, . , , . Debian Ubuntu, . , , - , iTerm2 +
Mosh + tmux. iTerm2 , iTerm OS X. , - . Terminal Type
xterm-256color , Enable xterm mouse reporting . , ( , autocomplete,
- Growl ) . tmux , . - - screen, tmux screen, - . , - . : , - , , ,
- Vim. . , screen , - tmux . Tmux , - : new-session
set-window-option -g mode-mouse on set -g history-limit 25000 , .
(attack), tmux- . . . tmux
- 25. Mosh - Mosh. , - - . ( - - , - ), , , . , SSH :). Git, :
git clone https://github.com/keithw/mosh.git cd mosh/ sudo apt-get
build-dep mosh ./autogen.sh./configuremake sudo make install , OS X
HomeBrew: brew install --HEAD mobile-shell . mosh HOST -- tmux a, ,
. Tmux , Msh , iTerm - . , , , - , zsh, . Mosh SSH
- 26. Header Proof-of-Concept ... rusanen@real.xakep.ru
- 27. - . , - , . - . - - . WWW EyeMusic iOSAppStore. vOICe:
seeingwithsound.com vOICe ? , (Neil Harbisson), - , , - ( ). - ,,
360 . , , , ? (Peter Meijer) vOICe.-- . . - . , , . , .
- 28. ? 2007(AmirAmedi)vOICe- . , 70 4500 , - , . - , , . , - . .
vOICe
- 29. ? vOICe EyeMusic, iPhone. - . , X Y, . - , . ( - ) 2D-. , -
. - . , Heartbleed EyeMusic -
- 30. . - , - , . , , DevOps-- . frontend- : . ? Cover Story , ,
. begebot@gmail.com DIVE INTO FRONTEND 15
- 31. , , - , , - . , : , . - , (, - ), HTML, - . , , , - . , , -
, , . - , . CSS , - . , CSS, , - , (, bgcolor). , -, . , . - , IE6,
- , PNG! , ? , , - XHR. AJAX, , , , JavaScript onclick, . - , . , ,
. , , - , - . MVC-, AJAX-, - . , , , JavaScript- - . - , - , -.
JavaScript : , - , - -, , - , , .
- 32. . , - , , HTML - . , , ( ), , HTML . : , - . , , , . , , ,
, . , , , - . HTML . : ,,- , -. - , - . , HTTP-, : , - . , , AJAX ,
- , . - , HTML, - . , - Node.js. , Node.js - JavaScript, . ? - - ,
. . JavaScript - , . - , . ! . - - , , , , ( , - , , -
- 33. ). , - . , - -, - , - , JavaScript. , - . , , - . -, , - ,
. - single page application , . - , ( + ) - . : HTTP-. (--, ) (- ,
CSS JS) . - , , () . , - . , , - , - . . - . , AJAX- , ( - ) . , -.
, , HTTP- , - , , . - Node.js HTTP- , JavaScript-, , , HTTP- . , -
, , ( ), - -. JavaScript ( - -
- 34. , ), . , - , - Big Data , , , - , , .
- 35. Cover Story Netscape Communications - Netscape 2.0. , - , -
, . - , Microsoft Internet Explorer 3.0 - JScript, . ... 3.0
JAVASCRIPT frontend- maxsvargal@gmail.com Raiden frontend-, ONsec,
ex-Mail.Ru rd@raidendev.com , . sadsorceror@yandex.ru
- 36. HTML-- Java- . (Eric Lippert) , - JScript Microsoft,
JavaScript - . , , , - . , API , . -, - JavaScript . . Microsoft
XMLHttpRequest , API. DOM JavaScript, AJAX (Asynchronous JavaScript
and XML) c - - . - XML JS- JSON, . - , , - API. - . , - . , - - , ,
. JavaScript. , Java Lite , -, - Info , , XML. , , , JavaScript - ,
. JavaScript-. RequireJS. - JS-, , .
- 37. . , . - . - . , . , . , JS- - . , , - , Prototype, MooTools
, , jQuery. , - , jQuery . - , . , JavaScript DOM , - , - (
JavaScript , ). CommonJS, JavaScript , API . , Node.js RequireJS. ,
, , . , , , - , - . - , , . : JavaScript , - - . JavaScript- - , V8
Google, JavaScript. - , . , Model View Controller, - (Model),
(View) (Controller). , . .
- 38. Backbone.js , MVVM (Model View ViewModel) , - . 2010 , .
MVVM - , Backbone.js . , , . var Book = Backbone.Model.extend({});
, , : var Library = Backbone.Collection.extend({ model: Book });
var library = new Library(); lirary.add({ title: 'The Dark Tower',
author: 'Stephen Edwin King' }); arguments. - : library.url =
'/books' library.fetch() Backbone42 backbonejs.org . - , .
Backbone.js , , - , , , History API. - , , Backbone.js . Info
Backbone DOM, History Events - Backbone.
- 39. JSON ( - ): [{ id:
334aa7010561cf20fc1e2c4fc63e1b82a9cfd83e, title: The Dark Tower,
author: Stephen Edwin King }, { id:
9ea598b60837a06038caa01672bcff3a8331134a, title: The Guinness Book
of Records, author: Hugh Beaver }] , . var LibraryView =
Backbone.View.extend({ // , el: #books, // tagName: li, //
className: row, // . , // underscore template: 'span
class=title%-title% /spanp class=author%-author%/p', // Backbone
initialize initialize: function() { // render
this.listenTo(this.model, change, this.render); } }); , . . var
Workspace = Backbone.Router.extend({ routes: { : index }, index:
function () { var library = new Library(); var view = new
LibraryView({ collection: library });
- 40. }); library.fetch(); } }); var workspace = new Workspace();
Info Backbone.js Underscore.js jQuery/Zepto , , , Exoskeleton
Backbone, . Extend(Backbone) Backbone.js , . - , , . , - , . , - .
, Marionette.js Chaplin.js. Backbone , Backbone. js , , - .
Marionette.js ( , , ared/buA