CDATA ZoneThe place where almost anything goeshttps://www.cdatazone.org/templates/default/img/s9y_banner_small.pnghttps://www.cdatazone.org/2012-05-25T16:06:19ZSerendipity 2.5.0 - http://www.s9y.org/enRob Richards2012-05-25T16:06:19Z2012-05-25T16:06:19Zhttps://www.cdatazone.org/wfwcomment.php?cid=600https://www.cdatazone.org/rss.php?version=atom1.0&type=comments&cid=60https://www.cdatazone.org/index.php?/archives/60-guid.htmlAPI Security
API Security talk at PHP|Tek 2012 ]]>
Rob Richards2012-05-23T13:11:46Z2012-05-23T13:11:46Zhttps://www.cdatazone.org/wfwcomment.php?cid=590https://www.cdatazone.org/rss.php?version=atom1.0&type=comments&cid=59https://www.cdatazone.org/index.php?/archives/59-guid.htmlAPI Development
API Development talk at PHP|Tek 2012 ]]>
Rob Richards2011-09-26T11:59:48Z2011-10-01T16:32:20Zhttps://www.cdatazone.org/wfwcomment.php?cid=582https://www.cdatazone.org/rss.php?version=atom1.0&type=comments&cid=58https://www.cdatazone.org/index.php?/archives/58-guid.htmlxmlseclibs 1.3.0 Released
You can find 1.3.0 here: xmlseclibs 1.3.0
Things added or fixed in this release:
26, Sep 2011, 1.3.0
Features:
- Add param to append sig to node when signing. Fixes a problem when using
inclusive canonicalization to append a signature within a namespaced subtree.
ex. $objDSig->sign($objKey, $appendToNode);
- Add ability to encrypt by reference
- Add support for refences within an encrypted key
- Add thumbprint generation capability (XMLSecurityKey->getX509Thumbprint() and
XMLSecurityKey::getRawThumbprint($cert))
- Return signature element node from XMLSecurityDSig::insertSignature() and
XMLSecurityDSig::appendSignature() methods
- Support for with simple URI Id reference.
- Add XMLSecurityKey::getSymmetricKeySize() method (Olav)
- Add XMLSecEnc::getCipherValue() method (Olav)
- Improve XMLSecurityKey:generateSessionKey() logic (Olav)
Bug Fixes:
- Change split() to explode() as split is now depreciated
- ds:References using empty or simple URI Id reference should never include
comments in canonicalized data.
- Make sure that the elements in EncryptedData are emitted in the correct
sequence.
]]>
Rob Richards2010-09-16T21:46:00Z2010-09-17T08:38:37Zhttps://www.cdatazone.org/wfwcomment.php?cid=570https://www.cdatazone.org/rss.php?version=atom1.0&type=comments&cid=57https://www.cdatazone.org/index.php?/archives/57-guid.htmlVizio Netflix Widget
After a few hours of searching I finally found someone who figure out how to get it working again. It appears the widget was recently updated and in order to get all the queues to show up, the widget needed to be deactivated and then reactivated. Sounds simple enough, but unfortunately not so straightforward. The widget doesn't have an option to do this via the UI. You are required to send a serious of commands via the remote in order to access the hidden functionality.
Once in your instant queue, enter the following commands on the remote: up up down down left right left right up up up up
This brings up the prompt to deactivate the widget from your Netflix account. Select yes and then confirm. Once successfully deactivate, just restart the widget, reactivate it against your account and you should happily now see all the queues now available for selection. ]]>
Rob Richards2010-05-11T17:56:00Z2010-05-11T17:56:00Zhttps://www.cdatazone.org/wfwcomment.php?cid=560https://www.cdatazone.org/rss.php?version=atom1.0&type=comments&cid=56https://www.cdatazone.org/index.php?/archives/56-guid.htmlHello Word! (Take 2)Rob Richards2010-03-19T12:49:00Z1970-01-01T00:00:00Zhttps://www.cdatazone.org/wfwcomment.php?cid=5516https://www.cdatazone.org/rss.php?version=atom1.0&type=comments&cid=55https://www.cdatazone.org/index.php?/archives/55-guid.htmlWS-* for PHP
As part of the recent changes, I also finally got around to creating an official project for the libraries rather than just being ad-hoc files people pulled from my web site. The libraries are now officially part of the wse-php project hosted over at Google Code. It was a toss up between that and GitHub, but I really wanted to play around with Mercurial since I already use Git over at the Gnome project. Currently the libraries provide support for a portion of WS-Addressing and WS-Security that can be used with ext/soap in PHP. As time goes on I plan to add some support for simplified configuration of messaging as well as some other of the WS-* specs that might be useful when interoperating with other SOAP servers. ]]>
Rob Richards2010-01-11T14:02:00Z2010-01-11T17:39:10Zhttps://www.cdatazone.org/wfwcomment.php?cid=544https://www.cdatazone.org/rss.php?version=atom1.0&type=comments&cid=54https://www.cdatazone.org/index.php?/archives/54-guid.htmlXmlseclibs 1.2.2 Released
http://xmlseclibs.googlecode.com/files/xmlseclibs-1.2.2.tar.gz
Changes include:
Features:
- Add support XPath support when creating signature. Provides support for
working with EBXML documents.
- Add reference option to force creation of URI attribute. For use
when adding a DOM Document where by default no URI attribute is added.
- Add support for RSA-SHA256
Bug Fixes:
- fix bug #5: createDOMDocumentFragment() in decryptNode when data is node
content (patch by Francois Wang)
Please submit any bugs or feature requests into the Issue Tracker. ]]>
Rob Richards2009-10-21T15:29:00Z2009-10-23T19:29:55Zhttps://www.cdatazone.org/wfwcomment.php?cid=530https://www.cdatazone.org/rss.php?version=atom1.0&type=comments&cid=53https://www.cdatazone.org/index.php?/archives/53-guid.htmlDigital Identity and OAuth slides from ZendCon
Digital Identity talk.
The contents is a bit less technical than in the past and is aimed at wider audience than just developers. Please contact me if there are any questions on the material or topics presented. Rob Richards.
You can also find the slides from my OAuth presentation. ]]>
Rob Richards2009-07-14T21:46:00Z2009-07-15T00:41:32Zhttps://www.cdatazone.org/wfwcomment.php?cid=520https://www.cdatazone.org/rss.php?version=atom1.0&type=comments&cid=52https://www.cdatazone.org/index.php?/archives/52-guid.htmlLife's Too Short
I have always been the black sheep in my family. Doing things against the grain and not considered the norm. Although they didn't always agree with my choices, my family always supported my decisions. I really want to thank them with all my heart for that. Mom, I bet you never thought I would be where I am today Without everyone's support, I know I would never have achieved everything I have nor be where I am today. I thank you all for that. Julie, you have alway been there for me. No matter what I have been feeliing, you have always been there for me. No matter what you have always looked out for us.
Life is too short to just play by the book. We all need to take chances, do what makes us happy. How many of us regret not having had the courage to kiss the girl or say what we really want to say because we are scared of what other people think? My life hasn't been easy and I experienced all of this, so don't think its not normal. It wasn't until I realized that I don't really care what other people think as long as I am happy and I know what I am doing is right that I could truly live a life worth living. For that matter had I not been, I doubt that Julie and I would ever have gotten together, gotten married and eventually have our beautiful son Dean.
I ramble on..... I think the essence of what I am trying to say is that life is too short for fear, doubt, hate... We have to do what makes us happy. We need to experience everything that life has to give us. Being from farm country in Maine, I just have to quote Tim McGraw when he sings "Live Like You Were Dying". I really cannot sum it up better than his song.
Tracy, We love you. ]]>
Rob Richards2009-05-28T11:21:00Z2009-05-28T11:21:00Zhttps://www.cdatazone.org/wfwcomment.php?cid=510https://www.cdatazone.org/rss.php?version=atom1.0&type=comments&cid=51https://www.cdatazone.org/index.php?/archives/51-guid.htmlStreaming XML
Streaming XML talk. I lingered a little too long on a few topics so the XMLWriter portion was a bit rushed. If anyone has questions on any of the topics, feel free to drop me a line. I did promise a few people I would write a bit about XMLReader and XMLWriter, but it's slow going as I try to find the time. Hopefully in the not to distant future I can get to this. This Dad thing is really time consuming
]]>
Rob Richards2009-02-05T01:04:00Z2009-02-06T17:48:26Zhttps://www.cdatazone.org/wfwcomment.php?cid=502https://www.cdatazone.org/rss.php?version=atom1.0&type=comments&cid=50https://www.cdatazone.org/index.php?/archives/50-guid.htmlA Dad At Last!Rob Richards2009-01-13T15:20:00Z2009-01-15T19:26:49Zhttps://www.cdatazone.org/wfwcomment.php?cid=495https://www.cdatazone.org/rss.php?version=atom1.0&type=comments&cid=49https://www.cdatazone.org/index.php?/archives/49-guid.htmlEntities, ext/xml and libxml 2.7
Although I have been telling people for a few years now that they should use XMLReader rather than ext/xml, this breakage was not intentional; no matter what anyone says – Yes, I've had a few throw that out there. The good news is that the problem has finally been fixed, but will require both an updated PHP (5.2.9+) and libxml2-2.7.3, although none of them have yet been released. Until things are available, the available options are to either compile your own builds using the code from the libxml2 and PHP repositories, don't upgrade to libxml2 2.7.x yet if you haven't yet done so, build ext/xml with expat rather than libxml2, or lastly, convert your PHP code to use XMLReader.
My parting thought on this to everyone is just switch to the XMLReader extension. It's faster, easier to use and much more powerful.
]]>
Rob Richards2009-01-07T12:26:00Z2009-01-07T12:29:58Zhttps://www.cdatazone.org/wfwcomment.php?cid=480https://www.cdatazone.org/rss.php?version=atom1.0&type=comments&cid=48https://www.cdatazone.org/index.php?/archives/48-guid.htmlOAuth Signature Validation Tool
We mostly deal with providing the service provider side of OAuth, meaning numerous different endpoints, so these tools were of little help. I ended up writing a down and dirty signature generation app using the C# OAuth library (so Windows only folks). It will generate a signature based on the different OAuth parameters you enter. You can use this to compare the signature it generates to that from your consumer app or service provider. Full source code and more detailed information can be found on the Mashery Customer Solutions site. Time permitting, I may continue to add features to this tool. Hopefully others find this useful as well.
Source and Binaries: OAuth Signature Validation Tool ]]>
Rob Richards2008-09-22T12:23:00Z2008-09-22T12:23:00Zhttps://www.cdatazone.org/wfwcomment.php?cid=470https://www.cdatazone.org/rss.php?version=atom1.0&type=comments&cid=47https://www.cdatazone.org/index.php?/archives/47-guid.htmlDigital Identity slides from ZendCon
Digital Identity talk.
This talk has evolved since I first starting giving it, but the latest version simple needed more time to present. I was asked to combine all the topics (OAuth was to be its own presentation) into one, which I probably won't do again. Even just only covering the absolute basics, I found that there just isn't enough time to cover them all in the short amount of time, so some material was skimmed over. If anyone has any questions on any of the material, please feel free to contact me. ]]>
Rob Richards2008-09-22T11:28:00Z2008-09-26T00:02:43Zhttps://www.cdatazone.org/wfwcomment.php?cid=462https://www.cdatazone.org/rss.php?version=atom1.0&type=comments&cid=46https://www.cdatazone.org/index.php?/archives/46-guid.htmlWhere's Waldo?
On the flip side, work has been very hectic. Things are going well and we are very busy. For the past 5-6 months, on top of my regular work on our proxy, I have been living and breathing OAuth. Unlike OpenID, which is really only found in the social networking/blogging areas, and Information Cards which is still new and has some ways to go for more widespread adoption, companies have started actively adopting and implementing OAuth for use with their APIs. Things should start getting interesting once they start rolling these out to the general public.
I'm still involved with my xmlseclibs project, PHP and libxml2/libxslt. I just haven't had as much time over the past few months. I try to fix what I can when I get a chance, but my participation really has been slacking. With fall having started and winter on the way, I'll have more free time to work on these things. Hope to hit some of the feature requests I've gotten in the XML/PHP areas, as well as soon add some additional functionality to xmlseclibs to work with WS-BPEL (just needs some additional testing). If there are any additional feature requests or bugs I haven't looked at yet (I got a number via email that aren't in any of the bug systems - so may have forgotten about them), let me know and I'll make sure they make my TODO list. ]]>