HTTP vs. HTTPS :: It's all about keeping you secure

HTTP stands for HyperText Transport Protocol, Which is just a fancy way of saying it's a protocol (a language, in a manner of speaking) for information to be passed back and forth between web servers and clients. The important thing is the letter S which makes the difference between HTTP and HTTPS.

The S (big surprise) stands for "Secure". If you visit a website or webpage, and look at the address in the web browser, it will likely begin with the following: http://.

This means that the website is talking to your browser using the regular 'unsecure' language. In other words, it is possible for someone to "eavesdrop" on your computer's conversation with the website. If you fill out a form on the website, someone might see the information you send to that site.

This is why you never ever enter your credit card number in an http website! But if the web address begins with https://, that basically means your computer is talking to the website in a secure code that no one can eavesdrop on.

You understand why this is so important, right?

If a website ever asks you to enter your credit card information, you should automatically look to see if the web address begins with https://. If it doesn't, there's no way you're going to enter sensitive information like a credit card number.

PASS IT ON (You may save someone a lot of grief).

Going Through the Process

With HTTP, you sit at your browser and interact with data. HTTP’s job is to present that data to you, and browsers are the means of doing so. Mozilla’s Firefox browser, for example, understands HTTP instructions and arranges the data as the site’s designer intended. The browser knows what to do when you click. It uses HTTP to do this. But HTTP cannot do much beyond that. How the data travels from Point A to Point B, or even if it travels at all, is none of HTTP’s concern. This is a great compromise if you want speed and elegance and couldn’t care less about security. One does not require security to view BizTech’s latest online articles, for instance.

With HTTPS, the story is quite the same. But when security is a must, HTTPS differentiates one sender and receiver from another. SSL takes the data, going or coming, and encrypts it. This means that SSL uses a mathematical algorithm to hide the true meaning of the data. The hope is that this algorithm is so complex it is either impossible or prohibitively difficult to crack.

The encryption begins when the owner of the Web site purchases a time-sensitive certificate from a trusted certificate authority such as VeriSign. You can get a certificate anywhere, or even make your own, but is it trusted? Your browser will let you know. This certificate is a security code created specifically for that one user, or even for that one Web site. The code is so complex that no one else on Earth should have a duplicate.

Getting a certificate can be an involved task. All types of information must be recorded so the issuer of the certificate can be a reliable authority on the certificate’s owner. Information that must be provided includes the name of the site and even the name of the server that hosts the site. Complexity makes counterfeiting incredibly difficult.

This makes the issuer a trusted third party. When your browser sees the secure Web site, it uses the information in the certificate to verify that the site is what it claims to be. Browsers commonly indicate security by presenting a picture of a shiny closed lock at the bottom of the screen. This process is not always perfect because of human error. Maybe 53.com is a valid banking site, but 53RD.com is not. We call that phishing. Unscrupulous people phish for careless people. So be cautious. After the identity of the Web site is accepted, the encryption is negotiated between the browser and the Web server, and the data is all but locked up tight.

via http://www.allvoices.com/contributed-news/2332033-http-vs-https-its-all-about-keeping-you-secure

ScrumMaster and ZenMaster: The joke of certification

Many people object to ScrumMaster certifications:

1. It’s a money making machine
2. Scrum Masters do not learn anything during classes
3. The certification is nothing worth - because nothing is certified

I have been a Certified ScrumMaster (CSM) and a Scrum practioner for some years. People who object to the certification do see it from the wrong angle. You need to understand Zen to understand the goodness in CSMs.

photo credit: darkpatator

Certification is a Zen joke, because the role of a ScrumMaster cannot be certified. It’s not about knowing some technical questions. What should a trainer certify in such a class? That you can lead an agile Scrum team as a ScrumMaster? No one can certify the fact that you’re a leader, catalyst and enabler. You either are or you aren’t. Zen masters (ha, another master without a master!) would laugh at the fun in the ScrumMaster certification. They laugh about the idea of certifying enlightenment.

Scrum without ScrumMasters

As another parallel, both in Scrum and in Zen, masters are only enablers. They are not needed after the act of enabling Zen/Scrum. My Scrum trainer told me, the goal of a ScrumMaster is to make himself obsolete. There is a Zen koan which goes like this:

If you meet the Buddha, kill him.
— Linji

If you see a ScrumMaster, kill him. Zen tells you:

If you are thinking about Buddha, this is thinking and delusion, not awakening. One must destroy preconceptions of the Buddha. Zen master Shunryu Suzuki wrote in Zen Mind, Beginner’s Mind during an introduction to Zazen, “Kill the Buddha if the Buddha exists somewhere else. Kill the Buddha, because you should resume your own Buddha nature.”

If you think the ScrumMaster is Scrum, you’re delusioning yourself. In Scrum the product owner and the scrum team can, and should from my view, act by themselves, without the need of a ScrumMaster. The ScrumMaster helps them achieve their Scrum. Helps them overcoming initial obstacles in their productivity.

Kick your ScrumMaster
If the ScrumMaster is not good enough for them, certification and coaching inside the company hasn’t helped, the Scrum team has always the right to kick their SM if he isn’t good enough for them. And they should do so. If in Zen a master isn’t good, pupils will just leave him. This might lead to problems within the organization, especially if the ScrumMaster is their boss, but that should be the problem of the organization, not a team problem.

Practitioner certification

There are many more certifications from the Scrum alliance. If you dig deeper, the real fun part is that CSM doesn’t mean anything, practitioner means much more:

The practitioner level of certification (CSP) is only offered to those CSMs who have hands-on experience using Scrum. Applicants must complete an extensive questionnaire with probing questions that focus on applicants’ real-world experience using Scrum on software development projects. Their application is reviewed for answers demonstrating competence and comprehension of principles that can only result from hands-on work. The applicant may be questioned to determine eligibility. To maintain CSP status, you must submit a new application every two years.

Is the certification any use?

Yes. The Certified Scrum Master training has several merits:

1. Calling the Scrum training “Certified” guaranties the quality of the trainer
2. It motivates the Scrum master to think in Scrum
3. If managers take part, it helps the organisation adopt a “we can do it” view about Scrum
4. Certification (CSM) seems to be one of the main reasons for Scrum success in the enterprise. The certification makes Scrum compatible for managment.

The view about acceptance is shared by Peter Stevens:

It is also about branding, and has been quite successful. The acceptance of the CSM program is high (especially from corporate customers, and this is where the money is). I believe the CSM program is an important reason why Scrum is better accepted than say, XP, in corporate management circles.

Scrum is successful. I’ve seen it help development departments gain productivity. If you do not scrum yet, go for it.

Vitamin D 'is mental health aid'

Vitamin D, found in fish and produced by sun exposure, can help stave off the mental decline that can affect people in old age, a study has suggested.

UK and US researchers looked at 2,000 people aged 65 and over.

They found that compared to those with the highest vitamin D levels, those with the lowest were more than twice as likely to have impaired understanding.

Alzheimer's charities said the research was interesting, but more work was needed to understand vitamin D's role.

It would be interesting if a low level of vitamin D was found to be a risk factor for cognitive problems as it is cheap and easy to remedy

Dr Susanne Sorensen
Alzheimer's Society

Vitamin D is important in maintaining bone health, in the absorption of calcium and phosphorus, and in helping the immune system.

The body makes vitamin D when it is exposed to the sun, or it can be obtained from foods such as oily fish, and those fortified with vitamin D, such as milk, cereals, and soya drinks.

But older people's skin is less able to absorb vitamin D from sunlight so they are more reliant on obtaining it from other sources.

Supplements

Animal and lab studies have previously suggested that the vitamin can have a beneficial effect on cognitive function.

The team from the Peninsula Medical School in Exeter, the University of Cambridge and the University of Michigan, assessed people's cognition, or comprehension skills.

People who have impaired cognitive function are more likely to develop dementia.

The researchers looked at people who had taken part in the Health Survey for England in 2000.

Just over 200 had significant cognitive impairment, assessed by looking at people's attention, orientation in time and space and memory.

The study found that as levels of vitamin D went down, levels of cognitive impairment went up.

The paper will appear in a forthcoming issue of the Journal of Geriatric Psychology and Neurology.

Dr Iain Lang from the Peninsula Medical School, who worked on the study, said: "For those of us who live in countries where there are dark winters without much sunlight, like the UK, getting enough vitamin D can be a real problem - particularly for older people, who absorb less vitamin D from sunlight.

"One way to address this might be to provide older adults with vitamin D supplements.

"This has been proposed in the past as a way of improving bone health in older people, but our results suggest it might also have other benefits.

"We need to investigate whether vitamin D supplementation is a cost-effective and low-risk way of reducing older people's risks of developing cognitive impairment and dementia."

Risk factor?

Rebecca Wood, chief executive of the Alzheimer's Research Trust, said: "Many foods that contain vitamin D, such as oily fish, eggs and breakfast cereals, are also good sources of vitamin B12, which, as previous studies have shown, can help protect the brain.

"Diet is known to influence dementia risk. The best way of reducing your risk of developing dementia is to maintain a balanced diet with regular exercise and frequent social interactions."

She added: "These findings may be significant, but much more research is needed."

Dr Susanne Sorensen, head of research at the Alzheimer's Society, added: "One in three people over 65 will die with dementia so research into how we can reduce risk is to be encouraged.

"There was some previous evidence to suggest that people with dementia may have a lower level of vitamin D in their blood but it was not clear if this happened after the onset of disease.

"It would be interesting if a low level of vitamin D was found to be a risk factor for cognitive problems as it is cheap and easy to remedy.

"We look forward to seeing the published results of this new research to help us better understand the potential role of vitamin D in reducing risk."

via http://news.bbc.co.uk/2/hi/health/7845703.stm