Implement an OAuth 2.0 Server (Part 02)

Wednesday, June 6, 2018

Welcome to the second part of a series of posts where we will implement an OAuth 2 Server using AspNet.Security.OpenIdConnectServer. Project Setup and Dependency Downloads Create a new ASP.NET Core Web Application named OAuthTutorial. You can use your own name, but make sure to get your namespaces correct if you do. It’s helpful if you have Create directory for solution and Create new Git repository checked. Select Web Application (Model-View-Controller) …

Implement an OAuth 2.0 Server (Part 01)

Wednesday, June 6, 2018

Welcome to the first part of a series of posts where we will implement an OAuth 2 Server using AspNet.Security.OpenIdConnectServer. The creator of the library, Kevin Chalet, has an excellent series of blog posts, that you are encouraged to read for more information, with less of a hands-on approach. The final product is available here on GitHub, and at the end of each step the project as completed up to that point will be available on its respective branch. …

Lyricall Security

Tuesday, May 22, 2018

This is the Security Model for lyricall.net as of May 22nd, 2018. Security Model tl;dr: The servers are secure The services are secure Connections are secure Data is validated Ownership is checked todo: Encrypt db at Rest Automatically rotate dbhost/dbname/dbuer/dbpassword values Spin out authentication server from api server Spin out client server from api server Server Provisioning All machines are provisioned in the standard manner: SSH key only access, no password authentication allowed Standard SSH port is changed to be non-standard below 1024 to stop automated attacks on port 22 Ports below 1024 are privileged and can’t be re-bound by another service. No Root sign-on. Root only available via sudo su from an authenticated user Access is done under an unprivileged user with an entry in sudoers UFW is running with only the necessary service ports open. ssh whichever applications are running Data Boundaries Any time a data-boundary is crossed, that boundary is treated as adversarial, and all data traveling across is verified before committed or consumed. …

Lyricall Architecture

Tuesday, May 22, 2018

This summary of the architecture was correct upon its initial posting (November 2017). Changes have since been made. There is no guarantee that this post remains accurate into the future. Table of Contents Architecture of lyricall.net Technology tl;dr: App Overview Front End TypeScript Why TypeScript Redux React Why React Back End Database - PostgreSQL Why Postgres Database Schema Lyricall Tables Straggler Tables ASP.NET / Entity Framework Tables Server - .NET Core 2.0 / ASP.NET Core 2.0 Why .NET Core Intermission - the DotNetStandardSpotifyWebApi library Intermission - the ASP.NET Security Project API Server Architecture Entity Framework vs Hand Crafted SQL Automatic Timed Services Services Models Validation Scanning Hosting Digital Ocean Security Backups CI/CD Microsoft Azure Backups CI/CD Let’s Encrypt Architecture of lyricall.net …

The NEU Report - Survey of MOOC Platforms

Tuesday, May 22, 2018

This is the third and final document in a multiple part document originally written in 2015. The first post can be found here, and the previous post can be found here. This report has been adapted from a word document. MOOC Platforms Shim Vijay and Evin Yesudas Table of Contents MOOC Platforms: Analysis Report Preface Introduction Objective of this Study Overview EdX Coursera Udacity NovoEd Methodology MOOC Platform Comparison Chart Key Findings How Are Qualitative Courses Managed Types of Certificates & Their Importance Free Certificate Verified Certificate Helping The Participants To Complete MOOC Platforms: Analysis Report Preface This study focuses on the review of four leading MOOC platforms namely Coursera, EdX, NovoEd and Udacity. This report is the output of the joint research by Shim Vijay and Evin Jayes Yesudas done over a period of four weeks. …

The NEU Report - Bringing CCIS To The Top

Tuesday, May 22, 2018

This is the third in a multiple part document originally written in 2015. The first post can be found here, the previous post can be found here, and the next post can be found here. This report has been adapted from a word document. Bringing CCIS to the Top Table of Contents Executive Summary The Introductory Course The Over Focus on Mathematics Math Overview and Applications Course Outline Concepts, Identification, and Applications of Mathematics The Bad Courses Theory of Computation Programming Languages The Hunt for Great Professors The Qualities of a Good Professor Qualitizer Results The Hunt Continues People in Specific Executive Summary The computer science school is facing a huge amount of competition from online courses, self-taught people, and coding bootcamps. …

The NEU Report - The State of Northeastern University

Tuesday, May 22, 2018

This is the second in a multiple part document originally written in 2015. The first post can be found here and the next post can be found here. This report has been adapted from a word document. The State of Northeastern University Table of Contents Executive Summary In Detail Northeastern’s Desire to Compete Outside It’s Expertise MIT Building 20 Like Activist Investors, Except for University Northeastern’s Neglect of Trends in Technology and Education Imagining What Could Be What MOOCs Are Doing Right What MOOCs Are Doing Wrong The Innovators A Few Radical Ideas Post Graduate Services Joint Professorship and Co-Op Appointments at the ISEB Alternative Curriculum The Co-Op Curriculum The Project Research Curriculum Closing Thoughts Executive Summary Northeastern is making an admirable expansion into research, but in doing so, it is neglecting its history as a trade school. These two things can coexist, but the current implementation is a deal with the devil, and the tradeoff is likely to come back to bite the university in the coming years as technical revolutions and social forces make a university education an increasingly hard sell. …

The NEU Report - Executive Summary

Tuesday, May 22, 2018

This is the first in a multiple part document originally written in 2015. The next post can be found here. This report has been adapted from a word document. The NEU Report Executive Summary Nick Flower | Articulate Insights | articulateinsights.com Northeastern University, an institution that has separated itself from the pack and made its reputation by distilling trade knowledge and giving its students a leg up in industry has recently seen its focus shift to becoming more like the mainstream colleges it sought to differentiate itself from. Although the co-op program is fantastic, its existence is dangerous in that it obscures the truth. Just because the university has such a program doesn’t mean it isn’t losing its edge. …