Interesting.
User Profile
I like books.
This link opens in a pop-up window
Will Sargent's books
User Activity
RSS feed Back
Will Sargent rated Practical DWR 2 Projects (Practical Projects): 2 stars
Will Sargent reviewed Dragon's Egg by Robert L. Forward (Ballantine books -- 31666)
Will Sargent reviewed Building secure software by John Viega (Addison-Wesley professional computing series)
Review of 'Building secure software' on 'Storygraph'
2 stars
This book is from 2002. As such, it's a good book for its time, but it's hopelessly outdated for 2014. No TLS 1.2, no discussion of containerization, no actor model for concurrency to avoid race conditions, no bcrypt, no discussion of just using /dev/urandom for randomness...
More to the point, there are some disturbing gaps even in the book itself -- for example, it recommends cryptlib for TLS, but cryptlib only supports TLS-PSK, and doesn't do X.509 certificate authentication, so it couldn't do any secure PKI even if you asked it nicely.
The security principles are great, and I think you could write a book on the details of input validation, and on authentication in general, but this isn't that book. Buy something more up to date instead of this.
Will Sargent reviewed Web Application Obfuscation by Mario Heiderich
Review of 'Web Application Obfuscation' on 'Storygraph'
3 stars
This isn't a bad book, but it's somewhat out of date, and suffers from the same problem that a number of security books have -- they go to great lengths to talk about attack, and very little time talking about effective defenses.
The usual suspects show up here: HTML, Javascript (and VBScript!), CSS, PHP, SQL Injection, Web Application Firewalls and the client side filters, and finally, a single chapter on Mitigation.
The mitigation chapter is great: it takes a serious and thoughtful look at what can be done to realistically limit possibly invalid input, and concludes that it's Hard. I wish that they had structured the entire book around defensive programming and gone more into safer markup languages like Markdown, but it's enough for three stars.
However, I wouldn't recommend this book to a programmer. It's a good eyeopener for people writing Javascript and HTML who have never seen attacks, …
This isn't a bad book, but it's somewhat out of date, and suffers from the same problem that a number of security books have -- they go to great lengths to talk about attack, and very little time talking about effective defenses.
The usual suspects show up here: HTML, Javascript (and VBScript!), CSS, PHP, SQL Injection, Web Application Firewalls and the client side filters, and finally, a single chapter on Mitigation.
The mitigation chapter is great: it takes a serious and thoughtful look at what can be done to realistically limit possibly invalid input, and concludes that it's Hard. I wish that they had structured the entire book around defensive programming and gone more into safer markup languages like Markdown, but it's enough for three stars.
However, I wouldn't recommend this book to a programmer. It's a good eyeopener for people writing Javascript and HTML who have never seen attacks, but I think if you were at all concerned about attacks, you wouldn't be using PHP or opening yourself to SQL injection attacks by handwriting your SQL in the first place.
Will Sargent reviewed Pandemonium by Daryl Gregory
Review of 'Pandemonium' on 'Storygraph'
4 stars
Good. This is a story about "demons" and "possession" but more in the voodoo sense of the word -- only not quite, because American archetypes like Captain America possess people instead. And the book starts off with someone being possessed in Airport Security.
It's well written. Daryl Gregory has much in common with Matt Ruff in his overall balancing of viewpoint, action and misdirection. More than that, the book is well edited -- it doesn't waste time inflating the plot, and instead goes right for the essence of the book. Everyone is always doing what is most important to them, and no-one's doing anything that's against their nature (although to be fair, some of them are doing some pretty stupid things sometimes).
It is clearly written by someone who loves science fiction (Philip K. Dick shows up as a character!) and as such, people who don't read SF probably won't …
Good. This is a story about "demons" and "possession" but more in the voodoo sense of the word -- only not quite, because American archetypes like Captain America possess people instead. And the book starts off with someone being possessed in Airport Security.
It's well written. Daryl Gregory has much in common with Matt Ruff in his overall balancing of viewpoint, action and misdirection. More than that, the book is well edited -- it doesn't waste time inflating the plot, and instead goes right for the essence of the book. Everyone is always doing what is most important to them, and no-one's doing anything that's against their nature (although to be fair, some of them are doing some pretty stupid things sometimes).
It is clearly written by someone who loves science fiction (Philip K. Dick shows up as a character!) and as such, people who don't read SF probably won't get a number of references. That being said, it's good, not too long, and you should read it.
Review of 'Cannibal Hearts (The Book Of Lost Doors) (Volume 2)' on 'Storygraph'
3 stars
Also liked it. It's a slow book. Catskinner takes a backseat for most of it, and there's a long slow build up showing the life that James has built up for himself.
There's still frustratingly little development of girlfriend Gloria (why did she make the choices she made? Why is she hanging out with James? How is she that smart?) and Agony takes a distinct turn from Big Bad to bitchy diva queen, but you can't have everything.
One does get the sneaking feeling that James is less of a person than Catskinner's "mask" -- there's just bits missing of out of him that you would expect, and it's something that the other characters comment on. James is okay with Catskinner's actions. Totally okay. Either he's a front, or James isn't as well balanced and presentable everyman of the world as he'd like you to think he is.
Will Sargent reviewed Catskinner's book by Misha Burnett (Book of lost doors -- 1)
Will Sargent reviewed You are now less dumb by David McRaney
Will Sargent reviewed Sex Criminals: Volume One by Matt Fraction (Sex Criminals, #1)
Stanford economist Paul Oyer offers an informative view of modern microeconomics based on his experiences …
Review of 'Everything I ever needed to know about economics I learned from online dating' on 'Storygraph'
2 stars
Boring and clearly only marginally about dating. It's an economics primer. But accurate, at least.
Will Sargent rated Where Wizards Stay Up Late: 3 stars
Will Sargent reviewed Dollars and sex by Marina Adshade
Review of 'Dollars and sex' on 'Storygraph'
2 stars
Very... conventional. Whenever there's something to be said about the economics, the thinking is very much towards a standard transactional model, where women have sex earlier if there are fewer men because the men have more bargaining power.
Oh, and she misunderstands life expectancy rates: "At that time, the average life expectancy at birth was thirty-seven years. If people are not going to live very long, then, as a society, you want them to get onto the serious business of reproduction as early as possible. So average life expectancy (an economic outcome) influences societal norms that govern the age at which sexual debut is acceptable."
This is not how life expectancy rate works. The large rate of infant mortality throws off the curve -- most people made it into their 50s and 60s at least. For an economist and statistician, this should be a given.
Will Sargent reviewed Snapshot by Andy Diggle
Review of 'Snapshot' on 'Storygraph'
3 stars
I love that nothing makes sense, and that the protagonist is completely out of his depth and doesn't magically turn into James Bond. It... works. It's not huge, but it works.


















