In programming, memory leaks are a common issue, and it occurs when a computer uses memory but does not give it back to the operating system. Experienced programmers have the ability to diagnose a leak based on the symptoms. Some believe every undesired increase in memory usage is a memory leak, but this is not an accurate representation of a leak. Certain leaks only run for a short time and are virtually undetectable.

Memory Leak Consequences

Applications that suffer severe memory leaks will eventually exceed the memory resulting in a severe slowdown or a termination of the application.

How to Protect Code from Memory Leaks?

Preventing memory leaks in the first place is more convenient than trying to locate the leak later. To do this, you can use defensive programming techniques such as smart pointers for C++.  A smart pointer is safer than a raw pointer because it provides augmented behavior that raw pointers do not have. This includes garbage collection and checking for nulls.

If you are going to use a raw pointer, avoid operations that are dangerous for specific contexts. This means pointer arithmetic and pointer copying. Smart pointers use a reference count for the object being referred to. Once the reference count reaches zero, the excess goes into garbage collection. The most commonly used smart pointer is shared_ptr from the TR1 extensions of the C++ standard library.

Static Analysis

The second approach to memory leaks is referred to as static analysis and attempts to detect errors in your source-code. CodeSonar is one of the effective tools for detection. It provides checkers for the Power of Ten coding rules, and it is especially competent at procedural analysis. However, some might find it lagging for bigger code bases.

How to Handle a Memory Leak

For some memory leaks, the only solution is to read through the code to find and correct the error. Another one of the common approaches to C++ is to use RAII, which an acronym for Resource Acquisition Is Initialization. This approach means associating scoped objects using the acquired resources, which automatically releases the resources when the objects are no longer within scope. RAII has the advantage of knowing when objects exist and when they do not. This gives it a distinct advantage over garbage collection. Regardless, RAII is not always recommended because some situations require ordinary pointers to manage raw memory and increase performance. Use it with caution.

The Most Serious Leaks

Urgency of a leak depends on the situation, and where the leak has occurred in the operating system. Additionally, it becomes more urgent if the leak occurs where the memory is limited such as in embedded systems and portable devices.

To protect code from memory leaks, people have to stay vigilant and avoid codes that could result in a leak. Memory leaks continue until someone turns the system off, which makes the memory available again, but the slow process of a leak can eventually prejudice a machine that normally runs correctly.

Related:

The Five Principles of Performance

In Demand IT Skills

This section of our beginning python training class always stumps students.  Firstly, because they need to know the difference between a function and a method.  Secondly, they need to understand object oriented programming concepts.  Thirdly, they need to realize that python has three types of methods.  Then they need to know how to use each method, which means they need to know the purpose of each method type.  Then they have to understand mutable versus non-mutable types.  The list goes on.  As part of our python tutorial, I hope to shed some light on this confusing topic.

To begin, the difference between a function and a method in python is that a method is defined within a class.  Here is an illustration:

#function

	def greeting():
	                print "Hello, I hope you're having a great day!"

	class HSGPrinter(object):
	                #method
	                def greeting(self): 
	                                print "Hello, I hope you're having a great day!"

As should be obvious, the second definition of greeting is encapsulated within the HSGPrinter class and is , therefore, refered to as a method.

The astute reader will notice that the greeting method contains one parameter named self.  For those who know C++ , Java or C#, self is equivalent to this i.e. it is a reference to the invoking object:

Information Technology (IT) tools are here to support your business in the global market. Effective communication is key for IT and business experts to collaborate effectively in search of solutions. Consulting, reaching out for help to a third-party, can bridge the gap between your business marketing experts and IT operations experts, especially with the emergence of big data analytics and its implication on the global market. Having the right consultants equipped with business knowledge and data technology expertise can make a difference.

Your marketing organization is probably familiar with digital tools and conducting global research. Its results can uncover the journey customers take to purchase your products or use your services. It can highlight the pain points and frictions that prevent their experiences with you to be delightful and amazing. Armed with this knowledge and beautiful compelling presentations, marketing executives expect that IT operations leaders will translate these insights into actions.

But people in IT operations are too involved in meeting key performance indicators that have nothing to do with the end customers. Meeting requirements of faster and cheaper don't translate very well into customer satisfaction. A classic breakdown in communication is described in a Harvard Business Review article, “A Technique to Bridge the Gap Between Marketing and IT.” The author goes on to describe how a new CIO at a bank found IT to be focused on the internal organization as their customers, rather than the real end customer. Moreover, no one was looking at the incident reports which clearly showed that incidents were increasing. And nobody looked at what these incidents were doing to the bank’s customers. The startling and scary numbers of incidents were caught and addressed and brought down from 1,000 to 600 or (40%) and later to 450 per week.

Surprisingly, these type of seemingly isolated scenarios are still being discovered within organizations presently, sometimes internally, and through third party insights such as consultants.  By engaging consultants to provide a perspective based on what they’ve experienced before, they can often bring new and innovative ideas or possible challenges to the table that an internal processes probably wouldn’t have been able to see on their own.  Often, third party input can help to provide the translation needed to go from marketing research results into actions that IT operations can understand and make sense in their high-performance culture. When companies understand and use this knowledge to reassess how to improve their customer experiences, they work backward from what customers want to achieve significantly higher improvements. 

IT and business management are more and more being asked to move away from their traditional roles, such as IT being the "technology infrastructure gatekeeper", and instead become enablers across the enterprise of effective collaboration, big data consumers, and key players in driving desired business outcomes. Marketing leaders look to technology as a way to facilitate the customer's journey and his positive experience of it, bring more clients, and meet increasingly higher loyalty goals. They rely on IT projects to enable big data-based behavioral targeting anywhere in the global market. This means projects to analyze search engine results, improve website personalization and optimization, and building of mobile applications for a more personal experience. All these are projects that consultants with their communication, consulting and technical expertise are well prepared to help in order to bridge the expectation gap between IT and other business organizations.

In order to meet these 21st-century business challenges, Information Technology organizations have been transitioning from waterfall stage-gate project management approaches to agile development. The stage-gate method applies a step-by-step approach where waiting, reviewing and approving are required before moving to the next step in the project. Agile management emphasizes collaboration, no decision hierarchies, and few people roles for making quick, customer-focused small changes over time to deliver solutions that delight and amaze customers. Agile development has allowed many businesses to respond quickly to changing customer desires and expectations. But moving to continuous delivery is a struggle requiring focused, dedicated teams that are not well suited to the traditional matrix organization where people are resources whose time must be "chopped" into many pieces and shared among many projects. Agile teams meet frequently as often as daily but never waiting more than a week to do so.

Marketing people are externally focused. IT people are internally focused. The first works with customer emotions. The second works to increase efficiency. Big data analytic tools are used by the first and supported by the second. Consultants can be the glue that helps both come together in effective collaborations that deliver positive business outcomes in both global and local markets.

With stiff penalties for being caught and the whiff of secretive underground or even nefarious acts, computer hacking can be seen as a somewhat dubious pursuit. Not all hackers operate with the motive of emptying your Paypal account, however; there are many hackers who utilize their skills to aid companies in locating security flaws ("penetration testing") or engage in hacking with the goal of becoming cyber-freedom-fighters that champion simple human freedoms, such as the right to free speech.

Computer hacking is as much an art as it is a skill. At its simplest distillation, hacking is the systematic search for chinks in programming armor. While advanced problem-solving, intuition and sophisticated understanding of programming languages are a distinct advantage, there does exist a number of push-button programs that computing wizards have written allowing those less sophisticated in the art of hacking to break into remote computers in a variety of ways. Because of this new ubiquity, today's hackers no longer need to be a programming Wunderkind; they simply need to know where to download software and be able to turn on a computer. It really is that simple and the implications can be disturbing.

Phishing, Push-Button Programs and Brute Force Tactics

There's no need to crack a company's firewall if you have direct physical access to their computers. One aspect of hacking is the impersonation of an employee or service worker with the goal of gaining access to a company's database, where the hacker can then unleash whatever havoc he or she has planned into the system. Another is to engage in simple phishing techniques, such as impersonating an employee who forgot their password and needs help logging into the system.

Because such impersonations often fail thanks to companies becoming more security-conscious, taking over operations of a computer remotely is often the preferred method of gaining access. Such attempts can be facilitated in a variety of ways. One is the brute-force method, in which a program such as SQLmap, Nmap or Burpsuite is used; running one of these programs is analogous to trying every doorknob in a neighborhood to see which house is unlocked. Using a variety of different parameters, these programs can find access to a vulnerable computer or network in less than a minute.

Hackers can also attempt to gain access with a program like Metasploit. With literally a few clicks of a mouse, access to a remote and vulnerable computer can be achieved by a relative newbie. With a related hacking aid, called Meterpreter, a backdoor is created that allows access into an operating system. It does not install itself onto the remote computer, running instead using the computer's memory; in fact, Meterpreter can hide itself inside the operations of a perfectly valid program, so it cannot be detected even by sophisticated programmers. Once engaged, it allows a remote user carte blanche access to the system in question.

Where to Learn the Art of Hacking

Of course, for those who wish to learn the actual skills rather than download someone else's hack, there are a number of practice sites that pose an increasingly difficult set of challenges intended to train neophytes in the art of hacking. For example, Hack This Site starts beginners with the goal of cracking simple flaws in coding scripts or software such as HTML, Unix, Javascript and Apache. Their structured series of tests increase in complexity, incorporating real-word scenarios and even old-fashioned "phone phreaking" challenges that recall the bygone golden age of hacking skills displayed by Matthew Broderick in "WarGames."

Using just these simple tools and free practice sites, beginners have a powerful array of hacking resources just a simple mouse click away.