Thomas Stig Jacobsen’s constant why

Programming, Internet security and ballroom dance

About

I'm a boy/man blogging on Computers, Security, Internet, Coding and common thoughts...

Archive for the 'Internet security' Category

Normally if you wish to phish a user for information like passwords, emails, social security numbers, credit card numbers or what not and you’re exploiting some website with a bug in its handling of user content (either from a database or from the GET data) (Please note that POST XSS exploits isn’t really easy to [...]

Read the rest of this entry »

Choosing hash method in PHP

Saturday, July 3rd, 2010

So the other day I wondered the consequences when choosing one hashing method over another when it comes to security. If we say that some hacker has got a hold of your (of course!) encrypted fx passwords then what will it matter that you choose a unbroken, uncommon and maybe slower encryption method? Speed I [...]

Read the rest of this entry »

Hacking Google Wave (XSS, XSSR)

Saturday, January 16th, 2010

The last couple of days I’ve been fooling around with Google Wave and it’s so called “Gadgets”. In relation to this I  couldn’t help trying out some simple XSS and XSSR techniques which I’ll now show you and hopefully the Google Wave developers so they can secure the Gadgets – creating a even better product. [...]

Read the rest of this entry »

Microsoft back in the day release a small paper on how to minimize the effect from the antivirus software on the operating system’s performance. Let me point out that the paper was released in July 2007. But despite the fact of this almost (in computer and internet terms) prehistoric release date TrendLabs’s writer David Sancho [...]

Read the rest of this entry »

Your ultimate virus scanner for MSN live

Monday, March 17th, 2008

Yeah since I don’t want to scan everything I receive over MSN I’ve noticed that MSN accepts any .exe file as the virusscanner. So my ultimate virus scanner is calc.exe in the %SYSTEMROOT%\system32\ folder. When you receive a file over MSN your calc.exe will start, just close it and your good! No need for the [...]

Read the rest of this entry »