Thomas Stig Jacobsen’s constant why

Programming, Internet security and ballroom dance

About

I'm a boy/man blogging on Computers, Security, Internet, Coding and common thoughts...

Archive for the 'Labs' Category

Normally if you wish to phish a user for information like passwords, emails, social security numbers, credit card numbers or what not and you’re exploiting some website with a bug in its handling of user content (either from a database or from the GET data) (Please note that POST XSS exploits isn’t really easy to [...]

Read the rest of this entry »

Choosing hash method in PHP

Saturday, July 3rd, 2010

So the other day I wondered the consequences when choosing one hashing method over another when it comes to security. If we say that some hacker has got a hold of your (of course!) encrypted fx passwords then what will it matter that you choose a unbroken, uncommon and maybe slower encryption method? Speed I [...]

Read the rest of this entry »

Hacking Google Wave (XSS, XSSR)

Saturday, January 16th, 2010

The last couple of days I’ve been fooling around with Google Wave and it’s so called “Gadgets”. In relation to this I  couldn’t help trying out some simple XSS and XSSR techniques which I’ll now show you and hopefully the Google Wave developers so they can secure the Gadgets – creating a even better product. [...]

Read the rest of this entry »

Why Joomla sucks!

Wednesday, December 9th, 2009

So I got this job from a customer: setup a design from a sliced PSD file into some CSS formatted XHTML. Fair enough, that couldn’t be that hard – and it wasn’t. The real pain the in ass is NOW: I have to set the darn thing up so it can run in Joomla! I’ve [...]

Read the rest of this entry »

So after a not of attention after my first release of the Twitter Add-on for Google Chrome I decided to rewrite the whole thing today. This has resulted in some dramatic changes and improvements. But I’ve also got some things I would like to investigate further to improve the extension further. Why doesn’t the extension [...]

Read the rest of this entry »

Did you like this post, take a look at the new post and the new version of the add-on (extension): http://www.e-x-e.dk/2009/05/30/labs-twitter-add-on-extension-for-google-chrome-new-version-new-post/. So, today I saw some article about the Google Chrome add-ons (extensions as they also call them). And since I’m a Chrome user myself I decided to play along by creating a small basic [...]

Read the rest of this entry »