Slashdot Mirror


User: dblackshell

dblackshell's activity in the archive.

Stories
0
Comments
32
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 32

  1. Re:Just don't on Securing PHP Web Applications · · Score: 1

    and you could also blame books like the above one... register_globals? for f***s sake we are using php 5 (Some of us at least) which has it turned off and books like this one put us back (at least) 8 years in time...

    I think that the ones that wrote the books are security experts and due to the fact that in their last pentest (security audit) didn't find any xss/sql injection/rfi vulnerability they decided to "repair" the problem.

  2. No he doesn't on Securing PHP Web Applications · · Score: 2, Informative

    For CSRF to work the attacker has to be able to inject his own content into your site that a victim can then come by and download.

    I don't know what you are talking about, but it seems partially XSS combined with some malware...

    CSRF is something else...

    http://slashdot.org/my/logout - this is a CSRF link

  3. Re:What if they had broken Microsoft up? on US Antitrust Judge Examining Windows 7 Documents · · Score: 1

    from a shell script point of view they really did a great job with PowerShell, recovering (and making up for the) lost ground...

  4. microbash on EU Says MS Must Offer Other Browsers; Now What? · · Score: 1

    European Commission - "Bashing Microsoft since Windows Media Player 10!"

  5. Privacy on Linked In Or Out? · · Score: 1

    the subject may seem to be about LinkedIn, although I think it is more about privacy, and LinkedIn was just an example (as Facebook also)...

    Generally it matters more how much information you put up on the internet (about yourself). Privacy exists as much as you are concerned for it.

    Of course too much information can turn against you (impersonation, phishing, social engineering, etc). Technology is the wave you have to catch, because if you stay behind you'll find yourself later all alone on the island called "non existent".

  6. Re:I've been in the beta already on Quake Live Open Beta Begins Feb. 24th · · Score: 1

    yeah skill... I still remember the first time that I played Q3 and a guy did a rocket jump over me, while fragging me with a plasma gun. And I was like "WTF?!"

  7. Might come handy on Web-based IDEs Edge Closer To the Mainstream · · Score: 1

    It actually would be a useful tool, especially considering the fact that the following thing to come is direct import from a svn/trunk...

    Imagine a case when you have to patch quickly your code (possibly a vulnerability in it) and your not on your computer. You haven't got the tools (a decent text editor, svn application) at hand, so bespin COULD be the day saver...

    Although wouldn't use it for actual developing because:

    - too many commands have to be typed in
    - syntax highlight is only available for html/js/css(? haven't tried)
    - ctrl+s is faster than clicking the save button :)
    - many more

    But as I mentioned, for quick jobs (if you haven't got the tools) will do fine...