Archive for November, 2007

Social network risks highlighted.

Something I picked up in a newspaper and seen on the BBC website.
“Millions of Facebook users at risk of fraud
One in four users of social networking sites leave themselves open to crime by revealing personal details. About 2.7 million members of sites such as Facebook an Myspace expose contact details or dates of birth on [...]


From a developer point of view… secure coding

For most of us here, we are looking to hack and crack systems. But spare a thought to those poor souls who have try to ensure their code stands up to the hack attack. And coming from a developer background, I should *really* know more about the security aspects of coding.
As you may know there [...]


More than SQL injection

When it comes to database security, there’s more to it than plain old SQL injection within a web application. There are issues in the underlying database systems themselves. One good resource is about.com, which have articles about inference (i.e. finding information by inference without the need of extra privileges) and privilege escalation. Another one is [...]


Blackberries yummy!

There’s a bit of push on the phone-cum-PDA front. First all, vnunet mention that Research In Motion (dubiously abbreviated as RIM) are unveiling a ’streamlined’ version Blackberry Enterprise Server for smaller organisations. Meanwhile
Silicon give some good background to the blackberry. They also allude that as blackberry increases in hardware and functionality, they are likely to [...]


Old skule trix

Well today I found some old school hacking tactics come into play as two students got caught and were prosecuted for changing their grades at Calstate University. To be fair that looks to be an inside job and this was only discovered after a routine audit 2 years previously. Though I think 20 years [...]