Qbi's Weblog - Verweise

links for 2010-02-20

qbi@kubieziel.de (del.icio.us) — Sun, 21 Feb 2010 05:02:19 +0100

Die Z-Shell (zsh) – Eine mächtige Alternative zur Bash | zInformatik

(tags: zsh shell)

links for 2010-02-18

qbi@kubieziel.de (del.icio.us) — Fri, 19 Feb 2010 05:02:59 +0100

Best of VIM Tips, gVIM's Key Features zzapper

(tags: editors vim)

links for 2010-01-10

qbi@kubieziel.de (del.icio.us) — Mon, 11 Jan 2010 05:02:30 +0100

Kademlia: A Design Specification

Kademlia is a communications protocol for peer-to-peer networks. It is one of many versions of a DHT, a Distributed Hash Table.

(tags: dht kademlia distributed p2p algorithm network i2p)

links for 2010-01-05

qbi@kubieziel.de (del.icio.us) — Wed, 06 Jan 2010 05:03:28 +0100

isolate

This utility, isolate, runs processes in a chroot-ed environment, with constrained resource limits, as a random UID, and with limited access to the X server.

(tags: security code)

links for 2010-01-04

qbi@kubieziel.de (del.icio.us) — Tue, 05 Jan 2010 05:03:34 +0100

Mathematical Embarrassments " Gödel's Lost Letter and P=NP

Offene mathematische Probleme -- Leicht zu verstehen, schwer zu lösen

(tags: math mathematics)

links for 2009-12-25

qbi@kubieziel.de (del.icio.us) — Sat, 26 Dec 2009 05:02:49 +0100

links for 2009-12-10

qbi@kubieziel.de (del.icio.us) — Fri, 11 Dec 2009 05:02:54 +0100

Git Migration (Alioth - Debian)

(tags: subversion git debian)
Surviving the Perl/UTF-8 Madness

Perl's idea of UTF-8 support

(tags: perl UTF-8)

links for 2009-11-27

qbi@kubieziel.de (del.icio.us) — Sat, 28 Nov 2009 05:02:37 +0100

8 ways to share your git repository

(tags: git hosting gitosis gitweb tips)
GitLinks - GitWiki

(tags: git links)
Git Community Book

(tags: git book)

links for 2009-11-22

qbi@kubieziel.de (del.icio.us) — Mon, 23 Nov 2009 05:02:27 +0100

A Lesson In Timing Attacks (or, Don't use MessageDigest.isEquals ...

Timing attacks are pretty horrible from the perspective of someone trying to write a secure cryptosystem. They work against a programmer’s best instincts

(tags: security programming attack hmac crypto python cryptography algorithm)

links for 2009-11-21

qbi@kubieziel.de (del.icio.us) — Sun, 22 Nov 2009 05:04:11 +0100

Sichere Logins mit Einmalpasswörtern

Der Login auf den eigenen Server aus einem Internet-Cafe ist nicht ohne Risiko, weil ein möglicherweise installierter Keylogger das Passwort für späteren Missbrauch mitlesen kann. Mit Einmalpasswörtern schlägt man solchen Ausspähversuchen ein Schnippchen, um trotz unsicherer Umgebung auf die eigenen Systeme zuzugreifen zu können. Nur wenige Schritte sind dazu erforderlich.

(tags: security opie)
SSH schnell und einfach vor Login-Angriffen schützen

Mit Open-Source-Tools und wenigen Handgriffen erkennt ein System verdächtige Anmeldeversuche und blockiert sie.

(tags: security SSH fail2ban iptrecent denyhosts)

links for 2009-11-05

qbi@kubieziel.de (del.icio.us) — Fri, 06 Nov 2009 05:34:17 +0100

Quick Reference Guide

(tags: perl reference oreilly)

links for 2009-11-04

qbi@kubieziel.de (del.icio.us) — Thu, 05 Nov 2009 05:04:46 +0100

Hackproofing MySQL

(tags: mysql security)
SQL Injection Cheat Sheet

(tags: sql sqlinjection cheatsheet mysql)
SQL Injection Attacks by Example

A customer asked that we check out his intranet site, which was used by the company's employees and customers. This was part of a larger security review, and though we'd not actually used SQL injection to penetrate a network before, we were pretty familiar with the general concepts. We were completely successful in this engagement, and wanted to recount the steps taken as an illustration.

(tags: sql security injection mysql)
Guide to SQL Injection - OWASP

A SQL injection attack consists of insertion or "injection" of a SQL query via the input data from the client to the application. A successful SQL injection exploit can read sensitive data from the database, modify database data (Insert/Update/Delete), execute administration operations on the database (such as shutdown the DBMS), recover the content of a given file present on the DBMS file system and in some cases issue commands to the operating system. SQL injection attacks are a type of injection attack, in which SQL commands are injected into data-plane input in order to effect the execution of predefined SQL commands.

(tags: owasp sql sqlinjection security reference)
heise Security - 06.01.04 - Giftspritze

SQL-Injection bezeichnet das Einschleusen von eigenen Befehlen in eine SQL-Datenbank. Überprüft eine Web-Applikation Benutzereingaben nicht ausreichend, ist damit jede Datenbank auf jedem Betriebssystem verwundbar.

(tags: heise security sql sqlinjection)
SQL Injection Attack

How to exploit the SQL Injection Attack

(tags: sql hacking exploit)
XSSed - XSS (cross-site scripting) information and vulnerable websites ...

(tags: webappsec xss vulnerability security)
XSS Me :: Firefox Add-ons

Cross-Site Scripting (XSS) is a common flaw found in todays web applications. XSS flaws can cause serious damage to a web application. Detecting XSS vulnerabilities early in the development process will help protect a web application from unnecessary flaws. XSS-Me is the Exploit-Me tool used to test for reflected XSS vulnerabilities.

(tags: firefox xss)
An Anatomy of a Web Hack: SQL Injection Explained in Hackerabwehr ...

This paper shows how easy it is to penetrate the average website and gain information about the underlying database structures inside a network firewall.

(tags: sql sqlinjection)
Detection of SQL Injection and Cross-site Scripting Attacks

This article discusses techniques to detect SQL Injection and Cross Site Scripting (CSS) attacks against your networks.

(tags: sql sqlinjection xss detection)
[The Unexpected SQL Injection] Web Security Articles - Web Application ...

We will look at several scenarios under which SQL injection may occur, even though mysql_real_escape_string() has been used. There are two major steps at writing SQL injection resistant code: correct validation and escaping of input and proper use of the SQL syntax.

(tags: injection sqlinjection mysql sql php)

links for 2009-10-29

qbi@kubieziel.de (del.icio.us) — Fri, 30 Oct 2009 05:04:55 +0100

(Il-)Legalität von Personensuchmaschinen – Datenschutzrechtliche Grenzen für yasni, 123people & Co

(tags: yasni 123people suchmaschine search)

links for 2009-10-27

qbi@kubieziel.de (del.icio.us) — Wed, 28 Oct 2009 05:04:10 +0100

Personensuchmaschine im Internet | Blogging, Internet und Webpromotion

Anmerkungen zu sieben Personensuchmaschinen

(tags: datenschutz search)

links for 2009-10-09

qbi@kubieziel.de (del.icio.us) — Sat, 10 Oct 2009 06:11:10 +0200

Ananta Security: Web Vulnerability Scanners Comparison

(tags: vulnerability scanner security)
Ein kurzer, aber heftiger Schlagabtausch mit SQL_MODE

Erklärung zum SQL-MODE von MySQL

(tags: mysql sql)