Interesting reading about Google Safe-Browsing and Chrome Privacy Leak.
http://ha.ckers.org/blog/20090824/google-safe-browsing-and-chrome-privac...
After some years running on Drupal, my site has become way to popular amongst the spam robots. So I decided to start using disqus for comments in my new posts. The old posts will still be using the built-in Drupal comment system.
------------------------------------------------------------------------
Cross-Site Scripting (XSS) in IDLogger website statistics version 7.7
------------------------------------------------------------------------
Author: Audun Larsen (larsen at xqus dot com)
Date: August 13, 2009
--AFFECTED SOFTWARE--------------------------
Name: IDLogger
Version: 7.7
Website: http://www.idlogger.com
Dictionary files are files containing all kinds of words excellent for brute force password attacks.
Here are my collection. Some of them made by me, and other collected around the internett.
Netcraft reports that 14% of SSL Certificates are signed using md5.
A team of researchers (including one Norwegian) has managed to break the technology that issues trusted certificates for secure websites (SSL). As a proof of concept they executed a practical attack scenario and successfully created a rogue Certification Authority (CA) certificate trusted by all common web browsers.
The long, official version and the short version. Happy reading.
One of the biggest drawbacks with Drupal is the admin section, at least that's what most my clients says. It's hard to navigate, it looks just like the rest of the site, and don't have the "you're in the admin section" feel to it.
This has changed with the the RootCandy theme for Drupal 6.x
Just upgraded to Drupal 6.8. It's just amazing how easy and fun it is to upgrade Drupal, despite the complexity of the software. Great job. =)
Finally, after six months in Ferrol, Spain we are returning to Norway, in just two days.
It's going to be sweet. =)
I just got to ask you this: Is security bugs just normal bugs? Or should they be treated special?
The reason I ask, is because of a statement made by Linus Torvalds in a discussion on the Linux kernel mailinglist just a few days ago.
So I personally consider security bugs to be just "normal bugs". I don't
cover them up, but I also don't have any reason what-so-ever to think it's
a good idea to track them and announce them as something special.
