Posts Tagged ‘security’

20081216 Why aren’t we all using SFTP, HTTPS, SSH et al?

Were you to decide, what would you choose? FTP or SFTP? Plain e-mail or signed encrypted mail? e-mail over an unsecured connection or using TLS encryption? BitTorrent unencrypted or encrypted connections? use your default e-mule port number or change it? http or https? telnet or SSH? automatic log-in or having to enter your user name [...]

20071213 Get defacements, database dumps, remote shells, ownages and much more!

It works like that: you write dynamic code and allow parameters to be sent to your code. Then without any type of filtering or validation you use those raw values as parameters for your code. I’ll give you two examples so that you can get the result almost instantly: Example 1: open up your database [...]