goingerのブックマーク - はてなブックマーク

The beginners guide to breaking website security with nothing more than a Pineapple
The beginners guide to breaking website security with nothing more than a Pineapple You know how security people get all uppity about SSL this and SSL that? Stuff like posting creds over HTTPS isn’t enough, you have to load login forms over HTTPS as well and then you can’t send auth cookies over HTTP because they’ll get sniffed and sessions hijacked and so on and so forth. This is all pretty much
goinger 2013/09/20
wifi
リンク
Everything you wanted to know about SQL injection (but were afraid to ask)
Everything you wanted to know about SQL injection (but were afraid to ask) Put on your black hats folks, it’s time to learn some genuinely interesting things about SQL injection. Now rem ember – y’all play nice with the bits and pieces you’re about to read, ok? SQL injection is a particularly interesting risk for a few different reasons: It’s getting increasingly harder to write vulnerable code due
goinger 2013/07/31
リンク
Secret iOS business; what you don’t know about your apps
In the beginning, there was the web and you accessed it though the browser and all was good. Stuff didn’t download until you clicked on something; you expected cookies to be tracking you and you always knew if HTTPS was being used. In general, the casual observer had a pretty good idea of what was going on between the client and the server. Not so in the mobile app world of today. These days, ther
goinger 2011/10/19
リンク
1