/binary/chronicles

PHP Security Guide

Today I have seen in the blog Minid.net the following guide, the PHP Security Guide. Good and interesting for the interested people, that want a little text of php security hacks. The contents of the guide are:

1. Overview

1.1 What Is Security?
1.2 Basic Steps
1.3 Register Globals
1.4 Data Filtering

1.4.1 The Dispatch Method
1.4.2 The Include Method
1.4.3 Filtering Examples
1.4.4 Naming Conventions
1.4.5 Timing

1.5 Error Reporting

2. Form Processing

2.1 Spoofed Form Submissions
2.2 Spoofed HTTP Requests
2.3 Cross-Site Scripting
2.4 Cross-Site Request Forgeries

3. Databases and SQL

3.1 Exposed Access Credentials
3.2 SQL Injection

4. Sessions

4.1 Session Fixation
4.2 Session Hijacking

5. Shared Hosts

5.1 Exposed Session Data
5.2 Browsing the Filesystem

6. About

6.1 About This Guide
6.2 About the PHP Security Consortium
6.3 More Information

And you can see in: http://phpsec.org/projects/guide/

Bye!

Pi to one MILLION decimal places

3.141592653589793238462643383279502884197169399375105820974
94459230781640628620899862803482534211706798214808651328230
664709384460955058223172535940812848111745028410270193852110
5559644622948954930381964428810975665933446128475648233786
7831652712019091456485669234603486104543266482133936072602
49141273724587006606315588174881520920962829254091715364367
8925903600113305305488204665213841469519415116094330572703
6575959195309218611738193261179310511854807446237996274956
73518857527248912279381830119491298336733624406566430860213
9494639522473719070217986094370277053921717629317675238467
48184676694051320005681271452635608277857713427577896091736
37178721468440901224953430146549585371050792279689258923542
0199561121290219608640344181598136297747713099605187072113
4999999837297804995105973173281609631859502445945534690830

If you want to see the rest of the Pi number click here. Goodbye!

More than 50 invitations to Gmail

Hi folks! Today I have entered in my Gmail mail, with the webmail (always use POP account with Evolution). What I've been my surprise when I see the more than 50 invitations of Gmail. So, whoever want an invitation, that say me by mail :).


Goodbye!

Forensic Challenge v2.0

The "Forensic Challenge v2.0" patrocinated by RedIRIS an UNAM-CERT, it started the 31 of January. You can obtain the images for the callenge in the following link. It's very interesting but, also it's vey dificult to win something.

The prizes are:
1. Encase Forensic Edition licence.
2. Assistance to the congres "Seguridad en Cómputo 2005".
3. Online course of SANS.

By3!

Finally, my new blog

Finally, I can allow me write a blog in English, because I believe that I have more time to write it. In other occasions I builded a blog in English too, but for the short time I couldn’t.

I’ve decided that this, is a good moment to begin, mainly, because are the 7:47am of a new day and I have desire to begin again. Like always, in this blog I write my life in the ”*nix world” with her security, programs or scripts, hacker reflexions, etc. By3!