Unsafe cookies leave WordPress accounts open to hijacking, 2-factor bypass

Yan Zhu, a staff technologist at the Electronic Frontier Foundation, came to that determination after noticing that WordPress servers send a key browser cookie in plain text, rather than encrypting it, as long mandated by widely accepted security practices. The cookie, which carries the tag ”wordpress_logged_in,” is set once an end user has entered a valid WordPress user name and password. It’s the website equivalent of a plastic bracelets used by nightclubs. Once a browser presents the cookie, WordPress servers will usher the user behind a velvet rope to highly privileged sections that reveal private messages, update some user settings, publish blog posts, and more. The move by WordPress engineers to allow the cookie to be transmitted unencrypted makes them susceptible to interception in many cases. ...

May 26, 2014 · 1 min · 131 palabras · Nacho Cano

netcat - Cycles Per Instruction

Welcome to the most unnecessarily complicated netcat album release format yet. In this repository, you will be able to compile your own kernel module, create a /dev/netcat device and redirect its output into an audio player (tested with mplayer and play from SoX as well). ogg123 - < /dev/netcat ;’ Brandon Lucia, Andrew Olmstead, and David Balatero github.com

May 25, 2014 · 1 min · 58 palabras · Nacho Cano

Exploring limits of covert data collection on Android: apps can take photos with your phone without you knowing

Android apps can take photos with your phone in background phones without displaying any notification and you won’t see the app on the list of installed applications. App can send the photos over the internet to their private server. You can also find video with demo in this post. » Szymon Sidor | snacksforyourmind.blogspot.co.uk

May 25, 2014 · 1 min · 54 palabras · Nacho Cano

Bash implementation of 2048 game

Bash 2048 v1.1 (https://github.com/mydzor/bash2048) pieces=16 target=2048 score=2884 /------|------|------|------\ | 4 | 2 | 8 | 4 | |------|------|------|------| | 2 | 16 | 256 | 32 | |------|------|------|------| | 16 | 32 | 16 | 2 | |------|------|------|------| | 2 | 8 | 128 | 4 | \------|------|------|------/ GAME OVER Your score: 2884 You have lost, better luck next time. ;’ mydzor github.com

May 24, 2014 · 1 min · 63 palabras · Nacho Cano

Aunque parezca mentira, siguen existiendo BBS

Belky es el ”sysop” (administrador) de VampireBBS. Anda estos días muy contento porque ha puesto de nuevo en marcha su vieja BBS. 32 personas accedieron al sistema nada más inaugurarlo, lo que en este prehistórico mundo es un éxito. Las BBS fueron, en la década de los 80 y 90, la Internet de la gente de la calle, la red a la medida humana, precursoras de todo lo que vendría después y centros de aprendizaje para muchos programadores, administradores y, en general, hackers. Hoy quedan muy pocas en pie, sólo tres en España, pero están decididas a no morir. ...

May 24, 2014 · 1 min · 103 palabras · Nacho Cano

SSD breakthrough means 300% speed boost, 60% less power usage... even on old drives

A breakthrough has been made in SSD technology that could mean drastic performance increases due to the overcoming of one of the major issues in the memory type. Currently, data cannot be directly overwritten onto the NAND chips used in the devices. Files must be written to a clean area of the drive whilst the old area is formatted. This eventually causes fragmented data and lowers the drive’s life and performance over time. ...

May 24, 2014 · 1 min · 77 palabras · Nacho Cano

TRS Drawbot

On a standard headphone plug, the left channel comes through the outer ”tip” contact, the right channel through the middle ”ring” contact, and the ground connection through the inner ”sleeve” contact. The acronym for these so-called ”tip-ring-sleeve” connectors is where TRS Drawbot gets its name. It has no microchips or circuit boards and uses free software to turn line graphics into sound files that make almost any audio device into an on-the-go robot controller. ...

May 24, 2014 · 1 min · 84 palabras · Nacho Cano

Why Java is a compiled language and Python is not

One comment’s answer was ’marketing’, which in a sense is correct; one reason we call Java a compiled language is that that’s what Sun called it from the start. Another comment noted that Java has an explicit compilation phase that is separate from having the JVM execute your Java program by interpreting the bytecodes. All of this points us towards what I feel is the real answer: In Java, bytecode is a first class object. In Python it’s an internal implementation detail. ...

May 24, 2014 · 1 min · 87 palabras · Nacho Cano

Script-injected ”async scripts” considered harmful

The inline JavaScript solution has a subtle, but very important (and an often overlooked) performance gotcha: inline scripts block on CSSOM before they are executed. Why? The browser does not know what the inline block is planning to do in the script it is about to execute, and because JavaScript can access and manipulate the CSSOM, it blocks and waits until the CSS is downloaded, parsed, and the CSSOM is constructed and available. ...

May 23, 2014 · 1 min · 87 palabras · Nacho Cano

Crear un repositorio espejo de Ubuntu

Si tenemos un gran número de equipos con Ubuntu en nuestra LAN, nos puede interesar tener un espejo local del repositorio de paquetes de Ubuntu. Una diferencia entre esta opción y utilizar un proxy/caché de paquetes es que, en el primer caso, ya tendremos todos los paquetes disponibles cuando los vayamos a necesitar. Clonar el repositorio en local Para crear un repositorio local, podemos usar el comando apt-mirror, disponible en los repositorios. Una vez instalado, podemos editar el fichero de configuración en /etc/apt/mirror.list para, por ejemplo, cambiar el directorio donde se guardarán los paquetes (por defecto /var/spool/apt-mirror), añadir o eliminar fuentes a incluir en el repositorio, etc. Con las fuentes por defecto, hay que tener en cuenta que serán necesarios más de 100 GB para alojar el repositorio. Si optásemos sólo por incluir el “main”, se queda en 10 GB. ...

May 18, 2014 · 3 min · 528 palabras · Nacho Cano