This was posted to BugTraq today. My response? Figures. Seems they must still have the same crew working on sessions.
Enough said. It's not even the wimpy size of most RC things.
As a side note, does anyone actually think Pee Tree is a good idea? Just seems to encourage undesirable behavior.
Jonathon Sharkey Arrested due to two Illinois felony warrants, and is in jail pending extradition. If that's not enough the warrants were under his alias "Rocky Flash", whose "human existence" ended in 2004 (or so it is claimed). I'm thinking those felonies will have an adverse affect on his campaign.
And web applications that don't filter them properly... Interesting writeup on SecurityFocus today. Basically between appending trailing dots and not handling country code domains properly, you can inject session IDs for people to use on sites. Sites that allow sessions to reused that is. Yet another reason why session keys should not be reusable (especially for a different account) after logout nor should the client be allowed to generate them. Of course they also shouldn't be predictable and the entire session keyspace crackable in a few tenths of a second (such as Bb 5.5). Being able to browse sessions with next and previous using only the browser's cookie and a script is a novel trick for testing, but sucks for system security.
Strongbad's Intro to Technology. Speaking technology and how to create an email address are covered. They also have podstar now.
A good summary. All 36 cameras are HD (so no cuts to blurriness like prior years), and they even plan on adding portable HD cameras this year (they've been ridiculously expensive and only a couple models, but it looks like selection has widened). Looks like they're jumping to 12 parabolics, which I'm sure will have the photogs pissed. There's a bit of discussion at AVS on it as well.
As a side note, if you read this and know me personally you probably know about the SB party at my place next Sunday. If not blame Austin since he's the promoter for it, and if you want to be there let me know.
Vernon Lee Evans is now on death row in Maryland. The most recent warrant was signed January 9th, and he is scheduled to be executed the week of February 6. This appears to be the 3rd time he has been on death row (once ruled unconstitutional, once stayed). He was convicted in 1984 of killing two people in 1983. He doesn't have direct Internet access, but comments and questions are printed and mailed to him, and his replies are posted. It appears to be an anti-death penalty group doing the mailing/transcribing, and the links on the sidebar are a bit stacked in that direction (17 against, 1 for). Updates stopped last year, but started again yesterday. If nothing else, it's an interesting read.
There was enough hype about his appearance on the cover of Rolling Stone, now there's a decently long excerpt from the actual article. Mostly just expanded on what the AP stuff had, some clarification. There's also a few other things.
"If there is anything the nonconformist hates worse than a conformist, it's another nonconformist who doesn't conform to the prevailing standard of nonconformity." - Bill Vaughan
On quotations page. That sounds like it could be the Indie motto. Or is it not Indie enough? :)
Copyright ©2000-2008 Jeremy Mooney (jeremy-at-qux-dot-net)
