rednael - Security

Securing webpages with the Locked element

Martijn Thie — Tue, 04 Aug 2009 13:49:23 GMT

Is there a way to fight JavaScript injections and cross-side scripting? Not in a very effective way. Not in a standards compliant way. Time to change the standards!

visit my blog at blog.rednael.com.
Rednael

Javascript Injection

Martijn Thie — Tue, 04 Aug 2009 11:52:00 GMT

Injecting remote scripts into any webpage using the addressbar. How it's done and what could happen. A serious serious security issue.

visit my blog at blog.rednael.com.
Rednael

SMTP Sinks: Using AsyncCompletion for Tarpitting

Martijn Thie — Wed, 28 Jan 2009 09:12:23 GMT

How to enable tarpitting on your SMTP server for specific commands? This article describes how you can customize tarpitting using the AsyncCallback functionality provided by the sink interface.

visit my blog at blog.rednael.com.
Rednael

Securing your password transfers with Keyed-Hashing (HMAC/Cram-MD5)

Martijn Thie — Tue, 30 Sep 2008 14:49:26 GMT

Checking passwords the secure way. This post explains how you can implement a secure password system. A system where you don't have to send your password over the internet to be validated. It explains about HMAC and Cram-MD5. Some examples (in C#.Net) are included to demonstrate implementation of the system.

visit my blog at blog.rednael.com.
Rednael