Archive for February, 2006

Why Graphical Passwords are a Stupid Idea.

Graphical Password Authentication Schemes like; Passfaces, Graphical Password and Picture Password are starting to surface, but are they really the great idea corporations are making them out to be? The short answer is no. Why well there are two main reasons why they were created:

  • To thwart Keyloggers
  • To make passwords easier to remember.

Both of which are just silly, lets start with the #1 reason; “To thwart Keyloggers”. Keyloggers record the keystrokes that you make, ok now if we had to use a mouse, what difference it that from a keyboard? There are programs on the market now that record mouse movements, if you combine that with screen captures (Even just an arbitrary area around the cursor, to save space), so for myth #1: Busted! Read the rest of this entry »

A fix for a flaw in most Javascripts.

N.B. This is to fix the Client Side stuff, NOT server side things.

Problem:

Consider this:

<script type=”text/javascript”>

<!–

var text = ‘<script>alert(\’Boo!\’);</script>’;

document.write(text);

–>

See the problem that any input however it is obtained (Eg. Form) isn’t converted into text, but left as html.

Yes, I know that this doesn’t pose a great security risk as the client has to type it in, however that is no excuse! Read the rest of this entry »

*Free* Slideshow Wallpaper Program for Windows

I have been looking for ways to do this, as having the same background for ages gets a bit boring…

And here it is:

Windows XP Creativity Fun Pack PowerToys Wallpaper Changer:

http://www.microsoft.com/downloads/details.aspx?FamilyID=ce1…

Note that this requires Windows Genuine Advantage Validation.

(A link without WGA is here, but remember to obey applicable laws… [::rolls eyes::]

http://rapidshare.de/files/13515164/powertoys_wpchanger.exe.html )

Runs on Windows XP and requires a 350mhz or higher…

But if you would like more control, you may want to pay US$19.95 for this: http://www.slideshowdesktop.com

Though you should try out the free one first.

Steven

SSH Clients for your PDA

How many times have I been around a WiFi spot and wanted to remotly administer a computer but only had my PDA with me?

Well to many times, so I searched around for some free pocket SSH Clients and I also included a VNC Viewer for PDA’s too.

PocketPutty (http://pocketputty.duxy.net)

This SSH Client doesn’t require installation on your pocket pc and can be run straight away. It supports SSH1/SSH2 and Telnet. It also has a compression option that helps conserve bandwidth.

OpenSSH CE (http://www.eskimo.com/~webguy/service/openssh.html)

OpenSSH CD Doesn’t not require instalation aswell, but does require the user to configure it. (Putty doesn’t) OpenSSH CE does support secure file transfer whereas Putty doesn’t.

Putty = Fast Setup
OpenSSH CE = More Things

VNC Viewer for Pocket PC (http://www.cs.utah.edu/~midgley/wince/vnc.html)

Works on:

* PocketPC 2000 [ARM] [MIPS] [SH3]
* PocketPC 2002 [ARM]
* PocketPC 2003 [ARM]

Steven

The World’s First Banner Ad

Why?

HotWired decided to make money from their site back in 1994, and out came banner ads.

Who was the first?

AT&T was the first to hand over money to HotWired to display their ad, a 468×60 banner ad that was first displayed on October 25.

What?

The World's First Banner Ad

So there you have it, quite an ugly thing, but never less the first.

Steven

Force shutdown/restart Windows, the quick,easy and painless way.

This method is very handy if you have apps that just won’t die, and you want to shutdown.
You can goto: Start->Run and type this in, or you can save one of the lines as a batch file. (In notepad save it as “shutdown.bat” (With the quotes)).
WARNING: This will shutdown your computer and will kill all the processes, unlike the normal way, where it waits for programs like MS Word (Where it askes you to save), this will just continue to shutdown.

Shutdown:
shutdown -s -t 1 -f

Restart:

shutdown -r -t 1 -f

Explanation:

-r/-s Is Restart/Shutdown

-t is Time (In seconds)

-f (Forces the shutdown)

Worth Noting: If you just want to kill an app, you might want to try pskill Put it in C:\Windows
And then type pskill taskname in Start->Run. Eg. If Firefox is frozen: pskill firefox.exe

Steven

Recent Comments

  • Josir Gomes: Hi Steve, the meta-package ubuntu-desktop is bloated with huge softwares like OpenOffice, Evolution,...
  • hannah: your that good! ha ha, but seriously.
  • Wiras Adi: Yeah, mathematic operation in text-based CAPTCHA is very easy to break. And I don't think that many sites...
  • Gary: Phew! You saved me lots of hassle :-) The only problem I had was that $_SERVER[’HTTP_AUTHORIZATION ’]...
  • Stephen: To touch on the issue Vinay raised, I had to use the -wholename option on the find command to delete files...

Else wheres