Rolling codes for web security

I was programming my garage door opener the other day and for some reason I started wondering why we don't use "rolling codes" for web security..

The closest most common thing would be "nonce" which in the most generic sense is hash(timestamp + secret), or in some cases to protect middle man attacks, hash(timestamp + secret + parameters)

Getting xmlsec to work on Mac OS X

Having a problem getting http://www.aleksey.com/xmlsec/ to work? try using the below configuration string change the openssl path as needed.

./configure --with-openssl=/usr/local/php5 --disable-apps-crypto-dl --disable-crypto-dl

This is mainly for those who dislike Darwin ports and/or prefer to do there own compiling.. you will need the openssl library for this use case.

Using Jquery with Solar

Going to go through a quick walk through of how to use a hacked together version of my old jquery library with solar. You can find the class source files Here

Hacking The Brain - Internet to look forward to?

Ok so imagine this, its 2025 and your browsing the WWW "If its still called that/exists" using your mind, No need for a keyboard as your neural interface knows what your thinking..

Does that scare the shit of of anyone other then me? You think Web 2.0 hacks are getting out of control. We have new attack vectors popping up every since day, this will just add another level to protection we will need.

Xajax, Jquery, Autocomplete oh my!

Uses the Zend Framework but it can be done without, Just code no examples at this time will get that up shortly plus some basic help.

http://www.cyberlot.net/demos/auto_xajax_jquery/

The basic files, I haven't had time to pull together any real docs/working examples but the code is pretty clear.

Setting up an autocomplete is as simple as doing

$("#ac_me").xg_autocomplete() at the bottom of a page

Some other neat little tricks included, Injecting a ZF view into an element.

Syndicate content (C01 _th3me_)