Anatomy of a SQL Injection Attack

Posted by Lars

“SQL injection has become perhaps the most widely used technique for compromising Web applications, thanks to both its relative simplicity and high success rate. It's not often that outsiders get a look at the way these attacks work, but a well-known researcher is providing just that. Rafal Los showed a skeptical group of executives just how quickly he could compromise one of their sites using SQL injection, and in the process found that the site had already been hacked and was serving the Zeus Trojan to visitors.”

Los’s original blog post has more and better illustrations, too.

via Slashdot: News for nerds, stuff that matters.

Nice and Free CSS Layouts

Posted by Lars

This site contains free css layout templates.

via Nice and Free CSS Templates.

Mariposa Botnet Beheaded

Posted by Lars

Slashdot News Story | Mariposa Botnet Beheaded.

Defense Intelligence of Ottawa working with ISPs and Spanish authorities have taken down yet another > 12M PC botnet, called Mariposa. The three top-level operators are in custody, but remain anonymous under Spanish law (how quaint: apparently in Spain, the accused have some right to privacy). AP is claiming that the botnet included systems in roughly half of the Fortune 1000 companies, scattered over 190 countries. Interesting details: none of the three principals has a prior criminal record. Although apparently hardworking, they are not uber-hackers, but rather had connections to the Spanish mafia, which apparently helped to equip them. At the time of arrest, they were not showing signs of their significant new income level. From the article: ‘Chris Davis, CEO of Ottawa-based Defence Intelligence, said he noticed the infections when they appeared on networks of some of his firm’s clients, including pharmaceutical companies and banks. It wasn’t until several months later that he realized the infections were part of something much bigger. After seeing that some of the servers used to control computers in the botnet were located in Spain, Davis and researchers from the Georgia Tech Information Security Center joined with software firm Panda Security, which is headquartered in Bilbao, Spain. The investigators caught a few lucky breaks. For one, the suspects used Internet services that wound up cooperating with investigators. That isn’t always the case.

Slashdot News Story | Mariposa Botnet Beheaded.

The Smashing Book

Posted by Lars

The Smashing Book.

Quick Overview

The Smashing Book is a printed book about best practices in modern Web design. The book shares technical tips and best practices on coding, usability and optimization and explores how to create successful user interfaces and apply marketing principles to increase conversion rates. It also shows how to get the most out of typography, color and branding so that you end up with intuitive and effective Web designs. And lastly, you will also get a peek behind the curtains of Smashing Magazine.

Get it here.

motographic – moto x bike numbers, graphics & decals

Posted by Lars

motographic – moto x bike numbers, graphics & decals.

Aarons the man! Checkout his work here also: http://www.facebook.com/album.php?aid=150749&id=691751081

FreshBooks | drupal.org

Posted by Lars

FreshBooks is a web based accounting application that makes it easy for you to track the time you spend on projects and invoice your clients. The company behind it is very web savvy and has managed to deliver a well documented, easy to use API for third party integration. This module aims to provide a full integration of the FreshBooks API for use by this and other Drupal modules.

This module was just born on Sept. 9, 2008 and so is under heavy development. To support this module's development and try FreshBooks for yourself, you can signup for a free account and test the functionality of the module as it develops.

via FreshBooks | drupal.org.

Escape Pod

Posted by Lars

By David D. Levine.

Read by Meg Westfox.

First appeared in Bones of the World, ed. Bruce Holland Rogers.

After a time she found a small patch of zeren. She spread across it, taking a little solace from its sparkling sweetness. “Zero-point energy” was what Old John called it, but to Gunai and the rest of her tribe it was zeren, delicious and rare. Gunai recalled a time when zeren was something you could almost ignore — a constant crackling thrum beneath the surface of perception — but now there were just a few thin patches here and there. These days the tribe subsisted mostly on a thin diet of starlight, and even that was growing cold. Soon they would be forced to move on again. Yeoshi had told her the foraging was better in the direction of the galactic core, but it was so far…

via Escape Pod.

The Last Question by Isaac Asimov © 1956

Posted by Lars

The last question was asked for the first time, half in jest, on May 21, 2061, at a time when humanity first stepped into the light. The question came about as a result of a five dollar bet over highballs, and it happened this way:

Alexander Adell and Bertram Lupov were two of the faithful attendants of Multivac. As well as any human beings could, they knew what lay behind the cold, clicking, flashing face — miles and miles of face — of that giant computer. They had at least a vague notion of the general plan of relays and circuits that had long since grown past the point where any single human could possibly have a firm grasp of the whole.

Multivac was self-adjusting and self-correcting. It had to be, for nothing human could adjust and correct it quickly enough or even adequately enough — so Adell and Lupov attended the monstrous giant only lightly and superficially, yet as well as any men could. They fed it data, adjusted questions to its needs and translated the answers that were issued. Certainly they, and all others like them, were fully entitled to share In the glory that was Multivac’s.

For decades, Multivac had helped design the ships and plot the trajectories that enabled man to reach the Moon, Mars, and Venus, but past that, Earth’s poor resources could not support the ships. Too much energy was needed for the long trips. Earth exploited its coal and uranium with increasing efficiency, but there was only so much of both. Continue reading »

Here we go again…

Posted by Lars

Reincarnation #40 (give or take 10 either way) of LarsJansen.co.nz is up and running.

As anyone who has been here before would know I hate content. I hate writing it, I loath keeping sites up to date. Automation is my love ie. RSS.

My passion is the building of web sites. Their creation. Then tweaking, perfecting, tuning… until I get bored and it’s FTP to the server, delete all the files, leave it for a few months, discover a cool new app to Hack, upload and start again.

Thats where I’m up to. I just started again. Lets see how long this version lasts:)

Geneva Drive

Posted by Lars

The Geneva drive or Maltese cross is a mechanism that translates a continuous rotation into an intermittent rotary motion. It is an intermittent gear where the drive wheel has a pin that reaches into a slot of the driven wheel and thereby advances it by one step. The drive wheel also has a raised circular blocking disc that locks the driven wheel in position between steps.