Reverse md5 Hash

Security, Serverstuff March 5th, 2009

Here is a link of a site (www.md5.rednoize.com) that performs a search on common md5 hashes - in case you forgot your standard password:

md5 hash reverted

Make yourself a md5-hash using PHP ;) to test it:

marco@africa:~$ php -r 'echo md5("marco")."\n";'
f5888d0bb58d611107e11f7cbc41c97a

Clickjacking

Security February 15th, 2009

Today I learned a new term from the web security section - Clickjacking - which I would like to make you aware of.

To see it in action, please visit the blog post of Flash developer Guy Aharonovsky, where he demonstrates in a video how a user unintentionally changes his browser’s security settings while playing a JavaScript game. As a result the user ‘allows’ activation of his webcam and microphone without knowing about it.

The above mentioned exploit in the video has already been fixed by Adobe. But there are more ways to hijack your clicks. The clickjacking exploit opens a wide playingfield for the bad guys out there. Get more background info (in German) here.