Become a fan of Slashdot on Facebook

 



Forgot your password?
typodupeerror

Comment Re:owasp (Score 1) 182

Yup. Make owasp (https://www.owasp.org/index.php/Main_Page) your bible. It's by far the best community for web security. They explain everything from the threats themselves to how to secure them (and provide the tools to do so). First and foremost remember to never trust the user (validate all input) and that user doesn't necessarily mean hands on keyboard (web service calls, etc - anything not 100% under your control). Also, don't blacklist (e.g. no ''s), always whitelist when possible (e.g. less than 50 alphanumeric characters or apostrophe's), i.e. try not to say what isn't ok, say exactly what is ok.

Also, check out hackthissite.org. I wouldn't pay a pen tester... just mess around yourself and learn some of the tools (nessus). You're not the NSA, you don't need to worry about APT. You just gotta close the front door and watch the occasional script kiddie bounce off.

Comment Advanced Forensics Tool (Score 2) 142

This guy got it all wrong. He didn't make a creepy geolocation aggregator; he made an "advanced geolocation forensics tool for use in the intelligence community". Had he labeled it properly and been more greedy, he could be laughing all the way to the bank! He definitely could have taken a page out of the Hoglund/Barr book here.

Comment electricity fail (Score 1) 119

"The sound waves produced a mild electrical current of about 50 millivolts. The average cell phone requires a few volts to operate, several times the power this technology can currently produce. ...
The Korean scientists agree: 50 millivolts is not a lot of power, but they also say their research is proof of concept. As they continue their work, they expect to get a higher power output."

volts = current = power! a new physics is at hand!

Slashdot Top Deals

The life of a repo man is always intense.

Working...