Tag Archives: hacking

Implementing Mozilla’s Content Security Policy

June 30, 2009

I recently discovered this page, which describes Mozilla’s solution for prevention of XSS (Cross-Site Scripting) available as a Firefox Extension. Here’s the HTTP response from my site: hank@tardis:~$ wget -S http://www.ralree.com –2009-06-30 09:52:13– http://www.ralree.com/ Resolving www.ralree.com… 74.54.115.108 Connecting to www.ralree.com|74.54.115.108|:80… connected. HTTP request sent, awaiting response… HTTP/1.1 200 OK Date: Tue, 30 Jun 2009 13:49:54 GMT Server: Apache/2.2.11 (Unix) mod_ssl/2.2.11 OpenSSL/0.9.7a Phusion_Passenger/2.1.3 mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 X-Powered-By: PHP/5.2.8 X-Pingback: http://www.ralree.com/newblog/xmlrpc.php Last-Modified: Tue, 30 Jun 2009 13:49:21 GMT X-Content-Security-Policy: allow self; img-src [...]

Macbook Air hacked in under 2 minutes

March 30, 2008

So, at the PWN2OWN contest, a MacBook Air was hacked in under 2 minutes. A Vista machine was also hacked a little later, but the Ubuntu machine stood strong despite various attempts. Just goes to show that Macs are definitely not as invincible as many people keep saying they are…

Disabling auto-off on a Sunbeam Health at Home heating pad

December 13, 2007

WARNING! DON’T BURN DOWN YOUR HOUSE! USE CAUTION! TRY AT YOUR OWN RISK! YOU WILL VOID YOUR WARRANTY! So, I got this heating pad at the store a while back to use as a hedgehog heating pad. I found out that the 2-hour auto-off timer was hardcoded into the circuit, and they didn’t even bother to put a switch on the casing to disable it. Typical overprotection of the consumer – this wouldn’t exist if our country was a bit [...]

Hacking a WRT54G v8 With DD-WRT

October 6, 2007

So, last month sometime, BrainSlayer got DD-WRT working on version 8 of the WRT54G. Now this was great news to me when I read it since I’ve been wanting to get rid of the crappy LinkSys management from the beginning. Some of the procedure worked, and some of it didn’t for me. Do not try this if you don’t know exactly what you’re getting into.