<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>wide thoughts &#187; security</title>
	<atom:link href="http://kozak.si/widethoughts/tag/security/feed/" rel="self" type="application/rss+xml" />
	<link>http://kozak.si/widethoughts</link>
	<description>a blog of one of those ... software developer creatures</description>
	<lastBuildDate>Sat, 31 Jul 2010 12:30:15 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.8.5</generator>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
			<item>
		<title>LiveNetLive privacy fail *updated*</title>
		<link>http://kozak.si/widethoughts/2009/10/24/livenetlive-privacy-fail/</link>
		<comments>http://kozak.si/widethoughts/2009/10/24/livenetlive-privacy-fail/#comments</comments>
		<pubDate>Sat, 24 Oct 2009 13:18:27 +0000</pubDate>
		<dc:creator>Gašper</dc:creator>
				<category><![CDATA[Thoughts]]></category>
		<category><![CDATA[browsers]]></category>
		<category><![CDATA[fail]]></category>
		<category><![CDATA[LiveNetLive]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://kozak.si/widethoughts/?p=538</guid>
		<description><![CDATA[I&#8217;ve encountered LiveNetLive a few times, it&#8217;s a service that runs on top of your website and creates a live community chat. Never had any problems with it, until yesterday, when I tried posting a comment on some blog.
Seems like LNL steals focus upon loading, which may happen a few seconds after you&#8217;ve already started [...]]]></description>
			<content:encoded><![CDATA[<p>I&#8217;ve encountered LiveNetLive a few times, it&#8217;s a service that runs on top of your website and creates a live community chat. Never had any problems with it, until yesterday, when I tried posting a comment on some blog.</p>
<p>Seems like LNL steals focus upon loading, which may happen <em>a few seconds after</em> you&#8217;ve already started writing a form. Needless to say that this is annoying at least.</p>
<p>But today, I&#8217;ve seen the problem in all of its glory. I&#8217;ve tried logging in to <a href="http://videolectures.net/">VideoLectures.net</a>, I focused the username input, entered my username, tabbed to password input, entered password, pressed Enter, and only then realised that it stole the focus just before I typed the first letter of the password. My full password then went public to at least 8 people that were reportedly visiting the same page. What good is strong password hashing, XSS and session protection and whatnot, when you have a feature like this?</p>
<p>Needless to say I&#8217;ve changed my password immediately.</p>
<p><strong>Update</strong>: I&#8217;ve contacted them and they replied promptly that this problematic auto-focus will be fixed soon.</p>
]]></content:encoded>
			<wfw:commentRss>http://kozak.si/widethoughts/2009/10/24/livenetlive-privacy-fail/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Talk: PHP in varnost</title>
		<link>http://kozak.si/widethoughts/2009/06/07/talk-php-in-varnost/</link>
		<comments>http://kozak.si/widethoughts/2009/06/07/talk-php-in-varnost/#comments</comments>
		<pubDate>Sun, 07 Jun 2009 11:45:41 +0000</pubDate>
		<dc:creator>Gašper</dc:creator>
				<category><![CDATA[Talks]]></category>
		<category><![CDATA[conference]]></category>
		<category><![CDATA[PHP]]></category>
		<category><![CDATA[php konferenca]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[talk]]></category>

		<guid isPermaLink="false">http://kozak.si/widethoughts/?p=342</guid>
		<description><![CDATA[I just published the slides and accompanying files for my &#60;?php konferenca 2009 talk. You can download them here.
Update: video of my talk is available. And also other videos from the conference. All in Slovene.
]]></description>
			<content:encoded><![CDATA[<p>I just published the slides and accompanying files for my &lt;?php konferenca 2009 talk. You can download them <a href="http://kozak.si/widethoughts/talks/">here</a>.</p>
<p>Update: <a href="http://videolectures.net/phpkonferenca09_kozak_vip/">video of my talk</a> is available. And also <a href="http://videolectures.net/phpkonferenca09_ljubljana/">other videos</a> from the conference. All in Slovene.</p>
]]></content:encoded>
			<wfw:commentRss>http://kozak.si/widethoughts/2009/06/07/talk-php-in-varnost/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Linux isn&#8217;t safe enough?</title>
		<link>http://kozak.si/widethoughts/2009/03/28/linux-isnt-safe-enough/</link>
		<comments>http://kozak.si/widethoughts/2009/03/28/linux-isnt-safe-enough/#comments</comments>
		<pubDate>Sat, 28 Mar 2009 12:45:23 +0000</pubDate>
		<dc:creator>Gašper</dc:creator>
				<category><![CDATA[Thoughts]]></category>
		<category><![CDATA[browsers]]></category>
		<category><![CDATA[linux]]></category>
		<category><![CDATA[microsoft]]></category>
		<category><![CDATA[open-source]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://kozak.si/widethoughts/?p=263</guid>
		<description><![CDATA[Slovenian government decided that Linux and open-source aren&#8217;t appropriate for government usage. The reasons being (a recap from the source):

Using open-source browser instead of horrible MSIE is inappropriate because &#8220;MSIE is free anyway, and using other browsers can cause problems with existing applications&#8221;. The facts that MSIE is the least secure A-grade browser on the [...]]]></description>
			<content:encoded><![CDATA[<p>Slovenian government decided that Linux and open-source aren&#8217;t appropriate for government usage. The reasons being (a recap from the source):</p>
<ol>
<li>Using open-source browser instead of horrible MSIE is inappropriate because &#8220;MSIE is free anyway, and using other browsers can cause problems with existing applications&#8221;. The facts that MSIE is the least secure A-grade browser on the market, and that in Slovenia <a href="http://www.spreadfirefox.com/node/3275">Firefox has the biggest share</a> apparently aren&#8217;t important.</li>
<li>OpenOffice is a viable option (wow!)</li>
<li>&#8220;Linux isn&#8217;t appropriate for workstations because it&#8217;s code is <strong>too open</strong> and it can become too vulnerable in case of mass usage.&#8221; I&#8217;m speechless.</li>
<li>Linux is already used on most servers. Impressive.</li>
<li>&#8220;Security is an issue with OSS, because the source code is available to general public.&#8221; Just as for #3, I remain speechless.</li>
</ol>
<p>Source: <a href="http://slo-tech.com/forum/t351913/0">slo-tech.com</a> (in Slovene)</p>
<p>This is what you get if uninformed people make decisions. It&#8217;s utter non-sense with no solid arguments. Some of the points can in all fairness be called STUPID.</p>
]]></content:encoded>
			<wfw:commentRss>http://kozak.si/widethoughts/2009/03/28/linux-isnt-safe-enough/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
	</channel>
</rss>
