Jacob Appelbaum, one of the security researchers who worked on the paper cold boot attack on encryption keys (featured in a previous BBtv episode, above) tells us the code has just been released today at the [last] HOPE hacker con in NYC. It’s up, it’s signed, and here it is.
Memory Research Project Source Code

Filed under: codemonkey, security | No Comments »

Today I was toying with Apache and made a .htaccess for all of you; that prevents most used XSS and SQL injection vectors in the request uri. It looks at the request uri and sends the malicious user to a log file which sends an e-mail to the webmaster with all his information and what [...]

Filed under: b3st pract1c3s, codemonkey, exploit, security | No Comments »

I’ve always been into scripting things using random numbers based on random functions, like PHP’s “rand()” function… but I’ve never compared these types of functions to true random number generators. Then one day, I stumbled upon Random.org, which is a true random number generating service.
The difference is that most random number generating functions in programming [...]

Filed under: codemonkey | No Comments »

Finally a clean-room implementation of Google’s Page Rank Algorithm in Java, reverse-engineered from their numerous commentary on Page Rank.
public static int getPageRank(url) {
// start off with a random low PR
int pageRank = rand.getInt(0, 3);
if ( isHostedOn(’google.com’, url) ) {
pageRank++;
} else if ( isHostedOn(’microsoft.com’, url) ) {
pageRank–;
}
// Support valid pages
if (isValidPage(url) ) [...]

Filed under: codemonkey, google, lulz | No Comments »

Regular expressions are archaic-looking, extremely specific, and amazingly helpful for finding the right data, files or whatever else you need. RegEx, a free online regular expression tester, lets you hone your expression language and terms down, giving you a box to put testing text in and highlighting the words that match your query. For users [...]

Filed under: codemonkey | No Comments »

This site is a hoot. Check it out for a lighthearted laugh.
HAI! This site provides community documentation of the emergent LOLCODE language. It was the creator’s original hope that the examples could grow in a way that is both internally consistent and suggest a real, feasible computing language.
HAI WORLD:
HAI
CAN HAS STDIO?
VISIBLE “HAI WORLD!”
KTHXBYE
LOLCODE

Filed under: codemonkey, lulz | No Comments »

Apache server software provides distributed (i.e., directory-level) configuration via Hypertext Access files. These .htaccess files enable the localized fine-tuning of Apache’s universal system-configuration directives, which are defined in Apache’s main configuration file. The localized .htaccess directives must operate from within a file named .htaccess. The user must have appropriate file permissions to access and/or edit [...]

Filed under: codemonkey, security | No Comments »

So my girlfriend tells me that I need to download several large image files from a photographer’s website. I manage her online portfolio/website so I’m used to these types of requests… but this time I was going to find a better way to “leech them all.” So anyway, she IM’s me the URL for [...]

Filed under: codemonkey, girlfriend, howto, linux | 2 Comments »

Greasemonkey script MySpace custom style remover does just what it says - remove the custom styles from MySpace pages, leaving every page with MySpace’s default style.
Whether you love or hate MySpace, there’s a good chance you’ve had to use it every now and then (maybe it’s how all your friends plan their social outings or [...]

Filed under: codemonkey | No Comments »

Rasmus Lerdorf, the inventor of PHP in 1993. He is working for Yahoo! now.
“I’ve been reading this latest thread of posts around the net concerning Ruby and shared hosts, or equivalently, ease of installation. Here’s one. Here’s another. And I’m glad, for Ruby, that they are talking about this problem - I hope for their [...]

Filed under: codemonkey | No Comments »