« first day (760 days earlier)      last day (4173 days later) » 

10:00 PM
@webarto Osama bin HostingProvider?
 
Hint: biggest internet and drug addicts knot in Europe :P
 
@webarto A service by 'Main Hosting'?
Hosting24, HourB, 000Webhost, Powrhost...
I haven't discovered all of their servers yet.
There is nothing on their homepage. main-hosting.com
Hi @relentless
 
Hi @ShaquinTrifonoff
 
Softlayer, IDK.
 
@relentless Would you mind testing this?
 
10:04 PM
what is it?
 
A click-jacking test WebKit notification test.
 
This makes me feel like a super secret agent.
 
@webarto So it's a fingerprint scanner?
@relentless Are you going to test the notification test? :D
 
@ShaquinTrifonoff tested
logged out
was that the point of it? Did I miss something?
 
No, you didn't miss anything. I missed seeing you leave the room, though :D
 
10:10 PM
oh
 
@ShaquinTrifonoff No, you just have to touch it. 2 phase protection, you need SSH and this. If someone acquires your key, they still can't login.
 
so, what's the end goal of it?
 
@relentless It's a demo, showing that Stack Overflow can be framed (the frame-buster-buster-buster has been busted).
 
I see
 
@ShaquinTrifonoff Post it on Meta Stack Overflow? Or keep it to yourself?
 
10:13 PM
@MadaraUchiha I suppose I should post it on Meta.
It normally says For security reasons, framing is not allowed; click OK to remove the frames.
 
@ShaquinTrifonoff Indeed it does.
 
But thanks to HTML5, there is now a sandbox :D
 
What does it do actually, I don't get it :P
 
@webarto It frames the Stack Overflow log out page, and makes it transparent over-top of a button.
 
And you click on Log Out button from parent frame?
 
10:19 PM
@webarto shaquin.tk/experiments/test3.html?show shows the transparent frames.
Look at the source.
@MadaraUchiha What should I tag it as? ?
 
@ShaquinTrifonoff I'm logged in with FF, so, how do you click on button in iframe from different domain? Bug in WebKit or?
 
@webarto I busted the frame-buster-buster-buster. It's a security hole in Stack Overflow.
Oh, sorry. I made the frame transparent.
And over-top of the button.
 
@ShaquinTrifonoff - The top button didn't work for me. The bottom one did
 
@relentless Can you post a screenshot of shaquin.tk/experiments/test3.html?show?
What does it look like for you?
 
10:26 PM
I then added an onload event on the frame, so that the second time it loads, I know the button has been clicked, and make out like mine has been.
@webarto Hmm, just a sec...
 
Can you try it again? I've modified it.
@webarto, @relentless
 
@ShaquinTrifonoff top button still doesn't work for me.
 
@relentless Screenshot?
 
@ShaquinTrifonoff Can you explain why this works?
 
10:33 PM
Clickjacking (User Interface redress attack, UI redress attack, UI redressing) is a malicious technique of tricking a Web user into clicking on something different to what the user perceives they are clicking on, thus potentially revealing confidential information or taking control of their computer while clicking on seemingly innocuous web pages. It is a browser security issue that is a vulnerability across a variety of browsers and platforms. A clickjack takes the form of embedded code or a script that can execute without the user's knowledge, such as clicking on a button that appears to...
 
allow-forms 	Allows form submission
well WebKit, that is not really smart of you...
 
@relentless What browser+version are you using?
 
Chrome Version 23.0.1271.64 m
 
10:37 PM
windows 7
 
Hmm...
@relentless I've changed it, can you try again?
 
@ShaquinTrifonoff worked that time
 
11:20 PM
pastebin.com/bSAuT3Ca Would anyone mind telling me why my script is returning invalid file when I try to upload a valid png? I'm confused.
 
@Alec does it work with other file formats?
 
Let me check.
 
                if ((($_FILES["file"]["type"] == "image/gif")
                || ($_FILES["file"]["type"] == "image/jpeg")
                || ($_FILES["file"]["type"] == "image/png")
                || ($_FILES["file"]["type"] == "application/pdf")
                || ($_FILES["file"]["type"] == "application/msword")
                || ($_FILES["file"]["type"] == "image/pjpeg"))
we are not savages... in_array
 
Just trying to pull a quickie and use w3 school's code. I know they're not liked, but I just simply need to get this done. Doesn't matter how clean it is.
 
@ShaquinTrifonoff - doing some testing ;)
 
11:27 PM
yep
 
11:47 PM
oh well .. anther one for the ignore list
 
:D
Does anyone know why does browser loads page in 700ms and Apache benchmark in 900ms?
 
only the page or all the resources too ?
 

« first day (760 days earlier)      last day (4173 days later) »