It appears that there are now demonstrated exploits of PHP apps that use mt_rand() and/or rand() as a result of issues of seeding in one application affecting the PRNG stream in another application that used the PRNG to generate passwords or similar such things. From mt_srand and not so random numbers: … it is strongly [...]
¶
Posted 31 August 2008
† 2718.us
§
Web Programming
‡
°
Tagged: /dev/random, /dev/srandom, mersenne twister, mt_rand, password, php, prng, pseudo-random number, pseudo-random number generator, pseudorandom number generator, rand, random, random number, random number generator, rng, security
I’d written before about a really good VPS deal and how I was using it for additional secondary DNS. Not entirely surprisingly, that provider seems to have entirely vanished shortly after sending me an email at the end of my 1-month account asking me to renew (hard to renew when their web site doesn’t exist [...]
I wanted to make my slug running Asterisk do wakeup calls, since I currently pay $11/month for a daily wakeup call service and they’ll only try up to 4 times. As my starting point, I was using this dialplan from the-asterisk-book.com: [hotel-intern] exten => _*77*XXXXXXXXXXXX,1,Answer() exten => _*77*XXXXXXXXXXXX,n,Set(year=${EXTEN:4:4}) exten => _*77*XXXXXXXXXXXX,n,Set(month=${EXTEN:8:2}) exten => _*77*XXXXXXXXXXXX,n,Set(day=${EXTEN:10:2}) exten [...]
¶
Posted 18 August 2008
† 2718.us
§
Telephony
‡
°
Tagged: asterisk, busybox, coreutils, date, dialplan, ipkg, nohup, nslu2, shell, shell script, sleep, slug, system, touch, unslung, wake-up, wake-up call, wakeup, wakeup call
In case anyone was still curious following my previous headache post, it is possible to integrate WP2.6 and bbPress 0.9.0.2. I say “possible” because while I’ve got it working as far as I can tell (without having modified core code in either WP or bbP), I haven’t really tested it and it’s a mess. More [...]
¶
Posted 16 August 2008
† 2718.us
§
Web Programming
‡
°
Tagged: 0.9.0.2, 2.6, action hook, add_action, bbpress, bbpress 0.9.0.2, clear_auth_cookie, cookie, cookies, integration, set_auth_cookie, wordpress, wordpress 2.6, wp, wp2.6
The other day, I realized while I was at work that I needed some files from my Mac desktop at home. Normally, no problem, ssh into my firewall and open a tunnel to my desktop (this is better done with authpf, but that’s a post for another time), use sftp, and done. The problem is [...]
¶
Posted 13 August 2008
† 2718.us
§
Networking
‡
°
Tagged: apple, firewall, mac, magic packet, os x, sftp, sleep, ssh, ssh tunnel, wake, wake-on-LAN, WoL
Now, I’m really big on *not* complaining about new versions of things and I especially dislike the practice of complaining about how a new version of WordPress broke some plugin that is of dire importance to someone’s website, but WordPress 2.6 is starting to give me a headache. I’ve already posted thrice about issues with [...]
So, as a followup to parts 1 and 2, per WordPress Trac ticket #7001, WordPress 2.6 has split up the login cookies into three parts: what was the one and only login cookie in 2.5 is now limited to /wp-admin there’s a copy of that one that’s just limited to /wp-content/plugins, for backward compatibility with [...]
¶
Posted 03 August 2008
† 2718.us
§
Web Programming
‡
°
Tagged: 2.6, action hook, add_action, admin_cookie_path, authentication, auth_redirect, cookie, cookie path, cookie paths, COOKIEPATH, cookies, do_action, hook, is_user_logged_in, plugin, plugin api, security, set_auth_cookie, user, user authentication, user login, wordpress, wordpress 2.6, wp, wp2.6