FreakyZoidberg

Firefox is 5 years old today !

In the middle of the war for web browser supremacy, today is an important day. Firefox changed the way we used internet by easing, securing and improving our web experience.

Happy birthday Firefox

for a sum up of what changed in the last 5 years of Firefox http://hacks.mozilla.org/2009/11/5-years/

Say we have a sudoku like this:

first you need to put all the number as if they were in a signle row :

"53 7 6 195 98 6 8 6 34 8 3 17 2 6 6 28 419 5 8 79"

then use with Oracle the following query (recursive subquery)

with x( s, ind ) as
( select sud, instr( sud, ' ' )
 from ( select '53  7    6  195    98    6 8   6   34  8 3  17   2   6 6    28    419  5    8  79' sud from dual )
  union all
  select substr( s, 1, ind - 1 ) || z || substr( s, ind + 1 )
       , instr( s, ' ', ind + 1 )
  from x
     , ( select to_char( rownum ) z
         from dual
         connect by rownum <= 9
       ) z
  where ind > 0
  and not exists ( select null
                   from ( select rownum lp
                          from dual
                          connect by rownum <= 9
                        )
                   where z = substr( s, trunc( ( ind - 1 ) / 9 ) * 9 + lp, 1 )
                   or    z = substr( s, mod( ind - 1, 9 ) - 8 + lp * 9, 1 )
                   or    z = substr( s, mod( trunc( ( ind - 1 ) / 3 ), 3 ) * 3
                                      + trunc( ( ind - 1 ) / 27 ) * 27 + lp
                                      + trunc( ( lp - 1 ) / 3 ) * 6
                                   , 1 )
                 )
)
select s
from x
where ind = 0
/

The Web Application Security Consotium has announced the statistics for 2008.

The statistics includes data about 12186 web applications with 97554 detected vulnerabilities of different risk levels. The analysis shows that more than 13%* of all reviewed sites can be compromised completely automatically. About 49% of web applications contain vulnerabilities of high risk level (Urgent and Critical) detected during automatic scanning However, detailed manual and automated assessment by white box method allows to detect these high risk level vulnerabilities with probability up to 80-96%. The probability to detect vulnerabilities with risk level more than medium (PCI DSS compliance level) is more than 86% by any method. At the same time, detailed analysis shows that 99% of web applications are not compliant with PCI DSS standard.

The most widespread vulnerabilities are Cross-Site Scripting, Information Leakage, SQL Injection, Insufficient Transport Layer Protection, Fingerprinting и HTTP Response Splitting. As a rule, Cross-Site Scripting, SQL Injection and HTTP Response Splitting vulnerabilities are caused by design errors, while Information Leakage, Insufficient Transport Layer Protection and Fingerprinting are often caused by insufficient administration (e.g., access control).

The probability to detect vulnerabilities of different risk levels

The most widespread vulnerabilities in web applications (% Vulns ALL)

The probability to detect the most widespread vulnerabilities in web applications (% Sites ALL)

Percent of vulnerabilities out of total number of vulnerabilities (% Vulns ALL)

The probability to detect vulnerabilities depending on their origin

The probability to detect the most risky vulnerabilities in Web applications (% Sites BlackBox & WhiteBox)

Source : projects.webappsec.org

xclip is a command line interface for X11, based on the system of pipes. i nice and easy, works like a charm

to copy the full output of a directory in a the clipboard

$>ls -la | xclip

to copy the full content of a file

$>xclip /etc/shadow

to output the content

$>xclip -o

to output the content in a file

$xclip -o > ~/myfile

echo "hello world";