Updated: 11/25/2005; 12:04:57 AM.

XML and software
XML, web and software in general, with notes on Radio Userland resources


daily link  Monday, August 30, 2004


Copernican Inversion: Interesting new tool for making offline demos and traning versions of web apps.  I wonder if it could be used for creating test suites and exercising web apps.  Based on proxy emulation.  From Dan Grigsby.  4:48:51 PM  permalink  

Axis Network Camera HTTP Authentication Bypass Vulnerability:  Amazing securty hole:  Axis makes widely used networked surveillance cameras.  They have an onboard website for administration -- and that website is easily compromised.  Furthermore, it's reported that many of these cameras are open on the public internet and can be found with google (not even a robots.txt file to prevent indexing).  Incredible that a security products company would release such a buggy product.  And it's also reported that the company didn't respond to hacker reports (normally companies issue info and an update before the hacker goes public.)   "A vulnerability has been identified in several Axis Network Cameras, which can be exploited by a malicious person to bypass user authentication. Normally a user is required to input a username and password before access is granted to "http://[victim]/admin/admin.shtml". However, by sending a HTTP request with an extra "/" before the "admin" folder, it is possible to bypass the authentication completely."

  10:10:56 AM  permalink  

Links to browser editing tools:

http://sourceforge.net/projects/itools-htmlarea/
http://dynarch.com/mishoo/htmlarea.epl
http://tinymce.moxiecode.com/
http://sourceforge.net/projects/spaw/

List-maker's comment: "HTML Area was real easy to configure and add to my blog software. It took maybe 30 minutes of fiddling."

  12:04:41 AM  permalink  

 
August 2004
Sun Mon Tue Wed Thu Fri Sat
1 2 3 4 5 6 7
8 9 10 11 12 13 14
15 16 17 18 19 20 21
22 23 24 25 26 27 28
29 30 31        
Jul   Sep
-
Subscribe to "XML and software" in Radio UserLand.

Click to see the XML version of this web page.

Click here to send an email to the editor of this weblog.
Click here to visit the Radio UserLand website.

jenett.radio.simplicity.1.3R


Copyright 2005 © Ken Novak.
Last update: 11/25/2005; 12:04:57 AM.