Category Archives: Security

myAutToExe and Ruby for the win!

As I’ve mentioned maybe once or twice before, I like myAutToExe a good deal. It’s great for tinkering around with AutoIt programs that have been “secured” by compiling to tokens. In some situations, being able to decompile these scripts is … Continue reading

Posted in Programming, Security | Tagged , , | 7 Comments

CBS bot for Magic Online (mtgo) publicly proven guilty!

Score one for the good guys I’d like to thank everybody on the forums who helped out in the investigation, and I hope this can be a lesson to greedy bot authors everywhere.

Posted in Bad Programmer!, Games, Security | Tagged , , | 2 Comments

CardBoosterShop Bot (CBSBot) for Magic Online (mtgo) has an account-stealing backdoor!

HUGE UPDATE: Read my updated article and wotc’s official statement. Great work, wotc, for your willingness to investigate this matter, and thanks to everybody who helped prove this scam.

Posted in Bad Programmer!, Games, Security | Tagged , , | 14 Comments

AutoIt fans rejoice! New version of myAutToExe available!

As I previously mentioned, I like AutoIT a great deal, but I like decompiling other people’s stuff even better. Just a couple days ago, the genius who brought us the only 3.2.6 decompiler released a new version, 2.2. I haven’t … Continue reading

Posted in Programming, Security | Tagged , | 7 Comments

AutoIt Decompiler for v3.2.6+

I’m a huge fan of AutoIt – I think the program is a wonderful tool for administrators as well as casual programmers who just like to mess with stuff. However, I recently discovered that the developer of AutoIt, in an … Continue reading

Posted in Programming, Security | Tagged , | 16 Comments

The wonderful world of Cross-site scripting (XSS) – OR – why input filtering is bad

I have been dealing with XSS at my so-called “real job” recently, and it has come to my attention that a lot of people in this world are under the mistaken impression that it’s better to do “input filtering” than … Continue reading

Posted in Programming, Ruby on Rails, Security | 1 Comment

Web security and Mobster World: a tale of woe

I belong to a forum for web game developers and I recently posted about how to keep one’s game from being a target of the most common security problems. The information seems, to me, to be so obvious, but apparently … Continue reading

Posted in Programming, Security | 1 Comment

PCI Evils

“PCI compliance”:http://en.wikipedia.org/wiki/PCI_DSS is a good idea. In theory. At my job we’re adopting all these standards to make all our users’ experiences better, which is really a great thing. But just like every other “good idea in theory”, this one … Continue reading

Posted in Opinions, Security | Leave a comment

Arch Reality gives spammers the edge

On the heels of my amazing discovery of the “PC Mesh Hide Files and Folders“:http://blog.nerdbucket.com/articles/2007/01/15/revolutionary-new-software software, I make yet another Awesome Software Discovery: “jcap”:http://www.archreality.com/jcap/! CAPTCHA(Completely Automated Public Turing test to tell Computers and Humans Apart) technology is always trying to … Continue reading

Posted in Bad Programmer!, Programming, Security | Leave a comment

Revolutionary new software!

There is a company out on the fringes of technology. Making software that most of us only dream of being able to write. Scoffing at the current obsolete methodologies and practices, these brave new developers have recently pioneered an awesome … Continue reading

Posted in Bad Programmer!, Programming, Security | Leave a comment