Category Archives: Security

Ban programmers, not functions

By Bob Somers | Published: July 7, 2009
So my daily travels around the intertubes landed me on a very interesting blog post by Microsoft’s Security Development Lifecycle team (which they call SDL, not to be confused with the arguably more useful Simple DirectMedia Layer library). The post centered around them adding memcpy() to the banned functions list in favor of their more [...]
Also posted in Code, Microsoft | Leave a comment

SSL detection by PHP scripts run through FastCGI on nginx

By Bob Somers | Published: July 3, 2009
How’s that title for acronym soup? I ran across this issue when playing around with nginx. I was trying to set up phpMyAdmin for SQL administration, but ran into a rather peculiar issue. To explain the problem, let me give you some context. I’m running nginx only on port 443, using SSL for everything. As I’m going [...]
Also posted in Linux, Scripting | 1 Comment