6

How *Not* To Implement A Web Application That Handles External Authentication, Using BeTwittered.com As An Example


Posted by Artem Russakovskii on February 3rd, 2010 in Security

lock Today I'm going to look at how not to handle user authentication in a web application, taking BeTwittered.com authenticating with Twitter as an example (sorry, guys).

BeTwittered is a simple and comfortable gadget that you can add to your site, such as your iGoogle homepage.

Since BeTwittered is just a bridge between you and Twitter, it has to first log you into your account. Here…

Read the rest of this article »

13

Random Questions and Thoughts. Password Protected Garage Door Remotes, Twitter Security, MUNI Drivers, Burgers, etc


Posted by Artem Russakovskii on March 4th, 2009 in Beer Planet, Personal, Programming, Security, Stuff, Technology, WTF?

Updated: March 3rd, 2010

image From time to time my, still curious, mind accumulates a variety of questions and concerns which it has to spill onto the pages of this blog. How random are these? Pretty damn random, and I need to see some answers, quick. Oh, and I’m deliberately not searching Google, as I want to facilitate discussion. What fun would it be if I just looked up all these?

Password Protected Garage

…

Read the rest of this article »