Aaron Saray

open source programmer,
web developer

entrepreneur, author
and musician

My Blog

contains PHP, Web and business/entrepreneurial related content. Please join in the conversation!

Tag Archives: security

Demonstrating Password Manager Almost Vulnerability in FireFox

The “security guys” have been talking about the problems with FireFox’s password manager and I got curious. It turns out that javascript can access saved passwords in your password manager simply by creating a login form and capturing the input … Continue reading

Posted in javascript, security | Tagged , | 1 Comment

The anatomy of a phishing attack – advanced technique

So many phishing attempts lately are just purely pathetic – easy to guess and figure out, mis spelling and grammar issues and just poorly fashioned websites. Although these will work on the novice web surfer, can a clever criminal actually … Continue reading

Posted in security | Tagged | Leave a comment

The top 17 ways to help eliminate the Phishing threat

The following is the result of a research project I had done about phishing. Its some best practices and suggestions based upon information from leading security professionals such as white hat security, McAfee, etc. A combination of e-mail security, authentication … Continue reading

Posted in security | Tagged | 2 Comments

AJAX Security Research and Findings – Round 2

Round 2, and the final round, is complete! The previous article here talked about my initial findings. Well, I was able to try some proofs of concepts on my javascript finding, and I put together our top level recommendations for … Continue reading

Posted in AJAX, PHP, security | Tagged , , | 2 Comments

AJAX Security Research and Findings – Round 1

(“the triangle”) wants to keep implementing more and more AJAX based systems – but no one ever took time to research into the security issues with this. I did a proof of concept one time with a zip-code function when … Continue reading

Posted in AJAX, PHP | Tagged , | 2 Comments