URI Vulnerability

http://brianladd.is-a-geek.net/wordpress/?page_id=11

Holy crap this is a gaping hole.

This is what I’ve discovered so far.   I’ll keep looking into this and see where I can take it.

Killer Combo: XSS + CSRF

http://www.darkreading.com/document.asp?doc_id=120801

Killer Combo: XSS + CSRF
Researchers mix cross-site scripting and cross-site request forgery together in a deadly cocktail

Why people don’t use Linux (or Windows is Free)

http://tlug.jp/articles/Windows_Is_Free

This is a really good article on why people don’t use Linux more often. Fantastic read.

MTG: Dictionary Deck-O-Pedia

The Dictionary Deck-O-Pedia

http://forums.gleemax.com/showthread.php?t=456567

A good resource for locating those decks that people keep talking about.

Full Screen Unclosable PopUp

http://hackademix.net/2007/08/07/java-evil-popups

Found this one thanks to Slashdot.org
If you’re not reading Slashdot, then you should. At least once a day.

Anyway, this is a full screen, unclosable popup with no controls and no way to interact with it. Thats the bad news.
Now for the good news. If you’re running Firefox with the NoScript plugin, then you have nothing to worry about as the NoScript plugin does a fantastic job at killing this and almost every other annoyance I’ve come across on the Internet.

In case you don’t have them, get them.
FireFox
NoScript

How to install PHP 5.x on Windows Server 2003 with IIS 6

http://www.peterguy.com/php/install_IIS6.html
How to install PHP 5.x on Windows Server 2003 with IIS 6

Man this was handy to get SugarCRM installed.

SugarCRM is a really nice Open-Source CRM application for sales contact management.