http://guymizrahi.com/2008/06/14/how-to-steal-dreamhost-accounts/ Guy Mizrahi about Security and Technology. Sun, 01 Aug 2010 17:25:56 +0000 hourly 1 http://wordpress.org/?v=3.3.1 http://guymizrahi.com/2008/06/14/how-to-steal-dreamhost-accounts/comment-page-1/#comment-13 ___the Wed, 09 Jul 2008 22:20:47 +0000 http://guymizrahi.com/2008/06/14/how-to-steal-dreamhost-accounts/#comment-13 i think that csrf is very easy to secure one way is to create a security_token and this is the best secure form csrf... i think that csrf is very easy to secure one way is to create a security_token
and this is the best secure form csrf…

]]> http://guymizrahi.com/2008/06/14/how-to-steal-dreamhost-accounts/comment-page-1/#comment-12 Guy Mizrahi Tue, 08 Jul 2008 10:24:32 +0000 http://guymizrahi.com/2008/06/14/how-to-steal-dreamhost-accounts/#comment-12 I think you are all missing the point here. It is obvious you can secure this operation (change details) in many different ways. The point is that DreamHost didn't think that there is a need to secure it. That is whats bothering me. I think you are all missing the point here.
It is obvious you can secure this operation (change details) in many different ways.
The point is that DreamHost didn’t think that there is a need to secure it.
That is whats bothering me.

]]> http://guymizrahi.com/2008/06/14/how-to-steal-dreamhost-accounts/comment-page-1/#comment-11 mark Sun, 06 Jul 2008 12:13:09 +0000 http://guymizrahi.com/2008/06/14/how-to-steal-dreamhost-accounts/#comment-11 you can also add some small text box with random password that the user need to fill. you can also add some small text box with random password that the user need to fill.

]]> http://guymizrahi.com/2008/06/14/how-to-steal-dreamhost-accounts/comment-page-1/#comment-10 cp77fk4r Fri, 04 Jul 2008 11:26:43 +0000 http://guymizrahi.com/2008/06/14/how-to-steal-dreamhost-accounts/#comment-10 L[s]D - it's not so difficult to secure that. you just need to make sure that all the user that want to make a new changes his account must type his password in the form... L[s]D – it’s not so difficult to secure that. you just need to make sure that all the user that want to make a new changes his account must type his password in the form…

]]> http://guymizrahi.com/2008/06/14/how-to-steal-dreamhost-accounts/comment-page-1/#comment-7 L[s]D Tue, 17 Jun 2008 08:20:48 +0000 http://guymizrahi.com/2008/06/14/how-to-steal-dreamhost-accounts/#comment-7 well, this method isn't new.. it is called XSRF (cross site request forgery). I really like this sec hole cuz almost every site has it, it is very difficult to secure. well, this method isn’t new..
it is called XSRF (cross site request forgery).
I really like this sec hole cuz almost every site has it, it is very difficult to secure.

]]> http://guymizrahi.com/2008/06/14/how-to-steal-dreamhost-accounts/comment-page-1/#comment-6 איך פורצים לחשבון HOSTING של DREAMHOST? | ZuLL, יומנו של האקר. Tue, 17 Jun 2008 03:29:43 +0000 http://guymizrahi.com/2008/06/14/how-to-steal-dreamhost-accounts/#comment-6 [...] http://guymizrahi.com/2008/06/14/how-to-steal-dreamhost-accounts [...] http://guymizrahi.com/2008/06/14/how-to-steal-dreamhost-accounts

]]>