http://search.deviantart.com/?q=by:KOLNstyle&section=today deviantART RSS for by:KOLNstyle en-us Copyright 2009, deviantART.com Thu, 03 Dec 2009 06:50:16 PST deviantART.com http://blogs.law.harvard.edu/tech/rss http://s.deviantart.com/minish/widgets/apple-touch-icon-precomposed.png http://KOLNstyle.deviantart.com/journal/24154012/ http://KOLNstyle.deviantart.com/journal/24154012/ Thu, 09 Apr 2009 20:01:35 PDT , yay!

]]> ~KOLNstyle http://KOLNstyle.deviantart.com/journal/23777628/ http://KOLNstyle.deviantart.com/journal/23777628/ Thu, 19 Mar 2009 10:09:01 PDT
I'm starting to get burned out. I need a two month break from all of this.

]]> ~KOLNstyle http://KOLNstyle.deviantart.com/journal/22724656/ http://KOLNstyle.deviantart.com/journal/22724656/ Thu, 22 Jan 2009 00:00:29 PST
Heh, whaddaya know. I'm applying everywhere for an Econ/PolSci or Econ/Math double major. Kinda funny, since most people thought I'd go into either CS or Medicine. Hey, it's where the world takes you, eh? Besides, I like Economics, and it looks like I'll probably be going for International Law post-undergrad. You know, it's just hard to believe that I'm going to be in the real world in a couple of months.

It's weird, moving on from high school into university and it's formidable. Now, things actually matter. What you do and what you don't do actually affects how your life is really going to be. There's no do-overs, it's all just reality. I think the fact that everything actually counts now and that there's no real safety net really sorta intimidates me. I'm not sure how I would take it, and to be honest, it's scary.

I'll be on and off dA; not really paying attention to this much. Just hit me up on the Facebook or on the IM services (note me if needed).

]]> ~KOLNstyle http://KOLNstyle.deviantart.com/journal/19924406/ http://KOLNstyle.deviantart.com/journal/19924406/ Tue, 12 Aug 2008 21:31:52 PDT

That really put a damper on my day.

]]> ~KOLNstyle http://KOLNstyle.deviantart.com/journal/19758354/ http://KOLNstyle.deviantart.com/journal/19758354/ Sun, 03 Aug 2008 19:11:06 PDT
[link]

]]> ~KOLNstyle http://KOLNstyle.deviantart.com/journal/18903095/ http://KOLNstyle.deviantart.com/journal/18903095/ Tue, 17 Jun 2008 23:53:34 PDT
]]> ~KOLNstyle http://KOLNstyle.deviantart.com/journal/17597620/ http://KOLNstyle.deviantart.com/journal/17597620/ Sun, 30 Mar 2008 21:26:00 PDT
]]> ~KOLNstyle http://KOLNstyle.deviantart.com/journal/17131070/ http://KOLNstyle.deviantart.com/journal/17131070/ Sat, 01 Mar 2008 09:53:53 PST
So it's here. Unfortunately, Fedex dislikes Saturday service unless it's next flight. They also don't take the packages out of their shipping pallets until the day they are to be delivered. That squashes my hope of driving over there and picking them up myself. Oh well. I can wait till Monday, although I have a good deal of stuff to work on.

Suggestions. I want to know what you look for in a good IDE and what features you would love to see in an IDE. You'll see why eventually.

]]> ~KOLNstyle http://KOLNstyle.deviantart.com/journal/17108686/ http://KOLNstyle.deviantart.com/journal/17108686/ Thu, 28 Feb 2008 19:33:51 PST
Look forward to seeing the release of multiple libraries in the next two weeks as my productivity will be boosted with this laptop laptop.

That is all.

]]> ~KOLNstyle http://KOLNstyle.deviantart.com/journal/16664905/ http://KOLNstyle.deviantart.com/journal/16664905/ Thu, 31 Jan 2008 19:35:59 PST Problem
Whats wrong with this?

//login.php
$username=$_POST['username'];
$password=md5($_POST['password']);
$query="SELECT * FROM userlist WHERE username='$username' AND password='$password'";
/* Insert further handling code here, what's is above is what's most important */
?>

Say a user Bob decides to log on. He enters his username, in this case Bob, and his password, which can be any arbitrary string. All goes fine and dandy and your query ends up looking like:

SELECT * FROM userlist WHERE username='Bob' AND password='6de420c6e82418f00904f023cad958ff'

What if Rob comes onto the site and he feels a bit evil today. Instead of typing in Rob as his account, he types in eviluser' OR 1=1;-- and the same for his password. The script will excecute, and your query ends up looking like this:

SELECT * FROM userlist WHERE username='eviluser' OR 1=1;--' AND password='9703025870d2e7cf061482d94ca1ba7f'

What's wrong here? Lets break apart our queries.
Bob's Query: Select all data from the table userlist where the username is bob and the password is 6de420c6e82418f00904f023cad958ff. Bob's query, which is the intended query, only lets Bob in if his username is in the table and the md5ed password matches that in the table for that entry.
Rob's Query: Select all data from the table userlist where the username is blank or where 1=1. Rob's query, which is the malicious query, only lets Rob in if his username matches eviluser or if 1=1, which it obviously does. Rob's query evaluates to be true every single time.

One can obviously see why this would be a bad idea. The damage can be a lot worse than you think. Lets say Rob isn't such a nice guy and is a bit more informed than you think and decides to use ihateyou'; DROP TABLE userlist;-- as his username. This is what the resulting query will end up looking like this:

SELECT * FROM userlist WHERE username='ihateyou'; DROP TABLE userlist;--

The resultant query basically says select all data from the table userlist where the username matches ihateyou. Then, destroy all information within userlist. Oh no, that's not good. With a few keystrokes, Rob just destroyed your entire user listing.

Suggestions

• Escape all entities before applying them in a query using mysql_real_escape_string() or write your own escape method.


• Don't consolidate your username and password searching and matching, rather search only for the username, then check if the password associated with it is the same as your modified password.

Lets say you took the suggestions, then when Rob tries his second query, it will end up looking like this:

SELECT * FROM userlist WHERE username='\'hateyou\'; DROP TABLE userlist;--'

The net result will end up in a search for the convoluted, and most probably non-existant username of ihateyou'; DROP TABLE userlist;-- rather than having your table's data destroyed.


That concludes the first out a few articles to come. This is by no means a definitive guide to SQL injection and prevention, this article is just meant to be simple and informative; a whetting of the appetite. I guess I'm writing this as a constructive way of approaching my frustration at developers who leave such holes in sites.

]]> ~KOLNstyle http://KOLNstyle.deviantart.com/journal/16232635/ http://KOLNstyle.deviantart.com/journal/16232635/ Wed, 02 Jan 2008 23:11:16 PST Code:
-Backend: v0.0, Under Progress: 75% complete.
-libTrans: v0.0, Under Progress: frontend complete, adding user backend. (PRIVATE RELEASE)
-libLastFM: v0.1, Under Progress: adding extra features+standardizing output.
-libTrauma: v0.3, Under Progress: standardizing output.
-libExplore: v0.1, Under Progress: adding extra features+standardizing output.
-libLastFM, libTrauma, and libExplore will be released to the public.
-libTrans is a self-contained site that is a collaboration between and me. It is part of the Trauma Project.

NEWPETPEEVE: Invalid Code. *shudder*
-The w3c validator exists for a reason. Use it.

]]> ~KOLNstyle http://KOLNstyle.deviantart.com/journal/15065771/ http://KOLNstyle.deviantart.com/journal/15065771/ Sun, 14 Oct 2007 21:36:53 PDT
[link]

-kölnstyle.

Note to self: ask ika for help with proofreading french version.

]]> ~KOLNstyle http://KOLNstyle.deviantart.com/journal/14944325/ http://KOLNstyle.deviantart.com/journal/14944325/ Sat, 06 Oct 2007 17:05:39 PDT
Consider this a Reboot.

I will be back. Better than before.

-kölnstyle.

]]> ~KOLNstyle http://KOLNstyle.deviantart.com/journal/14402198/ http://KOLNstyle.deviantart.com/journal/14402198/ Wed, 29 Aug 2007 21:07:52 PDT
[link] for more details.

It was this crazy idea me and my friend came up with, but hey, its going to be awesome. Logotype+T-Shirt Design+Ads+Site Design(might be delayed) to follow.

]]> ~KOLNstyle http://KOLNstyle.deviantart.com/journal/13949046/ http://KOLNstyle.deviantart.com/journal/13949046/ Mon, 30 Jul 2007 23:12:55 PDT
[link]

Site will come before end of septemeber.

]]> ~KOLNstyle http://KOLNstyle.deviantart.com/journal/13749563/ http://KOLNstyle.deviantart.com/journal/13749563/ Sun, 15 Jul 2007 21:19:10 PDT #2-Visual Style
#3-Kickass Vector
#4-Working to get a Macbook Pro and a Lomo LCA.
#5-Studying for SAT/ACT.

Thats whats going on.

]]> ~KOLNstyle http://KOLNstyle.deviantart.com/journal/13439006/ http://KOLNstyle.deviantart.com/journal/13439006/ Thu, 21 Jun 2007 21:36:01 PDT
Its been a long time, with DJ shine.

I am so apathetic right now.

]]> ~KOLNstyle http://KOLNstyle.deviantart.com/journal/13236927/ http://KOLNstyle.deviantart.com/journal/13236927/ Wed, 06 Jun 2007 08:58:38 PDT
]]> ~KOLNstyle http://KOLNstyle.deviantart.com/journal/13080720/ http://KOLNstyle.deviantart.com/journal/13080720/ Thu, 24 May 2007 19:32:09 PDT [link]

^rofl.

]]> ~KOLNstyle http://KOLNstyle.deviantart.com/journal/12912436/ http://KOLNstyle.deviantart.com/journal/12912436/ Thu, 10 May 2007 15:27:28 PDT [link]

^---Our Commercial for english class.

Thats what the Red Fairy Logotypes and Can Labels were made for.

We gots a 100% and commended by the teacher.

]]> ~KOLNstyle http://KOLNstyle.deviantart.com/journal/12892936/ http://KOLNstyle.deviantart.com/journal/12892936/ Tue, 08 May 2007 20:21:57 PDT
]]> ~KOLNstyle http://KOLNstyle.deviantart.com/journal/12809697/ http://KOLNstyle.deviantart.com/journal/12809697/ Tue, 01 May 2007 22:30:56 PDT
That is all.

]]> ~KOLNstyle http://KOLNstyle.deviantart.com/journal/12446054/ http://KOLNstyle.deviantart.com/journal/12446054/ Tue, 03 Apr 2007 15:22:22 PDT
I have a house.
I have a saltwater pool.
I have 2 rooms to myself.
I am getting a Macbook and 2 martial arts pads.
I have a house.

Best of all, I HAVE LUMPIA AND PANCIT!

]]> ~KOLNstyle http://KOLNstyle.deviantart.com/journal/12045719/ http://KOLNstyle.deviantart.com/journal/12045719/ Sat, 03 Mar 2007 20:35:27 PST
In other news, I'm moving in april into a house. WHOOT!

]]> ~KOLNstyle http://KOLNstyle.deviantart.com/journal/11614498/ http://KOLNstyle.deviantart.com/journal/11614498/ Mon, 29 Jan 2007 17:12:53 PST

]]> ~KOLNstyle