Friday, September 29, 2006

Cross Site Scripting

If you don't know what it is, or don't think its an issue check out these examples. http://sla.ckers.org/forum/read.php?3,44 They're highlighting how easy it is to inject javascript into these sites. In this instance they're harmless alert boxes but it would be just as easy to inject a key logger or cookie stealer.

Wednesday, September 27, 2006

Websense Update+

With regard to my recent Websense Issues I have received a reply.

Thank you for writing to Websense. The site you submitted is a virtually hosted site that was not in our database. However, it shares an IP address with another site in our database which caused an unintended overblock. The site has been reviewed and categorized accordingly: http://www.cengal.com/ - Information Technology Categorization updates should be available in the next scheduled publication of the database. A new database is published every business day, five days a week, Pacific Standard Time. Thank you for your assistance, The Websense Database Services Staff S.G.

Dear Mr. PayPal

Please sort out the performance of your sandbox environment. Its horrendous. Yours etc., Frustrated PayPal Developer

Tuesday, September 26, 2006

Websense issues

An ex-colleague of mine tried to access our website. He couldn't access it because of Websense:

Blocked Site Details: Category: Sex URL: http://www.cengal.com To review information regarding this blocked Internet Web site, please go to http://www.websense.com/global/en/SupportAndKB/SiteLookup. You will need to register with Websense for access.
I decided to check for myself online and yes their database has our website categorised incorrectly. This is potentially very embarrassing for us, and I've requested that they update their database.
I have been informed by a client using Websense that they cannot access my website. We are an information technology company and are not in the sex trade. I would like this categorisation changed to save further embarrassment. I would also like to know under what criteria you categorised our site as 'sex'. This is potentially damaging to us as a company. Regards
Of critical importance is why the mistake happened, and not simply fixing it. I'm very concerned that similar tools will cause the same problems. Does Cengal mean something sordid that I'm completely unaware of?

Sunday, September 10, 2006

Career Profile

Niall Kelly asked me a few weeks ago to answer some career related questions for a site he was launching called ComputerJobs. The idea being that it would provide some guidance for grads. Its available here

Thursday, September 07, 2006

Ruby on rails hosting

Irish hosting company Blacknight is now offering RoR hosting. Thats great news for me, I was worried my options were limited to the US. See Michele's announcement here.

Tuesday, September 05, 2006

Airport Security Funnies

If you don't get it, hit play below!