Comments for PC Sympathy

Comment on WordPress 2.5 Cookie Forging Explained by devnull

devnull — Wed, 07 May 2008 09:03:19 +0000

I did some backtracking and I must be missing something or I have misunderstood something because this all seems imposible without knowing SECRET_KEY and SECRET_KEY constants if those aren’t defined a random string is generated.
$key = wp_hash($user->user_login . $expiration); great however
function wp_hash($data) { $salt = wp_salt();
lets have a look at wp_salt();

function wp_salt() {
global $wp_default_secret_key;
$secret_key = ”;
if ( defined(’SECRET_KEY’) && (” != SECRET_KEY) && ( $wp_default_secret_key != SECRET_KEY) )
$secret_key = SECRET_KEY;

if ( defined(’SECRET_SALT’) ) {
$salt = SECRET_SALT;
} else {
$salt = get_option(’secret’);
if ( empty($salt) ) {
$salt = wp_generate_password();
update_option(’secret’, $salt);
}
}

return apply_filters(’salt’, $secret_key . $salt);
}

So without knowing those constants how can you feed function hash_hmac($algo, $data, $key, $raw_output = false) the param $key?

Comment on Why Your Computer Runs So Slowly by manunkind

manunkind — Thu, 10 Apr 2008 16:34:34 +0000

tyrer,

You are right about CCleaner. It’s a must-have for any toolbox. Thanks for your comment.

Comment on Why Your Computer Runs So Slowly by tyrer

tyrer — Thu, 10 Apr 2008 13:10:15 +0000

I’d recommend AVG too, its a very efficient program which does not hog system resources.
For defrag i prefer to automate is as i feel manual defrags are time consuming for todays large drives, and the real time defragmentation is a step ahead of scheduling as well.
Along with this i also use CCleaner for cleanups.

Comment on Browser hack renders routers insecure by manunkind

manunkind — Tue, 08 Apr 2008 12:34:32 +0000

Solution: Always change the default username and password for any device or application. Default = well known.

Comment on Password checker by manunkind

manunkind — Tue, 11 Mar 2008 01:53:46 +0000

Note: Microsoft does not see your password in any way, shape or form. All checking is done locally.

Comment on Spam Pushes Malware Disguised As Screensavers by manunkind

manunkind — Mon, 10 Mar 2008 03:26:23 +0000

It all falls back to TRAIN YOUR USERS. Teach them about the basics of security and some of this will be eliminated.

Troy