Category Archives: Web

Anti-IE 6 campaign

I found this initiative, apparently started in Sweden, quite funny but also educative. So I just set up the Shockingly Big IE6 Warning plugin in this blog. Then I became curious and checked the stats of this site : So there is still about 9% of our visitors that are running IE 6 and 3% [...]

How to stop Firefox from prompting for the client certificate

I am using a client certificate to authenticate against some Apache HTTPS website. By default, Firefox 3 has a very annoying setting : it will prompt you with a box to select your certificate, every time the browser access to a file. I quickly realized that there is not setting in the preference tab to [...]

How-to : Mod-security 2 set-up for Apache 2

Mod-security is a security proxy for Apache. It adds a frontal layer filtering unwanted clients, malformed packets and malicious requests. It is especially usefull if your website is dynamic, involving php, sql, javascript, etc. With such a complex environment, as you can never be sure that your website is not vulnerable or up-to-date enough, something [...]

Hacked !

This blog got hacked yesterday. It looks like some spammer managed to inject some PHP code into almost all *.php files of WordPress. It was not just like the classic SQL injection that is usually used to post some malicious post. The following code was added :

OpenID is gaining popularity

Yahoo just announced that it will support OpenID. OpenID is an interesting initiative to provide single-sign-on to user. It is both secure and simple, so it will be probably spread out quickly. You can get your own OpenID by suscribing to a provider or setting up your own server if you got a domain name. [...]

OpenVPN and DNS on a linux client

I got a weired issue with Linux clients while it worked fine with Windows machines. For some reason, the /etc/resolv.conf did not get updated.

I found out a workaround thanks to this page.

Of course, your server configuration file must contain (if 192.168.1.1 is your DNS server):

push "dhcp-option DNS 192.168.1.1"