Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.lang.php > #15304

Re: Article: PHP Hash Comparison Weakness A Threat To Websites, Researcher Says

Show all headers | View raw

On 5/10/2015 6:23 PM, user1 wrote:
> On 10/05/2015 22:55, Jerry Stuckle wrote:
>> On 5/10/2015 3:29 PM, user1 wrote:
>> > PHP Hash Comparison Weakness A Threat To Websites, Researcher Says
>> >
>> > "Flaw could allow attackers to compromise user accounts, WhiteHat
>> > Security's Robert Hansen -- aka 'RSnake' -- says in new finding on
>> > 'Magic Hash' vulnerability. "
>> >
>> > URL:
>> >
>> http://www.darkreading.com/vulnerabilities---threats/php-hash-comparison-weakness-a-threat-to-websites-researcher-says-/d/d-id/1320353
>>
>> >
>>
>> Which is not a problem with using proper coding techniques.
> 
> Indeed, a fair point good sir.
> 
> Hopefully everyone knows about using proper coding techniques.
> 
> But just in-case some don't, or are still at a learning stage- perhaps
> you could recommend a good website as a source of information on proper
> coding techniques?
> (For PHP specifically or more broadly.)
> 
> Thanks

Proper coding techniques is a huge subject - and one you won't find on a
website - at least not a free one.  It's too much and takes a lot of
experience and training.

There may be some good books on it - I know there were several years
ago, but I haven't checked recently.  There may also be some paid
courses on the internet, but I've never checked them out.

-- 
==================
Remove the "x" from my email address
Jerry Stuckle
jstucklex@attglobal.net
==================

Back to comp.lang.php | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Article: PHP Hash Comparison Weakness A Threat To Websites, Researcher Says user1 <none@none.invalid> - 2015-05-10 20:29 +0100
  Re: Article: PHP Hash Comparison Weakness A Threat To Websites, Researcher Says Jerry Stuckle <jstucklex@attglobal.net> - 2015-05-10 17:55 -0400
    Re: Article: PHP Hash Comparison Weakness A Threat To Websites, Researcher Says user1 <none@none.invalid> - 2015-05-10 23:23 +0100
      Re: Article: PHP Hash Comparison Weakness A Threat To Websites, Researcher Says Jerry Stuckle <jstucklex@attglobal.net> - 2015-05-10 18:46 -0400
        Re: Article: PHP Hash Comparison Weakness A Threat To Websites, Researcher Says user1 <none@none.invalid> - 2015-05-11 22:49 +0100
      Re: Article: PHP Hash Comparison Weakness A Threat To Websites, Researcher Says Jim Higgins <ILikeMy@Privacy.invalid> - 2015-05-11 19:53 +0000
        Re: Article: PHP Hash Comparison Weakness A Threat To Websites, Researcher Says "Christoph M. Becker" <cmbecker69@arcor.de> - 2015-05-11 23:06 +0200
          Re: Article: PHP Hash Comparison Weakness A Threat To Websites, Researcher Says user1 <none@none.invalid> - 2015-05-11 22:54 +0100

csiph-web