rene.schmidt^webtech

Together with Florian I have recently investigated a security issue in OpenX where attackers could drop a web shell onto the server. Heise is covering the story. Unfortunately the posting suggests that this is an issue… Read on ››

In a Slowloris attack a client (or a botnet) opens a large amount of connections to a web server and holds them open. It does not send complete requests so you might find no request of the attacker in an Apache log… Read on ››

Web fonts have been adopted by all major web browsers. What Firefox 3.1+ w/ Noscript users might not know is that Noscript blocks “font face” by default so they do not get to see nice fonts. There are two… Read on ››

Internet Explorer 6 is on the verge of death. Google will phase out support of this old fellow very soon. FINALLY I might add. While they will invite IE6 users to install Chrome, Firefox or some other modern browser,… Read on ››

Someone recently asked me if he could block someone from viewing his publicly available web content. The inconvenient truth: No you can not. Unless you restrict your web content to a certain user group via authentication… Read on ››

Wer sich dafür interessiert, Amazon Web Services (AWS) zu nutzen, beispielsweise Elastic Computing (EC2), Cloudfront oder S3, sollte eines wissen: Es gibt keine vorsteuerabzugsfähigen Rechnungen von “Amazon… Read on ››