Good post from Jeff Atwood about cross-site request forgery (CSRF) attacks. One thing that comes to mind is that this is an example of the best kind of security exploit – one where the exploit depends on the target system doing the right thing. A Web server is meant to respond to URL requests, and…
Read More CSRF, and a blegOh bloody fuck. He’s at it again. George Osborne is in his white coat, on the stage, flogging his snake oil. All he needs now is a gospel choir. I think we’ve pointed this out before, but here goes. The Bank of England was nationalised in 1946. It’s part of the State. The money in…
Read More The Conservative Party: Can’t Be Trusted With GlueDespite all the promises, the Government is still achieving nothing with regard to its Iraqi employees. Leave aside, for the moment, the considerable numbers who are being rejected. Even the accepted – in so far as this category means anything yet – are still in Iraq, still on the streets, and still in danger. “I…
Read More I am still in Iraq…I hear nothing from your Government!Dear Lazyweb – can anyone work out why I can’t get useful data out of this page with BeautifulSoup and Python 2.5? The information is in an HTML table, enclosed by td tags nested in tr tags, and governed by three CSS classes, “flight-data”, “data-head” and “data-row2”. The latter pair are used only within the…
Read More Pathetic Python Blogging