• Twitter Updates for 2012-01-03

    Few things quite so much fun as going out on a MTB and getting muddy; but I need to dramatically shorten my stem / change bars #

    (more…)

  • Twitter Updates for 2012-01-02

    Hartley Wintney #Wassail festival, friday january 6th #

    (more…)

  • Twitter Updates for 2012-01-01

    This year's prize for Xmas innovation goes to #MarksAndSpencer for wrapping paper with a 1cm square cutting grid printed ON THE BACK ! # did not buy #nostalgia http://t.co/neCoRB3A # @bubbva Could just be me, though it's an innovation to a few other friends too … 🙂 # nye chez hippo http://t.co/XdkUjQGq # cheeses !…

    (more…)

  • Twitter Updates for 2011-12-31

    TIL about the Bechdel Test http://t.co/AhtywQlS #movies #women # Wine, like love, should be shared; but as solitary pursuits go, vodka martinis are rather excellent… #

    (more…)

  • Twitter Updates for 2011-12-30

    Watched the #langsec video from #28c3 and am now very depressed #formalmethods #trustedcomputing #ada #xml #thistimefersure # Is there anywhere in the UK doing discounts on high-spec #Roomba at the moment ? I need an uplifting retail experience #firstworldproblems # Hang the wildlife, if I was an extra for http://t.co/WqpGntwD filming at #Blackbushe then I'd…

    (more…)

  • Twitter Updates for 2011-12-29

    Amused that #Fedex signup for a UK address says "Phone must be a 10 digit number" #fail #wrong #thisisnottheusa # #Fedex = You cannot use the online service without an account, you cannot get an account without phoning & supplying a credit card number # More #Fedex 1) Amazing how the 0800 toll-free number vanishes…

    (more…)

  • Twitter Updates for 2011-12-28

    An example of why you keep separate work/home (clean/dirty) devices: http://t.co/DhJWm88r – #Laporte didn't read http://t.co/jQ3ZoYZV # No-one can call Steve Bellovin uninformed re: #security nor irresponsible; thus the importance of https://t.co/qz9OX8PT in #fulldisclosure # @jamesrbuk So 0.1% of payments ? That's big, right ? Like: what is it comparable to ? You're a #datajournalist…

    (more…)

  • Twitter Updates for 2011-12-26

    Compare http://t.co/qFxuFmqR and http://t.co/QwSS4y5r – science progresses, religion… #notsomuch # @smcdoyle Next stop an AR.Drone ? 🙂 # MUST READ: #RossAnderson #039;s Christmas Carol – Banks + Scrooge-like Financial Ombudsman + credit card fraud happy ending http://t.co/WMnRHWFw # Lately returned from a walk around #Calleva #Silchester ; some sod's nicked the bronze info-plaques from the…

    (more…)

  • Twitter Updates for 2011-12-25

    @e3i5 @hvcco Could be, though they were meant to have fixed. that. Got any context? # One for @shortblue / @surevine http://t.co/5XYtj0zA — via @andrewcb # Hartley Wintney / Hart = #1 place to live in UK; Ombersley / Wychavon = #6 http://t.co/1t3cXOyw # Double Win for Chez + Chateau Muffett # @e3i5 @hvcco How…

    (more…)

  • Twitter Updates for 2011-12-21

    My local #Lidl is doing 1.2kg blocks of prosciutto crudo for £9.99/kg vacuum-packed. #THIS is why I have a meatslicer at home. # If you're into women's <del>porn</del> #erotica my writer-friend #JanineAshbless has a new eBook out today http://t.co/trN7OVd1 #plug # Wow <em>Web TweetDeck</em> seems <tt>to honour</tt> in-tweet HTML that goes <strong>Facebook</strong> and back? #xss…

    (more…)

  • “Merry Christmas – it’s another Twitter XSS bug!” (at Computerworld)

    “Merry Christmas – it’s another Twitter XSS bug!” Merry Christmas – it’s another Twitter XSS bug! Festive fodder for Cybersecuritypseuds Recently Twitter bought TweetDeck, a provider of custom twitter-browsing clients which were popular amongst many Twitterati for dealing with bulk tweet-management. Twitter subsequently axed the main TweetDeck client, replacing it with a centralised web service…

    (more…)

  • Confirmed: #XSS in #Tweetdeck reading #Facebook feeds to Web client

    UPDATE: Context and background now posted at Computerworld. Following on from the discovery and the previous posting, see below; original content is in my feed somewhere but looks like: <iMg Src=http://localhost/nope.gif onerror=’javascript:alert(“happy now ben?”)’> Twitter have had XSS bugs before, not Tweetdeck as far as I am aware – but then they used to have…

    (more…)