By Colleen, on July 23rd, 2009%
Don’t you hate it when you know you solved a problem three years ago but you can’t remember what the solution was? I ran into that recently. I was trying to make mysql generate a csv directly from query results. I remembered that you can do it, and I had an example of the correct syntax to use in my old code, and I had a query that did it just fine when running in the mysql CLI as root. I had to piece together the answer from several different sources; and none of them told the whole story. So here is the full story, along with all the stumbling blocks that I know of.
Continue reading How to make MySQL spit out CSV’s
By Colleen, on May 16th, 2009%
What is OAuth, and why should you care? Here’s the deal: Just like Skynet of Terminator fame, web apps have lately been doing a lot more talking to each other on the “back-end” instead of all web communication being between a human and a web app. This is a GOOD thing as long as the humans control what talks to what and what data is shared. Instead of copying and pasting a whole bunch of data from Web App A into Web App B, you can now just give Web App B permission to go get it. And if you ever change anything on Web App A, you only need to change it there: Web App B will pick it up. This makes things convenient, but in the past it required giving Web App B your password to Web App A! As a developer, I understand why they really do need this info, but you don’t need to be a paranoid security analyst like me to imagine how easily an evil person could promise an app that does something cool, suck up your credentials, and use them for nefarious purposes. And nowhere is this more true than on Twitter.
Continue reading OAuth: Totally!
By Colleen, on September 25th, 2008%
Apparently captured from a workplace monitor security camera somewhere in Russia a few months back.
I don’t even know what that guy was so worked up about but I sympathise. Being in a cube is not a whole lot different than being in prison. . . . → Read More: So glad I don’t work in a cube anymore
By Colleen, on August 4th, 2008%

The dork is featured again in Issue #4 (August 1) of Information Security Short Takes that I was in last month. This blog features a monthly blog carnival potpourri webzine of useful selection of security related articles. I know, I know, nobody wants to hear about security. It’s boring as all get out, and it’ll probably not happen to you. Except that it is happening, to more and more of us each year. Knowledge is power in this game. Know how it works, what to do and what not to do, and diminish your chance of being ripped off.
Continue reading Security Articles Growing a Tail!
By Colleen, on June 11th, 2008%
A old school phish typically involves an Instant Messenger or email message asking you to click a link. This tried and true technique uses bogus links, and this article shows you how to detect them. Newer phishes bite you at a different level. They feed you “good” links but then they cause the good links to turn into bad ones at the network level where you normally don’t go. These phishes will work even if you manually type the good URL into a completely virgin browser. About the only way to be safe from these is to protect your computer overall. The section where I describe bogus URL’s may seem a little long, but consider that it is easier for human brains to spot patterns than it is to talk about them. An accurate and complete description is necessary so your brain can learn what to look for. Don’t sweat it — with just a little practice you’ll be able to sniff a bogus URL in a matter of seconds just like an IT security pro.
Continue reading Avoid the phish
By Colleen, on June 5th, 2008%
Another database: CRACKED A recent security breach of a local online merchant prompted me to write this post. As a shopping cart software author and former security analyst at Symantec I know the nuts and bolts of security from several perspectives. Credit card fraud is a huge and growing problem. See my article about credit card security online for a detailed discussion on how credit card security works and what the vulnerabilities are. There is a solution, but it will not be implemented until pressure is brought to bear on the key players.
Continue reading Take Action against Credit Card Fraud
By Colleen, on May 15th, 2008%
A layman’s guide to credit card security. Colleen explains encryption, trust, and fraud building. This post is a must-read. . . . → Read More: Credit card security online: what you need to know