In a previous article in this series I told you about a reported exploit for Adobe Flash Player. It seems that the security bulletin that this exploit was based upon was released before the version 9.0.124.0 of the Player. Reading the latest security bulletin Adobe informs us that the exploit is not applicable to this […]
Popularity: 55%
A very recent news on Zdnet announced that there is an very serious exploit that Adobe Flash Players 9.0.115.0 and 9.0.124.0 are vulnerable; other versions may also be affected.
The link to the whole story is here.
Popularity: 50%
Popularity: 50%
In this post we will implement a login process with remember password functionality. In AS3 and also in AS2 we can use a SharedObject to store data on the users browser. Shared objects are similar to the all known browser cookies but are managed by the flash player. Shared objects can store data also remotely […]
Popularity: 87%
The paper “Application-Specific Attacks: Leveraging the ActionScript Virtual Machine” written by Mark Dowd in which he describes various techniques that promise to open up a class of exploits and vulnerability research previously thought to be prohibitively difficult. While the Flash vulnerability described in the paper [pdf] has been patched by Adobe, the presentation of a […]
Popularity: 61%
Adobe plans to release a new security update for the Flash Player on 9 April 2008. The update plans to fix the issues listed in the December 2007 Security Bulletin ABSP07-20 for DNS rebinding and cross-domain policy file vulnerabilities, and Security […]
Popularity: 50%
In a previous article I told you about the benefits of RSL’s. But you need also to know how to create them from a swc and how to use them.
First step is to create a new “Flex Library Project”. Write all the code you want to have in it. Then in your main application […]
Popularity: 67%
Today I found this interesting library - AS3 Crypto Framework 1.3. Many algorithms used for cryptography are implemented in this class: TLS 1.0 support (partial), X.509 Certificate parsing and validation, RSA (encrypt/decrypt, sign/verify), AES, DES, 3DES, BlowFish, XTEA, RC4, ECB, CBC, CFB, CFB8, OFB, CTR, MD2, MD5, SHA-1, SHA-224, SHA-256, PKCS#5, PKCS#1 type 1 and […]
Popularity: 28%
Now here is an example how to check a user using our CAPTCHA.
Popularity: 38%
And now here is a running example. This shows how to generate a CAPTCHA setting about 4 parameters.
Popularity: 38%
Recently I needed to implement a CAPTCHA (means: “Completely Automated Public Turing test to tell Computers and Humans Apart” - on wikipedia) functionality to a sign-up form in flex.
So here is the class:
public class Captcha extends Canvas
{
private const CAPTCHA_WIDTH:uint = 120;
private const CAPTCHA_HEIGHT:uint = 40;
[…]
Popularity: 31%
Some times you may pass over the following problem: the data doesn’t loads although the flex application is showing busy cursor. It remains in the loading process but it doesn’t finish. One of the following thing happens:
As you can see in the image above the SWF is not accessing the same domain it come from […]
Popularity: 36%