By chance can anyone recommend a good three panel template
for Holloween.
Preferably free of course. 
Thanks,
Scott Klassen
-----Original Message-----
From: joomla-bounces lists.nyphp.org [mailto:joomla-bounceslists.nyphp.org]
On Behalf Of joomla-requestlists.nyphp.org
Sent: Wednesday, October 17, 2007 11:01 AM
To: joomlalists.nyphp.org
Subject: joomla Digest, Vol 10, Issue 17
Send joomla mailing list submissions to
joomlalists.nyphp.org
To subscribe or unsubscribe via the World Wide Web, visit
http:/
/lists.nyphp.org/mailman/listinfo/joomla
or, via email, send a message with subject or body 'help'
to
joomla-requestlists.nyphp.org
You can reach the person managing the list at
joomla-ownerlists.nyphp.org
When replying, please edit your Subject line so it is more
specific
than "Re: Contents of joomla digest..."
Today's Topics:
1. RE: RE: $5 securid authentication hack (Jonathan M.
Slivko)
2. Re: RE: $5 securid authentication hack (Rolan Yang)
------------------------------------------------------------
----------
Message: 1
Date: Wed, 17 Oct 2007 11:33:15 -0400
From: "Jonathan M. Slivko" <jonathanslivko.org>
Subject: RE: [joomla] RE: $5 securid authentication hack
To: "'NYPHP SIG: Joomla'" <joomlalists.nyphp.org>
Message-ID: <000001c810d3$097efc00$1c7cf400$org>
Content-Type: text/plain; charset="us-ascii"
.... I mean while taking PayPal out of the loop.
-- Jonathan
-----Original Message-----
From: joomla-bounceslists.nyphp.org [mailto:joomla-bounceslists.nyphp.org]
On Behalf Of Anthony Ferrara
Sent: Wednesday, October 17, 2007 11:28 AM
To: NYPHP SIG: Joomla
Subject: Re: [joomla] RE: $5 securid authentication hack
If I saw this on a site, I would laugh, and close the
browser... I'm not inputing PayPal info into a 3pd
website... What I am sugesting is creating a SSO
website, where you order a "Fob", and it has the
API... So you log in to that site (without a
password), and it authenticates you against that
remote SSO server...
--- "Jonathan M. Slivko" <jonathanslivko.org> wrote:
> Do we know if there's an API of sorts for
"official"
> 3rd party integration?
> -- Jonathan
>
> -----Original Message-----
> From: Rolan Yang [mailto:rolanomnistep.com]
> Sent: Wednesday, October 17, 2007 10:25 AM
> To: NYPHP SIG: Joomla
> Cc: jonathanslivko.org
> Subject: $5 securid authentication hack
>
> At the Joomla Day during the security breakout
> session, the discussion
> drifted towards various methods of login
> authentication. The topic of
> SecurId was mentioned as being an expensive
> alternative. I just noticed
> today that Paypal is offering a SecurId keychain fob
> for $5. It would be
> simple to write a small php authentication function
> which acted as a
> proxy to paypal, accepting an email, password, and
> securId code, sending
> a off a https request, parsing the response and
> returning an TRUE or
> FALSE authenticated result.
>
> One caveat: if your website security is
> compromised, any paypal
> information submitted could be divulged, so if you
> plan to test this in
> an insecure environment, it's best for users to open
> up a new unfunded
> paypal account not linked to any bank.
>
> I'll post some sample code when my Paypal securId
> arrives in the mail
>
> ~Rolan
>
> _______________________________________________
> New York PHP SIG: Joomla! Mailing List
> http:/
/lists.nyphp.org/mailman/listinfo/joomla
>
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
>
> Show Your Participation in New York PHP
> http://ww
w.nyphp.org/show_participation.php
>
__________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection
around
http://mail.yahoo.com
_______________________________________________
New York PHP SIG: Joomla! Mailing List
http:/
/lists.nyphp.org/mailman/listinfo/joomla
NYPHPCon 2006 Presentations Online
http://www.nyphpcon.com
Show Your Participation in New York PHP
http://ww
w.nyphp.org/show_participation.php
------------------------------
Message: 2
Date: Wed, 17 Oct 2007 11:38:16 -0400
From: Rolan Yang <rolanomnistep.com>
Subject: Re: [joomla] RE: $5 securid authentication hack
To: NYPHP SIG: Joomla <joomlalists.nyphp.org>
Message-ID: <47162C68.3060605omnistep.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Anthony Ferrara wrote:
> If I saw this on a site, I would laugh, and close the
> browser... I'm not inputing PayPal info into a 3pd
> website... What I am sugesting is creating a SSO
> website, where you order a "Fob", and it has
the
> API... So you log in to that site (without a
> password), and it authenticates you against that
> remote SSO server...
> --- "Jonathan M. Slivko" <jonathanslivko.org> wrote:
>
This hack was not meant to be widely adopted, but instead a
cheap proof
of concept (emphasis on "cheap") possibly
providing an added level of 2
factor protection for important accounts such as the
"master joomla
admin" or for a few close friends. It's essentially
leeching the
services off Paypal's securId servers.
~Rolan
------------------------------
_______________________________________________
joomla mailing list
joomlalists.nyphp.org
http:/
/lists.nyphp.org/mailman/listinfo/joomla
End of joomla Digest, Vol 10, Issue 17
**************************************
_______________________________________________
New York PHP SIG: Joomla! Mailing List
http:/
/lists.nyphp.org/mailman/listinfo/joomla
NYPHPCon 2006 Presentations Online
http://www.nyphpcon.com
Show Your Participation in New York PHP
http://ww
w.nyphp.org/show_participation.php
|
