onfocus

If you associate your twitter account with your cell phone--your account is only as secure as your cell phone number.

PHP code for validating/filtering HTML input.

this site maintains a database of md5 hashes and the original text. This is a good starting point for decrypting these supposedly one-way hashes. If you're storing passwords as md5 hashes, don't forget the salt.

[via sterling]

Gary McGraw: "People keep asking me to join the LinkedIn network," he said, "but I'm already part of a network, it's called the Internet." Jon's right, we can think bigger than our current data islands. [via o'reilly radar]

New blog by Dan Lockton about the intersection of psychology and business. [via Mind Hacks]

Great article on the current state of password "recovery", and how you can choose passwords that are somewhat more secure. Schneier's PasswordSafe is an essential program for me.

nice description of OpenID for mortals. [via joshua]

I've been doing this for the past few days and it's already come in handy with only five entries. I'm going to try to make it a habit for the new year.

Great tips for managing URLs/Redirection with Apache's cryptic but powerful htaccess. [via mathowie]

tips for tuning your site for Google, culled from googler Matt Cutts' blog.

I hadn't thought of the "visited" CSS class as a security problem before, but this phishing technique is pretty clever (and evil). (via joshua)