Comments on: JC101-12C: Defending against attacks http://javacard.vetilles.com/2008/05/15/jc101-12c-defending-against-attacks/ A weblog on Java Card, security, and other things personal Thu, 18 May 2017 07:26:32 +0000 hourly 1 https://wordpress.org/?v=4.0.32 By: Eric Vétillard http://javacard.vetilles.com/2008/05/15/jc101-12c-defending-against-attacks/#comment-3190 Thu, 05 Jun 2008 21:20:37 +0000 http://javacard.vetilles.com/2008/05/15/jc101-12c-defending-against-attacks/#comment-3190 First, thanks for the compliment.

Now, about the ” < ” issue, I believe that it is now fixed (these HTML-like interfaces are sometimes a bit strange). There are also quite a few other bugs in this code, and my original intention was to fix everything at the same time. However, I hadn’t measured the depth of the comment. So now, there is a good opportunity to find errors in this code (no I haven’t even compiled it yet). Apparently, there are a few functional glitches in the application’s PIN code, but these will get fixed in a future post about testing. Thanks for your patience!

]]> By: Emilio Wuerges http://javacard.vetilles.com/2008/05/15/jc101-12c-defending-against-attacks/#comment-3188 Thu, 05 Jun 2008 18:09:49 +0000 http://javacard.vetilles.com/2008/05/15/jc101-12c-defending-against-attacks/#comment-3188 Even if your card is not vulnerable to cross site scripting, your blog looks like it is.
Like “a reader” posted, try parsing the input of the coments.

But hey, your blog is really unique. It is the best source about javacard outside the specifications I saw.
Thanks for the hard work!

]]> By: a reader http://javacard.vetilles.com/2008/05/15/jc101-12c-defending-against-attacks/#comment-3183 Fri, 16 May 2008 11:03:16 +0000 http://javacard.vetilles.com/2008/05/15/jc101-12c-defending-against-attacks/#comment-3183 Code samples with a for loop statement are incomplete. May be problem with ‘>’ character not converted to &gt; ?

Thanks.

]]>