In this short screencast a variety of security holes are shown, as well as some malicious things which are made possible due to these lapses.

During a recent browser upgrade I found myself stuck in a bit of a corner. The Firefox add-on I had been using, Xdebug Helper, was discontinued, and the supposed replacement add-on for it didn't work correctly.

UPDATE: I've updated some of the numbers below to reflect corrections for a testing error.

I finally had a chance to investigate an optimization which I've been wondering about for a while now - serving static files of a site from somewhere else.