07-02-2008 12:58
telecharger.vnunet.fr XSS
ironzorg has discovered a vulnerability in telecharger.vnunet.fr, which could be exploited by malicious people to conduct XSS attacks.
 >>

Kompletan tekst: XSSed

07-02-2008 17:12
Web Application Security Today - Are We All Insane?
CSO magazine was kind enough to publish an opinion piece where I present a top-down view of the current state of web application security. I nervously expect a “spirited” flow of blog comments because it questions the value of certain best-practices and deeply held personal philosophies. Fortunately though our general public discourse has advanced a great deal recently and the community at large is a lot more informed of the challenges at hand. I pulled out a snippet to give a feel.
>>

Kompletan tekst: Jeremiah Grossman

07-02-2008 13:08
Template for WebScarab Scripted


If you've ever used WebScarab and been interested in the scripted tab, here is a nice template to get you started. One of the problems with the default template is that it leaves a lot of work to just get the output displayed to the window. I created two easy helper methods (printRequest and printResponse) and also rearranged the layout to be easier to traverse. Edit the details at the bottom. It should be pretty clear.

Never used webscarab? Time to learn.

-Michael Coates< >>

Kompletan tekst: Feedburner

07-02-2008 14:00
PC Tools iAntiVirus aims to be Mac specific

Filed under: Software, Security, Beta Beat

With the recent trojan scare PC Tools' timing for the beta release of iAntiVirus for Mac could hardly be better. While there are a variety of anti-virus applications for the Mac, iAntiVirus seems to be especially designed to reduce resource usage by simply ignoring virus signatures for Windows. The idea is that your Mac is immune to Windows viruses so why waste memory, etc. scanning for them? Otherwise iAntiVirus is pretty conventional with a menu >>

Kompletan tekst: tuaw

07-02-2008 13:08
Template for WebScarab Scripted


If you've ever used WebScarab and been interested in the scripted tab, here is a nice template to get you started. One of the problems with the default template is that it leaves a lot of work to just get the output displayed to the window. I created two easy helper methods (printRequest and printResponse) and also rearranged the layout to be easier to traverse. Edit the details at the bottom. It should be pretty clear.

Never used webscarab? Time to learn.

-Michael Coates< >>

Kompletan tekst: Feedburner

07-02-2008 18:36
Anti-malware blocker, cross-site scripting protections coming in IE 8
When Microsoft’s Internet Explorer 8 hits the Beta 2 milestone in August, the browser makeover will feature a full-fledged anti-malware blocker and new protections against some forms of cross-site scripting attacks. The existing phishing filter IE 7 has been renamed SmartScreen Filter and will include blacklist-based blocking of known exploit sites. The SmartScreen anti-malware feature is URL-reputation-based, [...]

 >>

Kompletan tekst: Feedburner

07-02-2008 18:36
Anti-malware blocker, cross-site scripting protections coming in IE 8
When Microsoft’s Internet Explorer 8 hits the Beta 2 milestone in August, the browser makeover will feature a full-fledged anti-malware blocker and new protections against some forms of cross-site scripting attacks. The existing phishing filter IE 7 has been renamed SmartScreen Filter and will include blacklist-based blocking of known exploit sites. The SmartScreen anti-malware feature is URL-reputation-based, [...]

 >>

Kompletan tekst: Feedburner

[1] 2 3 4 5 ...