The Web Security Mailing List (2005 August)

• Date Index

• [WEB SECURITY] GPL version of WiKID Strong Authentication released, Nick Owen
• [WEB SECURITY] NIST Guide, Danny Allan
  • <Possible follow-ups>
  • RE: [WEB SECURITY] NIST Guide, Major, Kieran
    • RE: [WEB SECURITY] NIST Guide, tlmacgi
• RE: [WEB SECURITY] Re: Defeating CAPTCHA, Martin O'Neal
  • <Possible follow-ups>
  • RE: [WEB SECURITY] Re: Defeating CAPTCHA, Gokhan Azaphan
• [WEB SECURITY] WASC-Articles: 'Preventing Log Evasion in IIS', contact
  • Re: [WEB SECURITY] WASC-Articles: 'Preventing Log Evasion in IIS', Bernard
• [WEB SECURITY] Online Bank Hacked..., Ofer Maor
  • <Possible follow-ups>
  • RE: [WEB SECURITY] Online Bank Hacked..., Ofer Shezaf
    • RE: [WEB SECURITY] Online Bank Hacked..., Irene Abezgauz
  • RE: [WEB SECURITY] Online Bank Hacked..., Gavin, Michael
    • RE: [WEB SECURITY] Online Bank Hacked..., valkyrie
  • RE: [WEB SECURITY] Online Bank Hacked..., Ofer Shezaf
• [WEB SECURITY] Defeating CAPTCHA, robert
  • RE: [WEB SECURITY] Defeating CAPTCHA, Yuval Ben-Itzhak
  • RE: [WEB SECURITY] Defeating CAPTCHA, Debasis Mohanty
  • [WEB SECURITY] How to evaluate a CAPTCHA, Jeremiah Grossman
  • [WEB SECURITY] Re: Defeating CAPTCHA, Paul M.
  • [WEB SECURITY] Re: Defeating CAPTCHA, victor
    • RE: [WEB SECURITY] Re: Defeating CAPTCHA, Marian Ion
• [WEB SECURITY] Web Security Books URL's, Jeremiah Grossman
  • <Possible follow-ups>
  • RE: [WEB SECURITY] Web Security Books URL's, Gavin, Michael
    • Re: [WEB SECURITY] Web Security Books URL's, Régis Gabineski
      • Re: [WEB SECURITY] Web Security Books URL's, ThePsyko
  • RE: [WEB SECURITY] Web Security Books URL's, Chris
• [WEB SECURITY] SSL Certs and FIPS 140-2 Compliance, Ryan Barnett
  • RE: [WEB SECURITY] SSL Certs and FIPS 140-2 Compliance, Lyal Collins
  • Re: [WEB SECURITY] SSL Certs and FIPS 140-2 Compliance, Lionel Ferette
  • RE: [WEB SECURITY] SSL Certs and FIPS 140-2 Compliance, Lyal Collins
• [WEB SECURITY] Technical Note by Amit Klein: Detecting and Preventing HTTP Response Splitting and HTTP Request Smuggling Attacks at the TCP Le, Amit Klein (AKsecurity)
• [WEB SECURITY] New Windows Worm Exploiting MS05-039, robert
• [WEB SECURITY] HTTP error codes blocking, joe shmoe
  • RE: [WEB SECURITY] HTTP error codes blocking, Irene Abezgauz
  • Re: [WEB SECURITY] HTTP error codes blocking, TheGesus
  • Re: [WEB SECURITY] HTTP error codes blocking, Dusan Juhas
    • Re: [WEB SECURITY] HTTP error codes blocking, Paul Schmehl
      • Re: [WEB SECURITY] HTTP error codes blocking, joe shmoe
      • Re: [WEB SECURITY] HTTP error codes blocking, Bill Pennington
  • <Possible follow-ups>
  • RE: [WEB SECURITY] HTTP error codes blocking, Suzio, Michael \(ISS Southfield\)
  • RE: [WEB SECURITY] HTTP error codes blocking, Chris
  • RE: [WEB SECURITY] HTTP error codes blocking, Suzio, Michael \(ISS Southfield\)
  • RE: [WEB SECURITY] HTTP error codes blocking, Suzio, Michael \(ISS Southfield\)
  • RE: [WEB SECURITY] HTTP error codes blocking, Suzio, Michael \(ISS Southfield\)
• [WEB SECURITY] Re: Microsoft's 'Honeymonkey' project finds 0day, Kaura, Vikram
  • <Possible follow-ups>
  • RE: [WEB SECURITY] Re: Microsoft's 'Honeymonkey' project finds 0day, Christopher Carpenter
  • RE: [WEB SECURITY] Re: Microsoft's 'Honeymonkey' project finds 0day, Aiken, Dan
  • RE: [WEB SECURITY] Re: Microsoft's 'Honeymonkey' project finds 0day, Hayes, Bill
• [WEB SECURITY] Tomcat Security, Andres Molinetti
  • <Possible follow-ups>
  • RE: [WEB SECURITY] Tomcat Security, Nathan Tobik
    • Re: [WEB SECURITY] Tomcat Security, Ryan Barnett
    • Re: [WEB SECURITY] Tomcat Security, Ron Forrester
  • RE: [WEB SECURITY] Tomcat Security, Jason Radley
• [WEB SECURITY] burp suite v1.0 released, PortSwigger
• [WEB SECURITY] XSS Vulnerability Notification and Disclosure, webappsec
  • Re: [WEB SECURITY] XSS Vulnerability Notification and Disclosure, -
    • RE: [WEB SECURITY] XSS Vulnerability Notification and Disclosure, webappsec
  • <Possible follow-ups>
  • RE: [WEB SECURITY] XSS Vulnerability Notification and Disclosure, Ory Segal
• [WEB SECURITY] Microsoft's 'Honeymonkey' project finds 0day, Bob Auger
• RE: [WEB SECURITY] Re: perfect security architecture (network), Andre Maisonneuve
  • <Possible follow-ups>
  • RE: [WEB SECURITY] Re: perfect security architecture (network), Andre Maisonneuve
    • Re: [WEB SECURITY] Re: perfect security architecture (network), Vicente Aguilera
      • Re: [WEB SECURITY] Re: perfect security architecture (network), Irene Abezgauz
      • Re: [WEB SECURITY] Re: perfect security architecture (network), Stephen de Vries
      • Re: [WEB SECURITY] Re: perfect security architecture (network), Don Laur
• [WEB SECURITY] Defeating Citi-Bank Virtual Keyboard Protection, Debasis Mohanty
• [WEB SECURITY] note regarding Cobr4 request, Andre Maisonneuve
  • <Possible follow-ups>
  • RE: [WEB SECURITY] note regarding Cobr4 request, Aiken, Dan
• [WEB SECURITY] perfect security architecture (network), C0BR4
  • [WEB SECURITY] Re: [Full-disclosure] perfect security architecture (network), Valdis . Kletnieks
  • [WEB SECURITY] RE: [Full-disclosure] perfect security architecture (network), Aditya Deshmukh
  • [WEB SECURITY] Re: perfect security architecture (network), C0BR4
    • Re: [WEB SECURITY] Re: perfect security architecture (network), cactus avenue
  • <Possible follow-ups>
  • RE: [WEB SECURITY] perfect security architecture (network), Aiken, Dan
• [WEB SECURITY] Burp proxy v1.3beta released, PortSwigger
• [WEB SECURITY] webappsec vulns expose Cisco, eBay, Blogger, and Firefox, Jeremiah Grossman
• [WEB SECURITY] Seeking volunteers for Threat Classification spanish translation, Jeremiah Grossman
• RE: [WEB SECURITY] Kiosk Vulnerability., Jose Varghese
• [WEB SECURITY] where can i find Types of encoding in web application????, C0BR4
  • RE: [WEB SECURITY] where can i find Types of encoding in web application????, xxradar