The Web Security Mailing List (2007 April)

• Date Index

• [WEB SECURITY] suggesting passwords to users, Brian Eaton
  • <Possible follow-ups>
  • Re: [WEB SECURITY] suggesting passwords to users, Anurag Agarwal
    • Re: [WEB SECURITY] suggesting passwords to users, James Landis
    • Re: [WEB SECURITY] suggesting passwords to users, Wladimir Palant
  • Re: [WEB SECURITY] suggesting passwords to users, Anurag Agarwal
    • Re: [WEB SECURITY] suggesting passwords to users, Wladimir Palant
      • Re: [WEB SECURITY] suggesting passwords to users, Albert Lunde
  • Re: [WEB SECURITY] suggesting passwords to users, Mike Shema
    • Re: [WEB SECURITY] suggesting passwords to users, Brian Eaton
  • Re: [WEB SECURITY] suggesting passwords to users, Mike Shema
• [WEB SECURITY] Reflection on Andrew Van der Stock, Anurag Agarwal
• [WEB SECURITY] MITM (man in the middle), lebeau
  • Re: [WEB SECURITY] MITM (man in the middle), John Terrill
    • Re: [WEB SECURITY] MITM (man in the middle), Prasad Shenoy
      • Re: [WEB SECURITY] MITM (man in the middle), Nick Owen
  • Re: [WEB SECURITY] MITM (man in the middle), Thierry Zoller
  • <Possible follow-ups>
  • RE: [WEB SECURITY] MITM (man in the middle), frederic.lebeau
    • RE: [WEB SECURITY] MITM (man in the middle), John Terrill
• [WEB SECURITY] Tackling A Difficult Problem - Proposed Solution, Bubba Gump
• [WEB SECURITY] IE 7 and Firefox Browsers Digest Authentication Request Splitting, Stefano Di Paola
  • Re: [WEB SECURITY] IE 7 and Firefox Browsers Digest Authentication Request Splitting, Amit Klein
    • [WEB SECURITY] Re: [Webappsec] [WEB SECURITY] IE 7 and Firefox Browsers Digest Authentication Request Splitting, Andy Steingruebl
      • [WEB SECURITY] Re: [Webappsec] [WEB SECURITY] IE 7 and Firefox Browsers Digest Authentication Request Splitting, Stefano Di Paola
      • Re: [WEB SECURITY] Re: [Webappsec] [WEB SECURITY] IE 7 and Firefox Browsers Digest Authentication Request Splitting, Chris Hofmann
      • [WEB SECURITY] Re: [Webappsec] [WEB SECURITY] IE 7 and Firefox Browsers Digest Authentication Request Splitting, Andy Steingruebl
      • RE: [WEB SECURITY] Re: [Webappsec] [WEB SECURITY] IE 7 and Firefox Browsers Digest Authentication Request Splitting, chris
      • [WEB SECURITY] Re: [Webappsec] [WEB SECURITY] IE 7 and Firefox Browsers Digest Authentication Request Splitting, Arian J. Evans
    • Re: [WEB SECURITY] IE 7 and Firefox Browsers Digest Authentication Request Splitting, Stefano Di Paola
• [WEB SECURITY] Re: [Webappsec] script inside .txt file, Josh Zlatin-Amishav
  • [WEB SECURITY] Re: [Webappsec] script inside .txt file, Lee Lawson
  • <Possible follow-ups>
  • [WEB SECURITY] Re: [Webappsec] script inside .txt file, Amiran Alavidze
  • [WEB SECURITY] Re: [Webappsec] script inside .txt file, Stefano Di Paola
• [WEB SECURITY] script inside .txt file, prashant k v
  • Re: [WEB SECURITY] script inside .txt file, Kurt Grutzmacher
    • Re: [WEB SECURITY] script inside .txt file, Wladimir Palant
      • Re: [WEB SECURITY] script inside .txt file, Bubba Gump
      • [WEB SECURITY] Re: [Webappsec] [WEB SECURITY] script inside .txt file, James Landis
      • Re: [WEB SECURITY] script inside .txt file, Brian Eaton
  • Re: [WEB SECURITY] script inside .txt file, christ1an
  • <Possible follow-ups>
  • Re: [WEB SECURITY] script inside .txt file, Ajay Pal Singh Atwal
    • RE: [WEB SECURITY] script inside .txt file, Billy Hoffman
  • RE: [WEB SECURITY] script inside .txt file, Ory Segal
• [WEB SECURITY] Captcha and animated captcha, Lebeau Frederic
  • RE: [WEB SECURITY] Captcha and animated captcha, Chris Weber
  • Re: [WEB SECURITY] Captcha and animated captcha, christ1an
  • Re: [WEB SECURITY] Captcha and animated captcha, Stephen de Vries
  • RE: [WEB SECURITY] Captcha and animated captcha, Billy Hoffman
    • RE: [WEB SECURITY] Captcha and animated captcha, Marian Ion
  • <Possible follow-ups>
  • RE: [WEB SECURITY] Captcha and animated captcha, Ory Segal
  • RE: [WEB SECURITY] Captcha and animated captcha, Chris Weber
• [WEB SECURITY] WASC Meetup - April 18 - pictures uploaded, Anurag Agarwal
• [WEB SECURITY] Reflection on Nish Bhalla, Anurag Agarwal
• [WEB SECURITY] WASC-Articles: 'The business case for security frameworks', announcements
• [WEB SECURITY] Re: [Webappsec] Tacking A Difficult Problem - MS output encoding library, Arian J. Evans
• [WEB SECURITY] RE: [Webappsec] Tacking A Difficult Problem - Solutions, Bob Fish
• [WEB SECURITY] Re: [Webappsec] Tacking A Difficult Problem - Solutions HTTP Response Splitting, Arian J. Evans
  • [WEB SECURITY] Re: [Webappsec] Tacking A Difficult Problem - Solutions HTTP Response Splitting, Amit Klein
    • [WEB SECURITY] Re: [Webappsec] Tacking A Difficult Problem - Solutions HTTP Response Splitting, Arian J. Evans
      • [WEB SECURITY] Re: [Webappsec] Tacking A Difficult Problem - Solutions HTTP Response Splitting, James Landis
      • Re: [WEB SECURITY] Re: [Webappsec] Tacking A Difficult Problem - Solutions HTTP Response Splitting, Arian J. Evans
      • [WEB SECURITY] Re: [Webappsec] Tacking A Difficult Problem - Solutions HTTP Response Splitting, Amit Klein
      • [WEB SECURITY] Re: [Webappsec] Tacking A Difficult Problem - Solutions HTTP Response Splitting, Amit Klein
      • [WEB SECURITY] Re: [Webappsec] Tacking A Difficult Problem - Solutions HTTP Response Splitting, Arian J. Evans
      • [WEB SECURITY] Re: [Webappsec] Tacking A Difficult Problem - Solutions HTTP Response Splitting, Amit Klein
• [WEB SECURITY] Re: Tacking A Difficult Problem - Solutions, Arian J. Evans
  • [WEB SECURITY] Re: [Webappsec] Tacking A Difficult Problem - Solutions, Amit Klein
    • [WEB SECURITY] Re: [Webappsec] Tacking A Difficult Problem - Solutions, Amit Klein
  • Message not available
    • [WEB SECURITY] Re: Tacking A Difficult Problem - Solutions, Arian J. Evans
      • [WEB SECURITY] Re: [Webappsec] Tacking A Difficult Problem - Solutions, Amit Klein
  • <Possible follow-ups>
  • RE: [WEB SECURITY] Re: Tacking A Difficult Problem - Solutions, Ory Segal
    • Re: [WEB SECURITY] Re: Tacking A Difficult Problem - Solutions, Arian J. Evans
      • Re: [WEB SECURITY] Re: Tacking A Difficult Problem - Solutions, Bubba Gump
      • Re: [WEB SECURITY] Re: Tacking A Difficult Problem - Solutions, Arian J. Evans
• [WEB SECURITY] SensePost Aura - aka Solving the Google API Key Problem.., Haroon Meer
• [WEB SECURITY] Reminder: HITBSecConf2007 - Malaysia: Call for Papers closing in 2 weeks, announce
• [WEB SECURITY] Persistent CSRF and The Hotlink Hell, pdp (architect)
  • Re: [WEB SECURITY] Persistent CSRF and The Hotlink Hell, Ryan Barnett
    • [WEB SECURITY] Re: [Full-disclosure] [WEB SECURITY] Persistent CSRF and The Hotlink Hell, Blue Boar
• [WEB SECURITY] reflection on Ory segal, Anurag Agarwal
• [WEB SECURITY] WASC-Articles: 'The Importance of Application Classification in Secure Application Development', contact
• [WEB SECURITY] URL Encoding/Decoding Flaw Mechanism In ASP.net[1.0-2.0] Based Web Applications., Aditya K Sood
  • <Possible follow-ups>
  • Re: [WEB SECURITY] URL Encoding/Decoding Flaw Mechanism In ASP.net[1.0-2.0] Based Web Applications., Jeff Forristal
    • Re: [WEB SECURITY] URL Encoding/Decoding Flaw Mechanism In ASP.net[1.0-2.0] Based Web Applications., Aditya K Sood
      • RE: [WEB SECURITY] URL Encoding/Decoding Flaw Mechanism In ASP.net[1.0-2.0] Based Web Applications., Jeff Forristal
      • Re: [WEB SECURITY] URL Encoding/Decoding Flaw Mechanism In ASP.net[1.0-2.0] Based Web Applications., Aditya K Sood
• [WEB SECURITY] Experience with Jascrypt?, Mr Zebedee
• [WEB SECURITY] Application Layer Anti-virus/Firewall, pdp (architect)
• [WEB SECURITY] Jasypt 1.2 (Java Simplified Encryption) enhances Hibernate support, Daniel Fernández Garrido
• [WEB SECURITY] WASC Announcement: Web Application Security Statistics Project - Data Published, contact
• [WEB SECURITY] WASC Meet-Up (Sunnyvale, Ca.) April 18, 2007 @ 6pm, Jeremiah Grossman
• [WEB SECURITY] Reflection chris shiflett, anurag . agarwal
• [WEB SECURITY] Any opinions of the effectiveness of Binary Static Analysis?, John Johnson
  • Re: [WEB SECURITY] Any opinions of the effectiveness of Binary Static Analysis?, Benjamin Livshits
  • <Possible follow-ups>
  • RE: [WEB SECURITY] Any opinions of the effectiveness of Binary Static Analysis?, Debasis Mohanty
• [WEB SECURITY] CYBSEC Release: SAP Security - Paper & Tool release, Mariano Nuñez Di Croce
• [WEB SECURITY] Firefox extensions go Evil - Critical Vulnerabilities in Firefox/Firebug, pdp (architect)
  • Re: [WEB SECURITY] Firefox extensions go Evil - Critical Vulnerabilities in Firefox/Firebug, Daniel Veditz
  • [WEB SECURITY] Re: Firefox extensions go Evil - Critical Vulnerabilities in Firefox/Firebug, Thor Larholm
• [WEB SECURITY] HDIV (Http Data Integrity Validator) 1.1 Released, roberto
• [WEB SECURITY] Vulnerable Vectors in PHP Based Redirection Pages[redirect.php4/redirect.php5], Aditya K Sood
• [WEB SECURITY] Jikto in the wild, Billy Hoffman
  • Re: [WEB SECURITY] Jikto in the wild, pdp (architect)
    • RE: [WEB SECURITY] Jikto in the wild, Billy Hoffman
• [WEB SECURITY] From Old Bucket To New : Clobbering Of Global Variables, Aditya K Sood
• RE: [WEB SECURITY] Preventing Cross-site Request Forgeries, Arian J. Evans
  • Re: [WEB SECURITY] Preventing Cross-site Request Forgeries, Brian Eaton
  • <Possible follow-ups>
  • Re: [WEB SECURITY] Preventing Cross-site Request Forgeries, Stephen de Vries
    • [WEB SECURITY] Re: [Webappsec] [WEB SECURITY] Preventing Cross-site Request Forgeries, Jim Manico
    • [WEB SECURITY] Re: [Webappsec] [WEB SECURITY] Preventing Cross-site Request Forgeries, Arian J. Evans
  • Re: [WEB SECURITY] Preventing Cross-site Request Forgeries, christ1an