The Web Security Mailing List (2007 May)

• Date Index

• [WEB SECURITY] OWASP Israel mini conference presentations online, Ofer Shezaf
• [WEB SECURITY] Fwd: The Next Super JavaScript Malware - the web has crashed, pdp (architect)
• Re: [Fwd: Re: [WEB SECURITY] Hardware binding - is it worth it?], stig
  • Re: [Fwd: Re: [WEB SECURITY] Hardware binding - is it worth it?], Christian E. Navarrete Discua
• [WEB SECURITY] Reflection on Stefano Di Paola, Anurag Agarwal
• [WEB SECURITY] RE: eSafe Quarantine: Re: [WEB SECURITY] Authentication by IP Address, Boaz Shunami
  • <Possible follow-ups>
  • [WEB SECURITY] RE: eSafe Quarantine: RE: [WEB SECURITY] Authentication by IP Address, Boaz Shunami
• [WEB SECURITY] WASC Meet-up at Black Hat (USA 2007), robert
• [WEB SECURITY] Authentication by IP Address, Chris
  • Re: [WEB SECURITY] Authentication by IP Address, Paul Schmehl
  • Re: [WEB SECURITY] Authentication by IP Address, Nick Owen
    • Re: [WEB SECURITY] Authentication by IP Address, Andy Steingruebl
      • RE: [WEB SECURITY] Authentication by IP Address, Steve Shah
  • Re: [WEB SECURITY] Authentication by IP Address, Christopher Reed
  • Re: [WEB SECURITY] Authentication by IP Address, Jason Ross
  • RE: [WEB SECURITY] Authentication by IP Address, Billy Hoffman
    • Re: [WEB SECURITY] Authentication by IP Address, Brian Eaton
      • Re: [WEB SECURITY] Authentication by IP Address, Nick Owen
    • Re: [WEB SECURITY] Authentication by IP Address, Bubba Gump
      • RE: [WEB SECURITY] Authentication by IP Address, Billy Hoffman
  • Re: [WEB SECURITY] Authentication by IP Address, Arian J. Evans
    • Re: [WEB SECURITY] Authentication by IP Address, kwestin
      • Re: [WEB SECURITY] Authentication by IP Address, Esteban RibiÄiÄ
  • Re: [WEB SECURITY] Authentication by IP Address, Christian E. Navarrete Discua
  • <Possible follow-ups>
  • Re: [WEB SECURITY] Authentication by IP Address, Colin Watson
  • RE: [WEB SECURITY] Authentication by IP Address, Chris
  • RE: [WEB SECURITY] Authentication by IP Address, Chris
    • Re: [WEB SECURITY] Authentication by IP Address, Christian E. Navarrete Discua
    • Re: [WEB SECURITY] Authentication by IP Address, Brian Eaton
      • Re: [WEB SECURITY] Authentication by IP Address, andre
    • Re: [WEB SECURITY] Authentication by IP Address, Bubba Gump
  • RE: [WEB SECURITY] Authentication by IP Address, Chris
  • RE: [WEB SECURITY] Authentication by IP Address, Chris
  • RE: [WEB SECURITY] Authentication by IP Address, Chris
• [WEB SECURITY] Hardware binding - is it worth it?, stig
  • Re: [WEB SECURITY] Hardware binding - is it worth it?, Brian Eaton
    • Re: [WEB SECURITY] Hardware binding - is it worth it?, Stig Klüver
      • Re: [WEB SECURITY] Hardware binding - is it worth it?, Brian Eaton
      • Re: [WEB SECURITY] Hardware binding - is it worth it?, Stig Klüver
• RE: [WEB SECURITY] Re: [Webappsec] PCI 6.6 Questions, Ory Segal
  • Re: [WEB SECURITY] Re: [Webappsec] PCI 6.6 Questions, James Landis
    • RE: [WEB SECURITY] Re: [Webappsec] PCI 6.6 Questions, Mark Kraynak
      • RE: [WEB SECURITY] Re: [Webappsec] PCI 6.6 Questions, Craig Thomas Elrod
• [WEB SECURITY] PCI 6.6 Questions, Bubba Gump
  • [WEB SECURITY] Re: [Webappsec] PCI 6.6 Questions, Raymond Forbes
  • RE: [WEB SECURITY] PCI 6.6 Questions, Rob & Rae Lynn
  • Re: [WEB SECURITY] PCI 6.6 Questions, Ryan Barnett
  • [WEB SECURITY] Re: [Webappsec] PCI 6.6 Questions, Devin Ertel
  • RE: [WEB SECURITY] PCI 6.6 Questions, Dennis Hurst
  • Re: [WEB SECURITY] PCI 6.6 Questions, Jeremiah Grossman
  • RE: [WEB SECURITY] PCI 6.6 Questions, Jeff Forristal
    • Re: [WEB SECURITY] PCI 6.6 Questions, Bubba Gump
      • RE: [WEB SECURITY] PCI 6.6 Questions, Boaz Shunami
      • RE: [WEB SECURITY] PCI 6.6 Questions, Ofer Shezaf
      • RE: [WEB SECURITY] PCI 6.6 Questions, Jeff Forristal
      • RE: [WEB SECURITY] PCI 6.6 Questions, Ofer Shezaf
      • Re: [WEB SECURITY] PCI 6.6 Questions, Arian J. Evans
      • RE: [WEB SECURITY] PCI 6.6 Questions, Yuval Ben-Itzhak
    • Re: [WEB SECURITY] PCI 6.6 Questions, Arian J. Evans
      • RE: [WEB SECURITY] PCI 6.6 Questions, Jeff Forristal
      • Re: [WEB SECURITY] PCI 6.6 Questions, Arian J. Evans
      • RE: [WEB SECURITY] PCI 6.6 Questions, Tom Spector
      • Re: [WEB SECURITY] PCI 6.6 Questions, Dinis Cruz
• [WEB SECURITY] VNC scans with window size 55808, Bjoern Weiland
• [WEB SECURITY] howto file retrival, Luis Matus
• [WEB SECURITY] Tackling evasion [WAS: noise about full-width encoding bypass?], Sebastian Roth
• [WEB SECURITY] Virgin security flaw exposes customers' details, bugtraq
• [WEB SECURITY] Ajax Proxy Phishing, kadete
• [WEB SECURITY] Unicode Left/Right Pointing Double Angel Quotation Mark bypass?, 3APA3A
• [WEB SECURITY] Reflection on Ryan Barnett, Anurag Agarwal
• [WEB SECURITY] Testing Flash Applications, Stefano Di Paola
• [WEB SECURITY] RE: [Full-disclosure] noise about full-width encoding bypass?, Amichai Shulman
• [WEB SECURITY] GHDB - Google Hacking Database, pdp (architect)
• [WEB SECURITY] noise about full-width encoding bypass?, Brian Eaton
  • [WEB SECURITY] Re: [Full-disclosure] noise about full-width encoding bypass?, 3APA3A
    • [WEB SECURITY] Re: [Full-disclosure] noise about full-width encoding bypass?, Brian Eaton
      • [WEB SECURITY] Re[2]: [Full-disclosure] noise about full-width encoding bypass?, 3APA3A
  • Re: [WEB SECURITY] noise about full-width encoding bypass?, Arian J. Evans
    • Re: [WEB SECURITY] noise about full-width encoding bypass?, Arian J. Evans
  • [WEB SECURITY] Re: noise about full-width encoding bypass?, Brian Eaton
    • [WEB SECURITY] Re: [Full-disclosure] noise about full-width encoding bypass?, ascii
      • Re: [WEB SECURITY] Re: [Full-disclosure] noise about full-width encoding bypass?, Chris Weber
      • Re: [WEB SECURITY] Re: [Full-disclosure] noise about full-width encoding bypass?, ascii
      • [WEB SECURITY] Re: [Full-disclosure] noise about full-width encoding bypass?, Brian Eaton
      • [WEB SECURITY] Re: [Full-disclosure] noise about full-width encoding bypass?, Steven Adair
      • [WEB SECURITY] Re: [Full-disclosure] noise about full-width encoding bypass?, Valdis . Kletnieks
      • [WEB SECURITY] Re[2]: [Full-disclosure] noise about full-width encoding bypass?, 3APA3A
    • Re: [WEB SECURITY] Re: noise about full-width encoding bypass?, Arian J. Evans
      • Re: [WEB SECURITY] Re: noise about full-width encoding bypass?, Brian Eaton
      • Re: [WEB SECURITY] Re: noise about full-width encoding bypass?, Arian J. Evans
  • Re: [WEB SECURITY] noise about full-width encoding bypass?, Amit Klein
    • Re: [WEB SECURITY] noise about full-width encoding bypass?, Arian J. Evans
      • Re: [WEB SECURITY] noise about full-width encoding bypass?, Amit Klein
      • Re: [WEB SECURITY] noise about full-width encoding bypass?, Amit Klein
      • Re: [WEB SECURITY] noise about full-width encoding bypass?, Arian J. Evans
      • Re: [WEB SECURITY] noise about full-width encoding bypass?, Amit Klein
• [WEB SECURITY] OWASP Top 10 2007 Released, Andrew van der Stock
• RE: [WEB SECURITY] How to avoid XSS into PDF Files, using java, steve jensen
• [WEB SECURITY] POST arbitarily changed to GET after form submission, John Gosling
  • [WEB SECURITY] How to avoid XSS into PDF Files, using java, Cruz, Edwin \(GE, Corporate, consultant\)
    • Re: [WEB SECURITY] How to avoid XSS into PDF Files, using java, Brian Eaton
  • RE: [WEB SECURITY] POST arbitarily changed to GET after form submission, PELL Scott H
  • Re: [WEB SECURITY] POST arbitarily changed to GET after form submission, Shaun
  • <Possible follow-ups>
  • Re: [WEB SECURITY] POST arbitarily changed to GET after form submission, Roman H.
• [WEB SECURITY] The Web has Betrayed Us, pdp (architect)
• [WEB SECURITY] what does this code do, Luis Matus
  • Re: [WEB SECURITY] what does this code do, Rodrigo Montoro (Sp0oKeR)
  • Re: [WEB SECURITY] what does this code do, J. Oquendo
  • Re: [WEB SECURITY] what does this code do, Arian J. Evans
• [WEB SECURITY] XSS Assistant, Sid
• [WEB SECURITY] OWASP / Advanced Web Hacking / Service API Manipulation / Next Generation of Web Attacks, pdp (architect)
• [WEB SECURITY] Reflection on Caleb Sima, Anurag Agarwal
• [WEB SECURITY] RE: Defeating Citibank Virtual Keyboard protection using screenshot method, Debasis Mohanty
• [WEB SECURITY] 5 Ways People Screw Up AJAX, bugtraq
• [WEB SECURITY] HTTP Response Splitting exploitability, Arian J. Evans
• [WEB SECURITY] Training Classes in SyScan'07, organiser@xxxxxxxxxx
• [WEB SECURITY] Zero Degrees of Seperation, pdp (architect)
• [WEB SECURITY] RE: [Webappsec] Security issues with advertising sites like doubleclick, Steven Whatmore
  • <Possible follow-ups>
  • [WEB SECURITY] Re: [Webappsec] Security issues with advertising sites like doubleclick, anurag . agarwal
  • Re: [WEB SECURITY] Re: [Webappsec] Security issues with advertising sites like doubleclick, Anurag Agarwal
    • Re: [WEB SECURITY] Re: [Webappsec] Security issues with advertising sites like doubleclick, James Landis
      • Re: [WEB SECURITY] Re: [Webappsec] Security issues with advertising sites like doubleclick, Bubba Gump
      • [WEB SECURITY] Re: [Webappsec] [WEB SECURITY] Re: Security issues with advertising sites like doubleclick, Arian J. Evans
      • [WEB SECURITY] Re: [Webappsec] [WEB SECURITY] Re: Security issues with advertising sites like doubleclick, Bubba Gump
      • [WEB SECURITY] Re: [Webappsec] [WEB SECURITY] Re: Security issues with advertising sites like doubleclick, Andy Steingruebl
      • [WEB SECURITY] Re: [Webappsec] [WEB SECURITY] Re: Security issues with advertising sites like doubleclick, Arian J. Evans
      • RE: [WEB SECURITY] Re: [Webappsec] [WEB SECURITY] Re: Security issues with advertising sites like doubleclick, White, Dain P
      • Re: [WEB SECURITY] Re: [Webappsec] [WEB SECURITY] Re: Security issues with advertising sites like doubleclick, Emilio Casbas
      • Re: [WEB SECURITY] Re: [Webappsec] [WEB SECURITY] Re: Security issues with advertising sites like doubleclick, Bubba Gump
      • [WEB SECURITY] MICROSOFT JET DATABASE ENGINE, Gichuki John
      • Re: [WEB SECURITY] Re: [Webappsec] [WEB SECURITY] Re: Security issues with advertising sites like doubleclick, Paul Russell
      • RE: [WEB SECURITY] Re: [Webappsec] [WEB SECURITY] Re: Security issues with advertising sites like doubleclick, Robert Purvis \(NHS Connecting for Health\)
  • [WEB SECURITY] Re: [Webappsec] Security issues with advertising sites like doubleclick, anurag . agarwal
• [WEB SECURITY] Security issues with advertising sites like doubleclick, Anurag Agarwal
  • [WEB SECURITY] Re: [Webappsec] Security issues with advertising sites like doubleclick, Andy Steingruebl
• [WEB SECURITY] Flash LSO's and XSS, bugtraq
  • Re: [WEB SECURITY] Flash LSO's and XSS, James Landis
  • Re: [WEB SECURITY] Flash LSO's and XSS, Stefano Di Paola
• [WEB SECURITY] 2nd OWASP Israel mini conference at Interdisciplinary Center Herzliya (IDC), Monday, May 21st, 13:30, Ofer Shezaf
• [WEB SECURITY] WASC Announcement: Distributed Open Proxy Honeypot Project Data Released, announcements
• [WEB SECURITY] Web Application Security Professionals Survey (May 2007), Jeremiah Grossman
  • Re: [WEB SECURITY] *RESULTS* Web Application Security Professionals Survey (May 2007), Jeremiah Grossman
• [WEB SECURITY] Defeating Citibank Virtual Keyboard protection using screenshot method, Int3
  • Re: [WEB SECURITY] Defeating Citibank Virtual Keyboard protection using screenshot method, Brian Eaton
  • <Possible follow-ups>
  • RE: [WEB SECURITY] Defeating Citibank Virtual Keyboard protection using screenshot method, robert
• [WEB SECURITY] TJX pwned via wifi, bugtraq
• [WEB SECURITY] WASC Meetup at JavaOne (San Francisco 2007), announcements
• [WEB SECURITY] security norms mixup [WEB SECURITY] BS 270001, Albert
• [WEB SECURITY] BS 270001, Muruganandam C
• [WEB SECURITY] Exploitation Realm in Ajax Based Load Tab Modules, Aditya K Sood
• [WEB SECURITY] First informational blopost on the coming PHP IDS, Mario Heiderich
  • Re: [WEB SECURITY] First informational blopost on the coming PHP IDS, Arian J. Evans
  • <Possible follow-ups>
  • RE: [WEB SECURITY] First informational blopost on the coming PHP IDS, Aiken, Dan
    • RE: [WEB SECURITY] First informational blopost on the coming PHP IDS, John Terrill
      • Re: [WEB SECURITY] First informational blopost on the coming PHP IDS, Mario Heiderich
      • Re: [WEB SECURITY] First informational blopost on the coming PHP IDS, John Terrill
      • Re[2]: [WEB SECURITY] First informational blopost on the coming PHP IDS, christ1an
      • Re: Re[2]: [WEB SECURITY] First informational blopost on the coming PHP IDS, Ivan Ristic
      • Re[4]: [WEB SECURITY] First informational blopost on the coming PHP IDS, christ1an
      • Re: Re[4]: [WEB SECURITY] First informational blopost on the coming PHP IDS, Ivan Ristic
      • Re[6]: [WEB SECURITY] First informational blopost on the coming PHP IDS, christ1an
      • Re: Re[6]: [WEB SECURITY] First informational blopost on the coming PHP IDS, Ivan Ristic
      • Re: Re[4]: [WEB SECURITY] First informational blopost on the coming PHP IDS, Stephen de Vries
      • Message not available
      • Re[5]: [WEB SECURITY] First informational blopost on the coming PHP IDS, christ1an
      • Re: Re[5]: [WEB SECURITY] First informational blopost on the coming PHP IDS, Ivan Ristic
      • Re: [WEB SECURITY] First informational blopost on the coming PHP IDS, Arian J. Evans
      • Re: [WEB SECURITY] First informational blopost on the coming PHP IDS, James Landis
    • Re: [WEB SECURITY] First informational blopost on the coming PHP IDS, Mario Heiderich
    • Re: [WEB SECURITY] First informational blopost on the coming PHP IDS, Brian Eaton
      • Re: [WEB SECURITY] First informational blopost on the coming PHP IDS, Mario Heiderich
      • RE: [WEB SECURITY] First informational blopost on the coming PHP IDS, White, Dain P
    • RE: [WEB SECURITY] First informational blopost on the coming PHP IDS, White, Dain P
      • Re[2]: [WEB SECURITY] First informational blopost on the coming PHP IDS, christ1an
      • Re: Re[2]: [WEB SECURITY] First informational blopost on the coming PHP IDS, James Landis
    • Re: [WEB SECURITY] First informational blopost on the coming PHP IDS, Mario Heiderich
  • RE: [WEB SECURITY] First informational blopost on the coming PHP IDS, Aiken, Dan
    • Re: [WEB SECURITY] First informational blopost on the coming PHP IDS, Brian Eaton
    • Re: [WEB SECURITY] First informational blopost on the coming PHP IDS, Arian J. Evans
  • RE: [WEB SECURITY] First informational blopost on the coming PHP IDS, Aiken, Dan
  • Re: [WEB SECURITY] First informational blopost on the coming PHP IDS, Mario Heiderich
    • Message not available
      • Re: [WEB SECURITY] First informational blopost on the coming PHP IDS, Mario Heiderich
• Re: [WEB SECURITY] suggesting passwords to users, Gichuki John
  • <Possible follow-ups>
  • Re: [WEB SECURITY] suggesting passwords to users, Nick Owen
  • Fwd: [WEB SECURITY] suggesting passwords to users, Brian Eaton
  • RE: [WEB SECURITY] suggesting passwords to users, White, Dain P
    • Re: [WEB SECURITY] suggesting passwords to users, Brian Eaton