The Web Security Mailing List (2007 August)

• Date Index

• [WEB SECURITY] WHITE PAPER: For my next trick… hacking Web2.0, pdp (architect)
• [WEB SECURITY] Further CSS Firefox demo, gaz_sec
  • Re: [WEB SECURITY] Further CSS Firefox demo, Esam Gharish
    • Re: [WEB SECURITY] Further CSS Firefox demo, Joshua Ross
  • <Possible follow-ups>
  • Re: [WEB SECURITY] Further CSS Firefox demo, gaz_sec
    • Re: [WEB SECURITY] Further CSS Firefox demo, Esam Gharish
  • Re: [WEB SECURITY] Further CSS Firefox demo, gaz_sec
• [WEB SECURITY] firefox extension for looping through a form?, offset
  • Re: [WEB SECURITY] firefox extension for looping through a form?, Deeþan Chakravarthy
• [WEB SECURITY] Scanning internal Lan using PHP remote file opening., Stefano Di Paola
• [WEB SECURITY] How to detect XSS in an automated fashion, Travis Altman
  • <Possible follow-ups>
  • Re: [WEB SECURITY] How to detect XSS in an automated fashion, gaz_sec
    • RE: [WEB SECURITY] How to detect XSS in an automated fashion, Billy Hoffman
      • Re: [WEB SECURITY] How to detect XSS in an automated fashion, Romain Gaucher
  • RE: [WEB SECURITY] How to detect XSS in an automated fashion, gaz_sec
  • RE: [WEB SECURITY] How to detect XSS in an automated fashion, gaz_sec
    • RE: [WEB SECURITY] How to detect XSS in an automated fashion, Billy Hoffman
      • Re: [WEB SECURITY] How to detect XSS in an automated fashion, James Landis
  • RE: [WEB SECURITY] How to detect XSS in an automated fashion, gaz_sec
  • Re: [WEB SECURITY] How to detect XSS in an automated fashion, gaz_sec
• [WEB SECURITY] 24th Chaos Communication Congress 2007: Call for Participation, fukami
• [WEB SECURITY] firefox3 vuln by design?, bugtraq
  • Re: [WEB SECURITY] firefox3 vuln by design?, Thierry Zoller
    • Re: [WEB SECURITY] firefox3 vuln by design?, Thomas Roessler
  • <Possible follow-ups>
  • Re: [WEB SECURITY] firefox3 vuln by design?, gaz_sec
• [WEB SECURITY] HTTP Proxy for thick clients, Huan Chi
  • Re: [WEB SECURITY] HTTP Proxy for thick clients, bugtraq
  • Re: [WEB SECURITY] HTTP Proxy for thick clients, haroon meer
    • Re: [WEB SECURITY] HTTP Proxy for thick clients, ascii
    • Re: [WEB SECURITY] HTTP Proxy for thick clients, Huan Chi
      • Re: [WEB SECURITY] HTTP Proxy for thick clients, Joakim Sandström
      • Re: [WEB SECURITY] HTTP Proxy for thick clients, haroon meer
      • Re: [WEB SECURITY] HTTP Proxy for thick clients, Mark Andrews
      • Re: [WEB SECURITY] HTTP Proxy for thick clients, Shreeraj Shah
      • Re: [WEB SECURITY] HTTP Proxy for thick clients, Rogan Dawes
  • RE: [WEB SECURITY] HTTP Proxy for thick clients, Ofer Shezaf
  • Re: [WEB SECURITY] HTTP Proxy for thick clients, Ryan Barnett
  • [WEB SECURITY] Re: HTTP Proxy for thick clients, Jeffory Atkinson
  • [WEB SECURITY] Re: HTTP Proxy for thick clients, rajat swarup
• [WEB SECURITY] Why JSON/JavaScript hijacking only works on Mozilla, Billy Hoffman
  • Re: [WEB SECURITY] Why JSON/JavaScript hijacking only works on Mozilla, Daniel Veditz
    • Re: [WEB SECURITY] Why JSON/JavaScript hijacking only works on Mozilla, Daniel Veditz
    • RE: [WEB SECURITY] Why JSON/JavaScript hijacking only works on Mozilla, Billy Hoffman
      • Re: [WEB SECURITY] Why JSON/JavaScript hijacking only works on Mozilla, Daniel Veditz
• [WEB SECURITY] WASC Announcement: 'Script Mapping Project' Call for Participants, announcements
• [WEB SECURITY] Intrusion Detection with Heterogenous Sensors, Bjoern Weiland
• [WEB SECURITY] Firefox CSS flaws, gaz_sec
  • Re: [WEB SECURITY] Firefox CSS flaws, Brian Eaton
    • Re: [WEB SECURITY] Firefox CSS flaws, Michael Vergoz
      • Re: [WEB SECURITY] Firefox CSS flaws, Brian Eaton
  • <Possible follow-ups>
  • Re: [WEB SECURITY] Firefox CSS flaws, gaz_sec
• [WEB SECURITY] Announcement: Releasing CORE GRASP for PHP. An open source, dynamic web application protection system., Ezequiel Gutesman
  • Re: [WEB SECURITY] Announcement: Releasing CORE GRASP for PHP. An open source, dynamic web application protection system., Ezequiel Gutesman
    • [WEB SECURITY] CCWAPSS : a Comprehensive security scoring method, Frederic Charpentier
• [WEB SECURITY] Cenzic sues SPI Dynamics over Fault Injection, robert
  • <Possible follow-ups>
  • Re: [WEB SECURITY] Cenzic sues SPI Dynamics over Fault Injection, Steve Orrin
    • Re: [WEB SECURITY] Cenzic sues SPI Dynamics over Fault Injection, James Landis
      • Re: [WEB SECURITY] Cenzic sues SPI Dynamics over Fault Injection, Mark Andrews
• [WEB SECURITY] Know Your Enemy: Malicious Web Servers, Ryan Barnett
• [WEB SECURITY] Another Oracle Forensics Paper..., David Litchfield
• [WEB SECURITY] WASC Announcement: 'WASSEC Project' Call for Participants, announcements
• [WEB SECURITY] Did webapp developers learn from Samy worm?, Anurag Agarwal
• [WEB SECURITY] SQL Injection, ORDER BY plus DROP TABLE, Harry Muchow
  • Re: [WEB SECURITY] SQL Injection, ORDER BY plus DROP TABLE, Prasad Shenoy
  • Re: [WEB SECURITY] SQL Injection, ORDER BY plus DROP TABLE, Ali Soylu
• [WEB SECURITY] Facebook Homepage Source Code Probably Leaked, pdp (architect)
• [WEB SECURITY] Rough Cut of To-Be-Published Ajax Security, Andre Gironda
  • RE: [WEB SECURITY] Rough Cut of To-Be-Published Ajax Security, Billy Hoffman
    • Re: [WEB SECURITY] Rough Cut of To-Be-Published Ajax Security, Dean H. Saxe
      • RE: [WEB SECURITY] Rough Cut of To-Be-Published Ajax Security, Billy Hoffman
      • Re: [WEB SECURITY] Rough Cut of To-Be-Published Ajax Security, pdp (architect)
• [WEB SECURITY] Seeking feedback on proposed security restriction in the browsers, Anurag Agarwal
  • Re: [WEB SECURITY] Seeking feedback on proposed security restriction in the browsers, Amit Klein
    • Re: [WEB SECURITY] Seeking feedback on proposed security restriction in the browsers, Jeremiah Grossman
      • Re: [WEB SECURITY] Seeking feedback on proposed security restriction in the browsers, Amit Klein
      • Re: [WEB SECURITY] Seeking feedback on proposed security restriction in the browsers, Jeremiah Grossman
  • Re: [WEB SECURITY] Seeking feedback on proposed security restriction in the browsers, Brian Eaton
  • Re: [WEB SECURITY] Seeking feedback on proposed security restriction in the browsers, Ryan Barnett
    • Re: [WEB SECURITY] Seeking feedback on proposed security restriction in the browsers, Prasad Shenoy
      • Re: [WEB SECURITY] Seeking feedback on proposed security restriction in the browsers, Jeremiah Grossman
      • Re: [WEB SECURITY] Seeking feedback on proposed security restriction in the browsers, andre
    • RE: [WEB SECURITY] Seeking feedback on proposed security restriction in the browsers, Ory Segal
  • Re: [WEB SECURITY] Seeking feedback on proposed security restriction in the browsers, pdp (architect)
    • Re: [WEB SECURITY] Seeking feedback on proposed security restriction in the browsers, Brian Eaton
      • Re: [WEB SECURITY] Seeking feedback on proposed security restriction in the browsers, pdp (architect)
      • Re: [WEB SECURITY] Seeking feedback on proposed security restriction in the browsers, Andy Steingruebl
  • <Possible follow-ups>
  • Re: [WEB SECURITY] Seeking feedback on proposed security restriction in the browsers, anurag . agarwal
    • Re: [WEB SECURITY] Seeking feedback on proposed security restriction in the browsers, Amit Klein
  • Re: [WEB SECURITY] Seeking feedback on proposed security restriction in the browsers, anurag . agarwal
    • Re: [WEB SECURITY] Seeking feedback on proposed security restriction in the browsers, pdp (architect)
  • Re: [WEB SECURITY] Seeking feedback on proposed security restriction in the browsers, anurag . agarwal
  • Re: [WEB SECURITY] Seeking feedback on proposed security restriction in the browsers, anurag . agarwal
    • Re: [WEB SECURITY] Seeking feedback on proposed security restriction in the browsers, pdp (architect)
      • Re: [WEB SECURITY] Seeking feedback on proposed security restriction in the browsers, James Landis
  • Re: [WEB SECURITY] Seeking feedback on proposed security restriction in the browsers, anurag . agarwal
    • Re: [WEB SECURITY] Seeking feedback on proposed security restriction in the browsers, Gervase Markham
• [WEB SECURITY] New Oracle Forensics Paper, David Litchfield
• [WEB SECURITY] BlackHat/Defcon 2007 Timing Stuff Released.., haroon
• [WEB SECURITY] Design flaw in AS3 socket handling allows port probing, fukami
• [WEB SECURITY] What do security researchers want in a security disclosure policy to reduce their liability?, Andy Steingruebl
  • Re: [WEB SECURITY] What do security researchers want in a security disclosure policy to reduce their liability?, Bubba Gump
    • Re: [WEB SECURITY] What do security researchers want in a security disclosure policy to reduce their liability?, Mark Andrews
• [WEB SECURITY] [Mlabs-SecNiche] Bug Wars : The Lost Matrix of Security Vectors, Aditya K Sood
  • Re: [WEB SECURITY] [Mlabs-SecNiche] Bug Wars : The Lost Matrix of Security Vectors, Prasad Shenoy
• [WEB SECURITY] MachineID fingerprinting, robert
  • RE: [WEB SECURITY] MachineID fingerprinting, robert.purvis
    • Re: [WEB SECURITY] MachineID fingerprinting, robert
      • RE: [WEB SECURITY] MachineID fingerprinting, White, Dain P
      • Re: [WEB SECURITY] MachineID fingerprinting, Walt Williams
      • Re: [WEB SECURITY] MachineID fingerprinting, Esam Gharish
    • Re: [WEB SECURITY] MachineID fingerprinting, GadgetTrak
      • Re: [WEB SECURITY] MachineID fingerprinting, Brian Eaton
  • RE: [WEB SECURITY] MachineID fingerprinting, Billy Hoffman
    • Re: [WEB SECURITY] MachineID fingerprinting, robert
      • RE: [WEB SECURITY] MachineID fingerprinting, Billy Hoffman
  • <Possible follow-ups>
  • Re: [WEB SECURITY] MachineID fingerprinting, robert
    • RE: [WEB SECURITY] MachineID fingerprinting, Mario Contestabile
  • Re: [WEB SECURITY] MachineID fingerprinting, Daniel McLaughlin
    • Re: [WEB SECURITY] MachineID fingerprinting, robert
      • Re: [WEB SECURITY] MachineID fingerprinting, Brian Eaton
      • Re: [WEB SECURITY] MachineID fingerprinting, robert
      • Re: [WEB SECURITY] MachineID fingerprinting, Mike Fratto
      • Re: [WEB SECURITY] MachineID fingerprinting, Andy Steingruebl
  • RE: [WEB SECURITY] MachineID fingerprinting, Glenn.Everhart
  • RE: [WEB SECURITY] MachineID fingerprinting, Tom Stripling
• [WEB SECURITY] Mozilla Releases JavaScript Fuzzer, bugtraq
• [WEB SECURITY] Pictures from WASC/OWASP party in vegas, robert
• [WEB SECURITY] Risk in Validating new password at client side, Appsec Punter
  • RE: [WEB SECURITY] Risk in Validating new password at client side, White, Dain P
  • Re: [WEB SECURITY] Risk in Validating new password at client side, Pranay Kanwar
    • Re: [WEB SECURITY] Risk in Validating new password at client side, Chris Varenhorst
      • RE: [WEB SECURITY] Risk in Validating new password at client side, Joe Yeager
• Re: [WEB SECURITY] List slowdown during blackhat, robert
• Re: [WEB SECURITY] False Positives with .NET's Request Validation?, Arian J. Evans
  • <Possible follow-ups>
  • RE: [WEB SECURITY] False Positives with .NET's Request Validation?, James Strassburg