The Web Security Mailing List (2009 June)

• Date Index

• [WEB SECURITY] JSReg: Javascript based RegExp sandbox, gaz Heyes
  • Re: [WEB SECURITY] JSReg: Javascript based RegExp sandbox, Matt Jones
    • Re: [WEB SECURITY] JSReg: Javascript based RegExp sandbox, Sam Quigley
      • Re: [WEB SECURITY] JSReg: Javascript based RegExp sandbox, gaz Heyes
    • Re: [WEB SECURITY] JSReg: Javascript based RegExp sandbox, gaz Heyes
• [WEB SECURITY] Thoughts on Content Security Policy?, Nick Owen
  • Re: [WEB SECURITY] Thoughts on Content Security Policy?, gaz Heyes
    • Re: [WEB SECURITY] Thoughts on Content Security Policy?, Jim Manico
      • Re: [WEB SECURITY] Thoughts on Content Security Policy?, gaz Heyes
  • Re: [WEB SECURITY] Thoughts on Content Security Policy?, Bil Corry
    • Re: [WEB SECURITY] Thoughts on Content Security Policy?, Terri Oda
      • Re: [WEB SECURITY] Thoughts on Content Security Policy?, bugtraq
    • Re: [WEB SECURITY] Thoughts on Content Security Policy?, Bil Corry
• [WEB SECURITY] IBM researcher solves longstanding cryptographic challenge?, robert
  • Re: [WEB SECURITY] IBM researcher solves longstanding cryptographic challenge?, Stephan Wehner
• [WEB SECURITY] Jakob Nielsen's Stop Password Masking, Bil Corry
  • Re: [WEB SECURITY] Jakob Nielsen's Stop Password Masking, Michael McDonnell
    • Re: [WEB SECURITY] Jakob Nielsen's Stop Password Masking, Mike Duncan
  • Re: [WEB SECURITY] Jakob Nielsen's Stop Password Masking, Nick Owen
    • Re: [WEB SECURITY] Jakob Nielsen's Stop Password Masking, jf
  • Re: [WEB SECURITY] Jakob Nielsen's Stop Password Masking, euronymous
  • Re: [WEB SECURITY] Jakob Nielsen's Stop Password Masking, Stephan Wehner
  • Re: [WEB SECURITY] Jakob Nielsen's Stop Password Masking, Jim Manico
  • Re: [WEB SECURITY] Jakob Nielsen's Stop Password Masking, Terri Oda
  • Re: [WEB SECURITY] Jakob Nielsen's Stop Password Masking, euronymous
  • RE: [WEB SECURITY] Jakob Nielsen's Stop Password Masking, Cook, Geoffrey
  • Re: [WEB SECURITY] Jakob Nielsen's Stop Password Masking, Stephan Wehner
  • <Possible follow-ups>
  • RE: [WEB SECURITY] Jakob Nielsen's Stop Password Masking, Matt Fisher
    • Re: [WEB SECURITY] Jakob Nielsen's Stop Password Masking, Michael McDonnell
      • RE: [WEB SECURITY] Jakob Nielsen's Stop Password Masking, Mattias Baecklund
    • RE: [WEB SECURITY] Jakob Nielsen's Stop Password Masking, Martin, Christopher
    • Re: [WEB SECURITY] Jakob Nielsen's Stop Password Masking, Morrow Long
      • Re: [WEB SECURITY] Jakob Nielsen's Stop Password Masking, Randal L. Schwartz
      • Re: [WEB SECURITY] Jakob Nielsen's Stop Password Masking, Prasad Shenoy
      • Re: [WEB SECURITY] Jakob Nielsen's Stop Password Masking, Morrow Long
      • Re: [WEB SECURITY] Jakob Nielsen's Stop Password Masking, Prasad Shenoy
      • Re: [WEB SECURITY] Jakob Nielsen's Stop Password Masking, Jim Manico
      • Re: [WEB SECURITY] Jakob Nielsen's Stop Password Masking, Prasad Shenoy
      • RE: [WEB SECURITY] Jakob Nielsen's Stop Password Masking, Mattias Baecklund
      • Re: [WEB SECURITY] Jakob Nielsen's Stop Password Masking, Morrow Long
      • Re: [WEB SECURITY] Jakob Nielsen's Stop Password Masking, Bil Corry
      • RE: [WEB SECURITY] Jakob Nielsen's Stop Password Masking, Van Der Westhuizen, Sonja
      • RE: [WEB SECURITY] Jakob Nielsen's Stop Password Masking, Mattias Baecklund
      • RE: [WEB SECURITY] Jakob Nielsen's Stop Password Masking, Martin, Christopher
      • Re: [WEB SECURITY] Jakob Nielsen's Stop Password Masking, Bipin Upadhyay
      • Re: [WEB SECURITY] Jakob Nielsen's Stop Password Masking, nights shadow
      • RE: [WEB SECURITY] Jakob Nielsen's Stop Password Masking, Vance, Michael
      • Re: [WEB SECURITY] Jakob Nielsen's Stop Password Masking, Morrow Long
      • Re: [WEB SECURITY] Jakob Nielsen's Stop Password Masking, jf
      • Re: [WEB SECURITY] Jakob Nielsen's Stop Password Masking, Neil Matatall
      • Re: [WEB SECURITY] Jakob Nielsen's Stop Password Masking, Mike Adewole
      • Re: [WEB SECURITY] Jakob Nielsen's Stop Password Masking, Bil Corry
      • Re: [WEB SECURITY] Jakob Nielsen's Stop Password Masking, Mike Adewole
      • RE: [WEB SECURITY] Jakob Nielsen's Stop Password Masking, Schmidt, Chris
      • Re: [WEB SECURITY] Jakob Nielsen's Stop Password Masking, Ray
      • Re: [WEB SECURITY] Jakob Nielsen's Stop Password Masking, nights shadow
      • Re: [WEB SECURITY] Jakob Nielsen's Stop Password Masking, Jim Manico
      • Re: [WEB SECURITY] Jakob Nielsen's Stop Password Masking, Bil Corry
      • Re: [WEB SECURITY] Jakob Nielsen's Stop Password Masking, Jim Manico
      • Re: [WEB SECURITY] Jakob Nielsen's Stop Password Masking, Bil Corry
      • RE: [WEB SECURITY] Jakob Nielsen's Stop Password Masking, Shawn K. Hall
      • Re: [WEB SECURITY] Jakob Nielsen's Stop Password Masking, Bil Corry
      • RE: [WEB SECURITY] Jakob Nielsen's Stop Password Masking, Shawn K. Hall
      • Re: [WEB SECURITY] Jakob Nielsen's Stop Password Masking, Albert Lunde
      • Re: [WEB SECURITY] Jakob Nielsen's Stop Password Masking, Jim Manico
      • RE: [WEB SECURITY] Jakob Nielsen's Stop Password Masking, Shawn K. Hall
      • RE: [WEB SECURITY] Jakob Nielsen's Stop Password Masking, Shawn K. Hall
      • Re: [WEB SECURITY] Jakob Nielsen's Stop Password Masking, Jim Manico
      • RE: [WEB SECURITY] Jakob Nielsen's Stop Password Masking, Shawn K. Hall
      • Re: [WEB SECURITY] Jakob Nielsen's Stop Password Masking, Jim Manico
      • Re: [WEB SECURITY] Jakob Nielsen's Stop Password Masking, Bil Corry
  • RE: [WEB SECURITY] Jakob Nielsen's Stop Password Masking, Matt Fisher
    • Re: [WEB SECURITY] Jakob Nielsen's Stop Password Masking, jf
  • Re: [WEB SECURITY] Jakob Nielsen's Stop Password Masking, Daniel Herrera
  • RE: [WEB SECURITY] Jakob Nielsen's Stop Password Masking, Martin O'Neal
  • Re: [WEB SECURITY] Jakob Nielsen's Stop Password Masking, Bil Corry
  • RE: [WEB SECURITY] Jakob Nielsen's Stop Password Masking, dblackshell
  • RE: [WEB SECURITY] Jakob Nielsen's Stop Password Masking, Martin O'Neal
• [WEB SECURITY] Sneak peek at the WASC Threat Classification v2, robert
• [WEB SECURITY] [tool] Watcher v1.2.0 - passive Web-app testing and OWASP/PCI auditing tool, Chris Weber
• [WEB SECURITY] The Möbius Defense, the end of Defense in Depth, Pete Herzog
• [WEB SECURITY] OWASP Podcast #26, Jim Manico
• [WEB SECURITY] Article: 'Setting the appropriate security defect handling expectations in development and QA', robert
• [WEB SECURITY] Hacking of web sites, security researches, disclosure and legislation #2, MustLive
• [WEB SECURITY] about scanning the web, neeraj gupta
  • Re: [WEB SECURITY] about scanning the web, Justin Clarke
  • Re: [WEB SECURITY] about scanning the web, Andres Riancho
    • RE: [WEB SECURITY] about scanning the web, David Spenard
  • Re: [WEB SECURITY] about scanning the web, Steve Pinkham
    • RE: [WEB SECURITY] about scanning the web, Brian Shura
• [WEB SECURITY] WAF Bypass with HPP, lavakumar kuppan
  • Re: [WEB SECURITY] WAF Bypass with HPP, Achim Hoffmann
    • Re: [WEB SECURITY] WAF Bypass with HPP, lavakumar kuppan
      • Re: [WEB SECURITY] WAF Bypass with HPP, Achim Hoffmann
      • Re: [WEB SECURITY] WAF Bypass with HPP, lavakumar kuppan
• [WEB SECURITY] [tool] dradis framework 2.2 released, etd
• [WEB SECURITY] Backdooring windows media files (once again), Rosario Valotta
• [WEB SECURITY] Paper: Web App Version detection using fingerprinting, Sucuri Security
• [WEB SECURITY] Phrack 66 is out!, robert
• [WEB SECURITY] Acunetix - Custom 404 Error pages, Aparna Bajaj
• [WEB SECURITY] New paper - Detecting remote file inclusion attacks, Or Katz
• [WEB SECURITY] Outcome: death, Ofer Shezaf
• [WEB SECURITY] Firefox Web App Sec add-on "Collection", Adam Muntner
  • RE: [WEB SECURITY] Firefox Web App Sec add-on "Collection", Vance, Michael
• [WEB SECURITY] Notes on Unicode, Encoding/Canonicalization Attacks, & Web Development, Arian J. Evans
  • [WEB SECURITY] RE: Notes on Unicode, Encoding/Canonicalization Attacks, & Web Development, Chris Weber
    • [WEB SECURITY] Re: Notes on Unicode, Encoding/Canonicalization Attacks, & Web Development, Arian J. Evans
• [WEB SECURITY] New paper by Amit Klein (Trusteer) - Temporary user tracking in major browsers and Cross-domain information leakage and attacks, Amit Klein
• [WEB SECURITY] Hacking of web sites, security researches, disclosure and legislation, MustLive
• [WEB SECURITY] Software Assurance Maturity Model Interview Template, Nick Coblentz
• Re: [WEB SECURITY] Unicode Left/Right Pointing Double Angel Quotation Mark bypass?, Arian J. Evans
  • Re: [WEB SECURITY] Unicode Left/Right Pointing Double Angel Quotation Mark bypass?, Prasad Shenoy
    • Re: [WEB SECURITY] Unicode Left/Right Pointing Double Angel Quotation Mark bypass?, Arian J. Evans
      • RE: [WEB SECURITY] Unicode Left/Right Pointing Double Angel Quotation Mark bypass?, Chris Weber
      • [WEB SECURITY] Re[2]: [Full-disclosure] [WEB SECURITY] Unicode Left/Right Pointing Double Angel Quotation Mark bypass?, Thierry Zoller
      • RE: [WEB SECURITY] Re[2]: [Full-disclosure] [WEB SECURITY] Unicode Left/Right Pointing Double Angel Quotation Mark bypass?, Chris Weber
      • [WEB SECURITY] Re: Unicode Left/Right Pointing Double Angel Quotation Mark bypass?, Paul Johnston
      • [WEB SECURITY] Re: Re[2]: [Full-disclosure] [WEB SECURITY] Unicode Left/Right Pointing Double Angel Quotation Mark bypass?, Arian J. Evans
  • Re: [WEB SECURITY] Unicode Left/Right Pointing Double Angel Quotation Mark bypass?, Stephen de Vries
    • Re: [WEB SECURITY] Unicode Left/Right Pointing Double Angel Quotation Mark bypass?, Arian J. Evans
      • RE: [WEB SECURITY] Unicode Left/Right Pointing Double Angel Quotation Mark bypass?, Chris Weber
      • Re: [WEB SECURITY] Unicode Left/Right Pointing Double Angel Quotation Mark bypass?, Arian J. Evans
  • Re: [WEB SECURITY] Unicode Left/Right Pointing Double Angel Quotation Mark bypass?, Achim Hoffmann
• [WEB SECURITY] FaceBook Spam, Sandeep Cheema
• Re: [WEB SECURITY] Damn Vulnerable Web App, Thrynn
  • Re: [WEB SECURITY] Damn Vulnerable Web App, MustLive
  • <Possible follow-ups>
  • Re: [WEB SECURITY] Damn Vulnerable Web App, MustLive