security.programming (thread)

New article: "Secure programmer: Call Components Safely", David A. Wheeler
MD5 for powerpc, gurus
Microsoft Writing Secure Code, Rui Covelo
- Re: Microsoft Writing Secure Code, Holger Peine
- Re: Microsoft Writing Secure Code, Valdis . Kletnieks
- RE: Microsoft Writing Secure Code, Yvan G.J. Boily
- Re: Microsoft Writing Secure Code, Sölvi Páll Ásgeirsson
- Re: [OBORONA-SPAM] Microsoft Writing Secure Code, Konstantin V. Sakhin
- RE: Microsoft Writing Secure Code, Keith Oxenrider
- RE: Microsoft Writing Secure Code, Michael Howard
- RE: Microsoft Writing Secure Code, Alan Krassowski
- RE: Microsoft Writing Secure Code, David LeBlanc
Web Application Security Consortium 'Guest Articles' Call for Papers, robert
Account Lockouts, Harrison Gladden
- Re: Account Lockouts, Alexander Klimov
  - Re: Account Lockouts, Mark Burnett
- Re: Account Lockouts, Stephen de Vries
- Re: Account Lockouts, Burak Bilen
- RE: Account Lockouts, Eric Coleman
  - RE: Account Lockouts, Blake Frantz
- Re: Account Lockouts, Valdis . Kletnieks
- Re: Account Lockouts, Kalyan Varma
- RE: Account Lockouts, WebAppSecurity [Technicalinfo.net]
- Re: Account Lockouts, Griffiths, Ian
- RE: Account Lockouts, David LeBlanc
  - RE: Account Lockouts, Tarun Bansal
- RE: Account Lockouts, Michael Silk
  - Re: Account Lockouts, Valdis . Kletnieks
    - Re: Account Lockouts, Michael Silk
    - Re: Account Lockouts, Valdis . Kletnieks
    - Re: Account Lockouts, Michael Silk
    - Re: Account Lockouts, Valdis . Kletnieks
    - Re: Account Lockouts, Michael Silk
    - Re: Account Lockouts, Valdis . Kletnieks
    - Re: Account Lockouts, Mark Burnett
    - Re: Account Lockouts, Elliott Mitchell
    - Re: Account Lockouts, Alexander Klimov
    - RE: Account Lockouts, David Robert
    - Re: Account Lockouts, Valdis . Kletnieks
    - RE: Account Lockouts, Alexander Klimov
- RE: Account Lockouts, Patrik Sternudd
- RE: Account Lockouts, Dean Saxe
  - RE: Account Lockouts, Skander Ben Mansour
- RE: Account Lockouts, Martin Dion
- RE: Account Lockouts, Eric Coleman
- Re: Account Lockouts, Jason Coombs
  - Re: Account Lockouts, Haroon Meer
- Re: Account Lockouts, Jason Coombs
- Re: Account Lockouts, David A. Wheeler
  - Re: Account Lockouts, Valdis . Kletnieks
- Re: Account Lockouts, Michael Silk
- RE: Account Lockouts, David LeBlanc
- RE: Account Lockouts, Michael Wojcik
- RE: Account Lockouts, Jefferies, Darren
- RE: Account Lockouts, Cunningham, Andy
interesting articles on secure coding, Jose Nazario
Java Inner Classes Insecure?, Craig E. Ward
- Re: Java Inner Classes Insecure?, Steffen Dettmer
- RE: Java Inner Classes Insecure?, Michael Silk
.Net and security, Damhuis Anton
- Re: .Net and security, Tim Hoolihan
  - Re: .Net and security, Torben Nehmer
- Re: .Net and security, kingpang
- RE: .Net and security, David LeBlanc
- RE: .Net and security, Damhuis Anton
- RE: .Net and security, Michael Silk
- RE: .Net and security, Damhuis Anton
Is this list still active?, James Youngman
- RE: Is this list still active?, Hall, Philip
  - Re: Is this list still active?, Shelly D.
    - Re: Is this list still active?, Jeroen van Drie
- RE: Is this list still active?, Lane Weast
  - RE: Is this list still active?, Jose Nazario
- RE: Is this list still active?, Michael Silk
- RE: Is this list still active?, David LeBlanc
  - Re: Is this list still active?, Jeroen van Drie
    - Re: Is this list still active?, Casper . Dik
    - Re: Is this list still active?, Valdis . Kletnieks
  - RE: Is this list still active?, Alexander Klimov
    - Re: Is this list still active?, Valdis . Kletnieks
- RE: Is this list still active?, David LeBlanc
- RE: Is this list still active?, Wiest, Damian
  - RE: Is this list still active?, Stormwalker
Web Site Vulnerabilities, Cory Foy
- RE: Web Site Vulnerabilities, Yvan G.J. Boily
- Re: Web Site Vulnerabilities, Jeff Bryner
- RE: Web Site Vulnerabilities, Palmer, Matt
MonkeyShell: using XML-RPC for access to a remote shell, Abe Usher
Re: Charging customers on security [repost], Patrik Sternudd
Looking for mixed Unix/Windows secure coding course, Hollis via Rubicon Recluse
- Looking for mixed Unix/Windows secure coding course, Hollis via Rubicon Recluse
Charging customers on security, King Pang
- Re: Charging customers on security, wirepair
  - Re: Charging customers on security, ovi
    - RE: Charging customers on security, Koen Vingerhoets
    - Re: Charging customers on security, Glynn Clements
    - RE: Charging customers on security, Yvan Boily
    - Re: Charging customers on security, Wesley Shields
    - Re: Charging customers on security, Jesper Anderson
    - RE: Charging customers on security, Yvan Boily
  - RE: Charging customers on security, Yoav Nir
  - RE: Charging customers on security, Jediah
  - Re: Charging customers on security, Steve Friedl
  - Re: Charging customers on security, Michael E . Conlen
  - Re: Charging customers on security, Jeff Williams
  - Re: Charging customers on security, Adam Shostack
    - Re: Charging customers on security, S. M.
- Re: Charging customers on security, exon
- RE: Charging customers on security, Yvan Boily
- RE: Charging customers on security, Chris Matthews
  - Re: Charging customers on security, King Pang
    - RE: Charging customers on security, Koen Vingerhoets
    - Re: Charging customers on security, Andreas Krügersen
    - RE: Charging customers on security, Chris Matthews
- Re: Charging customers on security, Thor
- Re: Charging customers on security, Bart . Lansing
- RE: Charging customers on security, Mitchell Hume
- RE: Charging customers on security, Ton Geurts
  - Re: Charging customers on security, ovi
- RE: Charging customers on security, Bowes, Ronald (EST)
- RE: Charging customers on security, Stan Guzik
- RE: Charging customers on security, Michael Wojcik
- Re: Charging customers on security, Cory Foy
- RE: Charging customers on security, Michael Wojcik
- RE: Charging customers on security, Glenn_Everhart
- Re: Charging customers on security, King Pang
- RE: Charging customers on security, Michael Wojcik
- RE: Charging customers on security, Patrik Sternudd
- RE: Charging customers on security, Horton, Brad
- Re: Charging customers on security, Jeroen van Drie
- RE: Charging customers on security, Michael Wojcik
  - Re: Charging customers on security, Brandon Niemczyk
- RE: Charging customers on security, Michael Wojcik
- Re: Charging customers on security, Cory Foy
- RE: Charging customers on security, Jeremy Epstein
  - RE: Charging customers on security, riptide
More on "selling" a code audit, Glenn_Everhart
Has anyone ever exploited these Websphere (WAS) Weaknesses, If so How ? Can anyone Elaborate ?, bob
- RE: Has anyone ever exploited these Websphere (WAS) Weaknesses, If so How ? Can anyone Elaborate ?, Brass, Phil (ISS Atlanta)
Inspecting Code for Security, caleb . dods
- Re: Inspecting Code for Security, George V. Neville-Neil
- Re: Inspecting Code for Security, Juergen Brauckmann
- RE: Inspecting Code for Security, Aleksander P. Czarnowski
  - Re: Inspecting Code for Security, Valdis . Kletnieks
    - RE: Inspecting Code for Security, Aleksander P. Czarnowski
- RE: Inspecting Code for Security, Yvan Boily
  - RE: Inspecting Code for Security, Aleksander P. Czarnowski
    - RE: Inspecting Code for Security, Yvan Boily
- RE: Inspecting Code for Security, Yvan Boily
- RE: Inspecting Code for Security, Luis Hernandez
- RE: Inspecting Code for Security, Michael Howard
- RE: Inspecting Code for Security, Yvan Boily
Shmoocon CFP & registration information, shmooconannounce
Security Issues with STL?, D K
"Selling" a code-audit., Yvan Boily
- Re: "Selling" a code-audit., Dmitry Dvoinikov
- Fwd: "Selling" a code-audit., John T. Cox
- RE: "Selling" a code-audit., Aleksander P. Czarnowski
- Re: "Selling" a code-audit., Eric Murray
- Re: "Selling" a code-audit., Adam Shostack
- Re: "Selling" a code-audit., Warwick Molloy
- RE: "Selling" a code-audit., Alexandre Sieira
- RE: "Selling" a code-audit., Michael Howard
- RE: "Selling" a code-audit., Calderon, Juan Carlos (GE Commercial Finance, NonGE)
- RE: "Selling" a code-audit., Browne, Derek
- Re: "Selling" a code-audit., Travis Schack
- RE: "Selling" a code-audit., Michael Howard
- RE: "Selling" a code-audit., Michael Howard
- Re: "Selling" a code-audit., Jason Coombs PivX Solutions
- Re: "Selling" a code-audit., Peter Gutmann
- Re: "Selling" a code-audit., Adam Shostack
- Re: "Selling" a code-audit., Jason Coombs PivX Solutions
  - Re: "Selling" a code-audit., Jerry Connolly
    - Re: "Selling" a code-audit., Zed A. Shaw
    - "Selling" a code-audit and politics, Richard Rager
    - Re: "Selling" a code-audit and politics, Atom 'Smasher'
    - Re: "Selling" a code-audit and politics, Richard Rager
    - Re: "Selling" a code-audit and politics, Jason Coombs
- RE: "Selling" a code-audit., Michael Howard
- Re: "Selling" a code-audit., Javier Blanque
Insecure temp file creation fix - peer review please, Derek Fountain
- Re: Insecure temp file creation fix - peer review please, Erwan Legrand
Forwarding Windows credentials for a client/server application, Brian Erdelyi
Web Application Vulnerability Assessment Tools, bsec
- Re: Web Application Vulnerability Assessment Tools, Alex Holst
- RE: Web Application Vulnerability Assessment Tools, Medzich, Maik
Encrypted Communications and Predictable Communications?, Jonathan Leffler
- Re: Encrypted Communications and Predictable Communications?, Jack Lloyd
- Re: Encrypted Communications and Predictable Communications?, Bennett Todd
- Re: Encrypted Communications and Predictable Communications?, Adam Shostack
  - RE: Encrypted Communications and Predictable Communications?, Hadi
- RE: Encrypted Communications and Predictable Communications?, Glenn_Everhart
- Re: Encrypted Communications and Predictable Communications?, Drew Simonis
- RE: Encrypted Communications and Predictable Communications?, Michael Silk
Apologies regarding my spam filter..., Thor
RE: Microsoft .NET PRNG (fwd), Peter Gutmann
- RE: Microsoft .NET PRNG (fwd), Peter Gutmann
Microsoft .NET PRNG, Yvan Boily
- RE: Microsoft .NET PRNG, Pablo Milano
  - RE: Microsoft .NET PRNG, Yvan Boily
  - RE: Microsoft .NET PRNG, Peter Gutmann
- Re: Microsoft .NET PRNG, Skip Carter
  - Re: Microsoft .NET PRNG, M. Burnett
    - Re: Microsoft .NET PRNG, Peter Gutmann
- Re: Microsoft .NET PRNG, Jack Lloyd
- RE: Microsoft .NET PRNG, Michael Silk
Secure software development documents, udayan pathak
- Re: Secure software development documents, roger . smith
- RE: Secure software development documents, Scovetta, Michael V
Free security server and SDK, Cushing, David
Questions about PLT/GOT redirection, read lkml
Secure access to system calls for a library?, Jonathan Leffler
- Re: Secure access to system calls for a library?, Casper Dik
- Re: Secure access to system calls for a library?, Valdis . Kletnieks
- Re: Secure access to system calls for a library?, Jack Lloyd
- Re: Secure access to system calls for a library?, Glynn Clements
- RE: Secure access to system calls for a library?, Michael Wojcik
Examples of lost security when integrating (secure) SW, Magnus Therning
- Re: Examples of lost security when integrating (secure) SW, Valdis . Kletnieks
- Re: Examples of lost security when integrating (secure) SW, Rick Wash
- Re: Examples of lost security when integrating (secure) SW, nick black
- Re: Examples of lost security when integrating (secure) SW, Fernando Tricas
- Re: Examples of lost security when integrating (secure) SW, Glynn Clements
- Re: Examples of lost security when integrating (secure) SW, Valdis . Kletnieks
- RE: Examples of lost security when integrating (secure) SW, Jeremy Epstein
  - RE: Examples of lost security when integrating (secure) SW, Yvan Boily
perl freezed data across network, George Nistorica
- Re: perl freezed data across network, Sebastian Krahmer
- RE: perl freezed data across network, NESTING, DAVID M (SBCSI)
  - RE: perl freezed data across network, Sebastian Krahmer
Your opinion on a valuable and feasible goal for a new source code auditing tool, Holger Peine
- Re: Your opinion on a valuable and feasible goal for a new source code auditing tool, Jose Nazario
  - Re: Your opinion on a valuable and feasible goal for a new source code auditing tool, Jordan Dimov
- Re: Your opinion on a valuable and feasible goal for a new source code auditing tool, Valdis . Kletnieks
Re: [SC-L] Off-by-one errors: a brief explanation, Steven M. Christey
- Re: [SC-L] Off-by-one errors: a brief explanation, jnf
Off-by-one errors: a brief explanation, Steven M. Christey
- Re: [SC-L] Off-by-one errors: a brief explanation, jnf
  - Re: [SC-L] Off-by-one errors: a brief explanation, Yves Younan
    - Re: [SC-L] Off-by-one errors: a brief explanation, jnf
    - Re: [SC-L] Off-by-one errors: a brief explanation, Yves Younan
    - Re: [SC-L] Off-by-one errors: a brief explanation, jnf
    - Re: [SC-L] Off-by-one errors: a brief explanation, Mads Rasmussen
- Re: [SC-L] Off-by-one errors: a brief explanation, Pascal Meunier
Secure Programming Certification?, Betty Pawlik
Vulnerability Auditing Checklist, Mads Rasmussen
- Re: Vulnerability Auditing Checklist, Steven M. Christey
  - Re: Vulnerability Auditing Checklist, jet
Smart Card, Michael Silk
- Re: Smart Card, Peter Gutmann
  - Re: Smart Card, Eric Murray
- Re: Smart Card, Goetz Babin-Ebell
  - Re: Smart Card, Peter Gutmann
- Re: Smart Card, Arash Partow
  - Re: Smart Card - amendment, Arash Partow
Where does product security fit at your company?, jet
Delphi Auditing, ADex
- RE: Delphi Auditing, Mike de Libero
- Re: Delphi Auditing, Bojidar Alexandrov
- RE: Delphi Auditing, Palmer, Matt
Open Source Code Review, Angus
- Re: Open Source Code Review, Roman Bogorodskiy
  - Re: Open Source Code Review, John Wilander
- RE: Open Source Code Review, Calderon, Juan Carlos (GE Commercial Finance, NonGE)
- Re: Open Source Code Review, David A. Wheeler
- RE: Open Source Code Review, Calderon, Juan Carlos (GE Commercial Finance, NonGE)
security checkup in source control software, Mads Rasmussen
- Re: security checkup in source control software, Jose Nazario
  - Re: security checkup in source control software, Valdis . Kletnieks
- Re: security checkup in source control software, Alex Holst
security risks, Zarina Musa
- Re: security risks, Valdis . Kletnieks
- RE: security risks, stevenr
Questions when interviewing new people, Mads Rasmussen
- Re: Questions when interviewing new people, Eric Murray
  - Re: Questions when interviewing new people, Mads Rasmussen
    - Re: Questions when interviewing new people, Eric Murray
Code Assessment, Bobby, Paul
- RE: Code Assessment, ken kousky
- RE: Code Assessment, Mike Randall
Another opinion on using extreme programming for security, Mads Rasmussen
- Re: Another opinion on using extreme programming for security, George Dinwiddie
  - Re: Another opinion on using extreme programming for security, Jeff Williams
- RE: Another opinion on using extreme programming for security, Kenneth Buchanan
  - Re: Another opinion on using extreme programming for security, Rick Wash
    - RE: Another opinion on using extreme programming for security, Tim Hollebeek
- RE: Another opinion on using extreme programming for security, Kenneth Buchanan
- RE: Another opinion on using extreme programming for security, John Steven
RE: Perl code security (CGI related), Michael Silk
- RE: Perl code security (CGI related), jnf
- RE: Perl code security (CGI related), Michael Silk
  - RE: Perl code security (CGI related), jnf
- RE: RE: Perl code security (CGI related), shattoc
  - Re: Perl code security (CGI related), Valdis . Kletnieks
Re: Concerning Java and SSL (fwd), Matthias Jim Knopf
- Re: Concerning Java and SSL (fwd), Matthias Jim Knopf
How does GCC > 3.* do the padding in memory allocation?, Rick Zhong
- Re: How does GCC > 3.* do the padding in memory allocation?, Glynn Clements
Re: NIST Workshop on Software Security, Jonathan Leffler
- Perl code security (CGI related), Rick Zhong
  - Re: Perl code security (CGI related), Sebastian Krahmer
secure software engineering methodology - aftermath, Mads Rasmussen
- Re: secure software engineering methodology - aftermath, John Viega
Penetration Testing Report - Sample Report, Imperva Application Defense Center
secure software engineering methodology, Mads Rasmussen
- Re: secure software engineering methodology, John Viega
- Re: secure software engineering methodology, Bill Weiss
  - Re: secure software engineering methodology, Mads Rasmussen
- Re: secure software engineering methodology, Gabriel Sjoberg
- RE: secure software engineering methodology, Jeremy Epstein
  - RE: secure software engineering methodology, Al Stavely
- RE: secure software engineering methodology, Beatie, Breck (ISSMountain View)
MS SQL Inter-database query question, Michael Silk
- Re: MS SQL Inter-database query question, Adam Tuliper
- RE: MS SQL Inter-database query question, Harshul Nayak
- RE: MS SQL Inter-database query question, Michael Howard
Discovering passwords in memory, Abhishek Kumar
Reverse Engineering, Filipe Polido
- Re: Reverse Engineering, Fyodor
storing crypto key in CPU registers, lsi
- RE: storing crypto key in CPU registers, Hephaestus
- Re: storing crypto key in CPU registers, Valdis . Kletnieks
- Re: storing crypto key in CPU registers, Casper Dik
- Re: storing crypto key in CPU registers, Michal Zalewski
- Re: storing crypto key in CPU registers, Suresh Ponnusami
- Re: storing crypto key in CPU registers, michel . d . lowe
  - Re: storing crypto key in CPU registers, steve Coleman