security.websecurity (date)

April 30, 2007

Re: suggesting passwords to users, Mike Shema
Re: suggesting passwords to users, Albert Lunde
Re: suggesting passwords to users, Wladimir Palant
Re: suggesting passwords to users, Mike Shema
Re: suggesting passwords to users, Anurag Agarwal
Re: suggesting passwords to users, Wladimir Palant
Re: suggesting passwords to users, James Landis
Re: suggesting passwords to users, Anurag Agarwal
suggesting passwords to users, Brian Eaton
Reflection on Andrew Van der Stock, Anurag Agarwal

April 29, 2007

RE: MITM (man in the middle), John Terrill

April 28, 2007

Re: MITM (man in the middle), Thierry Zoller
RE: MITM (man in the middle), frederic.lebeau

April 27, 2007

Re: MITM (man in the middle), Nick Owen
Re: MITM (man in the middle), Prasad Shenoy
Re: MITM (man in the middle), John Terrill
MITM (man in the middle), lebeau
RE: Captcha and animated captcha, Marian Ion
Tackling A Difficult Problem - Proposed Solution, Bubba Gump

April 26, 2007

Re: script inside .txt file, Brian Eaton
RE: Captcha and animated captcha, Chris Weber
Re: [Webappsec] [WEB SECURITY] script inside .txt file, James Landis
RE: script inside .txt file, Billy Hoffman
RE: Captcha and animated captcha, Billy Hoffman
Re: [Webappsec] [WEB SECURITY] IE 7 and Firefox Browsers Digest Authentication Request Splitting, Andy Steingruebl
Re: Re: [Webappsec] [WEB SECURITY] IE 7 and Firefox Browsers Digest Authentication Request Splitting, Chris Hofmann
Re: Re: Tacking A Difficult Problem - Solutions, Arian J. Evans
Re: Re: Tacking A Difficult Problem - Solutions, Bubba Gump
Re: script inside .txt file, Bubba Gump

April 25, 2007

Re: [Webappsec] [WEB SECURITY] IE 7 and Firefox Browsers Digest Authentication Request Splitting, Arian J. Evans
Re: Re: Tacking A Difficult Problem - Solutions, Arian J. Evans
RE: Re: [Webappsec] [WEB SECURITY] IE 7 and Firefox Browsers Digest Authentication Request Splitting, chris
Re: [Webappsec] [WEB SECURITY] IE 7 and Firefox Browsers Digest Authentication Request Splitting, Stefano Di Paola
Re: IE 7 and Firefox Browsers Digest Authentication Request Splitting, Stefano Di Paola
RE: Re: Tacking A Difficult Problem - Solutions, Ory Segal
Re: [Webappsec] [WEB SECURITY] IE 7 and Firefox Browsers Digest Authentication Request Splitting, Andy Steingruebl
Re: [Webappsec] Tacking A Difficult Problem - Solutions, Amit Klein
Re: IE 7 and Firefox Browsers Digest Authentication Request Splitting, Amit Klein
Re: Tacking A Difficult Problem - Solutions, Arian J. Evans
IE 7 and Firefox Browsers Digest Authentication Request Splitting, Stefano Di Paola
Re: script inside .txt file, Wladimir Palant
Re: Captcha and animated captcha, Stephen de Vries
Re: script inside .txt file, christ1an
Re: [Webappsec] script inside .txt file, Lee Lawson
Re: [Webappsec] script inside .txt file, Amiran Alavidze
RE: script inside .txt file, Ory Segal
Re: script inside .txt file, Kurt Grutzmacher
Re: script inside .txt file, Ajay Pal Singh Atwal
Re: script inside .txt file, Stefano Di Paola
Re: script inside .txt file, Josh Zlatin-Amishav
script inside .txt file, prashant k v

April 24, 2007

Re: Captcha and animated captcha, christ1an
RE: Captcha and animated captcha, Chris Weber
RE: Captcha and animated captcha, Ory Segal
Captcha and animated captcha, Lebeau Frederic
WASC Meetup - April 18 - pictures uploaded, Anurag Agarwal

April 23, 2007

Reflection on Nish Bhalla, Anurag Agarwal

April 22, 2007

WASC-Articles: 'The business case for security frameworks', announcements

April 21, 2007

Re: Tacking A Difficult Problem - Solutions HTTP Response Splitting, Amit Klein
Re: Tacking A Difficult Problem - Solutions HTTP Response Splitting, Amit Klein

April 20, 2007

Re: Re: [Webappsec] Tacking A Difficult Problem - Solutions HTTP Response Splitting, Arian J. Evans
Re: [Webappsec] Tacking A Difficult Problem - Solutions HTTP Response Splitting, Arian J. Evans
Re: [Webappsec] Tacking A Difficult Problem - Solutions HTTP Response Splitting, Amit Klein
Re: [Webappsec] Tacking A Difficult Problem - Solutions HTTP Response Splitting, James Landis
Re: [Webappsec] Tacking A Difficult Problem - Solutions HTTP Response Splitting, Arian J. Evans
Re: [Webappsec] Tacking A Difficult Problem - MS output encoding library, Arian J. Evans
Re: [Webappsec] Tacking A Difficult Problem - Solutions HTTP Response Splitting, Amit Klein
RE: [Webappsec] Tacking A Difficult Problem - Solutions, Bob Fish
Re: [Webappsec] Tacking A Difficult Problem - Solutions HTTP Response Splitting, Arian J. Evans
Re: Tacking A Difficult Problem - Solutions, Arian J. Evans
Re: Tacking A Difficult Problem - Solutions, Amit Klein
Re: Tacking A Difficult Problem - Solutions, Amit Klein

April 18, 2007

SensePost Aura - aka Solving the Google API Key Problem.., Haroon Meer
Reminder: HITBSecConf2007 - Malaysia: Call for Papers closing in 2 weeks, announce

April 17, 2007

Re: [WEB SECURITY] Persistent CSRF and The Hotlink Hell, Blue Boar

April 16, 2007

Re: Persistent CSRF and The Hotlink Hell, Ryan Barnett
Re: URL Encoding/Decoding Flaw Mechanism In ASP.net[1.0-2.0] Based Web Applications., Aditya K Sood
RE: URL Encoding/Decoding Flaw Mechanism In ASP.net[1.0-2.0] Based Web Applications., Jeff Forristal
Re: URL Encoding/Decoding Flaw Mechanism In ASP.net[1.0-2.0] Based Web Applications., Aditya K Sood
Re: URL Encoding/Decoding Flaw Mechanism In ASP.net[1.0-2.0] Based Web Applications., Jeff Forristal
Persistent CSRF and The Hotlink Hell, pdp (architect)
reflection on Ory segal, Anurag Agarwal
WASC-Articles: 'The Importance of Application Classification in Secure Application Development', contact

April 15, 2007

URL Encoding/Decoding Flaw Mechanism In ASP.net[1.0-2.0] Based Web Applications., Aditya K Sood

April 11, 2007

Experience with Jascrypt?, Mr Zebedee
Cosign SSO Authentication Bypass, Jon Oberheide
Application Layer Anti-virus/Firewall, pdp (architect)

April 10, 2007

Jasypt 1.2 (Java Simplified Encryption) enhances Hibernate support, Daniel Fernández Garrido
WASC Announcement: Web Application Security Statistics Project - Data Published, contact
WASC Meet-Up (Sunnyvale, Ca.) April 18, 2007 @ 6pm, Jeremiah Grossman

April 09, 2007

Re: Any opinions of the effectiveness of Binary Static Analysis?, Benjamin Livshits
RE: Any opinions of the effectiveness of Binary Static Analysis?, Debasis Mohanty

April 08, 2007

Re: Preventing Cross-site Request Forgeries, christ1an

April 06, 2007

Reflection chris shiflett, anurag . agarwal
Re: Firefox extensions go Evil - Critical Vulnerabilities in Firefox/Firebug, Thor Larholm

April 05, 2007

Any opinions of the effectiveness of Binary Static Analysis?, John Johnson
CYBSEC Release: SAP Security - Paper & Tool release, Mariano Nuñez Di Croce

April 04, 2007

Re: [WEB SECURITY] Firefox extensions go Evil - Critical Vulnerabilities in Firefox/Firebug, Daniel Veditz
Firefox extensions go Evil - Critical Vulnerabilities in Firefox/Firebug, pdp (architect)
HDIV (Http Data Integrity Validator) 1.1 Released, roberto

April 03, 2007

Vulnerable Vectors in PHP Based Redirection Pages[redirect.php4/redirect.php5], Aditya K Sood

April 02, 2007

RE: Jikto in the wild, Billy Hoffman
Re: [Webappsec] [WEB SECURITY] Preventing Cross-site Request Forgeries, Arian J. Evans
Re: Jikto in the wild, pdp (architect)
Jikto in the wild, Billy Hoffman
Re: [Webappsec] [WEB SECURITY] Preventing Cross-site Request Forgeries, Jim Manico
Re: Preventing Cross-site Request Forgeries, Stephen de Vries

April 01, 2007

Re: Preventing Cross-site Request Forgeries, Brian Eaton
From Old Bucket To New : Clobbering Of Global Variables, Aditya K Sood
RE: Preventing Cross-site Request Forgeries, Arian J. Evans