Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email firstname.lastname@example.org
[Full-disclosure] Re: Fun with Foundstone
From: Dave Korn (davek_throwawayhotmail.com)
Date: Tue Feb 14 2006 - 13:49:10 CST
> Things for a security company not to do in a webapp:
> 1. Do not auto-populate form fields on the page with customer names.
> 2. If you ignore rule number 1, don't use a simple, predictable id
> for said auto-population.
LOL, blocked already!
> Rinse, increment, and repeat for a list of Foundstone
> customers...or at least a list of companies they've let download
... or at least a list of a million-and-one variants on "M. Mouse" and "Noah
... nearly _all_ of whom appear to live in Beverley Hills.
Can't think of a witty .sigline today....
Full-Disclosure - We believe in it.
Hosted and sponsored by Secunia - http://secunia.com/