Most recent messages
452 messages sorted by: [ author ] [ date ] [ subject ]

Starting: Sat Apr 01 2006 - 08:31:29 CST
Ending: Sat Jul 01 2006 - 02:24:16 CDT

• Re: [Full-disclosure] Re: [Owasp-dotnet] RE: 4 Questions: LatestIEvulnerability, Firefox vs IE security, User vs Admin risk profile,and browsers coded in 100% Managed Verifiable code Saqib Ali (Fri Mar 31 2006 - 22:00:39 CST)
• RE: SSL Ciphers Lyal Collins (Fri Mar 31 2006 - 22:13:55 CST)
• Next Owasp-london meeting on Web Application Firewalls Dinis Cruz (Sat Apr 01 2006 - 04:36:34 CST)
• Re: [Owasp-london] Next Owasp-london meeting on Web Application Firewalls martinsandren.se (Sat Apr 01 2006 - 06:52:23 CST)
• [Full-disclosure] Re: [OWASP-LEADERS] Re: [Owasp-dotnet] RE: [SC-L] 4 Questions: Latest IE vulnerability, Firefox vs IE security, Uservs Admin risk profile, and browsers coded in 100% Managed Verifiable code Dinis Cruz (Tue Mar 28 2006 - 16:52:11 CST)
• OWASP Local Chapters - April Andrew van der Stock (Sat Apr 01 2006 - 18:11:56 CST)
• Re: [SC-L] Re: [Owasp-dotnet] RE: 4 Questions: Latest IE vulnerability, Firefox vs IE security, User vs Admin risk profile, and browsers coded in 100% Managed Verifiable code Crispin Cowan (Sun Apr 02 2006 - 17:49:57 CDT)
  • Re: [SC-L] Re: [Owasp-dotnet] RE: 4 Questions: Latest IE vulnerability, Firefox vs IE security, User vs Admin risk profile, and browsers coded in 100% Managed Verifiable code Pascal Meunier (Mon Apr 03 2006 - 09:42:52 CDT)
  • Re: [SC-L] Re: [Owasp-dotnet] RE: 4 Questions: Latest IE vulnerability, Firefox vs IE security, User vs Admin risk profile, and browsers coded in 100% Managed Verifiable code Crispin Cowan (Tue Apr 04 2006 - 23:59:23 CDT)
• Award of Gary McGraws Book to best webappsec post Mark Curphey (Mon Apr 03 2006 - 09:23:03 CDT)
• PNphpBB (phpBB for Post Nuke), WebCalendar and Others Mark Ryan del Moral Talabis (Tue Apr 04 2006 - 03:03:04 CDT)
• RUXCON 2006 Call for Papers cfpruxcon.org.au (Tue Apr 04 2006 - 04:59:48 CDT)
• 302 Redirection (Not just for successful login attempts) Pilon Mntry (Wed Apr 05 2006 - 03:41:56 CDT)
  • Re: 302 Redirection (Not just for successful login attempts) Ryan Barnett (Wed Apr 05 2006 - 16:54:24 CDT)
  • Re: 302 Redirection (Not just for successful login attempts) Rogan Dawes (Wed Apr 05 2006 - 18:04:03 CDT)
  • Re: 302 Redirection (Not just for successful login attempts) Hemil (Thu Apr 06 2006 - 04:23:43 CDT)
  • Re: 302 Redirection (Not just for successful login attempts) Dave Ferguson (Fri Apr 07 2006 - 09:50:47 CDT)
• Security contact info for Google (GMail) Darren Bounds (Tue Apr 04 2006 - 18:16:40 CDT)
• RE: [Full-disclosure] Security contact info for Google (GMail) Christopher Carpenter (Tue Apr 04 2006 - 18:25:54 CDT)
• [Full-disclosure] Re: [SC-L] Re: [Owasp-dotnet] RE: 4 Questions: Latest IE vulnerability, Firefox vs IE security, User vs Admin risk profile, and browsers coded in 100% Managed Verifiable code Crispin Cowan (Wed Apr 05 2006 - 22:15:14 CDT)
• Re: enumerating users and an AJAX example Pilon Mntry (Fri Apr 07 2006 - 01:43:53 CDT)
• Kitten CAPTCHA Stephen de Vries (Thu Apr 06 2006 - 21:19:25 CDT)
• FYI: Getting things deleted from Google's cache Saqib Ali (Thu Apr 06 2006 - 09:31:15 CDT)
• IP cloaking using mod_rewrite RSnake (Fri Apr 07 2006 - 11:09:34 CDT)
• Beta release of the Oedipus Web Application Scanner is released Justin Clarke (Fri Apr 07 2006 - 10:53:56 CDT)
  • Re: Beta release of the Oedipus Web Application Scanner is released Justin Clarke (Sat Apr 08 2006 - 14:17:22 CDT)
• Web Browser For Penetration Test nimdA (Sat Apr 08 2006 - 05:46:52 CDT)
  • Re: Web Browser For Penetration Test pagvac (Sun Apr 09 2006 - 06:59:28 CDT)
  • Re: Web Browser For Penetration Test Sven Vetsch (Sun Apr 09 2006 - 07:02:27 CDT)
  • RE: Web Browser For Penetration Test Hamed Tajabadi (Sun Apr 09 2006 - 19:00:32 CDT)
  • RE: Web Browser For Penetration Test Hamed Tajabadi (Sun Apr 09 2006 - 19:26:56 CDT)
  • Re: Web Browser For Penetration Test Justin Clarke (Sun Apr 09 2006 - 10:44:12 CDT)
  • Re: Web Browser For Penetration Test ROB DIXON (Mon Apr 10 2006 - 08:24:04 CDT)
  • RE: Web Browser For Penetration Test Richard M. Smith (Sun Apr 09 2006 - 09:23:11 CDT)
  • Re: Web Browser For Penetration Test Tim Brown (Mon Apr 10 2006 - 10:35:57 CDT)
  • RE: Web Browser For Penetration Test Anthony Cicalla (Mon Apr 10 2006 - 12:55:49 CDT)
  • RE: Web Browser For Penetration Test Evans, Arian (Mon Apr 10 2006 - 12:29:47 CDT)
  • Re: Web Browser For Penetration Test Gareth Davies (Wed Apr 12 2006 - 00:07:59 CDT)
• Administrivia: FAQ? Andrew van der Stock (Sun Apr 09 2006 - 07:20:37 CDT)
• Microsoft Internet Explorer Content-Disposition HTML File Handling Flaw Darren Bounds (Mon Apr 10 2006 - 09:22:43 CDT)
• Paros 3.2.10 Release contactparosproxy.org (Mon Apr 10 2006 - 10:48:39 CDT)
• Authorization in workflows Juan C Calderon (Tue Apr 11 2006 - 11:05:45 CDT)
  • Re: Authorization in workflows Yuri Demchenko (Wed Apr 12 2006 - 07:08:20 CDT)
• 2nd European Conference on Computer Network Defense (EC2ND) Blyth A J C (Comp) (Tue Apr 11 2006 - 11:13:56 CDT)
• Canonicalization susam_palyahoo.co.in (Tue Apr 11 2006 - 08:12:29 CDT)
  • Re: Canonicalization Yann (Wed Apr 12 2006 - 07:31:52 CDT)
  • RE: Canonicalization PPowenskioag.com (Wed Apr 12 2006 - 07:23:48 CDT)
  • Re: RE: Canonicalization jovan.burdyahoo.com (Thu Apr 13 2006 - 00:29:19 CDT)
  • Re: Canonicalization Rogan Dawes (Wed Apr 12 2006 - 07:55:34 CDT)
  • Re: Canonicalization Andrew van der Stock (Wed Apr 12 2006 - 07:50:13 CDT)
  • Re: Canonicalization Rogan Dawes (Thu Apr 13 2006 - 07:17:45 CDT)
  • Re: Canonicalization Jason (Thu Apr 13 2006 - 09:33:58 CDT)
  • Re: Re: Canonicalization Mariusz Pêkala (Thu Apr 13 2006 - 14:24:12 CDT)
  • Re: Re: Canonicalization Peter Conrad (Tue Apr 18 2006 - 02:06:15 CDT)
  • Re: Canonicalization Rossen Raykov (Thu Apr 20 2006 - 21:22:18 CDT)
  • Re: Canonicalization Peter Conrad (Fri Apr 21 2006 - 02:19:04 CDT)
  • Re: Canonicalization Eoin (Fri Apr 21 2006 - 08:27:04 CDT)
  • Re: Canonicalization exon (Fri Apr 21 2006 - 09:43:51 CDT)
  • Re: Canonicalization Andrew van der Stock (Sat Apr 22 2006 - 08:19:32 CDT)
  • Re: Canonicalization Jason Murray (Sun Apr 23 2006 - 18:44:56 CDT)
  • Re: Canonicalization exon (Mon Apr 24 2006 - 04:08:29 CDT)
  • Re: Re: Canonicalization susam_palyahoo.co.in (Thu Apr 13 2006 - 02:17:57 CDT)
• Announcement: The Web Hacking Incidents Database RSS feed now available contactwebappsec.org (Wed Apr 12 2006 - 08:59:43 CDT)
• I give up, no more posts to Full-Disclosure and DailyDave about Full Trust and .Net /Java Sandboxes Dinis Cruz (Wed Apr 12 2006 - 12:52:27 CDT)
• Vulnerability in Microsoft FrontPage Server Extensions Could Allow Cross-Site Scripting Esteban Martinez Fayo (Wed Apr 12 2006 - 16:35:12 CDT)
• Reminder: HITBSecConf2006 CFP is closing in 2 weeks Praburaajan (Sun Apr 16 2006 - 19:52:09 CDT)
• Insecure Ids - Need explanation susam_palyahoo.co.in (Mon Apr 17 2006 - 11:18:31 CDT)
  • RE: Insecure Ids - Need explanation Patrick (Mon Apr 17 2006 - 15:54:27 CDT)
  • Re: Insecure Ids - Need explanation Reid Nichol (Mon Apr 17 2006 - 13:50:16 CDT)
  • RE: Insecure Ids - Need explanation Rod Divilbiss (Mon Apr 17 2006 - 13:24:52 CDT)
  • RE: Insecure Ids - Need explanation M. Burnett (Mon Apr 17 2006 - 11:53:33 CDT)
  • Re: Insecure Ids - Need explanation Andrew van der Stock (Mon Apr 17 2006 - 19:09:54 CDT)
  • Re: Insecure Ids - Need explanation Andrew van der Stock (Mon Apr 17 2006 - 19:25:36 CDT)
• Early Registration Reminder: 2006 European OWASP AppSec Conference - May 30-31, 2006 near Brussels Dave Wichers (Mon Apr 17 2006 - 10:21:32 CDT)
• Is disabling browser caching secure? smith.nortongmail.com (Tue Apr 18 2006 - 10:59:46 CDT)
  • Re: Is disabling browser caching secure? Kyle Maxwell (Wed Apr 19 2006 - 16:07:41 CDT)
  • Re: Is disabling browser caching secure? Pilon Mntry (Wed Apr 19 2006 - 00:54:51 CDT)
  • Re: Is disabling browser caching secure? Rogan Dawes (Wed Apr 19 2006 - 00:22:26 CDT)
  • Re: Is disabling browser caching secure? lucip (Wed Apr 19 2006 - 00:05:37 CDT)
  • Re: Is disabling browser caching secure? Reid Nichol (Tue Apr 18 2006 - 23:20:13 CDT)
• Re: Technical Note: Detecting and Testing HTTP Response Splitting Using a Browser sunita.shawgmail.com (Wed Apr 19 2006 - 16:59:33 CDT)
• New site about security conferences : www.security-briefings.com newslistsecurity-briefings.com (Wed Apr 19 2006 - 14:51:56 CDT)
• risk management in software development lifecycle test.futuregmail.com (Wed Apr 19 2006 - 01:45:53 CDT)
• Owasp-London Chapter meeting: "Web Application Firewalls (WAF): Where do they add value and who should be using them" Dinis Cruz (Wed Apr 19 2006 - 19:30:30 CDT)
• OT: Inserting Ads without breaking the SSL Saqib Ali (Fri Apr 21 2006 - 13:03:11 CDT)
  • Re: OT: Inserting Ads without breaking the SSL Jason (Fri Apr 21 2006 - 20:44:30 CDT)
  • Re: OT: Inserting Ads without breaking the SSL Saqib Ali (Fri Apr 21 2006 - 22:39:31 CDT)
  • Re: OT: Inserting Ads without breaking the SSL Anthony Ettinger (Sat Apr 22 2006 - 01:56:34 CDT)
  • Re: OT: Inserting Ads without breaking the SSL Andrew van der Stock (Sat Apr 22 2006 - 02:00:15 CDT)
  • Re: OT: Inserting Ads without breaking the SSL Jason (Sat Apr 22 2006 - 19:56:12 CDT)
  • Re: OT: Inserting Ads without breaking the SSL Zaninotti, Thiago (Mon Apr 24 2006 - 15:05:47 CDT)
  • Re: OT: Inserting Ads without breaking the SSL Jason (Thu Apr 27 2006 - 08:05:30 CDT)
  • Re: OT: Inserting Ads without breaking the SSL elawfordgmail.com (Mon May 01 2006 - 21:06:15 CDT)
  • Re: OT: Inserting Ads without breaking the SSL Saqib Ali (Mon Jun 12 2006 - 23:40:32 CDT)
  • Re: Re: OT: Inserting Ads without breaking the SSL 7269sagedrive.com (Thu Apr 27 2006 - 01:48:57 CDT)
  • Re: Re: OT: Inserting Ads without breaking the SSL 7269sagedrive.com (Fri Apr 28 2006 - 00:27:27 CDT)
• London WAF event and HacmeBank Dinis Cruz (Sun Apr 23 2006 - 20:08:02 CDT)
• Enabling PHP uploads Johann Spies (Mon Apr 24 2006 - 03:23:15 CDT)
  • Re: Enabling PHP uploads Markus Fischer (Wed Apr 26 2006 - 02:06:44 CDT)
• Java SQL/LDAP Injections Andres Molinetti (Mon Apr 24 2006 - 14:14:12 CDT)
• [Fwd: London WAF event - Addidional vulnerabilities] Dinis Cruz (Mon Apr 24 2006 - 17:10:34 CDT)
• Paros 3.2.11 Release contactparosproxy.org (Wed Apr 26 2006 - 11:12:13 CDT)
• Java SQL/LDAP Injections Andres Molinetti (Wed Apr 26 2006 - 12:25:55 CDT)
  • RE: Java SQL/LDAP Injections Jayaraman, Anand X. (Thu Apr 27 2006 - 08:24:10 CDT)
• RE: [WEB SECURITY] Fundamental error in Corsaire's paper? Amit Klein (AKsecurity) (Wed Apr 26 2006 - 13:47:41 CDT)
  • RE: [WEB SECURITY] Fundamental error in Corsaire's paper? Martin O'Neal (Thu Apr 27 2006 - 05:44:40 CDT)
  • RE: [WEB SECURITY] Fundamental error in Corsaire's paper? Martin O'Neal (Thu Apr 27 2006 - 15:21:07 CDT)
  • RE: [WEB SECURITY] Fundamental error in Corsaire's paper? Amit Klein (AKsecurity) (Thu Apr 27 2006 - 13:04:14 CDT)
  • RE: [WEB SECURITY] Fundamental error in Corsaire's paper? Martin O'Neal (Thu Apr 27 2006 - 15:26:18 CDT)
  • RE: [WEB SECURITY] Fundamental error in Corsaire's paper? Martin O'Neal (Fri Apr 28 2006 - 01:51:20 CDT)
  • RE: [WEB SECURITY] Fundamental error in Corsaire's paper? Amit Klein (AKsecurity) (Fri Apr 28 2006 - 11:10:46 CDT)
  • RE: [WEB SECURITY] Fundamental error in Corsaire's paper? Amit Klein (AKsecurity) (Fri Apr 28 2006 - 15:12:38 CDT)
  • RE: [WEB SECURITY] Fundamental error in Corsaire's paper? Armag (Fri Apr 28 2006 - 13:58:52 CDT)
  • RE: [WEB SECURITY] Fundamental error in Corsaire's paper? Amit Klein (AKsecurity) (Fri Apr 28 2006 - 14:01:34 CDT)
  • RE: [WEB SECURITY] Fundamental error in Corsaire's paper? Martin O'Neal (Fri Apr 28 2006 - 11:50:35 CDT)
  • RE: [WEB SECURITY] Fundamental error in Corsaire's paper? Martin O'Neal (Sat Apr 29 2006 - 02:30:48 CDT)
• Web Site Certification Marco Passarella (Thu Apr 27 2006 - 04:16:23 CDT)
  • Re: Web Site Certification Dean H. Saxe (Thu Apr 27 2006 - 08:43:42 CDT)
  • Re: Web Site Certification Nathaniel Hall (Thu Apr 27 2006 - 08:23:34 CDT)
  • RE: Web Site Certification Craig Wright (Thu Apr 27 2006 - 16:23:19 CDT)
  • RE: Web Site Certification Craig Wright (Thu Apr 27 2006 - 16:20:50 CDT)
  • RE: Web Site Certification Adam Mikrut (Thu Apr 27 2006 - 13:01:19 CDT)
  • Re: Web Site Certification Admin Dbtech (Thu Apr 27 2006 - 10:34:53 CDT)
  • Re: Web Site Certification ROB DIXON (Thu Apr 27 2006 - 09:52:38 CDT)
  • Re: Web Site Certification Adam Tuliper (Fri Apr 28 2006 - 09:48:44 CDT)
  • RE: Web Site Certification ROB DIXON (Mon May 01 2006 - 08:01:38 CDT)
• Re: [WEB SECURITY] Fundamental error in Corsaire's paper? Dan Kuykendall (Thu Apr 27 2006 - 16:27:17 CDT)
  • Re: [WEB SECURITY] Fundamental error in Corsaire's paper? Dan Kuykendall (Thu Apr 27 2006 - 14:16:07 CDT)
  • Re: [WEB SECURITY] Fundamental error in Corsaire's paper? Brian Eaton (Fri Apr 28 2006 - 10:38:59 CDT)
  • Re: [WEB SECURITY] Fundamental error in Corsaire's paper? Achim Hoffmann (Sat Apr 29 2006 - 14:09:17 CDT)
• Poll: Emerging Threats Jon R. Kibler (Fri Apr 28 2006 - 15:08:17 CDT)
  • RE: Poll: Emerging Threats H Alsaleh (Fri Apr 28 2006 - 15:57:50 CDT)
  • Re: Poll: Emerging Threats Jon R. Kibler (Mon May 01 2006 - 20:31:15 CDT)
• XSS/Script Injection on my site -- further details arian.evans (Fri Apr 28 2006 - 14:46:06 CDT)
• XSS/Script Injection on my personal site arian.evans (Fri Apr 28 2006 - 12:29:40 CDT)
• SF new article announcement: Five common Web application vulnerabilities Andrew van der Stock (Fri Apr 28 2006 - 18:43:51 CDT)
• cookies a fundamental threat? Brian Eaton (Sat Apr 29 2006 - 19:06:09 CDT)
  • Re: cookies a fundamental threat? chris m (Sun Apr 30 2006 - 04:05:42 CDT)
• Re: [WEB SECURITY] cookies a fundamental threat? Achim Hoffmann (Sun Apr 30 2006 - 17:25:27 CDT)
  • Re: [WEB SECURITY] cookies a fundamental threat? Brian Eaton (Mon May 01 2006 - 21:42:58 CDT)
  • Re: [WEB SECURITY] cookies a fundamental threat? Achim Hoffmann (Tue May 02 2006 - 02:40:04 CDT)
  • Re: [WEB SECURITY] cookies a fundamental threat? Achim Hoffmann (Tue May 02 2006 - 15:16:45 CDT)
  • Re: [WEB SECURITY] cookies a fundamental threat? Achim Hoffmann (Tue May 02 2006 - 16:10:38 CDT)
  • Re: [WEB SECURITY] cookies a fundamental threat? Brian Eaton (Tue May 02 2006 - 11:31:18 CDT)
  • Re: [WEB SECURITY] cookies a fundamental threat? Achim Hoffmann (Wed May 03 2006 - 07:38:37 CDT)
  • Re: [WEB SECURITY] cookies a fundamental threat? Achim Hoffmann (Wed May 03 2006 - 05:46:17 CDT)
  • Re: [WEB SECURITY] cookies a fundamental threat? Brian Eaton (Wed May 10 2006 - 08:34:59 CDT)
• Re: [WEB SECURITY] Re: cookies a fundamental threat (or risk)? Pilon Mntry (Mon May 01 2006 - 01:40:21 CDT)
• yahoo mail login security Ace123 (Sun Apr 30 2006 - 02:55:37 CDT)
  • Re: yahoo mail login security Andrew van der Stock (Mon May 01 2006 - 02:22:33 CDT)
  • Re: yahoo mail login security ROB DIXON (Mon May 01 2006 - 14:50:49 CDT)
  • RE: yahoo mail login security Matt Fisher (Mon May 01 2006 - 22:00:24 CDT)
  • Re: yahoo mail login security Ace123 (Tue May 02 2006 - 01:00:32 CDT)
  • Re: yahoo mail login security Sels, Roger (Tue May 02 2006 - 16:03:33 CDT)
  • Re: yahoo mail login security Ace123 (Wed May 03 2006 - 09:33:11 CDT)
  • Re: yahoo mail login security Sels, Roger (Wed May 03 2006 - 06:11:46 CDT)
  • Re: Re: yahoo mail login security Damon Leung (Tue May 02 2006 - 19:12:14 CDT)
  • Re: Re: yahoo mail login security Darren Bounds (Thu May 04 2006 - 19:34:53 CDT)
  • Re: Re: yahoo mail login security Prakash Kailasa (Fri May 05 2006 - 06:50:29 CDT)
  • Re: Re: yahoo mail login security Darren Bounds (Fri May 05 2006 - 10:02:05 CDT)
• Googling or Google Hacking Security Conference slides newslistsecurity-briefings.com (Sun Apr 30 2006 - 03:30:38 CDT)
  • Re: Googling or Google Hacking Security Conference slides Klientu aptarnavimas (Tue May 09 2006 - 01:51:27 CDT)
  • RE: Googling or Google Hacking Security Conference slides Craig Wright (Tue May 09 2006 - 17:24:39 CDT)
• Re: [WEB SECURITY] Review of Owasp-London Chapter meeting on WAF (Web Application Firewalls) Dinis Cruz (Mon May 01 2006 - 18:19:52 CDT)
  • Re: [WEB SECURITY] Review of Owasp-London Chapter meeting on WAF (Web Application Firewalls) Dinis Cruz (Mon May 01 2006 - 17:47:25 CDT)
  • Re: [WEB SECURITY] Review of Owasp-London Chapter meeting on WAF (Web Application Firewalls) Achim Hoffmann (Mon May 01 2006 - 11:16:19 CDT)
  • Re: [WEB SECURITY] Review of Owasp-London Chapter meeting on WAF (Web Application Firewalls) Achim Hoffmann (Tue May 02 2006 - 17:27:00 CDT)
  • Re: [WEB SECURITY] Review of Owasp-London Chapter meeting on WAF (Web Application Firewalls) Dinis Cruz (Tue May 02 2006 - 18:27:18 CDT)
• Regeneration of Session Tokens (from the OWASP Guide) Pilon Mntry (Mon May 01 2006 - 07:28:53 CDT)
  • RE: Regeneration of Session Tokens (from the OWASP Guide) M. Burnett (Tue May 02 2006 - 11:33:37 CDT)
  • RE: Regeneration of Session Tokens (from the OWASP Guide) Pilon Mntry (Wed May 03 2006 - 01:10:50 CDT)
• Review of Owasp-London Chapter meeting on WAF (Web Application Firewalls) Dinis Cruz (Mon May 01 2006 - 04:59:58 CDT)
• Re: Vista and the Type Safe missed oportunity (was Re: [SC-L] New security website: darkreading ) George Capehart (Mon May 01 2006 - 22:00:05 CDT)
• Is logoff feature necessary test.futuregmail.com (Tue May 02 2006 - 02:41:02 CDT)
  • Re: Is logoff feature necessary Vicente Aguilera (Tue May 02 2006 - 04:14:42 CDT)
  • Re: Is logoff feature necessary Daniel Persson (Tue May 02 2006 - 04:22:24 CDT)
  • Re: Is logoff feature necessary Peter Conrad (Tue May 02 2006 - 04:24:21 CDT)
  • Re: Is logoff feature necessary Luciano Miguel Ferreira Rocha (Tue May 02 2006 - 04:32:20 CDT)
  • Re: Is logoff feature necessary ViersOnline (Tue May 02 2006 - 04:47:46 CDT)
  • RE: Is logoff feature necessary Deepu Thomas Philip (Tue May 02 2006 - 04:56:11 CDT)
  • RE: Is logoff feature necessary wa0qmj (Tue May 02 2006 - 11:37:29 CDT)
  • Re: Is logoff feature necessary Michael Silk (Tue May 02 2006 - 06:22:41 CDT)
  • Re: Is logoff feature necessary Dave Ferguson (Tue May 02 2006 - 11:32:30 CDT)
  • RE: Is logoff feature necessary wa0qmj (Tue May 02 2006 - 08:07:39 CDT)
  • RE: Is logoff feature necessary Sarbjit Singh Gill (Tue May 02 2006 - 08:31:42 CDT)
  • RE: Is logoff feature necessary M. Burnett (Tue May 02 2006 - 10:42:08 CDT)
  • Re: Is logoff feature necessary Robert Hajime Lanning (Tue May 02 2006 - 15:06:41 CDT)
  • Re: Is logoff feature necessary Alexander Bolante (Tue May 02 2006 - 11:57:43 CDT)
  • Re: Is logoff feature necessary Alexis FitzGerald (Wed May 03 2006 - 06:19:01 CDT)
  • RE: Is logoff feature necessary Rod Divilbiss (Tue May 02 2006 - 07:40:03 CDT)
  • RE: Is logoff feature necessary Auri Rahimzadeh (Wed May 03 2006 - 05:59:48 CDT)
  • RE: Is logoff feature necessary Keith Duffin (Wed May 03 2006 - 07:45:46 CDT)
  • Re: Is logoff feature necessary Andrew van der Stock (Wed May 03 2006 - 08:30:57 CDT)
  • RE: Is logoff feature necessary Auri Rahimzadeh (Mon May 08 2006 - 08:05:49 CDT)
  • RE: Is logoff feature necessary Rod Divilbiss (Wed May 10 2006 - 19:54:47 CDT)
  • Re: Is logoff feature necessary Michael Silk (Thu May 11 2006 - 07:22:48 CDT)
  • RE: Is logoff feature necessary Auri Rahimzadeh (Thu May 11 2006 - 07:56:37 CDT)
  • Re: Is logoff feature necessary Michael Silk (Thu May 11 2006 - 20:15:43 CDT)
  • Re: Is logoff feature necessary Adam Tuliper (Fri May 12 2006 - 16:50:28 CDT)
  • RE: Is logoff feature necessary Auri Rahimzadeh (Fri May 12 2006 - 21:03:28 CDT)
• Re: [WEB SECURITY] By default, the Verifier is disabled on .Net and Java Stephen de Vries (Wed May 03 2006 - 02:43:05 CDT)
• RE: [WEB SECURITY] cookies a fundamental threat? Tom Stripling (Tue May 02 2006 - 10:20:38 CDT)
  • RE: [WEB SECURITY] cookies a fundamental threat? Martin O'Neal (Tue May 02 2006 - 13:11:15 CDT)
  • RE: [WEB SECURITY] cookies a fundamental threat? Martin O'Neal (Wed May 03 2006 - 09:26:10 CDT)
  • RE: [WEB SECURITY] cookies a fundamental threat? Tom Stripling (Wed May 03 2006 - 09:34:06 CDT)
  • RE: [WEB SECURITY] cookies a fundamental threat? Evans, Arian (Tue May 09 2006 - 14:44:54 CDT)
  • RE: [WEB SECURITY] cookies a fundamental threat? Evans, Arian (Wed May 10 2006 - 12:40:53 CDT)
• Round-up: Ways to bypass HttpOnly (and HTTP Basic auth) Amit Klein (AKsecurity) (Wed May 03 2006 - 05:47:20 CDT)
  • Re: Round-up: Ways to bypass HttpOnly (and HTTP Basic auth) Amit Klein (AKsecurity) (Fri May 05 2006 - 10:10:17 CDT)
• By default, the Verifier is disabled on .Net and Java Dinis Cruz (Tue May 02 2006 - 18:49:48 CDT)
  • Re: By default, the Verifier is disabled on .Net and Java Roman H. (Wed May 03 2006 - 07:25:23 CDT)
• Re: [WEB SECURITY] Round-up: Ways to bypass HttpOnly (and HTTP Basic auth) Brian Eaton (Wed May 03 2006 - 07:43:55 CDT)
  • Re: [WEB SECURITY] Round-up: Ways to bypass HttpOnly (and HTTP Basic auth) Brian Eaton (Wed May 03 2006 - 07:29:30 CDT)
  • Re: [WEB SECURITY] Round-up: Ways to bypass HttpOnly (and HTTP Basic auth) Achim Hoffmann (Wed May 03 2006 - 08:24:18 CDT)
  • Re: [WEB SECURITY] Round-up: Ways to bypass HttpOnly (and HTTP Basic auth) Pilon Mntry (Wed May 03 2006 - 08:35:19 CDT)
  • Re: [WEB SECURITY] Round-up: Ways to bypass HttpOnly (and HTTP Basic auth) Peter Watkins (Wed May 03 2006 - 09:35:56 CDT)
  • Re: [WEB SECURITY] Round-up: Ways to bypass HttpOnly (and HTTP Basic auth) Amit Klein (AKsecurity) (Wed May 03 2006 - 12:07:48 CDT)
  • Re: [WEB SECURITY] Round-up: Ways to bypass HttpOnly (and HTTP Basic auth) Amit Klein (AKsecurity) (Wed May 03 2006 - 12:10:16 CDT)
  • Re: [WEB SECURITY] Round-up: Ways to bypass HttpOnly (and HTTP Basic auth) Amit Klein (AKsecurity) (Thu May 04 2006 - 14:23:45 CDT)
• Administrivia: Is logoff feature necessary Andrew van der Stock (Wed May 03 2006 - 07:53:26 CDT)
• OWASP May chapter meetings Andrew van der Stock (Wed May 03 2006 - 08:17:13 CDT)
• WAF functionality ala OWASP London Meeting Eoin (Wed May 03 2006 - 11:05:03 CDT)
  • RE: WAF functionality ala OWASP London Meeting Omar Salvador Alcalá Ruiz (Wed May 03 2006 - 18:28:50 CDT)
  • Re: WAF functionality ala OWASP London Meeting Michael Silk (Wed May 03 2006 - 18:49:26 CDT)
  • Re: WAF functionality ala OWASP London Meeting Jason (Wed May 03 2006 - 21:22:24 CDT)
• dictionary of forum style usernames Robin Wood (Thu May 04 2006 - 02:52:34 CDT)
  • RE: dictionary of forum style usernames Griffiths, Ian (Thu May 04 2006 - 06:50:49 CDT)
  • RE: dictionary of forum style usernames Griffiths, Ian (Thu May 04 2006 - 06:21:08 CDT)
  • Re: dictionary of forum style usernames Robin Wood (Thu May 04 2006 - 06:31:52 CDT)
  • Re: dictionary of forum style usernames Robin Wood (Thu May 04 2006 - 08:16:41 CDT)
• ual Factor/Adaptive Authentication Casey DeBerry (Thu May 04 2006 - 01:52:04 CDT)
  • Re: ual Factor/Adaptive Authentication Saqib Ali (Thu May 04 2006 - 09:56:36 CDT)
  • Re: ual Factor/Adaptive Authentication Saqib Ali (Thu May 04 2006 - 23:06:19 CDT)
  • RE: ual Factor/Adaptive Authentication Casey DeBerry (Wed May 10 2006 - 09:59:52 CDT)
  • Re: ual Factor/Adaptive Authentication Saqib Ali (Wed May 10 2006 - 10:28:15 CDT)
• Re: [WEB SECURITY] Java -noverify PoC Stephen de Vries (Wed May 03 2006 - 22:43:16 CDT)
  • Re: [WEB SECURITY] Java -noverify PoC Jim Halfpenny (Thu May 04 2006 - 08:15:01 CDT)
• Is logoff feature necessary intel96 (Wed May 03 2006 - 23:07:48 CDT)
  • RE: Is logoff feature necessary André Gil (Tue May 02 2006 - 05:03:32 CDT)
  • RE: Is logoff feature necessary Steven Rebello (Tue May 02 2006 - 04:58:53 CDT)
  • RE: Is logoff feature necessary King, Stuart (REHQ-LON) (Tue May 02 2006 - 06:12:25 CDT)
  • RE: Is logoff feature necessary Jeff Robertson (Tue May 02 2006 - 06:58:51 CDT)
  • RE: Is logoff feature necessary Popowycz, Alex (Tue May 02 2006 - 07:18:34 CDT)
  • RE: Is logoff feature necessary Currey, Mick A (Wed May 03 2006 - 07:45:46 CDT)
  • RE: Is logoff feature necessary Auri Rahimzadeh (Wed May 03 2006 - 09:22:57 CDT)
  • RE: Is logoff feature necessary Matt Fisher (Tue May 09 2006 - 22:14:21 CDT)
  • RE: Is logoff feature necessary Auri Rahimzadeh (Wed May 10 2006 - 12:15:40 CDT)
  • RE: Is logoff feature necessary Matt Fisher (Thu May 11 2006 - 09:23:35 CDT)
• Java -noverify PoC Dinis Cruz (Wed May 03 2006 - 21:45:37 CDT)
• Re: [WEB SECURITY] Re: [Owasp-dotnet] Review of Owasp-London Chapter meeting on WAF (Web Application Firewalls) Dinis Cruz (Wed May 03 2006 - 21:58:13 CDT)
  • Re: [WEB SECURITY] Re: [Owasp-dotnet] Review of Owasp-London Chapter meeting on WAF (Web Application Firewalls) Dean H. Saxe (Fri May 05 2006 - 11:37:38 CDT)
• RE: [WEB SECURITY] Re: [Owasp-dotnet] Review of Owasp-London Chapter meeting on WAF (Web Application Firewalls) Patrick Wolf (Wed May 03 2006 - 20:17:25 CDT)
  • RE: [WEB SECURITY] Re: [Owasp-dotnet] Review of Owasp-London Chapter meeting on WAF (Web Application Firewalls) Kit Wetzler (Mon May 08 2006 - 17:27:25 CDT)
  • RE: [WEB SECURITY] Re: [Owasp-dotnet] Review of Owasp-London Chapter meeting on WAF (Web Application Firewalls) Darren Webb (Thu May 11 2006 - 00:09:55 CDT)
• Comparison report on web app security scanners Holger.Peineiese.fraunhofer.de (Fri May 05 2006 - 04:12:31 CDT)
  • Re: Comparison report on web app security scanners Bogdan Calin (Tue May 16 2006 - 09:10:21 CDT)
  • RE: Comparison report on web app security scanners Mark Curphey (Tue May 16 2006 - 12:47:37 CDT)
  • RE: Comparison report on web app security scanners Holger.Peineiese.fraunhofer.de (Tue May 16 2006 - 10:30:07 CDT)
  • RE: Comparison report on web app security scanners Ory Segal (Tue May 16 2006 - 09:52:46 CDT)
  • RE: Comparison report on web app security scanners Erwin Geirnaert (Wed May 17 2006 - 15:13:24 CDT)
  • Re: Comparison report on web app security scanners Jeremiah Grossman (Wed May 17 2006 - 11:24:00 CDT)
  • Re: Comparison report on web app security scanners Eoin (Wed May 17 2006 - 05:54:15 CDT)
  • RE: Comparison report on web app security scanners Mark Curphey (Wed May 17 2006 - 08:20:45 CDT)
  • RE: Comparison report on web app security scanners Martin O'Neal (Thu May 18 2006 - 03:27:22 CDT)
  • RE: Comparison report on web app security scanners Bogdan Calin (Thu May 18 2006 - 00:35:12 CDT)
  • Re: Comparison report on web app security scanners Bogdan Calin (Thu May 18 2006 - 00:28:30 CDT)
  • Re: Comparison report on web app security scanners Dean H. Saxe (Wed May 17 2006 - 18:38:24 CDT)
  • RE: Comparison report on web app security scanners Mark Curphey (Wed May 17 2006 - 18:49:15 CDT)
  • Re: Comparison report on web app security scanners Zaninotti, Thiago (Thu May 18 2006 - 17:28:15 CDT)
  • Re: Comparison report on web app security scanners solutions_PHP (Thu May 18 2006 - 10:59:28 CDT)
  • Re: Comparison report on web app security scanners Bogdan Calin (Fri May 19 2006 - 00:58:01 CDT)
  • RE: Comparison report on web app security scanners Mark Curphey (Fri May 19 2006 - 05:59:35 CDT)
  • Re: Comparison report on web app security scanners solutions_PHP (Fri May 19 2006 - 10:33:00 CDT)
• Fwd: SF new column announcement: Innovative ways to fool people Andrew van der Stock (Thu May 04 2006 - 18:46:13 CDT)
• viral phishing dpw (Fri May 05 2006 - 17:48:59 CDT)
• Normal Horde Probes and Strange Ones Mark Ryan del Moral Talabis (Sun May 07 2006 - 09:01:43 CDT)
  • Re: Normal Horde Probes and Strange Ones Paul Laudanski (Sun May 07 2006 - 21:50:13 CDT)
• Code snippets to disable browser caching smith.nortongmail.com (Sun May 07 2006 - 23:43:31 CDT)
  • Re: Code snippets to disable browser caching s89df987 s9f87s987f (Mon May 08 2006 - 04:47:11 CDT)
  • Re: Code snippets to disable browser caching s89df987 s9f87s987f (Mon May 08 2006 - 04:49:34 CDT)
  • Re: Code snippets to disable browser caching Jean-Jacques Halans (Mon May 08 2006 - 17:39:44 CDT)
  • Re: Code snippets to disable browser caching Dave Ferguson (Mon May 08 2006 - 10:46:12 CDT)
  • Re: Code snippets to disable browser caching Tomi Tuominen (Mon May 08 2006 - 07:14:26 CDT)
  • RE: Code snippets to disable browser caching Martin O'Neal (Tue May 09 2006 - 03:33:20 CDT)
  • Re: Code snippets to disable browser caching Peter Conrad (Tue May 09 2006 - 01:58:01 CDT)
• Unfiltered Header Injection in Apache 1.3.34/2.0.57/2.2.1 Zaninotti, Thiago (Mon May 08 2006 - 14:01:27 CDT)
  • Re: Unfiltered Header Injection in Apache 1.3.34/2.0.57/2.2.1 Amit Klein (AKsecurity) (Thu May 18 2006 - 14:03:17 CDT)
• +_lp+_gn+ on querystrings Robin Wood (Mon May 08 2006 - 04:57:20 CDT)
• Black Hat class: Advanced Asp.Net Exploits and Countermeasures Dinis Cruz (Mon May 08 2006 - 18:59:54 CDT)
• Meaning of "disabling browser caching" smith.nortongmail.com (Tue May 09 2006 - 04:13:54 CDT)
  • RE: Meaning of "disabling browser caching" Martin O'Neal (Tue May 09 2006 - 04:44:57 CDT)
• Fwd: Security Events Google Calendar Saqib Ali (Tue May 09 2006 - 11:28:30 CDT)
• RE: [WEB SECURITY] What is the status of AVDL Kurt R. Roemer (Wed May 10 2006 - 07:38:43 CDT)
• What is the status of AVDL Dinis Cruz (Tue May 09 2006 - 17:16:03 CDT)
• Why Novell should take on the 'type-safe platform' challenge Dinis Cruz (Tue May 09 2006 - 19:23:57 CDT)
• Re: [SC-L] By default, the Verifier is disabled on .Net and Java Stephen de Vries (Wed May 10 2006 - 23:46:00 CDT)
  • Re: [SC-L] By default, the Verifier is disabled on .Net and Java Stephen de Vries (Thu May 11 2006 - 03:47:47 CDT)
  • RE: [SC-L] By default, the Verifier is disabled on .Net and Java Jeff Williams (Thu May 11 2006 - 08:08:29 CDT)
  • Re: [SC-L] By default, the Verifier is disabled on .Net and Java Steve Brown (Thu May 11 2006 - 05:08:52 CDT)
  • Re: [SC-L] By default, the Verifier is disabled on .Net and Java Michael Silk (Thu May 11 2006 - 07:20:10 CDT)
  • Re: [SC-L] By default, the Verifier is disabled on .Net and Java Michael Silk (Thu May 11 2006 - 08:59:41 CDT)
  • Re: [SC-L] By default, the Verifier is disabled on .Net and Java Charles Miller (Thu May 11 2006 - 21:10:51 CDT)
  • Re: [SC-L] By default, the Verifier is disabled on .Net and Java Stephen de Vries (Sat May 13 2006 - 00:30:54 CDT)
  • Re: [SC-L] By default, the Verifier is disabled on .Net and Java Michael Silk (Sat May 13 2006 - 06:35:58 CDT)
  • Re: [SC-L] By default, the Verifier is disabled on .Net and Java Charles Miller (Sun May 14 2006 - 21:31:03 CDT)
  • Re: [SC-L] By default, the Verifier is disabled on .Net and Java Michael Silk (Sun May 14 2006 - 21:51:06 CDT)
  • Re: [SC-L] By default, the Verifier is disabled on .Net and Java leichter_jerroldemc.com (Mon May 15 2006 - 13:31:46 CDT)
• Re; Comparison report on web app security scanners jack.jonburghushmail.com (Fri May 12 2006 - 09:52:25 CDT)
  • RE: Re; Comparison report on web app security scanners Holger.Peineiese.fraunhofer.de (Mon May 15 2006 - 01:54:18 CDT)
  • Re: RE: Re; Comparison report on web app security scanners ma.huijuangmail.com (Mon May 15 2006 - 04:25:14 CDT)
  • RE: RE: Re; Comparison report on web app security scanners Martin O'Neal (Mon May 15 2006 - 05:18:36 CDT)
• MYSQL and PHP John Madden (Mon May 15 2006 - 13:07:57 CDT)
  • Re: MYSQL and PHP Mark Sanders (Tue May 16 2006 - 03:28:56 CDT)
  • Re: MYSQL and PHP Robin Wood (Tue May 16 2006 - 03:28:21 CDT)
  • Re: MYSQL and PHP Todd Hendricks (Mon May 15 2006 - 23:06:15 CDT)
  • Re: MYSQL and PHP Gerald Quakenbush (Tue May 16 2006 - 08:09:59 CDT)
  • Re: MYSQL and PHP r0xes (Mon May 15 2006 - 21:45:59 CDT)
  • Re: MYSQL and PHP Kevin Johnson (Mon May 15 2006 - 21:16:23 CDT)
  • Re: MYSQL and PHP Jason Ross (Mon May 15 2006 - 19:58:55 CDT)
  • Re: MYSQL and PHP Klientų aptarnavimas (Tue May 16 2006 - 05:41:59 CDT)
  • Re: MYSQL and PHP Kirk.Johnsonzootweb.com (Tue May 16 2006 - 17:07:32 CDT)
  • Re: MYSQL and PHP Gerald Quakenbush (Tue May 16 2006 - 13:05:28 CDT)
  • Re: MYSQL and PHP Robin Wood (Tue May 16 2006 - 11:18:04 CDT)
  • Re: MYSQL and PHP bugtraqcgisecurity.net (Tue May 16 2006 - 09:29:51 CDT)
  • Re: MYSQL and PHP Reid Nichol (Wed May 17 2006 - 01:20:14 CDT)
  • Re: MYSQL and PHP Ed J. Aivazian (Wed May 17 2006 - 02:01:40 CDT)
  • Re: MYSQL and PHP wilson.amajohngmail.com (Tue May 16 2006 - 10:23:52 CDT)
  • RE: MYSQL and PHP Wall, Kevin (Thu May 18 2006 - 00:35:29 CDT)
  • Re: MYSQL and PHP Óðõñßäùí Íßíïò (Sat May 20 2006 - 06:44:25 CDT)
  • Re: MYSQL and PHP s89df987 s9f87s987f (Sat May 20 2006 - 21:53:37 CDT)
• Final Registration Reminder: 2006 European OWASP AppSec Conference - May 30-31, 2006 near Brussels Dave Wichers (Tue May 16 2006 - 09:27:45 CDT)
• Paros 3.2.12 Release contactparosproxy.org (Tue May 16 2006 - 10:56:08 CDT)
• Denim Group Releases Sprajax, an Open Source Security Scanner for AJAX bugtraqcgisecurity.net (Wed May 17 2006 - 08:37:48 CDT)
• MasterBugs Released Gerald Quakenbush (Wed May 17 2006 - 07:44:23 CDT)
• Hacking webconferencing ? MARTIN Benoni (Thu May 18 2006 - 08:45:08 CDT)
  • Re: Hacking webconferencing ? ROB DIXON (Thu May 18 2006 - 14:20:42 CDT)
• Article of Authz and Auth and upcoming IEEE on Web Security Mark Curphey (Thu May 18 2006 - 20:21:56 CDT)
• MP3 of Owasp London Chapter WAF event Dinis Cruz (Thu May 18 2006 - 19:05:27 CDT)
• Non SSL Bank Login Forms wilson.amajohngmail.com (Thu May 18 2006 - 09:57:49 CDT)
  • Re: Non SSL Bank Login Forms Wil Clouser (Fri May 19 2006 - 00:07:50 CDT)
  • Re: Non SSL Bank Login Forms Andrew van der Stock (Fri May 19 2006 - 00:18:51 CDT)
  • Re: Non SSL Bank Login Forms Adam Tuliper (Fri May 19 2006 - 08:26:13 CDT)
  • RE: Non SSL Bank Login Forms James Strassburg (Fri May 19 2006 - 12:05:19 CDT)
  • Re: Non SSL Bank Login Forms Don Jackson (Fri May 19 2006 - 09:08:09 CDT)
  • Re: Non SSL Bank Login Forms Jason Muskat (Sat May 20 2006 - 18:48:16 CDT)
• Fwd: Non SSL Bank Login Forms John Kennedy (Fri May 19 2006 - 00:28:08 CDT)
• Fwd: Non SSL Bank Login Forms John Kennedy (Fri May 19 2006 - 00:32:36 CDT)
• http/spnego connections Adam Tuliper (Fri May 19 2006 - 08:32:57 CDT)
  • Re: http/spnego connections Adam Tuliper (Fri May 19 2006 - 12:41:26 CDT)
  • Re: http/spnego connections Adam Tuliper (Fri May 19 2006 - 12:09:04 CDT)
  • Re: http/spnego connections Saqib Ali (Fri May 19 2006 - 09:35:14 CDT)
• WAF learning ability limitation? matt farey (Fri May 19 2006 - 12:04:25 CDT)
• Re: [WEB SECURITY] Execution before Authentication Vulnerabilities Ryan Barnett (Sat May 20 2006 - 10:34:09 CDT)
• Write-up by Amit Klein: "IE + some popular forward proxy servers = XSS, defacement (browser cache poisoning)" Amit Klein (AKsecurity) (Mon May 22 2006 - 01:44:18 CDT)
• Administrivia: Virus scanners and advance notice of slowness Andrew van der Stock (Mon May 22 2006 - 01:22:05 CDT)
• AppSec Sample Reports Pete Soderling (Mon May 22 2006 - 13:36:10 CDT)
  • Re: AppSec Sample Reports Alice Bryson (Tue May 23 2006 - 02:31:07 CDT)
  • RE: AppSec Sample Reports Sutton, Paul A. (Tue May 23 2006 - 06:19:17 CDT)
• AppSic Eoin (Mon May 29 2006 - 08:36:45 CDT)
  • Re: AppSic George Capehart (Tue Jun 06 2006 - 19:09:15 CDT)
• SyScan'06 - The Hackers' Conference in Asia thomas48 (Wed May 31 2006 - 23:10:58 CDT)
• Sample XSS and Flash Web App arian.evans (Thu Jun 01 2006 - 11:37:57 CDT)
• How to create (hijacking) secure HTTP sessions? Michael Decker (Thu Jun 01 2006 - 02:13:50 CDT)
  • Re: How to create (hijacking) secure HTTP sessions? Jason Muskat (Fri Jun 02 2006 - 21:18:45 CDT)
  • Re: How to create (hijacking) secure HTTP sessions? Ivan Ristic (Sat Jun 03 2006 - 02:49:04 CDT)
  • Re: How to create (hijacking) secure HTTP sessions? ascii (Sat Jun 03 2006 - 17:43:04 CDT)
  • Re: How to create (hijacking) secure HTTP sessions? Adam Tuliper (Sat Jun 03 2006 - 13:26:44 CDT)
  • Re: How to create (hijacking) secure HTTP sessions? Robin Wood (Sun Jun 04 2006 - 12:11:02 CDT)
  • Re: How to create (hijacking) secure HTTP sessions? ascii (Sun Jun 04 2006 - 19:13:00 CDT)
  • Re: How to create (hijacking) secure HTTP sessions? Rogan Dawes (Mon Jun 05 2006 - 04:20:35 CDT)
  • Re: How to create (hijacking) secure HTTP sessions? stefano (Mon Jun 05 2006 - 05:12:06 CDT)
  • Re: How to create (hijacking) secure HTTP sessions? ascii (Mon Jun 05 2006 - 18:12:14 CDT)
  • Re: How to create (hijacking) secure HTTP sessions? Michael Decker (Wed Jun 07 2006 - 02:05:29 CDT)
  • Re: How to create (hijacking) secure HTTP sessions? Michael Decker (Wed Jun 07 2006 - 02:23:10 CDT)
  • RE: How to create (hijacking) secure HTTP sessions? Evans, Arian (Wed Jun 07 2006 - 14:21:53 CDT)
  • Re: How to create (hijacking) secure HTTP sessions? Nathan Keltner (Wed Jun 07 2006 - 10:43:00 CDT)
  • RE: How to create (hijacking) secure HTTP sessions? Evans, Arian (Wed Jun 07 2006 - 14:37:01 CDT)
• Salt Storage - web.config or database? cynthia.pelusous.ngrid.com (Thu Jun 01 2006 - 09:20:09 CDT)
  • Re: Salt Storage - web.config or database? Dean H. Saxe (Fri Jun 02 2006 - 19:42:31 CDT)
  • RE: Salt Storage - web.config or database? Wall, Kevin (Fri Jun 02 2006 - 18:43:30 CDT)
  • Re: Salt Storage - web.config or database? Adam Tuliper (Fri Jun 02 2006 - 17:42:57 CDT)
  • RE: Salt Storage - web.config or database? Burke, Charles (Sun Jun 04 2006 - 02:34:27 CDT)
  • RE: Salt Storage - web.config or database? Martin O'Neal (Sun Jun 04 2006 - 04:40:25 CDT)
  • Re: Salt Storage - web.config or database? Steve Barnet (Tue Jun 06 2006 - 13:54:16 CDT)
  • Re: Salt Storage - web.config or database? Steve Barnet (Wed Jun 07 2006 - 09:20:30 CDT)
  • RE: Salt Storage - web.config or database? James Pujals (Wed Jun 07 2006 - 08:48:20 CDT)
• Free Software Security Seminar Series (USA) Mark Curphey (Sun Jun 04 2006 - 05:19:02 CDT)
• Administrivia & SF new column announcement: Browsers, phishing, and user interface design Andrew van der Stock (Mon Jun 05 2006 - 15:34:48 CDT)
• MasterCard backs off Security, Leave Cardholders at Risk auto471292hushmail.com (Tue Jun 06 2006 - 10:44:46 CDT)
  • Re: MasterCard backs off Security, Leave Cardholders at Risk fscwihotmail.com (Wed Jun 07 2006 - 08:58:22 CDT)
  • RE: MasterCard backs off Security, Leave Cardholders at Risk Evans, Arian (Wed Jun 07 2006 - 14:53:01 CDT)
  • RE: MasterCard backs off Security, Leave Cardholders at Risk Craig Wright (Thu Jun 08 2006 - 17:04:45 CDT)
  • RE: MasterCard backs off Security, Leave Cardholders at Risk Evans, Arian (Thu Jun 08 2006 - 17:50:44 CDT)
  • RE: MasterCard backs off Security, Leave Cardholders at Risk Craig Wright (Thu Jun 08 2006 - 21:46:15 CDT)
  • RE: MasterCard backs off Security, Leave Cardholders at Risk David P. Durko (Fri Jun 09 2006 - 07:37:24 CDT)
  • RE: MasterCard backs off Security, Leave Cardholders at Risk Craig Wright (Fri Jun 09 2006 - 08:24:10 CDT)
  • Re: RE: MasterCard backs off Security, Leave Cardholders at Risk erezhack.co.il (Wed Jun 14 2006 - 08:50:00 CDT)
• Academic papers on Web application security Benjamin Livshits (Tue Jun 06 2006 - 09:39:06 CDT)
  • Re: Academic papers on Web application security mike andrews (Wed Jun 07 2006 - 21:59:28 CDT)
• phpAdsNew Activity Mark Ryan del Moral Talabis (Thu Jun 08 2006 - 20:00:59 CDT)
• Fwd: A few related links: (Was Re: MasterCard backs off Security, Leave Cardholders at Risk) Ken Adler - QDSP, CISSP, PMP, CISA (Fri Jun 09 2006 - 13:45:52 CDT)
• WebScarab Fuzzer Jason Murray (Fri Jun 09 2006 - 09:04:31 CDT)
  • Re: WebScarab Fuzzer Vlad (Fri Jun 09 2006 - 20:18:04 CDT)
  • Re: WebScarab Fuzzer Rogan Dawes (Sat Jun 10 2006 - 03:58:00 CDT)
  • RE: WebScarab Fuzzer Holger.Peineiese.fraunhofer.de (Mon Jun 12 2006 - 01:46:37 CDT)
• New stuff at OWASP Jeff Williams (Mon Jun 12 2006 - 17:31:41 CDT)
• OT: Win2k3 logging the IP address of failed FTP attempts Ian (Mon Jun 12 2006 - 10:51:23 CDT)
  • RE: OT: Win2k3 logging the IP address of failed FTP attempts Adam Tuliper (Tue Jun 13 2006 - 10:47:44 CDT)
  • Re: OT: Win2k3 logging the IP address of failed FTP attempts Rob Creely (Tue Jun 13 2006 - 09:46:51 CDT)
  • RE: OT: Win2k3 logging the IP address of failed FTP attempts Ian (Wed Jun 14 2006 - 03:47:41 CDT)
• Tagworld XSS RSnake (Fri Jun 09 2006 - 19:11:28 CDT)
• Black Hat Speakers + 2005 Content on-line Jeff Moss (Tue Jun 13 2006 - 18:38:43 CDT)
• RE: Win2k3 logging the IP address of failed FTP attempts Evans, Arian (Tue Jun 13 2006 - 14:07:01 CDT)
  • RE: Win2k3 logging the IP address of failed FTP attempts Bob Auger (Wed Jun 14 2006 - 08:08:57 CDT)
• Foundstone Free Tools Released Mark Curphey (Wed Jun 14 2006 - 09:04:25 CDT)
• Official release of SQL Power Injector 1.1 Francois Larouche (Wed Jun 14 2006 - 09:59:18 CDT)
• ZeroBoard Attacks in the Wild Mark Ryan del Moral Talabis (Wed Jun 14 2006 - 21:46:28 CDT)
• Whitepaper on AJAX Storage Mark Curphey (Thu Jun 15 2006 - 08:41:22 CDT)
• WASC Meet-up at Black Hat (USA 2006) contactwebappsec.org (Fri Jun 16 2006 - 10:18:48 CDT)
• SyScan'06 Highlight - Attacking Microsoft New Operating System (Vista) thomas48 (Sun Jun 18 2006 - 09:36:20 CDT)
• Announcement: 'The Web Security Mailing List' RSS Feed now available contactwebappsec.org (Mon Jun 19 2006 - 08:14:03 CDT)
• New Version of FireMaster ( Firefox Master Password Recovery Tool ) is released Nagareshwar Talekar (Mon Jun 19 2006 - 15:20:45 CDT)
• Fwd: SF new article announcement: Ajax security basics Andrew van der Stock (Tue Jun 20 2006 - 06:43:18 CDT)
• Update to Ajax Security Article on Security Focus Andrew van der Stock (Wed Jun 21 2006 - 16:49:32 CDT)
• New version of WebScarab released Rogan Dawes (Fri Jun 23 2006 - 06:30:31 CDT)
• OWASP PHP Top 5 published Andrew van der Stock (Mon Jun 26 2006 - 12:21:46 CDT)
• Jython Shell pdp (architect) (Mon Jun 26 2006 - 15:23:01 CDT)
• Fwd: SF new article announcement: Strider URL Tracer with Typo Patrol Andrew van der Stock (Tue Jun 27 2006 - 18:56:13 CDT)
• SyScan'06 Highlight - Is Phone Banking Safe? thomas48 (Tue Jun 27 2006 - 23:21:50 CDT)
• Security Breaches Pandemic - Deloitte Touche 2006 Global Security Survey Saqib Ali (Wed Jun 28 2006 - 00:49:05 CDT)
• Two-Factor Authentication on the Web RSD (Wed Jun 28 2006 - 08:31:08 CDT)
  • Re: Two-Factor Authentication on the Web Peter Morgan (Wed Jun 28 2006 - 08:52:34 CDT)
  • Re: Two-Factor Authentication on the Web Saqib Ali (Wed Jun 28 2006 - 08:56:46 CDT)
  • Re: Two-Factor Authentication on the Web Andrew van der Stock (Wed Jun 28 2006 - 09:19:28 CDT)
  • RE: Two-Factor Authentication on the Web Harper.Matthew (Wed Jun 28 2006 - 12:15:47 CDT)
  • RE: Two-Factor Authentication on the Web King, Stuart (REHQ-LON) (Thu Jun 29 2006 - 02:14:05 CDT)
  • Re: Two-Factor Authentication on the Web Tim (Thu Jun 29 2006 - 00:41:15 CDT)
  • Re: Two-Factor Authentication on the Web Nick Owen (Thu Jun 29 2006 - 07:35:54 CDT)
  • Re: Two-Factor Authentication on the Web Tim (Fri Jun 30 2006 - 01:03:36 CDT)
  • RE: Two-Factor Authentication on the Web Christian Kanakis (Fri Jun 30 2006 - 09:39:26 CDT)
  • Re: Two-Factor Authentication on the Web Andrew van der Stock (Fri Jun 30 2006 - 09:46:41 CDT)
  • Re: Two-Factor Authentication on the Web Pete Herzog (Fri Jun 30 2006 - 10:35:53 CDT)
  • Re: Two-Factor Authentication on the Web Tim (Fri Jun 30 2006 - 10:45:43 CDT)
  • RE: Two-Factor Authentication on the Web LM (Fri Jun 30 2006 - 11:56:47 CDT)
  • RE: Two-Factor Authentication on the Web James Pujals (Fri Jun 30 2006 - 14:26:27 CDT)
  • Re: Two-Factor Authentication on the Web Tim (Fri Jun 30 2006 - 19:04:20 CDT)
• Foundstone Hacme Bank Videos Online Mark Curphey (Wed Jun 28 2006 - 13:44:03 CDT)
• Fwd: SF new column announcement: MySpace, a place without MyParents Andrew van der Stock (Fri Jun 30 2006 - 12:38:30 CDT)
• Webscarab how to? mr.nastyix.netcom.com (Fri Jun 30 2006 - 14:33:35 CDT)
  • Re: Webscarab how to? Jezebel Ali (Sat Jul 01 2006 - 01:37:01 CDT)
• DEF CON 14: Speakers Selected and more. The Dark Tangent (Fri Jun 30 2006 - 19:15:47 CDT)
• OWASP Java Project: Call for volunteers Stephen de Vries (Fri Jun 30 2006 - 22:49:54 CDT)

Last message date: Sat Jul 01 2006 - 02:24:16 CDT
Archived on: Sat Jul 01 2006 - 02:24:18 CDT

452 messages sorted by: [ author ] [ date ] [ subject ]