Follow MaximumITBlips on TwitterBlog Reactions
Infosec Ramblings: Interesting Information Security Bits for 11/03/2009
Security Bloggers Network: Friday Summary - November 6, 2009
Jeremiah Grossman: Best of Application Security (Friday, Nov. 6)
Reactions
 |
RT @securityninja: Cross-subdomain Cookie Attacks: http://skeptikal.org/2009/11/cross-subdomain-cookie-attacks.html 12 days ago |
 |
Reading, looks interesting: RT @jeremiahg: "Cross-subdomain Cookie Attacks". http://bit.ly/3mflS4 27 days ago |
 |
The written version of my Toorcon talk on client-side cross-subdomain attacks: http://tinyurl.com/yl9somb (via @mckt_). very nice work! 28 days ago |
Interesting Information Security Bits for 11/03/2009
Infosec Ramblings —
... web.
A few days ago I pointed out an article that discussed some issues with the default settings for UAC in Windows 7. This article shows that the criticism in the other article is well earned.
Windows 7 vulnerable to 8 out of 10 viruses | Chester Wisniewski’s Blog
Tags: ( virus windows-7 )
Interested in cross-subdomain cookie attacks? Check out the paper that mckt wrote. It is based on his presentation at Toorcon recently.
Skeptikal.org: Cross-subdomain Cookie Attacks
Tags: ( webappsec ...
Friday Summary - November 6, 2009
Security Bloggers Network —
... Trade Agreement and some commentary.
Money Mule Move Mo’ Money.
Cracking Password in the Cloud.
Shimmy … Solo.
OK, it’s finance, not security, but to echo Gunnar Peterson’s post, here is a ridiculously good interview with Charlie Munger. The video actually got me to change several long held opinions regarding the current financial crisis in an elegant and disarming way.
Cross-subdomain Cookie Attacks.
Man Sues Over Leaky Baby Monitor.
…and ...
Best of Application Security (Friday, Nov. 6)
Jeremiah Grossman —
Ten of Application Security industry's coolest, most interesting, important, and entertaining links from the past week -- in no particular order. Regularly released until year end. Then the Best of Application Security 2009 will be selected! Another fine method to exploit SQL Injection and bypass WAF Security and Facebook Platform When Is More Important Than Where in Web Application Security Apple - XSS Attack Cross-subdomain Cookie Attacks PILOT: Production in lieu of testing (AgoraCart FAIL) ...
Network Security Podcast, Episode 173
Network Security Podcast —
... and Twitter. Network Security Podcast, Episode 173, November 10, 2009 Time: 31:45
Google Dashboard lifts curtain on stored data – Yawn. Give us something useful
Analyst: PCI Security a Devil, ‘Like No Child Left Behind‘ – I want to talk to Josh Corman
Cracking Passwords in the Cloud: Breaking PGP on EC2 with EDPR – Or How much is the password in the window?
Cross-domain Cookie attacks – It’s all about trust. And why you ...
Network Security Podcast, Episode 173
Network Security Blog —
... and Twitter. Network Security Podcast, Episode 173, November 10, 2009 Time: 31:45
Google Dashboard lifts curtain on stored data – Yawn. Give us something useful
Analyst: PCI Security a Devil, ‘Like No Child Left Behind‘ – I want to talk to Josh Corman
Cracking Passwords in the Cloud: Breaking PGP on EC2 with EDPR – Or How much is the password in the window?
Cross-domain Cookie attacks – It’s all about trust. And why you ...
Network Security Podcast, Episode 173
Network Security Blog —
... and Twitter. Network Security Podcast, Episode 173, November 10, 2009 Time: 31:45
Google Dashboard lifts curtain on stored data – Yawn. Give us something useful
Analyst: PCI Security a Devil, ‘Like No Child Left Behind‘ – I want to talk to Josh Corman
Cracking Passwords in the Cloud: Breaking PGP on EC2 with EDPR – Or How much is the password in the window?
Cross-domain Cookie attacks – It’s all about trust. And why you ...
