SEARCH RESULTS
 
Showing 1-10 of 15 records
 
Expand article

SDL and Web 2.0

2008-02-28 22:26:00 by sdl in The Security Development Lifecycle
 
...persistent Cross-Site Scripting (XSS) attack, and is the most dangerous form of XSS since it doesnt require any social engineering like reflective and DOM-based XSS attacks do. The victim doesnt have to do anything unusual he just has to browse to an infected page, maybe even one hes been to hundreds of times in the past. And in all...
 
Tags: web, site, chriss web site, mashups, web mashups, site cookies, persistent cross-site, cookies, benefit anyones web
 
 
 
 
Expand article

CIAC Tech Bulletin on XSS a valuable reference

2008-06-10 10:21:00 by Russ McRee in HolisticInfoSec.org
 
...persistent, persistent, and CSRF. Additionally, you'll note methods of protection and reference links to content on Htmlspecialchars , Htmlentities , and Giorgio Maone's NoScript This is a great starting point for enlightening vendors, developers, and IT folk who may not be as up to speed as you might like on the concerns caused by XSS...
 
Tags: ciac, xss, vendors, xss vulnerabilities, ciac technical bulletin, major security vendors, stories continue, content, fine effort
 
 
 
 
Expand article

A Closer Look: Beta Vista Service Pack 1

2008-01-24 00:00:00 by HASH0x8473a60 in Network World on Security
 
With dissatisfaction over the Vista operating system persistent, can Microsoft right the OS's wrongs with its upcoming Vista service pack
 
Tags: vista service pack, vista, system persistent, dissatisfaction, wrongs, microsoft
 
 
 
 
Expand article

Getting your free adware and spyware program

2007-08-01 19:18:00 by jack in adware and spyware
 
...persistent that they already become a hassle. They begin to disturb you and you may want to get rid of them There are also other programs that may bother you in a different way. These are spyware programs that can get as malicious as can be. These programs can get downloaded into your system secretly without you knowing it. And just like...
 
Tags: spyware, free, software programs, software, spyware programs, adware, programs, malicious programs, spyware program
 
 
 
 
Expand article

The Need for Adware and Spyware Blocker

2007-08-01 19:11:00 by jack in adware and spyware
 
...persistent occurrence of such a thing made her think that someone bugged her. We all hate bugging people us but people we can fend of. What this law student is confronted with is a computer bug that she cannot fend off. In the first place she is not a technology savvy person and in the second place she never uses her laptop for any other...
 
Tags: spyware, spyware blocker, spyware programs, block spyware, adware, computer, computer bug, personal computer, people
 
 
 
 
Expand article

VPN roams from LAN to 3G

2008-02-12 00:00:00 by HASH0x8471b70 in Network World on Security
 
U.S. comms developer Smith Micro has claimed at Mobile World Congress that it can provide persistent secure sessions between mobile devices and enterprise applications, even when the client device moves from one type of connection to another
 
Tags: mobile world congress, client device moves, enterprise applications, mobile devices, connection, type
 
 
 
 
Expand article

Warming the cold boot a bit of braggin from BitArmor

2008-02-28 13:17:00 by Manu Namboodiri in Data Protection, Management and Leakage
 
...persistent file encryption) solutions, we will put it up here. Look for more information next week
 
Tags: approach, happy approach, disk encryption products, disk encryption, complexity approach, bitarmor, disk encryption technologies, researchers, princeton researchers
 
 
 
 
Expand article

SNMP - Its not Secure Network Management Protocol

2008-03-04 08:12:43 by HASH0x8b500e0 in StillSecure, After All These Years
 
...persistent XSS attack. Just another reason to lock down your SNMP capable equipment. By the way, for those of you wondering, SNMP stands for simple networking management protocol
 
Tags: snmp, snmp stands, snmp vulnerabilities, snmp capable equipment, snmp stood, simple snmp scan, potential nac customer, customer, leaky snmp
 
 
 
 
Expand article

Wired.com and History.com Getting RBN-ed

The Article has images
2008-03-10 14:20:33 by HASH0x8aeaaa0 in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...persistent simplicity seems to work. The attack is still ongoing, this time successfully injecting a multitude of new domains into Wired Magazine, and History.com's search engines, which are again caching anything submitted, particularly not validated input to have the malicious parties in the face of the RBN introducing a new malware, in...
 
Tags: malware, vbs malware, malware attack, rbn, media malware gang, iframe injection attack, iframe injection, malware research, high-profile sites