71
vote
Plus ca change, plus c'est la meme chose. read more »
web application security
Changeability.
By secgeeks - Posted on July 2nd, 2008
Tagged:
- nice journey
- web application security
- web application security
- web application security
- web application security
- web application security
- web application security
- web application security
- web application security
- web application security
- web application security
- web application security
- web application security
- web application security
- web application security
- web application security
- web application security
- web application security
- web application security
- web application security
- web application security
- web application security
- web application security
- web application security
- web application security
- web application security
- web application security
- web application security
- web application security
- web application security
Interconnectivity.
By secgeeks - Posted on January 8th, 2008
Tagged:
100
vote
Interconnectivity is a blessing and a serious curse. The net provides us various ways to communicate with other people or other systems. Like everything else it has a downside. The reason why so many cyber criminals can get away with their obnoxious acts against humanity, is because of how the net was designed and how computers and networks function. It's almost impossible to stop misuse of services for any kind of exploitation. Whether it be the use of proxies, or hijacked servers or just bombarding mail servers, it will be with us so long we use TCP/IP. read more »
Fox Pt.II
By secgeeks - Posted on July 25th, 2007
162
vote
After this 'breaking news' of file disclosure last day, I went on and had a look at their whole site from a distance. A few non malicious vectors learned me that they have cross site scripting holes, but more important SQL injection points and Cold Fusion HTML and SQL injection. I will not disclose them here nor to Fox. No free lunch this time, I hope they will take this very seriously and hire a proper security auditor to pentest their whole system. Let this be a wakeup call. read more »
