WebApp Sec: by thread

• RSS Feed
•  About List
•  All Lists

Previous period

Next period

290 messages starting Apr 05 05 and ending Jun 30 05
Date index | Thread index | Author index

• Re: Any security issue with using SPNEGOto perform single-sign-on? Saqib Ali (Apr 05)
• Smartcard-Logon and NTLM-Backward Compatability Jan P. Monsch (Apr 05)
  • Re: Smartcard-Logon and NTLM-Backward Compatability Saqib Ali (Apr 06)
• A new tool wschess released Hemil (Apr 05)
• keyloggers? SB (Apr 05)
  • Re: keyloggers? Louis Baumann (Apr 06)
    • Re: keyloggers? Augusto Paes de Barros (Apr 06)
  • Re: keyloggers? Greg Stiavetti (Apr 06)
  • Re: keyloggers? Yoanne LE MERCIER (Apr 06)
    • RE: keyloggers? P.B. Wagenaar (Apr 06)
      • Re: keyloggers? - dont doit Alvin Oga (Apr 06)
      • Re: keyloggers? - dont doit Kyle Maxwell (Apr 06)
      • Re: keyloggers? - dont doit Antoine Martin (Apr 06)
      • Re: keyloggers? Michael Silk (Apr 06)
      • Re: keyloggers? Antonio Fontes (Apr 06)
      • Re: keyloggers? Michael Silk (Apr 06)
      • RE: keyloggers? Mehmet Buyukozer (Apr 06)
  • Re: keyloggers? Gareth Davies (Apr 06)
    • Re: keyloggers? Zero Burnout (Apr 06)
  • Re: keyloggers? Michael Silk (Apr 06)
  • Re: keyloggers? Adam Shostack (Apr 06)
  • Re: keyloggers? colinm () clientsecure net (Apr 06)
  • Re: keyloggers? Federico Castañeda (Apr 06)
  • <Possible follow-ups>
  • RE: keyloggers? Griffiths, Ian (Apr 06)
  • Re: keyloggers? Sachin Shetty (Apr 06)
    • RE: keyloggers? And form sniffers? Richard M. Smith (Apr 06)
    • RE: keyloggers? Lyal Collins (Apr 06)
• Final Notice: OWASP AppSec Europe 2005, April 9-10 Dave Wichers (Apr 05)
• SV: Java -> .NET RSA Encryption Fredrik Hesse (Apr 05)
• Web Application Security Consortium Project Announcements contact (Apr 05)
• ASP & SQL on IIS environment Scott Hamm (Apr 06)
  • <Possible follow-ups>
  • RE: ASP & SQL on IIS environment Michael Howard (Apr 06)
• RE: Phishing scam using Microsoft name Michael Howard (Apr 06)
• Re: keyloggers? - dont doit lyal.collins (Apr 06)
  • <Possible follow-ups>
  • Re: keyloggers? - dont doit James . Barkley (Apr 06)
• ColdFusion - CFID & CFTOKEN Jason binger (Apr 13)
  • RE: ColdFusion - CFID & CFTOKEN Andrew van der Stock (Apr 13)
  • Re: ColdFusion - CFID & CFTOKEN Rogan Dawes (Apr 14)
  • Re: ColdFusion - CFID & CFTOKEN Amit Klein (AKsecurity) (Apr 18)
  • Re: ColdFusion - CFID & CFTOKEN ron thigpen (May 11)
  • Re: ColdFusion - CFID & CFTOKEN ron thigpen (May 11)
    • Re: ColdFusion - CFID & CFTOKEN leighm (May 15)
• User ID generation Jason binger (Apr 13)
  • RE: User ID generation Andrew van der Stock (Apr 13)
    • RE: User ID generation Thomas Ng (Apr 13)
  • Re: User ID generation Scovetta Labs (Apr 13)
    • Re: User ID generation Andi McLean (Apr 14)
      • Re: User ID generation Adam K (Apr 18)
      • Re: User ID generation Scovetta Labs (Apr 18)
  • Re: User ID generation Paul M. (Apr 18)
  • <Possible follow-ups>
  • RE: User ID generation Murtland, Jerry (Apr 18)
    • Re: User ID generation Andi McLean (Apr 18)
      • Re: User ID generation Lucas Holt (Apr 20)
• First OWASP Belgium Chapter Meeting Sebastien Deleersnyder (Apr 13)
• http://www.domainname.com./ (with the ending) Scovetta, Michael V (Apr 13)
  • Re: http://www.domainname.com./ (with the ending) exon (Apr 13)
  • Re: http://www.domainname.com./ (with the ending) Robert Hajime Lanning (Apr 13)
  • Re: http://www.domainname.com./ (with the ending) Mark Burnett (Apr 13)
  • <Possible follow-ups>
  • RE: http://www.domainname.com./ (with the ending) Wall, Kevin (Apr 13)
• webapp dependencies Jarmon, Don R (Apr 13)
  • Re: webapp dependencies Scovetta Labs (Apr 13)
    • Re: webapp dependencies victor calzado (Apr 14)
  • <Possible follow-ups>
  • RE: webapp dependencies Ory Segal (Apr 14)
  • Re: webapp dependencies moty yacov (Apr 18)
  • RE: webapp dependencies Matt Fisher (Apr 20)
    • RE: webapp dependencies Amit Klein (AKsecurity) (Apr 20)
  • RE: webapp dependencies Ory Segal (Apr 20)
    • RE: webapp dependencies Amit Klein (AKsecurity) (Apr 21)
  • RE: webapp dependencies Matt Fisher (Apr 20)
  • RE: webapp dependencies Ryan C. Barnett (Apr 20)
  • RE: webapp dependencies Scovetta, Michael V (Apr 21)
    • Re: webapp dependencies Bill Pennington (Apr 21)
• suggesting passwds to users James Barkley (Apr 18)
  • Re: suggesting passwds to users Mark Owen (Apr 20)
    • Re: suggesting passwds to users robert (Apr 21)
  • Re: suggesting passwds to users Saqib Ali (Apr 20)
    • Re: suggesting passwds to users James Barkley (Apr 20)
      • Re: suggesting passwds to users Saqib Ali (Apr 20)
      • Re: suggesting passwds to users SecurityFocus (Apr 21)
  • Re: suggesting passwds to users Kelly John Rose (Apr 20)
  • Re: suggesting passwds to users Robert Hajime Lanning (Apr 20)
  • Re: suggesting passwds to users Michael Silk (Apr 20)
  • Re: suggesting passwds to users Martin Sarsale (Apr 20)
  • <Possible follow-ups>
  • RE: suggesting passwds to users Matt Fisher (Apr 20)
    • Re: suggesting passwds to users hggdh (Apr 21)
  • RE: suggesting passwds to users Scovetta, Michael V (Apr 21)
  • RE: suggesting passwds to users maburns (Apr 21)
  • RE: suggesting passwds to users Sohl, Greg (Apr 21)
  • SV: suggesting passwds to users Fredrik Hesse (Apr 21)
  • RE: suggesting passwds to users Westman, Brad (Apr 21)
• Re: Dropping connection instead of returning 400 Kanatoko (Apr 18)
  • <Possible follow-ups>
  • RE: Dropping connection instead of returning 400 Matt Fisher (Apr 20)
  • RE: Dropping connection instead of returning 400 christopher (Apr 21)
• modulo question martin (Apr 18)
  • Re: modulo question Michael Vergoz (Apr 20)
  • Re: modulo question Skip Carter (Apr 20)
  • Re: modulo question Scovetta Labs (Apr 20)
  • Re: modulo question Federico Castañeda (Apr 20)
  • Re: modulo question Kelly John Rose (Apr 20)
  • Re: modulo question warnings (Apr 21)
• Recon 2005 - Speakers list dataworm (Apr 20)
• Windows Services Alvin (Apr 20)
  • Re: Windows Services Andrew Burke (Apr 21)
• random character checking at logon jimtames (Apr 20)
  • Re: random character checking at logon Tim (Apr 21)
  • Re: random character checking at logon Amit Klein (AKsecurity) (Apr 21)
• Re: phpBB Ban Ole Martin Eide (Apr 20)
  • Re: phpBB Ban Joseph Miller (Apr 21)
  • Re: phpBB Ban Mark Susol Ultimate Creative Media (Apr 21)
• GMail blocking "executable" attachments Scovetta, Michael V (Apr 20)
  • RE: GMail blocking "executable" attachments Richard M. Smith (Apr 21)
  • Re: GMail blocking "executable" attachments Michael Silk (Apr 21)
  • Re: GMail blocking "executable" attachments Wilfried Schobeiri (Apr 21)
  • Re: GMail blocking "executable" attachments James Riden (Apr 21)
  • <Possible follow-ups>
  • RE: GMail blocking "executable" attachments Scovetta, Michael V (Apr 21)
• MSDN Webcast: Know Your Options for Data Validation (Level 300) David Raphael (Apr 21)
• Paros 3.2.1 release contact (May 07)
• RE: Preventing direct URL access in a J2EE environment Roberto GABERGI (May 07)
• Announcement: The Web Security Mailing List contact (May 11)
• OWASP 2005 UK Conference Slides Now Available Dave Wichers (May 11)
• The Original Web Security Mailing List Arian J. Evans (May 11)
  • Re: The Original Web Security Mailing List Jeremiah Grossman (May 15)
  • Re: The Original Web Security Mailing List Matthieu Estrade (May 15)
  • <Possible follow-ups>
  • Fwd: Re: The Original Web Security Mailing List auto231439 (May 15)
• Detecting SoftICE ? Bruce Klein (May 11)
  • Re: Detecting SoftICE ? mozilla (May 15)
  • Re: Detecting SoftICE ? Florian Maier (May 15)
• New Free Tool - Foundstone .NET Mon Curphey, Mark (May 15)
• New Free Tool - Foundstone CookieDigger Curphey, Mark (May 15)
• Managing Code Signing Digital IDs for Open Source? Saqib Ali (May 15)
• Care to become a moderator? Alfred Huger (Jun 08)
• New Moderator Alfred Huger (Jun 14)
  • <Possible follow-ups>
  • RE: New Moderator Thomas Brennan (Jun 14)
• Book Review: "Apache Security" By O'Reilly zeno (Jun 14)
• OWASP 2.0 beta 1 available for public comment Andrew van der Stock (Jun 14)
• Welcome from your new moderator :) Andrew van der Stock (Jun 14)
• Cookie stealing and replay in a corporate single sign on environment Willard Fernortner (Jun 14)
  • Re: Cookie stealing and replay in a corporate single sign on environment Irene Abezgauz (Jun 15)
    • Re: Cookie stealing and replay in a corporate single sign on environment Willard Fernortner (Jun 15)
      • Re: Cookie stealing and replay in a corporate single sign on environment Irene Abezgauz (Jun 15)
  • Re: Cookie stealing and replay in a corporate single sign on environment Willie Northway (Jun 15)
    • Re: Cookie stealing and replay in a corporate single sign on environment Saqib Ali (Jun 15)
  • <Possible follow-ups>
  • RE: Cookie stealing and replay in a corporate single sign on environment Cyrill Osterwalder (Jun 15)
    • Re: Cookie stealing and replay in a corporate single sign on environment Ivan Ristic (Jun 15)
  • RE: Cookie stealing and replay in a corporate single sign on environment Cyrill Osterwalder (Jun 15)
• Designing a Code Signining System Saqib Ali (Jun 15)
  • <Possible follow-ups>
  • Re: Designing a Code Signining System mike (Jun 20)
    • Re: Designing a Code Signining System Saqib Ali (Jun 21)
• SOAP Debugger - a simple, generic SOAP client Chuck (Jun 15)
  • Re: SOAP Debugger - a simple, generic SOAP client Zhiguly Hotel (Jun 16)
  • Re: SOAP Debugger - a simple, generic SOAP client Sverre H. Huseby (Jun 16)
  • <Possible follow-ups>
  • Re: SOAP Debugger - a simple, generic SOAP client asmolen (Jun 16)
  • RE: SOAP Debugger - a simple, generic SOAP client Smith, Carl (Jun 17)
  • RE: SOAP Debugger - a simple, generic SOAP client Bob Auger (Jun 17)
  • RE: SOAP Debugger - a simple, generic SOAP client Ory Segal (Jun 17)
    • Re: SOAP Debugger - a simple, generic SOAP client Chuck (Jun 17)
      • Message not available
      • Fwd: SOAP Debugger - a simple, generic SOAP client Rush Molekilla (Jun 18)
• ANNOUNCING: 2nd US OWASP AppSec Conference - Oct 11-12 - Near DC Dave Wichers (Jun 16)
• Black Hat Briefings Announcements Jeff Moss (Jun 16)
• List administrivia - untrimmed replies Andrew van der Stock (Jun 17)
• one-time password (OTP) authentication james (Jun 18)
  • RE: one-time password (OTP) authentication Lyal Collins (Jun 19)
    • Re: one-time password (OTP) authentication Andrew van der Stock (Jun 19)
  • Re: one-time password (OTP) authentication Joseph Miller (Jun 20)
  • <Possible follow-ups>
  • RE: one-time password (OTP) authentication Cyrill Osterwalder (Jun 20)
  • RE: one-time password (OTP) authentication maburns (Jun 20)
    • Re: one-time password (OTP) authentication Devdas Bhagat (Jun 21)
      • RE: one-time password (OTP) authentication Lyal Collins (Jun 21)
      • Re: one-time password (OTP) authentication Achim Hoffmann (Jun 21)
  • RE: one-time password (OTP) authentication maburns (Jun 20)
• Should login pages be protected by SSL? Amir Herzberg (Jun 20)
  • Re: Should login pages be protected by SSL? Andrew van der Stock (Jun 20)
    • Re: Should login pages be protected by SSL? Amir Herzberg (Jun 21)
      • Re: Should login pages be protected by SSL? Andrew van der Stock (Jun 21)
      • Re: Should login pages be protected by SSL? (and comment to moderator) Amir Herzberg (Jun 21)
      • Re: Should login pages be protected by SSL? (and comment to moderator) Andrew van der Stock (Jun 21)
      • Re: PCI standards & Should login pages be protected by SSL? Peter Watkins (Jun 21)
      • RE: PCI standards & Should login pages be protected by SSL? Lyal Collins (Jun 22)
      • Re: Should login pages be protected by SSL? (and comment to moderator) Amir Herzberg (Jun 21)
      • Re: Should login pages be protected by SSL? Steve Shah (Jun 21)
      • Re: Should login pages be protected by SSL? Amir Herzberg (Jun 21)
      • [summary] Re: Should login pages be protected by SSL? Steve Shah (Jun 22)
      • Re: [summary] Re: Should login pages be protected by SSL? Ole Kasper Olsen (Jun 23)
      • Rephrased: Should login pages be protected by SSL - although it won'thelp most users? Amir Herzberg (Jun 23)
      • Re: [summary] Re: Should login pages be protected by SSL? Devdas Bhagat (Jun 23)
      • Re: [summary] Re: Should login pages be protected by SSL? Michael Silk (Jun 23)
      • Re: [summary] Re: Should login pages be protected by SSL? Wolfgang Reder (Jun 24)
      • Re: [summary] Re: Should login pages be protected by SSL? Michael Silk (Jun 24)
      • Re: Should login pages be protected by SSL? Dave Ockwell-Jenner (Jun 22)
      • Re: Should login pages be protected by SSL? Achim Hoffmann (Jun 23)
  • Re: Should login pages be protected by SSL? Michael Silk (Jun 20)
  • Re: Should login pages be protected by SSL? Andy bentley (Jun 20)
    • RE: Should login pages be protected by SSL? Glenn Euloth (Jun 21)
  • Re: Should login pages be protected by SSL? bluewizard83-de4gahsh (Jun 21)
    • Re: Should login pages be protected by SSL? Peter Watkins (Jun 21)
  • Re: Should login pages be protected by SSL? Kalyan Varma (Jun 21)
  • Re: Should login pages be protected by SSL? Stefano Di Paola (Jun 21)
  • Re: Should login pages be protected by SSL? Saqib Ali (Jun 21)
  • Message not available
    • Re: Should login pages be protected by SSL? Amir Herzberg (Jun 21)
      • Re: Should login pages be protected by SSL? Saqib Ali (Jun 21)
      • Re: Should login pages be protected by SSL? Ian Rogers (Jun 21)
      • Re: Should login pages be protected by SSL? Amir Herzberg (Jun 21)
      • Re: Should login pages be protected by SSL? Achim Hoffmann (Jun 21)
  • <Possible follow-ups>
  • RE: Should login pages be protected by SSL? maburns (Jun 20)
    • Re: Should login pages be protected by SSL? Amir Herzberg (Jun 21)
      • Re: Should login pages be protected by SSL? Torsten Mueller (Jun 21)
      • RE: Should login pages be protected by SSL? Almerindo Graziano (Jun 21)
      • Webapp-level protection/detection of Pharming attacks WebAppSecurity [Technicalinfo.net] (Jun 21)
  • RE: Should login pages be protected by SSL? maburns (Jun 20)
    • Re: Should login pages be protected by SSL? Steve Shah (Jun 21)
    • Re: Should login pages be protected by SSL? Amir Herzberg (Jun 21)
  • Re: Should login pages be protected by SSL? Amir Herzberg (Jun 21)
  • RE: Should login pages be protected by SSL? Cowles, Robert D. (Jun 21)
    • Re: Should login pages be protected by SSL? Steve Shah (Jun 21)
  • RE: Should login pages be protected by SSL? Derick Anderson (Jun 21)
  • RE: Should login pages be protected by SSL? Cowles, Robert D. (Jun 21)
    • RE: Should login pages be protected by SSL? Glenn Euloth (Jun 22)
  • Re: Should login pages be protected by SSL? Bob Radvanovsky (Jun 22)
    • Re: Should login pages be protected by SSL? James Barkley (Jun 23)
    • Re: Should login pages be protected by SSL? Saqib Ali (Jun 23)
      • Re: Should login pages be protected by SSL? Eoin Keary (Jun 24)
  • RE: Should login pages be protected by SSL? Levenglick, Jeff (Jun 23)
  • RE: Should login pages be protected by SSL? Flanagan, Kevin (Jun 23)
  • RE: Should login pages be protected by SSL? Hellman, Matthew (Jun 24)
  • RE: Should login pages be protected by SSL? Hellman, Matthew (Jun 24)
  • RE: Should login pages be protected by SSL? Simon Zuckerbraun (Jun 25)
    • RE: Should login pages be protected by SSL? bluewizard83-de4gahsh (Jun 27)
  • RE: Should login pages be protected by SSL? Michael Tsentsarevsky (Jun 26)
    • Re: Should login pages be protected by SSL? Yanglei (Jun 26)
      • Re: Should login pages be protected by SSL? Michael Silk (Jun 26)
    • RE: Should login pages be protected by SSL? dave kleiman (Jun 26)
      • RE: Should login pages be protected by SSL? Lyal Collins (Jun 27)
      • RE: Should login pages be protected by SSL? dave kleiman (Jun 27)
      • Re: Should login pages be protected by SSL? warnings (Jun 28)
    • Re: Should login pages be protected by SSL? Saqib Ali (Jun 27)
      • RE: Should login pages be protected by SSL? Ernest Nelson (Jun 27)
      • Re: Should login pages be protected by SSL? Lucas Holt (Jun 30)
      • Re: Should login pages be protected by SSL? Saqib Ali (Jun 30)
  • RE: Should login pages be protected by SSL? Lyal Collins (Jun 27)
  • RE: Should login pages be protected by SSL? Michael Tsentsarevsky (Jun 27)
  • RE: Should login pages be protected by SSL? Michael Gargiullo (Jun 27)
  • RE: Should login pages be protected by SSL? Simon Zuckerbraun (Jun 28)
• New release of WebScarab Rogan Dawes (Jun 20)
• Fwd: [OWASP-Australia] UPDATED - Meeting Announcement - 21 June 05 Andrew van der Stock (Jun 20)
• Administrivia: SSL discussion Andrew van der Stock (Jun 21)
• WASC-Articles: 'Common Security Problems in the Code of Dynamic Web Applications' By Sverre H. Huseby contact (Jun 21)
• Can HTTP Request Smuggling be blocked by Web Application Firewalls? Amit Klein (AKsecurity) (Jun 21)
  • Re: [WEB SECURITY] Can HTTP Request Smuggling be blocked by Web Application Firewalls? Daniel (Jun 21)
    • Re: [WEB SECURITY] Can HTTP Request Smuggling be blocked by Web Application Firewalls? Amit Klein (AKsecurity) (Jun 21)
  • Re: Can HTTP Request Smuggling be blocked by Web Application Firewalls? Andrew van der Stock (Jun 21)
  • Message not available
    • Re: Can HTTP Request Smuggling be blocked by Web Application Firewalls? Amit Klein (AKsecurity) (Jun 22)
• OWASP Ireland Meeting Eoin Keary (Jun 22)
• Tomcat Cross Site Scripting lock down ddodge (Jun 23)
• Attack Patterns and Security Patterns Mark Curphey (Jun 23)
• C / C++ Standards Online in T&C Wiki Mark Curphey (Jun 23)
• TFTP and XP_CMDSHELL - Weird Andres Molinetti (Jun 23)
• Top Ten Principles for Building Secure Software Mark Curphey (Jun 23)
  • Top Ten Information Security Considerations for Use Case Modeling Gunnar Peterson (Jun 23)
• RE: Java keystore password storage Scott, Richard (Jun 23)
• Administrivia: Follow up to survey responses Andrew van der Stock (Jun 24)
• Languages/platforms used for Web apps. Any stats? Benjamin Livshits (Jun 24)
  • RE: Languages/platforms used for Web apps. Any stats? Matt Szubrycht (Jun 24)
    • Re: Languages/platforms used for Web apps. Any stats? Mark Susol Ultimate Creative Media (Jun 25)
      • Re: Languages/platforms used for Web apps. Any stats? Steve McCullough (Jun 26)
      • Re: Languages/platforms used for Web apps. Any stats? Jesse G. Lands (Jun 26)
      • Re: Languages/platforms used for Web apps. Any stats? Mamading Ceesay (Jun 26)
  • Re: Languages/platforms used for Web apps. Any stats? Andrew van der Stock (Jun 24)
  • Re: Languages/platforms used for Web apps. Any stats? focus (Jun 24)
    • Re: Languages/platforms used for Web apps. Any stats? Steve McCullough (Jun 26)
  • Re: Languages/platforms used for Web apps. Any stats? Rob Lanphier (Jun 25)
    • Re: Languages/platforms used for Web apps. Any stats? Gary Warner (Jun 25)
  • Re: Languages/platforms used for Web apps. Any stats? prep (Jun 25)
    • RE: Languages/platforms used for Web apps. Any stats? Mark Curphey (Jun 25)
      • RE: Languages/platforms used for Web apps. Any stats? Steve Slater (Jun 25)
      • Re: Languages/platforms used for Web apps. Any stats? Adam Shostack (Jun 25)
      • Re: Languages/platforms used for Web apps. Any stats? Ben Sytko (Jun 25)
      • RE: Languages/platforms used for Web apps. Any stats? Mark Curphey (Jun 25)
• OT: Review of CISSP Training Material Saqib Ali (Jun 28)
  • RE: Review of CISSP Training Material Clement Dupuis (Jun 29)
• Call for Paritipation: C.I.P.H.E.R Contest Maximillian Dornseif (Jun 29)
• The biggest thing affecting software security? People, apparently. Nick Murison (Jun 29)
  • Re: The biggest thing affecting software security? People, apparently. Steve Milner (Jun 29)
  • RE: The biggest thing affecting software security? People, apparently. Lyal Collins (Jun 29)
  • Re: The biggest thing affecting software security? People, apparently. Clinton E. Troutman (Jun 30)
    • Re: The biggest thing affecting software security? People, apparently. Amit (Jun 30)
  • Re: The biggest thing affecting software security? People, apparently. Irene Abezgauz (Jun 30)
  • Re: The biggest thing affecting software security? People, apparently. . . (Jun 30)
    • Re: The biggest thing affecting software security? People, apparently. John Manko (Jun 30)
• RE: The biggest thing affecting software security? People, apparently. PPowenski (Jun 30)
  • Re: The biggest thing affecting software security? People, apparently. Robert Hajime Lanning (Jun 30)

Previous period

Next period