SEARCH RESULTS
 
Showing 1-10 of 46 records
 
Expand article

XSF & XSS: Double your pleasure, double your fun

The Article has images
2008-09-21 21:00:00 by Russ McRee in HolisticInfoSec.org
...double the pleasure, double the fun, what if we coupled the original Openhire cross-site scripting vuln with Getty Images cross-site frame vuln It hurts twice as much, in my book http://www.gettyimagesjobs.com/gettyImagesJobsDisplay.html?http://hostedjobs.openhire.com/epostings/jobs/submit.cfm?fuseaction=dspjob&id=23&jobid=130527&company...
 
Tags: openhire code, openhire, original openhire cross-site, scottrade site, scottrade, cross-site, site, secure code, code
 
 
 
 
Expand article

Holiday spirit helped double Storm worm

2008-01-11 00:00:00 by Robert McMillan in Network World on Security
 
Some clever, sexy Christmas-themed spam and a long holiday season helped the criminals behind the notorious Storm Worm more than double their network of infected PCs over the past few weeks, security experts say
 
Tags: notorious storm worm, security experts, double, holiday season, network, clever, spam, criminals, past
 
 
 
 
Expand article

Pennsylvania Department of Aging seniors affected by stolen laptop

The Article has images
2008-01-03 17:18:52 by Evan Francen in The Breach Blog
...double password protected Evan] Oooh. Double password protected?! Nothing more than a minor nuisance to circumvent the department was in the process of encrypting computers and has since completed that work to provide additional protection Evan] Amen! The department has seen the light It also is in the process of centralizing information...
 
Tags: pennsylvania, pennsylvania department, department, sensitive personal information, personal information, information, computer, laptop computer, medical information
 
 
 
 
Expand article

Consumer Reports on Aviation Security and the TSA

2008-01-10 13:58:40 by schneier in Schneier on Security
 
...double hulled door Consumer Reports searched NAS, the Aviation Safety Reporting System, and found 51 incidents since April 2002 in which flight crews reported problems with the hardened doors Most of them weren't really security issues: locking mechanisms failing, doors popping open in flight, and so on. But this was more interesting: A 2006...
 
Tags: security, aviation security, security consultancy, doors, double doors, door, consumer reports, secure door, cockpit doors
 
 
 
 
Expand article

Corrupted Heap Termination Redux

2008-06-07 04:00:00 by sdl in The Security Development Lifecycle
 
...double linked list so corruption can be detected by walking the list Buffer overrun: the next block header size does not match the expected current block size Buffer underrun: same as above, but the previous block header size does not match the expected current block size Attempting to free a free'd block (double-free bug Attempting to free a...
 
Tags: heap, free block list, block, handle, bogus heap handle, invalid, invalid heap, custom heap, block header
 
 
 
 
Expand article

Dickson County School District employee information stolen

The Article has images
2008-06-12 11:52:47 by Evan Francen in The Breach Blog
...double password protected Evan] Sounds impressive, doesn't it It has a double password so it would take a computer genius to get into it Evan] I am certainly no genius, but I am pretty sure I could get into it Chandler said he plans to upgrade the security system at the school board building In the meantime, workers will lock up any...
 
Tags: information, school, store personal information, personal information, dickson county, dickson police, police, store confidential information, school board
 
 
 
 
Expand article

Making Risk Measures Agree with Accounting 100%

2006-12-26 05:27:00 by Jomni in Risk Management Quant
 
...double as accounting software. But in reality, these two fields have different requirements (although they may be similar in some ways). It is true that a software can be made flexible enough to accommodate both requirements. Results may not be exact but good enough. But getting values to agree with the accounting system would result into...
 
Tags: risk, risk software, software, risk measurement, values, exact market values, exact, exact cent, cent
 
 
 
 
Expand article

Automating web application security testing

2007-07-16 11:40:00 by Panayiotis Mavrommatis in Google Online Security Blog
 
...double quote not filtered or escaped form blah Injection inside URL attributes - non-http(s) URL javascript:evil script In JavaScript context - single quote not filtered or escaped In the cases where XSS arises from meta characters being inserted from untrusted sources into an HTML document, the issue can be avoided either by...
 
Tags: web application, application, input, input parameters, accepts user input, xss, xss vulnerabilities, security, security team check
 
 
 
 
Expand article

138 Million Domains

2007-08-29 21:28:19 by Editor in Cheap Hack
 
...double-digit percentages. The huge growth in .cn domains, 61% over the previous quarter, is probably due, in large part, to an aggressive price promotion by the domain's registry, just RMB1.00 (about $0.13) for the first year. At the end of the 2nd quarter there were more than 73 million .com and .net domains, the overwhelming majority .com....
 
Tags: domains, million domains, net domains, million, domain registrations, domain, growth, huge growth, verisign domains
 
 
 
 
Expand article

Google Spamming Us

2007-12-20 22:11:11 by RSnake in ha.ckers.org web applicati