Wednesday, August 4, 2010

Internet Explorer considered harmful

›
Now that this paper is officially public, the full story of CSS-based cross-origin theft can come out. (As an aside I'd like to note th...
3 comments:
Thursday, July 22, 2010

Firefox fixes CSS-based cross-origin theft issue

›
Firefox just released version 3.6.7 of their excellent browser, and it fixes this: http://www.mozilla.org/security/announce/2010/mfsa2010-46...
1 comment:
Tuesday, July 20, 2010

Fixing responsible disclosure

›
Today I had the pleasure to post: http://googleonlinesecurity.blogspot.com/2010/07/rebooting-responsible-disclosure-focus.html It is co-sign...
2 comments:

More money for critical Chromium security bugs!

›
We've seen who is $1337 but who is $3133.7 ? I just launched this: http://blog.chromium.org/2010/07/celebrating-six-months-of-chromium.h...
Friday, June 25, 2010

Open redirectors: some sanity

›
Open redirectors are a contentious issue. Old-school hackers think anyone who thinks they are serious is on drugs. New-school hackers are mo...
6 comments:
Thursday, March 18, 2010

vsftpd HTTP lunacy!

›
Ok, so I was bored and I added very very basic HTTP support to vsftpd. vsftpd is now perhaps the only FTP server to have an option ftp_enab...
14 comments:
Thursday, January 28, 2010

Encouraging More Chromium Security Research

›
I don't usually post non-original content here, but in this case I'll make an exception :) Here's one of the things I've bee...