BibSonomy bookmarks for /user/sac/security

Is the HTTP Plugin for MySQL secure? | Ulf WendelUlf Wendel

sac — 2014-10-22T10:56:09+02:00

But, the person can read all rows from the table. You could try to use a view but probably, you would just implement some filtering in your proxy. “Just implement some filtering” becomes a problem when the HTTP Plugin is your proxy. There’s no script language, you can’t do that. Unless, there was a script language built-in to the proxy…

Practical UNIX & Internet Security

sac — 2012-11-19T11:05:15+01:00

http://www.diablotin.com/librairie/networking/puis/index.htm

Cracking Drupal | Drupal Security Book, Resources, Reviews

sac — 2012-08-31T12:14:59+02:00

http://crackingdrupal.com/

Drupal: Secure by Default, Inconsistent by Nature | Drupal Watchdog

sac — 2012-08-31T12:14:32+02:00

http://drupalwatchdog.com/1/1/drupal-secure-by-default-inconsistent-by-nature

Brainfuck beware: JavaScript is after you! | Patricio Palladino

sac — 2012-08-11T12:08:02+02:00

http://patriciopalladino.com/blog/2012/08/09/non-alphanumeric-javascript.html

Developing a Cross-Platform HTML5 Game: Part 3 | Web Builder Zone

sac — 2012-06-04T19:10:32+02:00

This is the final part of a 3 part series on HTML5 game development tips. Part 1 covered visual and performance tips, part 2 was about input methods, and now...

New Primitives for Secure Resource and Computation Verification

sac — 2012-04-18T16:29:43+02:00

http://e-collection.library.ethz.ch/eserv/eth:4567/eth-4567-02.pdf

HTML5 Security Cheatsheet

sac — 2012-03-20T14:35:09+01:00

http://html5sec.org/

IEEE Xplore - Open Sesame: Design Guidelines For Invisible Passwords

sac — 2012-03-19T12:57:59+01:00

http://ieeexplore.ieee.org/xpls/abs_all.jsp?arnumber=6165245

rise4fun - from Microsoft Research

sac — 2012-02-29T14:16:15+01:00

software engineering tools from Microsoft Research all automata concurrency design infrastructure languages security testing verification

XSS (Cross Site Scripting) Cheat Sheet

sac — 2012-01-05T13:14:40+01:00

XSS (Cross Site Scripting) Cheat Sheet: Esp: for filter evasion - by RSnake

Will we ever pay for security?

sac — 2011-12-16T13:18:57+01:00

http://www.homeport.org/%7Eadam/shostack-bh-ams-privacy.htm

Sun Java Plug-in Allows Expired Certificates « Urlgrey

sac — 2011-06-16T16:04:29+02:00

http://urlgrey.net/?p=154

Blind XPath Injection - OWASP

sac — 2010-12-02T11:22:17+01:00

http://www.owasp.org/index.php/Blind_XPath_Injection

ASCII-Art als Captcha | lemming.name

sac — 2010-11-19T13:51:26+01:00

http://lemming.name/?p=422

collin_mulliner_eusecwest08_attacking_nfc_phones.pdf (application/pdf-Objekt)

sac — 2010-03-08T11:24:34+01:00

Attacking NFC Mobile Phones Collin Mulliner ,Fraunhofer SIT EUSecWest May 2008 London, UK

Data security mobile Java applications - JavaWorld

sac — 2010-02-25T11:38:36+01:00

The recent release of MIDP (Mobile Information Device Profile) features a major improvement over version 1.0. Version 2.0 includes enhanced mobile code and application security through a well-defined security manager and provisioning process. On the data and communication security front, MIDP 2.0 makes HTTPS support mandatory. HTTPS is currently the most widely used data security protocol in PersonalJava and J2ME/CDC (Java 2 Platform, Micro Edition/Connected Device Configuration) applications.