Web Application Security (thread)

A couple Application Security Predictions For The Year 2006, bugtraq, 2005/12/31
Black Hat Federal and Europe Call for Papers, Jeff Moss, 2005/12/30
[Full-disclosure] Looking Security Cheklisters?, Mark Sec, 2005/12/24
- RE: [Full-disclosure] Looking Security Cheklisters?, Krpata, Tyler, 2005/12/27
Reform 0.9 -- Encoding libraries, Michael Eddington, 2005/12/23
httprint version 301, Saumil Shah, 2005/12/22
New OWASP project - PCI Web Security Standards, mike . owasp, 2005/12/20
- RE: New OWASP project - PCI Web Security Standards, Lyal Collins, 2005/12/20
  - RE: New OWASP project - PCI Web Security Standards, Justin Derry, 2005/12/21
    - RE: New OWASP project - PCI Web Security Standards, Lyal Collins, 2005/12/22
  - Re: New OWASP project - PCI Web Security Standards, Eoin, 2005/12/22
- Re: New OWASP project - PCI Web Security Standards, Jean-Jacques Halans, 2005/12/22
- RE: New OWASP project - PCI Web Security Standards, Ahmed Shahzad, 2005/12/21
- RE: New OWASP project - PCI Web Security Standards, MollM, 2005/12/22
Rules on security issues for static code analizers of Java, Juan C Calderon, 2005/12/20
- Re: Rules on security issues for static code analizers of Java, Justin Clarke, 2005/12/20
- RE: Rules on security issues for static code analizers of Java, Burke, Charles, 2005/12/22
- RE: Rules on security issues for static code analizers of Java, Kline,Nathan C - JDI, 2005/12/23
Hackers Break Into Computer-Security Firm's Customer Database, bugtraq, 2005/12/20
Re: [WEB SECURITY] Tomcat Banner, Achim Hoffmann, 2005/12/20
Fwd: SF new article announcement: OpenSSH cutting edge, Andrew van der Stock, 2005/12/20
Vulnerabilties of any Messenger, Pratiksha Doshi, 2005/12/20
Tool for source code review, Pratiksha Doshi, 2005/12/19
- RE: Tool for source code review, Carl Davis, 2005/12/20
- RE: Tool for source code review, Ambarish Malpani, 2005/12/20
  - Re: Tool for source code review, Adam Shostack, 2005/12/20
Mambo, Coppermine and PHPBB Attacks, Mark Ryan del Moral Talabis, 2005/12/19
- RE: Mambo, Coppermine and PHPBB Attacks, John Cobb, 2005/12/19
- Re: Mambo, Coppermine and PHPBB Attacks, Paul Laudanski, 2005/12/20
  - Re: Mambo, Coppermine and PHPBB Attacks, Tofik Suleymanov, 2005/12/20
    - Re: Mambo, Coppermine and PHPBB Attacks, Paul Laudanski, 2005/12/21
    - Re: Mambo, Coppermine and PHPBB Attacks, Yasuo Ohgaki, 2005/12/24
    - Re: Mambo, Coppermine and PHPBB Attacks, Paul Laudanski, 2005/12/24
    - Re: Mambo, Coppermine and PHPBB Attacks, Yasuo Ohgaki, 2005/12/25
    - Re: Mambo, Coppermine and PHPBB Attacks, Paul Laudanski, 2005/12/26
    - Re: Mambo, Coppermine and PHPBB Attacks, Yasuo Ohgaki, 2005/12/29
    - Re: Mambo, Coppermine and PHPBB Attacks, ascii, 2005/12/30
    - Re: Mambo, Coppermine and PHPBB Attacks, Andrew van der Stock, 2005/12/30
    - Re: Mambo, Coppermine and PHPBB Attacks, Jack Tennessee, 2005/12/22
New(?) web app sec scanner: NTOSpider, Peine,Holger, 2005/12/16
- RE: SPAM-LOW: New(?) web app sec scanner: NTOSpider, Tommy, 2005/12/16
W3C Addressing Web Security, Derek, 2005/12/16
PCI DSS Compliance, Ademar Gonzalez, 2005/12/14
- Re: PCI DSS Compliance, Richard Moore, 2005/12/15
- Re: PCI DSS Compliance, Roy Britten, 2005/12/16
- RE: PCI DSS Compliance, Michael Johnson, 2005/12/16
  - RE: PCI DSS Compliance, Syed Mohamed A, 2005/12/16
    - Re: PCI DSS Compliance, Pete Herzog, 2005/12/19
- RE: PCI DSS Compliance, Lyal Collins, 2005/12/16
- Re: PCI DSS Compliance, Peter Watkins, 2005/12/16
- RE: PCI DSS Compliance, Sebastien Deleersnyder, 2005/12/15
- RE: PCI DSS Compliance, Steve Kerns, 2005/12/15
  - Re: PCI DSS Compliance, Ademar Gonzalez, 2005/12/15
    - RE: PCI DSS Compliance, Lyal Collins, 2005/12/16
- RE: PCI DSS Compliance, Craig Wright, 2005/12/16
- RE: PCI DSS Compliance, Steven Jones, 2005/12/16
- Re: PCI DSS Compliance, null0, 2005/12/19
- RE: PCI DSS Compliance, Craig Wright, 2005/12/19
  - Re: PCI DSS Compliance, Pete Herzog, 2005/12/19
- RE: PCI DSS Compliance, Craig Wright, 2005/12/19
  - Re: PCI DSS Compliance, Pete Herzog, 2005/12/20
    - RE: PCI DSS Compliance, Lyal Collins, 2005/12/20
    - Re: PCI DSS Compliance, Pete Herzog, 2005/12/29
    - RE: PCI DSS Compliance, Lyal Collins, 2005/12/29
- RE: PCI DSS Compliance, Craig Wright, 2005/12/20
  - Re: PCI DSS Compliance, Roberto Tanara, 2005/12/21
    - RE: PCI DSS Compliance, Lyal Collins, 2005/12/22
- RE: PCI DSS Compliance, Craig Wright, 2005/12/22
  - Re: PCI DSS Compliance, Roberto Tanara, 2005/12/22
Fwd: SF new column announcement: Users inundated with pop-ups, by Scott Granneman, Andrew van der Stock, 2005/12/12
Modifing non-persistent cookies, Jason binger, 2005/12/11
- Re: Modifing non-persistent cookies, Andres Riancho, 2005/12/11
- Re: Modifing non-persistent cookies, David Hogue, 2005/12/11
  - Re: Modifing non-persistent cookies, Dean H. Saxe, 2005/12/12
- Re: Modifing non-persistent cookies, Rogan Dawes, 2005/12/12
- RE: Modifing non-persistent cookies, Luke Fraser, 2005/12/11
- RE: Modifing non-persistent cookies, Matt Fisher, 2005/12/16
[Full-disclosure] Fuzzing testing webapp?, Mark Sec, 2005/12/11
- Re: [Full-disclosure] Fuzzing testing webapp?, Thierry Zoller, 2005/12/11
Security of magic_quotes_gpc under PHP against SQL injection, Todd Hendricks, 2005/12/11
- Re: Security of magic_quotes_gpc under PHP against SQL injection, Steve Slater, 2005/12/11
- Re: Security of magic_quotes_gpc under PHP against SQL injection, Peter Conrad, 2005/12/12
  - Re: Security of magic_quotes_gpc under PHP against SQL injection, ascii, 2005/12/12
    - Re: Security of magic_quotes_gpc under PHP against SQL injection, Stefano Di Paola, 2005/12/19
Forced invalid SQL errors, Steven M. Christey, 2005/12/10
New SF Article Announcement: Trusting software, Andrew van der Stock, 2005/12/08
Security training of developers and company liability, James Strassburg, 2005/12/07
- Re: Security training of developers and company liability, Stephen de Vries, 2005/12/08
  - RE: Security training of developers and company liability, Clement Dupuis, 2005/12/08
- RE: Security training of developers and company liability, Lyal Collins, 2005/12/08
  - RE: Security training of developers and company liability, Clement Dupuis, 2005/12/08
  - Re: Security training of developers and company liability, Daniel, 2005/12/08
- RE: Security training of developers and company liability, Griffiths, Ian, 2005/12/08
- RE: Security training of developers and company liability, Brokken, Allen P., 2005/12/08
- RE: Security training of developers and company liability, Jason Gregson, 2005/12/08
- RE: Security training of developers and company liability, James Strassburg, 2005/12/08
- RE: Security training of developers and company liability, Jeff Robertson, 2005/12/09
  - Re: Security training of developers and company liability, Daniel, 2005/12/09
- RE: Security training of developers and company liability, Harley David, 2005/12/12
- RE: Security training of developers and company liability, James Strassburg, 2005/12/12
- RE: Security training of developers and company liability, Wall, Kevin, 2005/12/13
Oracle External Users, Damien Lewis, 2005/12/05
- Re: Oracle External Users, bug, 2005/12/06
- RE: Oracle External Users, Amichai Shulman, 2005/12/06
Re: Apache mode_security, Stefano Di Paola, 2005/12/04
Re: Re: SOA / Web Services security, native, 2005/12/04
Re: [WEB SECURITY] How to Prevent XSS evasion attack ?, RSnake, 2005/12/03
SF new article announcement: Evading NIDS, revisited (pen-test), Andrew van der Stock, 2005/12/02
- Re: SF new article announcement: Evading NIDS, revisited (pen-test), Jason, 2005/12/05
Administrivia: Out of office replies, faulty configuration and software, Andrew van der Stock, 2005/12/02
Encrypting Cached data, Yousef Syed, 2005/12/02
- Re: Encrypting Cached data, Olaf Reitmaier, 2005/12/02
- Re: Encrypting Cached data, Georgi Alexandrov, 2005/12/05
- RE: Encrypting Cached data, Ig Vermaak, 2005/12/02
- RE: Encrypting Cached data, Hudel, Chris, 2005/12/05
  - Re: Encrypting Cached data, Yousef Syed, 2005/12/06
  - Re: Encrypting Cached data, Georgi Alexandrov, 2005/12/06
Re: about oracle sql injection, Javier Fernandez-Sanguino, 2005/12/01
- Re: about oracle sql injection, Richard Moore, 2005/12/02
- RE: about oracle sql injection, LAROUCHE Francois, 2005/12/02
  - Re: about oracle sql injection, Javier Fernandez-Sanguino, 2005/12/03
- Re: Re: about oracle sql injection, limor188, 2005/12/05
- RE: Re: about oracle sql injection, LAROUCHE Francois, 2005/12/06
- RE: RE: Re: about oracle sql injection, LAROUCHE Francois, 2005/12/07
- Re: RE: Re: about oracle sql injection, limor188, 2005/12/07
RE: ODBC Injection, LAROUCHE Francois, 2005/12/01
- RE: ODBC Injection, Auri Rahimzadeh, 2005/12/01
"RSS Is Worm Bot's Next Target", zeno, 2005/12/01