Web Application Security (thread)

[Full-disclosure] JavaScript Attack Console (Backweb), pdp (architect), 2006/10/31
Fuzzer Sources, Mike Gibson, 2006/10/27
Why doesn't Amazon enforce a password policy?, James Strassburg, 2006/10/27
- Re: Why doesn't Amazon enforce a password policy?, Peter Conrad, 2006/10/30
Search Engine for Security and eSecurity Community, Saqib Ali, 2006/10/27
2-factor auth for all, Saqib Ali, 2006/10/24
- RE: 2-factor auth for all, Benjamin Tomhave, 2006/10/27
- Re: 2-factor auth for all, David Kierznowski, 2006/10/27
  - Re: 2-factor auth for all, Saqib Ali, 2006/10/27
- RE: 2-factor auth for all, Nick Owen, 2006/10/27
  - Re: 2-factor auth for all, Saqib Ali, 2006/10/27
    - Re: 2-factor auth for all, Nick Owen, 2006/10/27
OWASP Report Generator (v0.75 corrupt on SourceForge?), James Strassburg, 2006/10/20
XSS - how to run script, Tal Argoni, 2006/10/19
- Re: XSS - how to run script, A. R., 2006/10/19
  - RE: XSS - how to run script, Joshua Perrymon, 2006/10/20
  - Re: XSS - how to run script, pdp (architect), 2006/10/20
Teros or Citrix Application Firewall, bill . fetters, 2006/10/19
Netflix.com XSRF vuln, Dave Ferguson, 2006/10/16
[Full-disclosure] AttackAPI 0.8 is OUT, pdp (architect), 2006/10/16
Black Hat CFP, Registration, and Announcements for October, Jeff Moss, 2006/10/15
OWASP Testing Guide v2: let's start! (Call for participation), Matteo Meucci, 2006/10/10
More Fun with CSS History Theft, bugtraq, 2006/10/09
[Full-disclosure] HITBSecConf2006 CTF Source code and daemons, Praburaajan, 2006/10/08
[Full-disclosure] JavaScript Spider (code that can traverse the web), pdp (architect), 2006/10/06
RE: [WEB SECURITY] Re: SQL In the Request, Ory Segal, 2006/10/05
- RE: [WEB SECURITY] Re: SQL In the Request, Rowland, 2006/10/10
- RE: [WEB SECURITY] Re: SQL In the Request, Erez Metula, 2006/10/05
  - RE: [WEB SECURITY] Re: SQL In the Request, Nish Bhalla, 2006/10/05
- Re: [WEB SECURITY] Re: SQL In the Request, bugtraq, 2006/10/05
  - Re: [WEB SECURITY] Re: SQL In the Request, bryan allott, 2006/10/09
    - RE: [WEB SECURITY] Re: SQL In the Request, Jeff Robertson, 2006/10/10
    - Re: [WEB SECURITY] Re: SQL In the Request, bryan allott, 2006/10/10
    - Re: [WEB SECURITY] Re: SQL In the Request, Rick Zhong, 2006/10/10
- Re: [WEB SECURITY] Re: SQL In the Request, bryan allott, 2006/10/09
- RE: [WEB SECURITY] Re: SQL In the Request, Jeff Robertson, 2006/10/09
SQL In the Request, bryan allott, 2006/10/05
- RE: SQL In the Request, Arian J. Evans, 2006/10/09
[Full-disclosure] JavaScript Web Ping Tool, David Kierznowski, 2006/10/05
Google code search, Stephen de Vries, 2006/10/05
- Re: Google code search, Zapotek, 2006/10/05
- Re: Google code search, Ryan Barnett, 2006/10/05
- Magic Quotes, DokFLeed, 2006/10/10
  - Message not available
    - Re: Magic Quotes, DokFLeed, 2006/10/10
  - Re: Magic Quotes, Tomek Perlak, 2006/10/10
    - RE: Magic Quotes, Matt Fisher, 2006/10/12
  - Re: Magic Quotes, Steve Slater, 2006/10/12
    - Re: Magic Quotes, DokFLeed, 2006/10/15
    - Re: Magic Quotes, Brad Lhotsky, 2006/10/16
    - Message not available
    - Re: Magic Quotes, DokFLeed, 2006/10/18
    - Re: Magic Quotes, Brad Lhotsky, 2006/10/18
    - Re: Magic Quotes, DokFLeed, 2006/10/18
Sharepoint and .Net, Vlad, 2006/10/04
Netscape 8 inherits firefox, explorer vulnerabilities, Emanuel Marufo, 2006/10/04
- RE: Netscape 8 inherits firefox, explorer vulnerabilities, Benjamin Tomhave, 2006/10/05
Platform specific error codes., Zapotek, 2006/10/04
- Re: Platform specific error codes., Eoin, 2006/10/05
  - Re: Platform specific error codes., Zapotek, 2006/10/05
PacSec 2006 announcement, EUSecWest 2007 Call For Papers (Mar 1-2, deadline Oct 20th), Dragos Ruiu, 2006/10/03
Full Disc Encryption use and implementation strategy Discussion Forum, Saqib Ali, 2006/10/03
Call for panelists: "The role of frameworks (e.g., .Net, Java, Enterprise Library, Struts, JaCorb) in 'forcing' developers to create and deploy 'secure' applications" panel in the next OWASP Conference, Dinis Cruz, 2006/10/03
JavaScript External Scanner (JSEScanner), David Kierznowski, 2006/10/02
RE: Open Source Application Vulnerability Assessment Tools, Arian J. Evans, 2006/10/02
- RE: Open Source Application Vulnerability Assessment Tools, Arian J. Evans, 2006/10/02
FW: XML File Inclusion and Path Traversal Attacks (was RE: XML Port Scanning), Mark Mcdonald, 2006/10/02
- RE: XML File Inclusion and Path Traversal Attacks (was RE: XML Port Scanning), Nish Bhalla, 2006/10/04