Web Application Security (thread)

CFP now open for ClubHack, India's own hackers' convention, RS, 2007/07/16
Exploiting reflected XSS vulnerabilities, where user input must come through HTTP Request headers, kuza55, 2007/07/15
Multifactor Authentication Account Harvesting, Jeffory Atkinson, 2007/07/03
- RE: Multifactor Authentication Account Harvesting, Henderson, Dennis K., 2007/07/05
  - RE: Multifactor Authentication Account Harvesting, Cory . Bys, 2007/07/09
- Re: Multifactor Authentication Account Harvesting, Vishal Garg, 2007/07/05
[Sec-1 Ltd] Buffer Truncation Abuse in Microsoft SQL Server Based Applications, Gary Oleary-Steele, 2007/07/03
preventing sign up forms from being used for user enumeration, Robin Wood, 2007/07/02
- Re: preventing sign up forms from being used for user enumeration, Nathan Bijnens, 2007/07/02
- Re: preventing sign up forms from being used for user enumeration, bugtraq, 2007/07/02