Secure Coding: by date

156 messages starting Apr 02 06 and ending Jun 26 06
Date index | Thread index | Author index


Sunday, 02 April

Re: [Owasp-dotnet] RE: 4 Questions: Latest IE vulnerability, Firefox vs IE security, User vs Admin risk profile, and browsers coded in 100% Managed Verifiable code Crispin Cowan

Monday, 03 April

Re: [Owasp-dotnet] RE: 4 Questions: Latest IE vulnerability, Firefox vs IE security, User vs Admin risk profile, and browsers coded in 100% Managed Verifiable code Pascal Meunier
Segments, eh Smithers? Crispin Cowan

Tuesday, 04 April

Segments, eh Smithers? ljknews
Segments, eh Smithers? Michael S Hines
Segments, eh Smithers? der Mouse
Segments, eh Smithers? karger at watson.ibm.com
Segments, eh Smithers? Blue Boar
Segments, eh Smithers? Steven M. Bellovin
advice from the past Steven M. Bellovin
Segments, eh Smithers? Aleksander P. Czarnowski
Re: [Owasp-dotnet] RE: 4 Questions: Latest IE vulnerability, Firefox vs IE security, User vs Admin risk profile, and browsers coded in 100% Managed Verifiable code Crispin Cowan

Wednesday, 05 April

Underhanded C contest Kenneth R. van Wyk
AJAX: Is your application secure enough? Kenneth R. van Wyk
Some different ways to authenticate people Glenn Everhart

Thursday, 06 April

4 Questions: Latest IE vulnerability, Firefox vs IE security, User vs Admin risk profile, and browsers coded in 100% Managed Verifiable code Dinis Cruz
4 Questions: Latest IE vulnerability, Firefox vs IE security, User vs Admin risk profile, and browsers coded in 100% Managed Verifiable code Dinis Cruz
[Owasp-dotnet] RE: 4 Questions: Latest IE vulnerability, Firefox vs IE security, Uservs Admin risk profile, and browsers coded in 100% Managed Verifiable code Dinis Cruz
4 Questions: Latest IE vulnerability, Firefox vs IE security, Uservs Admin risk profile, and browsers coded in 100% Managed Verifiable code Dinis Cruz
Managed Code and Runtime Environments - Another layer of added security? Dinis Cruz
4 Questions: Latest IE vulnerability, Firefox vs IE security, User vs Admin risk profile, and browsers coded in 100% Managed Verifiable code ljknews
4 Questions: Latest IE vulnerability, Firefox vs IE security, User vs Admin risk profile, and browsers coded in 100% Managed Verifiable code ljknews

Friday, 07 April

4 Questions: Latest IE vulnerability, Firefox vs IE security, User vs Admin risk profile, and browsers coded in 100% Managed Verifiable code der Mouse
YAI (yet another interview) Gary McGraw

Tuesday, 18 April

IEEE S&P: malware Gary McGraw

Friday, 21 April

HNS - A Modular Approach to Data Validation in Web Applications Kenneth R. van Wyk

Tuesday, 25 April

Another example of the futility of hardwareless 2 factor authentication Glenn Everhart

Wednesday, 26 April

Another example of the futility of hardwareless 2 factor authentication der Mouse

Monday, 01 May

New security website: darkreading Gary McGraw
Secure Software Architecture, Design, Implementation and Assurance CFP Robert C. Seacord
Vista and the Type Safe missed oportunity (was Re: New security website: darkreading ) Dinis Cruz
Vista and the Type Safe missed oportunity (was Re: New security website: darkreading ) George Capehart

Tuesday, 02 May

By default, the Verifier is disabled on .Net and Java Dinis Cruz
By default, the Verifier is disabled on .Net and Java Wall, Kevin
By default, the Verifier is disabled on .Net and Java Jeff Williams

Wednesday, 03 May

By default, the Verifier is disabled on .Net and Java Stephen de Vries
By default, the Verifier is disabled on .Net and Java David Eisner
By default, the Verifier is disabled on .Net and Java Wall, Kevin
By default, the Verifier is disabled on .Net and Java Michael Silk
By default, the Verifier is disabled on .Net and Java Dinis Cruz
By default, the Verifier is disabled on .Net and Java Dinis Cruz
By default, the Verifier is disabled on .Net and Java Dinis Cruz

Thursday, 04 May

By default, the Verifier is disabled on .Net and Java Michael Silk
HNS - Biggest X Window security hole since 2000 Kenneth R. van Wyk
HNS - Biggest X Window security hole since 2000 Gadi Evron
HNS - Biggest X Window security hole since 2000 Kenneth R. van Wyk
By default, the Verifier is disabled on .Net and Java David Eisner
By default, the Verifier is disabled on .Net and Java Tim Hollebeek
By default, the Verifier is disabled on .Net and Java Dinis Cruz
By default, the Verifier is disabled on .Net and Java Gary McGraw
By default, the Verifier is disabled on .Net and Java David Eisner
[Owasp-dotnet] Re: By default, the Verifier is disabled on .Net and Java Michael Silk
HNS - Biggest X Window security hole since 2000 Greenarrow 1
By default, the Verifier is disabled on .Net and Java Stephen de Vries
By default, the Verifier is disabled on .Net and Java Stephen de Vries
By default, the Verifier is disabled on .Net and Java Jeff Williams

Friday, 05 May

HNS - Biggest X Window security hole since 2000 ljknews
By default, the Verifier is disabled on .Net and Java Gary McGraw
WSJ.com - Tech Companies Check Software Earlier for Flaws Kenneth R. van Wyk

Saturday, 06 May

Re: WSJ.com - Tech Companies Check Software Mark Graff
HNS - Biggest X Window security hole since 2000 der Mouse

Sunday, 07 May

HNS - Biggest X Window security hole since 2000 Florian Weimer

Monday, 08 May

HNS - Biggest X Window security hole since 2000 Robert C. Seacord
HNS - Biggest X Window security hole since 2000 Tim Hollebeek
By default, the Verifier is disabled on .Net and Java Dinis Cruz
By default, the Verifier is disabled on .Net and Java Dinis Cruz
By default, the Verifier is disabled on .Net and Java Wall, Kevin
By default, the Verifier is disabled on .Net and Java Gary McGraw
By default, the Verifier is disabled on .Net and Java Michael Silk
By default, the Verifier is disabled on .Net and Java Michael Silk

Tuesday, 09 May

By default, the Verifier is disabled on .Net and Java Gary McGraw
Tech target interview Gary McGraw
Why Novell should take on the 'type-safe platform' challenge Dinis Cruz

Wednesday, 10 May

Black Hat class: Advanced Asp.Net Exploits and Countermeasures Dinis Cruz
By default, the Verifier is disabled on .Net and Java Stephen de Vries

Thursday, 11 May

By default, the Verifier is disabled on .Net and Java Jeff Williams
By default, the Verifier is disabled on .Net and Java Michael Silk
By default, the Verifier is disabled on .Net and Java David Eisner

Friday, 12 May

By default, the Verifier is disabled on .Net and Java Dinis Cruz
By default, the Verifier is disabled on .Net and Java Dinis Cruz
By default, the Verifier is disabled on .Net and Java Dinis Cruz
By default, the Verifier is disabled on .Net and Java Dinis Cruz
Comment on Microsoft's leaked memos, and the unofficial end of Microsoft 'Trustworthy Computing' Dinis Cruz
By default, the Verifier is disabled on .Net and Java Michael Silk
By default, the Verifier is disabled on .Net and Java Stephen de Vries

Saturday, 13 May

By default, the Verifier is disabled on .Net and Java Stephen de Vries
By default, the Verifier is disabled on .Net and Java Michael Silk
By default, the Verifier is disabled on .Net and Java Gary McGraw

Sunday, 14 May

By default, the Verifier is disabled on .Net and Java Dinis Cruz
Robert Cringely on Type Safety (well sort of :) Dinis Cruz
By default, the Verifier is disabled on .Net and Java Michael Silk
By default, the Verifier is disabled on .Net and Java j lunerwood

Monday, 15 May

By default, the Verifier is disabled on .Net and Java leichter_jerrold at emc.com
New podcast (sneak preview) Gary McGraw

Tuesday, 16 May

More irony? Gary McGraw

Thursday, 18 May

Ajax one panel Gary McGraw

Saturday, 20 May

Ajax one panel Johan Peeters
Ajax one panel Gary McGraw

Sunday, 21 May

Ajax one panel Johan Peeters
Ajax one panel John Steven
Ajax one panel Johan Peeters
Ajax one panel Gary McGraw
Ajax one panel Johan Peeters

Tuesday, 23 May

Re: [WEB SECURITY] On sandboxes, and why you should care Dinis Cruz

Wednesday, 24 May

Re: [WEB SECURITY] On sandboxes, and why you should ca re leichter_jerrold at emc.com
Re: [WEB SECURITY] On sandboxes, and why you should care Andrew van der Stock
Ajax one panel Crispin Cowan

Thursday, 25 May

STL iterator vulnerabilities Robert C. Seacord
Re: [WEB SECURITY] On sandboxes, and why you should care George Capehart
Re: [WEB SECURITY] On sandboxes, and why you should care Stephen de Vries

Friday, 26 May

Re: [WEB SECURITY] On sandboxes, and why you should care Jeff Williams
Re: On sandboxes, and why you should care Jeff Williams

Friday, 02 June

Hiring folks that are familar with SC practices McGovern, James F (HTSC, IT)

Sunday, 04 June

Hiring folks that are familar with SC practices ljknews
Hiring folks that are familar with SC practices Gunnar Peterson
Hiring folks that are familar with SC practices George Capehart

Monday, 05 June

Where are developers who know how to develop secure software? David A. Wheeler
Hiring folks that are familar with SC practices Peter G. Neumann
Where are developers who know how to develop secure software? Peter G. Neumann
Secure Application Protocol Design McGovern, James F (HTSC, IT)
SD Times Gary McGraw
Comparing Scanning Tools McGovern, James F (HTSC, IT)

Tuesday, 06 June

Secure Application Protocol Design Gunnar Peterson
Comparing Scanning Tools Joe Teff

Wednesday, 07 June

Reusable Security for Segmented Data Domains Stephen de Vries
Where are developers who know how to develop secure so ftware? leichter_jerrold at emc.com
Comparing Scanning Tools leichter_jerrold at emc.com
Comparing Scanning Tools McGovern, James F (HTSC, IT)
Samsung "gets it"! Goertzel Karen

Thursday, 08 June

Comparing Scanning Tools Gunnar Peterson
Comparing Scanning Tools Gary McGraw
Comparing Scanning Tools McGovern, James F (HTSC, IT)
SOA and security Gary McGraw
Comparing Scanning Tools Gunnar Peterson
Re: Comparing Scanning Tools Brian Chess
RE: Comparing Scanning Tools Brian Chess

Friday, 09 June

RE: Comparing Scanning Tools Gunnar Peterson
RE: Comparing Scanning Tools McGovern, James F (HTSC, IT)
RE: Comparing Scanning Tools Dave Wichers
RE: Comparing Scanning Tools Jeremy Epstein
RE: Comparing Scanning Tools ljknews

Monday, 12 June

Silver Bullet: Dan Geer Gary McGraw
managed string library Robert C. Seacord
Re: Comparing Scanning Tools (false positives) David A. Wheeler
Re: Comparing Scanning Tools (false positives) Gary McGraw
RE: Comparing Scanning Tools Michael Mucha
Re: Comparing Scanning Tools (false positives) Crispin Cowan

Tuesday, 13 June

Re: Comparing Scanning Tools (false positives) David A. Wheeler
Re: Comparing Scanning Tools (false positives) David A. Wheeler
Re: Comparing Scanning Tools (false positives) Johan Peeters

Wednesday, 14 June

Column -- "New Terrorist Profile: Phone Users" Kenneth R. van Wyk
RE: Comparing Scanning Tools John Steven

Wednesday, 21 June

Ajax security basics Kenneth Van Wyk
Ajax security basics Gunnar Peterson

Thursday, 22 June

Article -- IBM offers developers free security tools Kenneth Van Wyk

Monday, 26 June

OWASP PHP Top 5 Announcement Andrew van der Stock