Secure Coding: by thread

Secure Coding: by thread

Previous period

156 messages starting Apr 02 06 and ending Jun 26 06
Date index | Thread index | Author index

Re: [Owasp-dotnet] RE: 4 Questions: Latest IE vulnerability, Firefox vs IE security, User vs Admin risk profile, and browsers coded in 100% Managed Verifiable code Crispin Cowan (Apr 02)
- Re: [Owasp-dotnet] RE: 4 Questions: Latest IE vulnerability, Firefox vs IE security, User vs Admin risk profile, and browsers coded in 100% Managed Verifiable code Pascal Meunier (Apr 03)
  - Re: [Owasp-dotnet] RE: 4 Questions: Latest IE vulnerability, Firefox vs IE security, User vs Admin risk profile, and browsers coded in 100% Managed Verifiable code Crispin Cowan (Apr 04)
Segments, eh Smithers? Crispin Cowan (Apr 03)
- Segments, eh Smithers? ljknews (Apr 04)
  - Segments, eh Smithers? Michael S Hines (Apr 04)
- Segments, eh Smithers? der Mouse (Apr 04)
- Segments, eh Smithers? Blue Boar (Apr 04)
- Segments, eh Smithers? Steven M. Bellovin (Apr 04)
- Segments, eh Smithers? Aleksander P. Czarnowski (Apr 04)
- <Possible follow-ups>
- Segments, eh Smithers? karger at watson.ibm.com (Apr 04)
advice from the past Steven M. Bellovin (Apr 04)
Underhanded C contest Kenneth R. van Wyk (Apr 05)
AJAX: Is your application secure enough? Kenneth R. van Wyk (Apr 05)
Some different ways to authenticate people Glenn Everhart (Apr 05)
4 Questions: Latest IE vulnerability, Firefox vs IE security, User vs Admin risk profile, and browsers coded in 100% Managed Verifiable code Dinis Cruz (Apr 06)
- 4 Questions: Latest IE vulnerability, Firefox vs IE security, User vs Admin risk profile, and browsers coded in 100% Managed Verifiable code ljknews (Apr 06)
- <Possible follow-ups>
- 4 Questions: Latest IE vulnerability, Firefox vs IE security, User vs Admin risk profile, and browsers coded in 100% Managed Verifiable code Dinis Cruz (Apr 06)
  - 4 Questions: Latest IE vulnerability, Firefox vs IE security, User vs Admin risk profile, and browsers coded in 100% Managed Verifiable code ljknews (Apr 06)
    - 4 Questions: Latest IE vulnerability, Firefox vs IE security, User vs Admin risk profile, and browsers coded in 100% Managed Verifiable code der Mouse (Apr 07)
[Owasp-dotnet] RE: 4 Questions: Latest IE vulnerability, Firefox vs IE security, Uservs Admin risk profile, and browsers coded in 100% Managed Verifiable code Dinis Cruz (Apr 06)
4 Questions: Latest IE vulnerability, Firefox vs IE security, Uservs Admin risk profile, and browsers coded in 100% Managed Verifiable code Dinis Cruz (Apr 06)
Managed Code and Runtime Environments - Another layer of added security? Dinis Cruz (Apr 06)
YAI (yet another interview) Gary McGraw (Apr 07)
IEEE S&P: malware Gary McGraw (Apr 18)
HNS - A Modular Approach to Data Validation in Web Applications Kenneth R. van Wyk (Apr 21)
Another example of the futility of hardwareless 2 factor authentication Glenn Everhart (Apr 25)
- Another example of the futility of hardwareless 2 factor authentication der Mouse (Apr 26)
New security website: darkreading Gary McGraw (May 01)
- Vista and the Type Safe missed oportunity (was Re: New security website: darkreading ) Dinis Cruz (May 01)
  - Vista and the Type Safe missed oportunity (was Re: New security website: darkreading ) George Capehart (May 01)
  - Message not available
    - Why Novell should take on the 'type-safe platform' challenge Dinis Cruz (May 09)
Secure Software Architecture, Design, Implementation and Assurance CFP Robert C. Seacord (May 01)
By default, the Verifier is disabled on .Net and Java Dinis Cruz (May 02)
- By default, the Verifier is disabled on .Net and Java Jeff Williams (May 02)
  - By default, the Verifier is disabled on .Net and Java Dinis Cruz (May 04)
    - [Owasp-dotnet] Re: By default, the Verifier is disabled on .Net and Java Michael Silk (May 04)
    - By default, the Verifier is disabled on .Net and Java Jeff Williams (May 04)
    - Message not available
    - Message not available
    - Message not available
    - By default, the Verifier is disabled on .Net and Java Stephen de Vries (May 12)
    - By default, the Verifier is disabled on .Net and Java Michael Silk (May 13)
  - By default, the Verifier is disabled on .Net and Java Dinis Cruz (May 08)
    - By default, the Verifier is disabled on .Net and Java Michael Silk (May 08)
    - By default, the Verifier is disabled on .Net and Java Dinis Cruz (May 12)
    - By default, the Verifier is disabled on .Net and Java Michael Silk (May 12)
- By default, the Verifier is disabled on .Net and Java Stephen de Vries (May 03)
  - By default, the Verifier is disabled on .Net and Java Dinis Cruz (May 08)
    - By default, the Verifier is disabled on .Net and Java Michael Silk (May 08)
    - By default, the Verifier is disabled on .Net and Java Stephen de Vries (May 10)
    - By default, the Verifier is disabled on .Net and Java Dinis Cruz (May 12)
    - By default, the Verifier is disabled on .Net and Java Stephen de Vries (May 13)
- <Possible follow-ups>
- By default, the Verifier is disabled on .Net and Java Wall, Kevin (May 02)
  - By default, the Verifier is disabled on .Net and Java David Eisner (May 03)
    - By default, the Verifier is disabled on .Net and Java Dinis Cruz (May 03)
    - By default, the Verifier is disabled on .Net and Java Tim Hollebeek (May 04)
    - By default, the Verifier is disabled on .Net and Java Dinis Cruz (May 12)
- By default, the Verifier is disabled on .Net and Java Wall, Kevin (May 03)
  - By default, the Verifier is disabled on .Net and Java Michael Silk (May 03)
  - By default, the Verifier is disabled on .Net and Java Dinis Cruz (May 03)
    - By default, the Verifier is disabled on .Net and Java David Eisner (May 04)
    - By default, the Verifier is disabled on .Net and Java Stephen de Vries (May 04)
  - By default, the Verifier is disabled on .Net and Java Dinis Cruz (May 03)
    - By default, the Verifier is disabled on .Net and Java Michael Silk (May 04)
- By default, the Verifier is disabled on .Net and Java Gary McGraw (May 04)
- By default, the Verifier is disabled on .Net and Java David Eisner (May 04)
- By default, the Verifier is disabled on .Net and Java Stephen de Vries (May 04)
- By default, the Verifier is disabled on .Net and Java Gary McGraw (May 05)
- By default, the Verifier is disabled on .Net and Java Wall, Kevin (May 08)
- By default, the Verifier is disabled on .Net and Java Gary McGraw (May 08)
- By default, the Verifier is disabled on .Net and Java Gary McGraw (May 09)
  - By default, the Verifier is disabled on .Net and Java Dinis Cruz (May 12)
- By default, the Verifier is disabled on .Net and Java Jeff Williams (May 11)
  - By default, the Verifier is disabled on .Net and Java Michael Silk (May 11)
    - By default, the Verifier is disabled on .Net and Java David Eisner (May 11)
- By default, the Verifier is disabled on .Net and Java Gary McGraw (May 13)
  - Message not available
    - By default, the Verifier is disabled on .Net and Java Dinis Cruz (May 14)
    - By default, the Verifier is disabled on .Net and Java Michael Silk (May 14)
- By default, the Verifier is disabled on .Net and Java j lunerwood (May 14)
- By default, the Verifier is disabled on .Net and Java leichter_jerrold at emc.com (May 15)
HNS - Biggest X Window security hole since 2000 Kenneth R. van Wyk (May 04)
- HNS - Biggest X Window security hole since 2000 Gadi Evron (May 04)
  - HNS - Biggest X Window security hole since 2000 Kenneth R. van Wyk (May 04)
    - HNS - Biggest X Window security hole since 2000 Greenarrow 1 (May 04)
- HNS - Biggest X Window security hole since 2000 ljknews (May 05)
  - HNS - Biggest X Window security hole since 2000 der Mouse (May 06)
    - HNS - Biggest X Window security hole since 2000 Robert C. Seacord (May 08)
    - HNS - Biggest X Window security hole since 2000 Tim Hollebeek (May 08)
  - HNS - Biggest X Window security hole since 2000 Florian Weimer (May 07)
WSJ.com - Tech Companies Check Software Earlier for Flaws Kenneth R. van Wyk (May 05)
Re: WSJ.com - Tech Companies Check Software Mark Graff (May 06)
Tech target interview Gary McGraw (May 09)
Black Hat class: Advanced Asp.Net Exploits and Countermeasures Dinis Cruz (May 10)
Comment on Microsoft's leaked memos, and the unofficial end of Microsoft 'Trustworthy Computing' Dinis Cruz (May 12)
Robert Cringely on Type Safety (well sort of :) Dinis Cruz (May 14)
New podcast (sneak preview) Gary McGraw (May 15)
More irony? Gary McGraw (May 16)
Ajax one panel Gary McGraw (May 18)
- Ajax one panel Johan Peeters (May 20)
- Ajax one panel Crispin Cowan (May 24)
- <Possible follow-ups>
- Ajax one panel Gary McGraw (May 20)
  - Ajax one panel Johan Peeters (May 21)
    - Ajax one panel John Steven (May 21)
    - Ajax one panel Johan Peeters (May 21)
- Ajax one panel Gary McGraw (May 21)
  - Ajax one panel Johan Peeters (May 21)
Re: [WEB SECURITY] On sandboxes, and why you should care Dinis Cruz (May 23)
- Re: [WEB SECURITY] On sandboxes, and why you should care Andrew van der Stock (May 24)
- Re: [WEB SECURITY] On sandboxes, and why you should care George Capehart (May 25)
- Re: [WEB SECURITY] On sandboxes, and why you should care Stephen de Vries (May 25)
- Re: [WEB SECURITY] On sandboxes, and why you should care Jeff Williams (May 26)
Re: [WEB SECURITY] On sandboxes, and why you should ca re leichter_jerrold at emc.com (May 24)
STL iterator vulnerabilities Robert C. Seacord (May 25)
Re: On sandboxes, and why you should care Jeff Williams (May 26)
Hiring folks that are familar with SC practices McGovern, James F (HTSC, IT) (Jun 02)
- Hiring folks that are familar with SC practices ljknews (Jun 04)
  - Hiring folks that are familar with SC practices Gunnar Peterson (Jun 04)
- Hiring folks that are familar with SC practices George Capehart (Jun 04)
- <Possible follow-ups>
- Hiring folks that are familar with SC practices Peter G. Neumann (Jun 05)
Where are developers who know how to develop secure software? David A. Wheeler (Jun 05)
Where are developers who know how to develop secure software? Peter G. Neumann (Jun 05)
Secure Application Protocol Design McGovern, James F (HTSC, IT) (Jun 05)
- Secure Application Protocol Design Gunnar Peterson (Jun 06)
SD Times Gary McGraw (Jun 05)
Comparing Scanning Tools McGovern, James F (HTSC, IT) (Jun 05)
- Comparing Scanning Tools Joe Teff (Jun 06)
- <Possible follow-ups>
- Comparing Scanning Tools leichter_jerrold at emc.com (Jun 07)
- Comparing Scanning Tools McGovern, James F (HTSC, IT) (Jun 07)
  - Comparing Scanning Tools Gunnar Peterson (Jun 08)
- Comparing Scanning Tools Gary McGraw (Jun 08)
- Comparing Scanning Tools McGovern, James F (HTSC, IT) (Jun 08)
  - Comparing Scanning Tools Gunnar Peterson (Jun 08)
- Re: Comparing Scanning Tools Brian Chess (Jun 08)
- RE: Comparing Scanning Tools Brian Chess (Jun 08)
  - RE: Comparing Scanning Tools Gunnar Peterson (Jun 09)
- RE: Comparing Scanning Tools McGovern, James F (HTSC, IT) (Jun 09)
  - RE: Comparing Scanning Tools Dave Wichers (Jun 09)
- RE: Comparing Scanning Tools Jeremy Epstein (Jun 09)
  - RE: Comparing Scanning Tools ljknews (Jun 09)
  - RE: Comparing Scanning Tools Michael Mucha (Jun 12)
- RE: Comparing Scanning Tools John Steven (Jun 14)
Reusable Security for Segmented Data Domains Stephen de Vries (Jun 07)
Where are developers who know how to develop secure so ftware? leichter_jerrold at emc.com (Jun 07)
Samsung "gets it"! Goertzel Karen (Jun 07)
SOA and security Gary McGraw (Jun 08)
Silver Bullet: Dan Geer Gary McGraw (Jun 12)
- managed string library Robert C. Seacord (Jun 12)
Re: Comparing Scanning Tools (false positives) David A. Wheeler (Jun 12)
- Re: Comparing Scanning Tools (false positives) Crispin Cowan (Jun 12)
  - Re: Comparing Scanning Tools (false positives) Johan Peeters (Jun 13)
    - Re: Comparing Scanning Tools (false positives) David A. Wheeler (Jun 13)
- <Possible follow-ups>
- Re: Comparing Scanning Tools (false positives) Gary McGraw (Jun 12)
  - Re: Comparing Scanning Tools (false positives) David A. Wheeler (Jun 13)
Column -- "New Terrorist Profile: Phone Users" Kenneth R. van Wyk (Jun 14)
Ajax security basics Kenneth Van Wyk (Jun 21)
- Ajax security basics Gunnar Peterson (Jun 21)
Article -- IBM offers developers free security tools Kenneth Van Wyk (Jun 22)
OWASP PHP Top 5 Announcement Andrew van der Stock (Jun 26)

Previous period