Verified by Visa Confirmed Dangerous
New research from the University of Cambridge supports the view that Verified by Visa is deeply flawed and unsafe. I first came across this mess of an implementation a while […]
New research from the University of Cambridge supports the view that Verified by Visa is deeply flawed and unsafe. I first came across this mess of an implementation a while […]
By default, Tomcat stores passwords in server.xml in clear text, which can lead to obvious security lapses. The easiest way to mitigate against user account compromise is to use a […]
I spent part of today scratching my head and dredging up long-forgotten details of the .Net Framework and C# over at BrainBench.com – to my relief, I didn’t disgrace myself: […]
I went to the ACCU Spring Conference 2006 last week. There were some interesting sessions, as usual. XSLT2 and XPath2 Version 1 of XSLT and XPath were fairly limited in […]
Secunia is an excellent site, listing outstanding and historic vulns for all major (and many minor) software products. For exmaple, compare security flaws for DotNetNuke with the flaws for PHP-Nuke. […]