Arşiv

Günlük Okunma : 4 | 28.07.2007

2006 and 2007 in security community came with heavy full disclosure potentially because of the increasing popularity of XSS attacks and Web 2.0, so-called social networking etc. People started to publicly disclose XSS vulnerabilities, SQL Injection issues and even remote code execution issues in public websites. If you check out websites like XSSed - a public XSS database, sqlinject.blogspot - not well known one for public list of SQL Injection vulnerabilities and Full Disclosure forum of sla.ckers and especially famous so it's begin thread, you will see what I mean. There......

Günlük Okunma : 2 | 26.07.2007

If haven't heard about The Pwnie Awards yet, The Pwnie Awards is; an annual award ceremony celebrating (or making fun of) the achivements and failures of security researchers and the wider security community. It sounds like funny, looking forward to see winners!...

Günlük Okunma : 1 | 18.09.2004

McAffee geçen ay özellikle web uygulaması konusunda uzman olan ve çok sağlam bir firma olan Foundstone nu aldığını duyurmuştu. Şimdi de bir güvenlik devi olan Symantec dünyanın bir numaralı güvenlik firması sayılabilecek (eski sağlam hackerları da içinde barındıran L0pth Heavy Industries gibi) @stake' i aldığını duyurdu. Slashdot Ayağı, Slashdot' ta ilgimi çeken bir diyalog şu oldu; - Anyone else shedding a tear at what l0pht heavy industries has become? - They've found a way to legally make money hacking? Her aile hackerının rüyası değil mi ki bu ?...