Comments on: The Almost Hopeless Challenge Of Web Security http://techcrunch.com/2009/08/31/the-almost-hopeless-challenge-of-web-security/ Startup and Technology News Fri, 16 Mar 2012 08:03:57 +0000 hourly 1 http://wordpress.com/ By: If Web 2.0, then IT Security 2.0 « ::: Smart Oze Blog ::: http://techcrunch.com/2009/08/31/the-almost-hopeless-challenge-of-web-security/#comment-23697 Tue, 30 Mar 2010 03:47:45 +0000 http://www.techcrunchit.com/?p=3459#comment-23697 [...] case we need some examples of the bad news, just in the last few days see here, here, here, and [...]

]]> By: sfdghsdfd http://techcrunch.com/2009/08/31/the-almost-hopeless-challenge-of-web-security/#comment-23696 Mon, 28 Sep 2009 02:57:15 +0000 http://www.techcrunchit.com/?p=3459#comment-23696 http://www.voguemalls.com
HOT SELL: Ed hardy/ lacoste/ polo/ ca/ A&F Tshirt :$12
coach/ gucci/ lv/ ed hardy/ D&G/ Fendi handbag :$35
nike jordan(1-24)/ jordan ring/ nike shox/ air max/ af1/ Dunk :$32
lv/ ed hardy/ gucci/ coach/ lacoste/ timbland :$35
gucci/ ed hardy/ coogi/ evisu/ prada jeans:$30
New era/ gucci/ ed hardy cap:$13
Okely/ gucci/ D&G/ fendi/ coach/ armani sunglass:$15

nike shoes: 32 $, des jeans: 30 $, ed hardy, t-shirts: 12 $, NLF: 20 $, un entra?neur à main: 35 $, bottes UGG: 50 $

]]> By: RubyOnRails XSS Vulnerability Claims Twitter, Basecamp And My Confidence | Submitter http://techcrunch.com/2009/08/31/the-almost-hopeless-challenge-of-web-security/#comment-23695 Tue, 08 Sep 2009 14:35:01 +0000 http://www.techcrunchit.com/?p=3459#comment-23695 [...] was only three days ago that I wrote about the almost hopeless challenge of web security, specifically around new vectors [...]

]]> By: RubyOnRails XSS Vulnerability Claims Twitter, Basecamp And My Confidence | Codedstyle http://techcrunch.com/2009/08/31/the-almost-hopeless-challenge-of-web-security/#comment-23694 Sat, 05 Sep 2009 12:01:23 +0000 http://www.techcrunchit.com/?p=3459#comment-23694 [...] was only three days ago that I wrote about the almost hopeless challenge of web security, specifically around new vectors [...]

]]> By: BlogBuzz September 5, 2009 http://techcrunch.com/2009/08/31/the-almost-hopeless-challenge-of-web-security/#comment-23693 Sat, 05 Sep 2009 10:24:56 +0000 http://www.techcrunchit.com/?p=3459#comment-23693 [...] The Almost Hopeless Challenge Of Web Security [...]

]]> By: RubyOnRails XSS Vulnerability Claims Twitter, Basecamp And My Confidence | Technology http://techcrunch.com/2009/08/31/the-almost-hopeless-challenge-of-web-security/#comment-23692 Sat, 05 Sep 2009 01:01:57 +0000 http://www.techcrunchit.com/?p=3459#comment-23692 [...] was only three days ago that I wrote about the almost hopeless challenge of web security, specifically around new vectors [...]

]]> By: Techcrunch » Blog Archive » RubyOnRails XSS Vulnerability Claims Twitter, Basecamp And My Confidence http://techcrunch.com/2009/08/31/the-almost-hopeless-challenge-of-web-security/#comment-23691 Fri, 04 Sep 2009 22:15:13 +0000 http://www.techcrunchit.com/?p=3459#comment-23691 [...] was only three days ago that I wrote about the almost hopeless challenge of web security, specifically around new vectors [...]

]]> By: Rick Lebherz http://techcrunch.com/2009/08/31/the-almost-hopeless-challenge-of-web-security/#comment-23690 Fri, 04 Sep 2009 19:14:26 +0000 http://www.techcrunchit.com/?p=3459#comment-23690 Good article.

I think the nature of the challenge isnt just with in IT and the Tech world. It comes down to human nature and pushing the limits of what is possible.

As long as someone creates something of value, someone else will be there trying to pick it a part and poke holes in it. Hopefully the intention is to improve and alert the community and not leverage this for personal gain. But many people are selfish creatures. All you can do is try and stay ahead of the curve.

Also along the same lines in case you missed it, OpSource is improving Cloud Security and performance to meet enterprise expectations and requirements. A multitiered architecture, firewalls and load balancing standard (not an option), dedicated private VLANs, Encryptions, SAS 70…yada yada yada…check it out

http://www.techcrunchit.com/2009/08/27/opsource-unveils-hybrid-cloud-solution-for-the-enterprise/

]]> By: RubyOnRails XSS Vulnerability Claims Twitter, Basecamp And My Confidence http://techcrunch.com/2009/08/31/the-almost-hopeless-challenge-of-web-security/#comment-23689 Fri, 04 Sep 2009 06:59:52 +0000 http://www.techcrunchit.com/?p=3459#comment-23689 [...] was only three days ago that I wrote about the almost hopeless challenge of web security, specifically around new vectors [...]

]]> By: SpaceMan http://techcrunch.com/2009/08/31/the-almost-hopeless-challenge-of-web-security/#comment-23688 Fri, 04 Sep 2009 02:34:53 +0000 http://www.techcrunchit.com/?p=3459#comment-23688 If PHP is the center of Web technology… PHP will stand for Pretty Hopeless PHP

]]> By: Today Free Tips http://techcrunch.com/2009/08/31/the-almost-hopeless-challenge-of-web-security/#comment-23687 Wed, 02 Sep 2009 16:19:34 +0000 http://www.techcrunchit.com/?p=3459#comment-23687 [...] has dropped over the years as our trust in our favorite services grows Yet all the while the… read more or search more on challenge hopeless web » Other posts in Marketing”TheTime is Now” For [...]

]]> By: The Almost Hopeless Challenge Of Web Security « Jared Rimer’s Technology blog and podcast http://techcrunch.com/2009/08/31/the-almost-hopeless-challenge-of-web-security/#comment-23686 Wed, 02 Sep 2009 05:51:23 +0000 http://www.techcrunchit.com/?p=3459#comment-23686 [...] The Almost Hopeless Challenge Of Web Security. [...]

]]> By: David Koretz http://techcrunch.com/2009/08/31/the-almost-hopeless-challenge-of-web-security/#comment-23685 Wed, 02 Sep 2009 03:14:44 +0000 http://www.techcrunchit.com/?p=3459#comment-23685 There are a lot of smart people working on this problem such as White Hat Security, Mykonos Software, Fortify, and others.

The end result is going to be a strategy that attacks multiple layers via code scanning, code-level protection, intrusion detection, etc.

It’s no different than physical security: you lock your doors, and buy an alarm system.

The real problem is that the average developer is not trained on application security, and under the pressure of corporate deadlines builds features, not security.

]]> By: sh http://techcrunch.com/2009/08/31/the-almost-hopeless-challenge-of-web-security/#comment-23684 Tue, 01 Sep 2009 21:23:26 +0000 http://www.techcrunchit.com/?p=3459#comment-23684 Federal Authority Over the Internet? The Cybersecurity Act of 2009

http://www.eff.org/deeplinks/2009/04/cybersecurity-act

]]> By: sh http://techcrunch.com/2009/08/31/the-almost-hopeless-challenge-of-web-security/#comment-23683 Tue, 01 Sep 2009 21:20:03 +0000 http://www.techcrunchit.com/?p=3459#comment-23683 Read this about another security issue:

http://www.eff.org/deeplinks/2009/04/cybersecurity-act

Federal Authority Over the Internet? The Cybersecurity Act of 2009

]]> By: Hristo Bojinov http://techcrunch.com/2009/08/31/the-almost-hopeless-challenge-of-web-security/#comment-23682 Tue, 01 Sep 2009 19:22:07 +0000 http://www.techcrunchit.com/?p=3459#comment-23682 To add to the problem, many devices now feature multiple interfaces that can be used as alternative injection points into the browser. We call this cross-channel scripting (XCS) in a recent talk:

http://bojinov.org/professional/BH09_EMI.pdf
http://seclab.stanford.edu/websec/embedded/

]]> By: ambert ho http://techcrunch.com/2009/08/31/the-almost-hopeless-challenge-of-web-security/#comment-23681 Tue, 01 Sep 2009 17:48:47 +0000 http://www.techcrunchit.com/?p=3459#comment-23681 “browser manufacturers themselves do not completely understand the issues involved, and in some cases are moving backwards (ie. the new IE8 is now allowing XmlHttpRequest across-ports)”

Curious, what’s the big deal with allowing XHRs to any port?

The API only allows you to initialize the xhr to make HTTP requests with HTTP headers (so it’s not like I can open an FTP request, or start arbitrarily talking SQL to port 3306) and even with the IE8 change it’s not like you can open connections to other servers – Same-Origin-Policy is still enforced, just not to the same port.

So I don’t really see how this makes the browser less secure – seems like it was just a feature added to better support SOAP, REST, etc. since some people are going to have their web services listening on nonstandard ports.

]]> By: Angela Hayden http://techcrunch.com/2009/08/31/the-almost-hopeless-challenge-of-web-security/#comment-23680 Tue, 01 Sep 2009 17:44:04 +0000 http://www.techcrunchit.com/?p=3459#comment-23680 I’m just a simple graphic designer trying to start an online audio tour business and it has been HELL! I can’t express in words how much I hate Dreamweaver, Notepad++, CSS, PHP, etc. I’m a starving artist so I have to do everything myself and I also wanted to host everything myself. Instead I’m having to pay E-Junkie to host my mp3 files. My hosting company can’t even send me instructions on how to stop someone from sending emails from my business account. My head is spinning from all the e-cart solutions.

AnyHoo, thanks for listening. I have to go produce 100 images in photoshop for another project. Oh yea, my shitty site is http://www.hereandthereaudiotours.com I’m editing the page now with a set-up css template using notepad++. I have much work to do.

Okay, now I’m crying. Damn it. And another thing, in the last year and a half I’ve lost data on 3 external hard drives. I’m going to bomb my office. I really have to go now.

]]> By: The Almost Hopeless Challenge Of Web Security | BIT Blog http://techcrunch.com/2009/08/31/the-almost-hopeless-challenge-of-web-security/#comment-23679 Tue, 01 Sep 2009 14:19:22 +0000 http://www.techcrunchit.com/?p=3459#comment-23679 [...] at ‘cross-site scripting’ one of the latest ‘online security can-of-worms’. Click here to read the original [...]

]]> By: ScriptBasic http://techcrunch.com/2009/08/31/the-almost-hopeless-challenge-of-web-security/#comment-23678 Tue, 01 Sep 2009 12:00:04 +0000 http://www.techcrunchit.com/?p=3459#comment-23678 It is when you use something BCX Basic to C or BaCon Basic to C to produce fast, small CGI (compiled) scripts.

]]>