It is probably about time to announce that I am one of the authors of the XSS Book, RSnake talked about a month ago on his blog. The complete list of authors is: Seth Fogie, Jeremiah Grossman, Robert Hansen, Anton Rager and Petko Petkov (a.k.a me).
The book is going quite well and I hope that it will provide a good starting point for those who are interested in getting into client-side web security but don’t know much about it. The book is also designed to cover some advance topics for those who want to expand their current knowledge. I guess everybody will be happy. You can preorder it from Amazon. This is the only book on Cross-site Scripting attacks and related topics, for now, so I think that we may quickly run out of copies. I am sure that Syngress can handle it if that happens.
In the next couple of weeks I have to put a lot more afford into completing the remaining chapters, so don’t expect much of development on the GNUCITIZEN blog. Dinis Cruz is our guest blogger for this month. I am really happy about it. I am not sure what Dinis is working on but I am sure that it is something interesting.
Meanwhile, there are a lot of background stuff going on that you cannot see. Five more projects were initiated and all of them are kept underground for now. We are doing serious stuff here people! I will start working on all of them as soon as I finish my work on The XSS Book. There were some serious discussions about GNUCITIZEN future, so please give us your feedback on how you feel about the site. You can do it either by contacting us or by posting your message on the feedback topic. You can also put your comments right after this article. Thanks.
DeadOnArrival responds:
Petko!
It is good that such professional web security guys will write such interesting security book (about XSS). I wish good luck to you, and RSnake and all authors’ team and to your new book!
And I am glad that you will be the 5th author with Jeremiah, RSnake and other guys. I feel that it will be 5th author and here it is. It is good to
see you with these famous security experts in team.
You need to contact Amazon :-), and tell them to put Petko Petkov to the list of the authors, because there is no your name in the list. And it is not good. Amazon need to add Pdp to the list! Every author need a portion of attention.
Don’t forget to write about all of types of XSS in the book. Write a chapter about UXSS and a chapter about XSS on SEO (black seo) ;-). And about many other interesting things.
P.S.
You also need to attend to security of your own site. As I planning to tell you for a long time already, there are many XSS holes at your site! So wait for my detailed letter.