post avatar

Hijacking Innocent Frames

Magic tricks are all about suggestion, psychology, misdirection and showmanship (see Tricks of the Mind), or as Cutter perhaps will say, every magic trick has tree parts: the pledge (where the magician shows you something ordinary), the turn (where the ordinary becomes something extraordinary), and the prestige (where the extraordinary turns into something you have never seen before). [...]

» more | » comments | » comments rss | posted by pdp
post avatar

Gmail Security Flaw

I woke up today to realize that GNUCITIZEN’s web server is bombarded with requests. Good that we are running from a scalable infrastructure. The reason for the storm was a recent disclosure of apparently new Gmail bug similar to the one which I partially and than fully disclosed here, of course after working with the vendor to resolve the problem, which is always the right thing to do.

ReadWriteWeb has a time line on the history of this attack here. Very nice summary I must say. [...]

» more | » comments | » comments rss | posted by pdp

test your web apps with websecurify application security testing runtime

The Others

from the creators of GNUCITIZEN we bring to you...