Yahoo fixes email cross-site scripting flaw

Thursday, June 26th, 2008

Yahoo has fixed a vulnerability that could allow a hacker to get access to a person's webmail account. The problem was in the way Yahoo's mail interacts with version 8.1.0.209 of its IM application, according to web application security company Cenzic. Cenzic notified Yahoo of the problem in May, and the company ...

17 Greasemonkey Scripts to Turbocharge Your Browser

Wednesday, June 25th, 2008

The Internet offers a wealth of excellent tools, information, and entertainment--and it asks very little from us in return. So don't get upset when a poorly designed online tool or site gets on your nerves; instead, use Greasemonkey, a free Firefox add-on that harnesses the power of JavaScript to right ...

New tools to block and eradicate SQL injection

Tuesday, June 24th, 2008

The MSRC released an advisory today that discusses the recent SQL injection attacks and announces three new tools to help identify and block these types of vulnerabilities. The advisory discusses the new tools, the purpose of each, and the way each complements the others. The goal of this blog post is ...

Adobe ships critical PDF Reader, Acrobat patch

Tuesday, June 24th, 2008

Adobe has shipped a critical update to patch a code execution vulnerability affecting multiple versions of its Reader and Acrobat products. According to Adobe’s advisory, the flaw “could potentially allow an attacker to take control of the affected system.” If you have Adobe Reader or Acrobat installed on your machine, this update ...

Securing Cross Site XMLHttpRequest

Monday, June 23rd, 2008

As I mentioned in my post on Cross Document Messaging, client side cross domain request is an important area of interest for AJAX developers looking for ways to avoid expensive server side proxying calls. While Cross Document Messaging is useful for allowing third party components or gadgets embedded in a ...