<?xml version="1.0" encoding="iso-8859-1" ?>
<rss version="2.0" xmlns:s="http://updates.zdnet.com/">
<channel>
	<title><![CDATA[billy rios Resources | ZDNet]]></title>
	<link><![CDATA[http://updates.zdnet.com/tags/billy+rios.html]]></link>
	<description><![CDATA[White papers, case studies, technical articles, and blog posts relating to billy rios]]></description>
	<s:counts start="0" returned="6" found="6" />
	<language>en-us</language>
	<item>
		<title><![CDATA[Black Hat Las Vegas Day 1]]></title>
		<link><![CDATA[http://blogs.zdnet.com/security/?p=1665]]></link>
		<description><![CDATA[Well, this is well late, but here's my recap of Black Hat Day 1.  Sorry for the delay, but I've been terribly busy finishing up preparations for my Day 2 talk.    The first talk I went to see, "Pointers and Handles, A Story of Unchecked Assumptions...]]></description>
		<s:doctype><![CDATA[Blog posts]]></s:doctype>
		<pubDate>Fri, 08 Aug 2008 13:57:32 -0700</pubDate>
		<category domain="http://updates.zdnet.com/tags/billy+rios.html"><![CDATA[Billy Rios]]></category>
		<category domain="http://updates.zdnet.com/tags/black+hat.html"><![CDATA[Black Hat]]></category>
		<category domain="http://updates.zdnet.com/tags/cyberthreats.html"><![CDATA[Cyberthreats]]></category>
		<category domain="http://updates.zdnet.com/tags/nathan+mcfeters.html"><![CDATA[Nathan McFeters]]></category>
		<category domain="http://updates.zdnet.com/tags/phishing.html"><![CDATA[Phishing]]></category>
		<category domain="http://updates.zdnet.com/tags/security.html"><![CDATA[Security]]></category>
		<category domain="http://updates.zdnet.com/tags/spam.html"><![CDATA[Spam]]></category>
		<category domain="http://updates.zdnet.com/tags/spam+and+phishing.html"><![CDATA[Spam And Phishing]]></category>
		<category domain="http://updates.zdnet.com/tags/viruses+and+worms.html"><![CDATA[Viruses And Worms]]></category>
	</item>
	<item>
		<title><![CDATA[Researcher keeps 'carpet bomb' attack alive, despite patch]]></title>
		<link><![CDATA[http://blogs.zdnet.com/security/?p=1319]]></link>
		<description><![CDATA[Security research Billy Rios posted an article today about the Apple Safari "Carpet Bomb" attack, discussingÂ a new issue that,Â despite the patch which prevented a "blended" remote command execution attack when Safari was used in conjunction with IE on a Windows system, keeps the "Carpet Bomb" attack alive and well. ...]]></description>
		<s:doctype><![CDATA[Blog posts]]></s:doctype>
		<pubDate>Sat, 21 Jun 2008 01:16:20 -0700</pubDate>
		<category domain="http://updates.zdnet.com/tags/software.html"><![CDATA[Software]]></category>
		<category domain="http://updates.zdnet.com/tags/apple+safari.html"><![CDATA[Apple Safari]]></category>
		<category domain="http://updates.zdnet.com/tags/apple+inc..html"><![CDATA[Apple Inc.]]></category>
		<category domain="http://updates.zdnet.com/tags/ecosystem.html"><![CDATA[Ecosystem]]></category>
		<category domain="http://updates.zdnet.com/tags/attack.html"><![CDATA[Attack]]></category>
		<category domain="http://updates.zdnet.com/tags/billy+rios.html"><![CDATA[Billy Rios]]></category>
		<category domain="http://updates.zdnet.com/tags/security.html"><![CDATA[Security]]></category>
		<category domain="http://updates.zdnet.com/tags/nathan+mcfeters.html"><![CDATA[Nathan McFeters]]></category>
		<category domain="http://rss.financialcontent.com/stocksymbol">AAPL</category>
		<category domain="tickers">AAPL</category>
	</item>
	<item>
		<title><![CDATA[Taking ownership (pwnership) of content: Cross-site Scripting Google]]></title>
		<link><![CDATA[http://blogs.zdnet.com/security/?p=1027]]></link>
		<description><![CDATA[My good friend Billy Rios pictured to the rightÂ published another interesting exploit recently.Â  It's aÂ cross-site scripting exposure in spreadsheets.google.com, which is interesting because it's exploited by using the content-type returned by spreadsheets.google.com and a caching flaw on the part of Google.Â  Here's some details from Billy's blog:  I was...]]></description>
		<s:doctype><![CDATA[Blog posts]]></s:doctype>
		<pubDate>Wed, 16 Apr 2008 04:58:56 -0700</pubDate>
		<category domain="http://updates.zdnet.com/tags/security.html"><![CDATA[Security]]></category>
		<category domain="http://updates.zdnet.com/tags/google+inc..html"><![CDATA[Google Inc.]]></category>
		<category domain="http://updates.zdnet.com/tags/html.html"><![CDATA[HTML]]></category>
		<category domain="http://updates.zdnet.com/tags/xss.html"><![CDATA[XSS]]></category>
		<category domain="http://updates.zdnet.com/tags/domain.html"><![CDATA[Domain]]></category>
		<category domain="http://updates.zdnet.com/tags/billy+rios.html"><![CDATA[Billy Rios]]></category>
		<category domain="http://updates.zdnet.com/tags/rios.html"><![CDATA[Rios]]></category>
		<category domain="http://updates.zdnet.com/tags/nathan+mcfeters.html"><![CDATA[Nathan McFeters]]></category>
		<category domain="http://rss.financialcontent.com/stocksymbol">GOOG</category>
		<category domain="tickers">GOOG</category>
	</item>
	<item>
		<title><![CDATA[Taking ownership of content]]></title>
		<link><![CDATA[http://blogs.zdnet.com/security/?p=1005]]></link>
		<description><![CDATA[  Billy Rios covered a very interesting flaw in Google's code.google.com site on his blog today.Â  The issue involves taking ownership of content of a third party by an application and relates to research that Rios and I originally presented at DEFCON 15 last year.    Before...]]></description>
		<s:doctype><![CDATA[Blog posts]]></s:doctype>
		<pubDate>Fri, 04 Apr 2008 09:51:39 -0700</pubDate>
		<category domain="http://updates.zdnet.com/tags/domain.html"><![CDATA[Domain]]></category>
		<category domain="http://updates.zdnet.com/tags/applet.html"><![CDATA[Applet]]></category>
		<category domain="http://updates.zdnet.com/tags/jvm.html"><![CDATA[JVM]]></category>
		<category domain="http://updates.zdnet.com/tags/billy+rios.html"><![CDATA[Billy Rios]]></category>
		<category domain="http://updates.zdnet.com/tags/class+file.html"><![CDATA[Class File]]></category>
		<category domain="http://updates.zdnet.com/tags/code.html"><![CDATA[CODE]]></category>
		<category domain="http://updates.zdnet.com/tags/java.html"><![CDATA[Java]]></category>
		<category domain="http://updates.zdnet.com/tags/programming+languages.html"><![CDATA[Programming Languages]]></category>
		<category domain="http://updates.zdnet.com/tags/software+development.html"><![CDATA[Software Development]]></category>
		<category domain="http://updates.zdnet.com/tags/software%252fweb+development.html"><![CDATA[Software/Web Development]]></category>
		<category domain="http://updates.zdnet.com/tags/nathan+mcfeters.html"><![CDATA[Nathan McFeters]]></category>
	</item>
	<item>
		<title><![CDATA[Black Hat Europe 2008]]></title>
		<link><![CDATA[http://content.zdnet.com/2346-12691_22-194078.html]]></link>
		<description><![CDATA[Nate McFeters' pictures of Black Hat Europe 2008 in Amsterdam. by Nathan McFeters]]></description>
		<s:doctype><![CDATA[Image galleries]]></s:doctype>
		<pubDate>Wed, 26 Mar 2008 07:08:34 -0700</pubDate>
		<category domain="http://updates.zdnet.com/tags/black+hat.html"><![CDATA[Black Hat]]></category>
		<category domain="http://updates.zdnet.com/tags/nate+mcfeters.html"><![CDATA[Nate McFeters]]></category>
		<category domain="http://updates.zdnet.com/tags/nathan+mcfeters.html"><![CDATA[Nathan McFeters]]></category>
		<category domain="http://updates.zdnet.com/tags/news.html"><![CDATA[news]]></category>
		<category domain="http://updates.zdnet.com/tags/black+hat+europe+2008.html"><![CDATA[Black Hat Europe 2008]]></category>
		<category domain="http://updates.zdnet.com/tags/amsterdam.html"><![CDATA[Amsterdam]]></category>
		<category domain="http://updates.zdnet.com/tags/tech+action.html"><![CDATA[tech action]]></category>
		<category domain="http://updates.zdnet.com/tags/hackers.html"><![CDATA[hackers]]></category>
		<category domain="http://updates.zdnet.com/tags/dafydd.html"><![CDATA[Dafydd]]></category>
		<category domain="http://updates.zdnet.com/tags/marcus.html"><![CDATA[Marcus]]></category>
		<category domain="http://updates.zdnet.com/tags/rob+carter.html"><![CDATA[Rob Carter]]></category>
		<category domain="http://updates.zdnet.com/tags/billy+rios.html"><![CDATA[Billy Rios]]></category>
		<category domain="http://updates.zdnet.com/tags/nitesh.html"><![CDATA[Nitesh]]></category>
	</item>
	<item>
		<title><![CDATA[More Firefox URI handling security hiccups]]></title>
		<link><![CDATA[http://blogs.zdnet.com/security/?p=489]]></link>
		<description><![CDATA[Mozilla has not quite fixed the security hiccups with URI protocol handling in Firefox.    According to Billy Rios and Nate McFeters, the two security researchers behind the exposure of protocol abuse in popular Web browsers,  Firefox is still vulnerable to a remote command injection flaw that...]]></description>
		<s:doctype><![CDATA[Blog posts]]></s:doctype>
		<pubDate>Tue, 04 Sep 2007 11:14:15 -0700</pubDate>
		<category domain="http://updates.zdnet.com/tags/security.html"><![CDATA[Security]]></category>
		<category domain="http://updates.zdnet.com/tags/mozilla+firefox.html"><![CDATA[Mozilla Firefox]]></category>
		<category domain="http://updates.zdnet.com/tags/mozilla+corp..html"><![CDATA[Mozilla Corp.]]></category>
		<category domain="http://updates.zdnet.com/tags/ryan+naraine.html"><![CDATA[Ryan Naraine]]></category>
	</item>
</channel>
</rss>
