cross-site request forgery Resources

Sponsored White Papers, Webcasts, and Downloads

ZDNet Resources

Not scared about Cross-Site Request Forgery? You should be... you're scared of jail aren't you?: Not scared about Cross-Site Request Forgery? You should be... you're scared of jail aren't you?You are right.I see it updating a few times per month so there are more and more problems found. I will never tell anyone they are absolutely secure (ok, not networked, you are...; Tags: PRODUCTIVITY, SECURITY, NoScript, Cross-Site Request Forgery, CSRF; Discussion threads 2008-03-20

Additional Resources

Appearance: PPUG meets tomorrow in Philly: If you're in the Philadelphia area I'd like to invite you to attend the Philadelphia PowerBook User Group PPUG meeting tomorrow at the Manayunk Brewery and Restaurant. We meet from 12 noon to 3pm over lunch and fine local beer. Want to debate my theory on...; Tags: Apple iPhone, Philadelphia, 3G, Cellular Phones, Wireless, Consumer Electronics, Personal Technology, Jason D. O\'Grady; Blog posts 2008-07-25
iPhone gas application roundup: On 18 June 2008 I published my iPhone app wishlist and I'm happy that most of my most requested applications have been released (Thank you Texas Hold'Em!). Two my most request applications dealt with fuel, specifically a fuel economy tracker and a cheap gas finder. Several iterations...; Tags: Apple iPhone, Vehicle, MPG, AccuFuel, Gas Finder, Roi/Tco, GPS, 3G, Handhelds, Finance, Managerial Accounting, Consumer Electronics, Personal Technology, Cellular Phones, Hardware, Jason D. O\'Grady; Blog posts 2008-07-25
Software makers may sue eBay: Tired of being "stiff-armed" by eBay, the Software and Information Industry Association is signaling its ready to sue over pirated software sales on the dominant online auction site, PC World reports. SIIA has offered eBay several suggestions for stemming the sale of pirated software on...; Tags: Software, Software Information Industry Association, eBay Inc., Tiffany, Tools & Techniques, Piracy, Sales Strategy, Management, Business Operations, Corporate Law, Sales, Richard Koman; Blog posts 2008-07-25
What paper trail?: I've been carting around my latest sheaf of press releases about the green-ness of electronic document technology for weeks now. Yes, as I've blogged before, I am still one of those people who can't help printing out certain emails in order to act on them. Yes, it's bad, I know....; Tags: Xerox Corp., Paper Trail, Survey, Printers, Data Centers, Marketing Research, Hardware, Peripherals, Storage, Data Management, Marketing, Heather Clancy; Blog posts 2008-07-25

Cool Tools - Slingpage extends stickies and sharing to Firefox users: Slingpage, which announced its social browsing extension for Internet Explorer last month, will introduce an equally feature-rich version of its service to Mozilla Firefox users next week. Slingpage offers a way for Web surfers to find information about favorite topics via "Slingcast" feeds as well as create...; Tags: Monitor, Mozilla Firefox, Note, Tool, Slingpage, Web Browsers, Monitors & Displays, Internet, Hardware, Components, Jennifer Leggio; Blog posts 2008-07-25
iPhone 2.0 jailbreaker for iPhone 2g/3g is available: The iPhone DevTeam blog has released the development sources for their tool xpwn version 0.3. This tool is the firmware 2.0 version of the team's "cross-platform jailbreaking library/command-line utility". The team claims it has been tested on Linux, Windows XP, and Windows Vista for both the iPhone 2g and the...; Tags: Apple iPhone, 3G, Microsoft Windows, Team Management, Productivity, Cellular Phones, Wireless, Consumer Electronics, Personal Technology, Operating Systems, Software, Management, Nathan McFeters; Blog posts 2008-07-25
How OpenDNS, PowerDNS and MaraDNS remained unaffected by the DNS cache poisoning vulnerability: The short answer is being paranoid about tackling a known vulnerability. It's 2001, and Daniel J. Bernstein DJB, author of the then popular djbdns security-aware DNS implementation, is applying basic math principles to raise awareness on what's to turn into the "sky is falling" critical Internet vulnerability in 2008, in...; Tags: DNS, Vulnerability, Anomaly, Attack, OpenDNS, MaraDNS, NSS, Domain Names, Networking, Internet, Dancho Danchev; Blog posts 2008-07-25
Heap-based buffer overflow reported in RealNetworks RealPlayer: Update 07/25/2008: Aaron Portnoy of TippingPoint's security research group was kind enough to point out that I'm actually not affected by this, since I've installed the newest version of RealPlayer. From Aaron's email: Notice the Secunia advisory states it affects RealPlayer 10.5... the latest is 11.x, which now uses...; Tags: Vulnerability, RealNetworks Inc., Buffer-overflow, RealNetworks RealPlayer, Secunia Research, Vendor, Digital Music, Digital Media, Personal Technology, Consumer Electronics, Nathan McFeters; Blog posts 2008-07-25
'Branded community' leads to trademark morass: After publishing a guest blog on enterprise communities, I received what appeared to be a cross between a sales pitch and cease-and-desist email from a branding business. How is this approach good branding? by Jennifer Leggio; Tags: Community, Branding, Marketing, Jennifer Leggio; Blog posts 2008-07-25
Dell opts for performance with R5400 data center-hosted desktop: Dell unveiled its data center-hosted desktop product line on Tuesday. Unlike rivals Hewlett-Packard and IBM, Dell didn't build its solution on blade servers but instead opted for a high performance system using a 2U box called the Dell Precision R5400 Rack Workstation. "By not putting the solution...; Tags: Dell Computer Corp., Performance, R5400, Workstations, Desktops, Servers, Hardware, Jason Hiner; Blog posts 2008-07-24
Ready for real Indian medicine?: Ready for real Indian medicine?Reply from C.A. ChienDear Mr. Blankenhorn:Thanks for your note. To clarify: (1) I wanted to document my inventive system-design and inter-connection work on [i]Medical Onshoring[/i]; thus, the USPTO filing; (2) as to the "how," head to --http://tinyurl.com/6c4tj4" .. Covering the professional world (e.g., health care, computing),...; Tags: Vertical industries, Benefits, Medical Onshoring, health care; Discussion threads 2008-07-24
Kaminsky suggests long-term fix will still have to be determined, but patch now, or pay soon: Kaminsky suggests long-term fix will still have to be determined, but patch now, or pay soonTTLSomething I wish I'd asked during the webcast and which I can't quite get my head around:It was said that setting a long TTL doesn't help because of the way delegation works - has to...; Tags: Domain names, DNS server, TTL, server, Kaminsky; Discussion threads 2008-07-24
Sony Reader PRS-505 gets a major firmware upgrade: My Sony Reader is an excellent piece of hardware that I thoroughly enjoy using during my daily commute. I skipped the Amazon Kindle and bought the Sony Reader and have not been one bit sorry about this purchase I made last fall. I just saw on my favorite eBook site,...; Tags: Sony Corp., Firmware, Sony Reader, Firmware Upgrade, Sony Reader PRS-505, E-books, Personal Technology, Matthew Miller; Blog posts 2008-07-24
HTC Touch Diamond ROM update adds 850 MHz support and much more: I've written a few posts about the HTC Touch Diamond and my last one discussed some of the issues I was seeing with the device. I like to visit the XDA Developers site for the tweaking they do to the HTC devices, but it is kind of gray area when...; Tags: ROM, High Tech Computer Corp., HTC Touch, Matthew Miller; Blog posts 2008-07-24
Another student hacks another police website: Another student hacks another police websiteRE: Another student hacks another police websitethey should probably code their site correctly with decent form validatation and revalidation, so that SQL injection attacks like this don't work. It's not that hard!; Tags: Web site development, Web technology, police website, Web site; Discussion threads 2008-07-24
Google + Digg = ?: There's a persistent rumor that crops up every few months about social news site Digg being acquired by ____ insert company here. The latest, citing "multiple sources inside and outside Google", says that Google will buy Digg for $200M. This is similar to a rumor in March that Digg was...; Tags: Google Inc., Digg, Ed Burnette; Blog posts 2008-07-24
Microsoft to get more 'Apple-like' in PC, phone space: Microsoft to get more 'Apple-like' in PC, phone spaceMicrosoft Store in the works...My rep told me Microsoft is looking into significant retail space in higher end upscale shopping malls. In the mock-up of the store, boxes of Vista and Office 2007 were kept under lock and key. Customers will be...; Tags: Desktops, Microsoft Corp., Apple Inc., PC phone, PC, phone; Discussion threads 2008-07-24
Apple's coming notebook transition: Apple's coming notebook transitionBarking up the wrong tree?I think it might be something else.I think Hell may have frozen over again.What if this 'transition' is actually Apple making MacOS X available for the general PC public as a purchasable product?Think about it. Everyone said Apple would never use Intel....; Tags: Microsoft Windows Vista (Longhorn), Desktops, Notebooks, Operating systems, Apple Inc., Microsoft Corp., Microsoft Windows Vista, PC, notebook, OSX, hardware; Discussion threads 2008-07-24
Mossberg: MobileMe Is Far Too Flawed To Be Reliable: Mossberg: MobileMe Is Far Too Flawed To Be ReliableWow, you know it is bad when...You know it is bad when one of your most fervent fanboys tells you to stay away from an Apple service![i]The planned iDisk File Sharing featured was delayed[/i]More vaporware from Apple. Sounds like once again, they've...; Tags: Desktops, Groupware, MobileMe, Mossberg; Discussion threads 2008-07-24