cross-site scripting attack

ZDNet Resources

• sort by:
• Relevance
• Date
• Popularity

Firefox feature introduces danger

Software engineers at Mozilla are working on a fix for another protocol handing issue affecting the company's flagship Firefox browser. The flaw, originally reported in February 2007 and independently discovered by Petko D. Petkov, turns a little-used Firefox feature into a security risk that could lead...

Tags: Mozilla Firefox, XSS, Bug, Secunia, Firefox Feature, Cross-site Scripting Attack, Web Browsers, Internet, Ryan Naraine

Blog posts 2007-11-09

Google "cross-site request forgery"

Google "cross-site request forgery"Give me a breakOut of ALL the different security concerns in the wild, this one can only rise to the level of "annoyance" at the most. How exactly does this deserve to be in the headlines?Irritating and rather funny but not a serious issueThis really isn't a...

Tags: E-mail providers, Google Inc., cross-site scripting attack, XSS

Discussion threads 2006-09-26

Additional Resources

Howard's happy: Sirius-XM merger (finally) approved; Now the work really begins

The government regulatory debacle known as the Sirius-XM merger has officially ended as the Federal Communications Commission approved the deal after 17 months of deliberation and lobbying from the National Association of Broadcasters. According to the Washington Post and Wall Street Journal the FCC approved the deal...

Tags: Merger, XM Satellite Radio Inc., Radio, Sirius, Howard, Satellite Radio, Digital Music, Advertising & Promotion, Federal Government, Mergers & Acquisitions, Consumer Electronics, Personal Technology, Marketing, Government, Investment, Finance, Larry Dignan

Blog posts 2008-07-26

Appearance: PPUG meets tomorrow in Philly

If you're in the Philadelphia area I'd like to invite you to attend the Philadelphia PowerBook User Group PPUG meeting tomorrow at the Manayunk Brewery and Restaurant. We meet from 12 noon to 3pm over lunch and fine local beer. Want to debate my theory on...

Tags: Apple iPhone, Philadelphia, 3G, Cellular Phones, Wireless, Consumer Electronics, Personal Technology, Jason D. O\'Grady

Blog posts 2008-07-25

iPhone gas application roundup

On 18 June 2008 I published my iPhone app wishlist and I'm happy that most of my most requested applications have been released (Thank you Texas Hold'Em!). Two my most request applications dealt with fuel, specifically a fuel economy tracker and a cheap gas finder. Several iterations...

Tags: Apple iPhone, Vehicle, MPG, AccuFuel, Gas Finder, Roi/Tco, GPS, 3G, Handhelds, Finance, Managerial Accounting, Consumer Electronics, Personal Technology, Cellular Phones, Hardware, Jason D. O\'Grady

Blog posts 2008-07-25

Software makers may sue eBay

Tired of being "stiff-armed" by eBay, the Software and Information Industry Association is signaling its ready to sue over pirated software sales on the dominant online auction site, PC World reports. SIIA has offered eBay several suggestions for stemming the sale of pirated software on...

Tags: Software, Software Information Industry Association, eBay Inc., Tiffany, Tools & Techniques, Piracy, Sales Strategy, Management, Business Operations, Corporate Law, Sales, Richard Koman

Blog posts 2008-07-25

Gaping holes in RealPlayer patched

Digital media delivery firm RealNetworks has shipped a high-prority patch to cover four gaping holes in its flagship RealPlayer software, warning that the vulnerabilities could put users at risk of code execution attacks. The patch comes a few hours after Secunia released an advisory warning for one...

Tags: Vulnerability, RealNetworks Inc., RealNetworks RealPlayer, Digital Music, Digital Media, Security, Personal Technology, Consumer Electronics, Ryan Naraine

Blog posts 2008-07-25

What paper trail?

I've been carting around my latest sheaf of press releases about the green-ness of electronic document technology for weeks now. Yes, as I've blogged before, I am still one of those people who can't help printing out certain emails in order to act on them. Yes, it's bad, I know....

Tags: Xerox Corp., Paper Trail, Survey, Printers, Data Centers, Marketing Research, Hardware, Peripherals, Storage, Data Management, Marketing, Heather Clancy

Blog posts 2008-07-25

Microsoft joins 'patch DNS now' chant; Apple patch missing

On the heels of the release of weaponized exploit code for the DNS cache poisoning vulnerability, Microsoft has joined the chorus of security pros pleading with DNS server providers to immediately apply patches to protect users from malicious attacks. The Redmond, Wash. security...

Tags: Apple Macintosh, DNS, Vulnerability, Apple Inc., Exploit Code, Microsoft Corp., Attack, Dan Kaminsky, Domain Names, Apple Mac OS X, Networking, Security, Internet, Operating Systems, Software, Apple Mac OS, Ryan Naraine

Blog posts 2008-07-25

Cool Tools - Slingpage extends stickies and sharing to Firefox users

Slingpage, which announced its social browsing extension for Internet Explorer last month, will introduce an equally feature-rich version of its service to Mozilla Firefox users next week. Slingpage offers a way for Web surfers to find information about favorite topics via "Slingcast" feeds as well as create...

Tags: Monitor, Mozilla Firefox, Note, Tool, Slingpage, Web Browsers, Monitors & Displays, Internet, Hardware, Components, Jennifer Leggio

Blog posts 2008-07-25

iPhone 2.0 jailbreaker for iPhone 2g/3g is available

The iPhone DevTeam blog has released the development sources for their tool xpwn version 0.3.  This tool is the firmware 2.0 version of the team's "cross-platform jailbreaking library/command-line utility".  The team claims it has been tested on Linux, Windows XP, and Windows Vista for both the iPhone 2g and the...

Tags: Apple iPhone, 3G, Microsoft Windows, Team Management, Productivity, Cellular Phones, Wireless, Consumer Electronics, Personal Technology, Operating Systems, Software, Management, Nathan McFeters

Blog posts 2008-07-25

How OpenDNS, PowerDNS and MaraDNS remained unaffected by the DNS cache poisoning vulnerability

The short answer is being paranoid about tackling a known vulnerability. It's 2001, and Daniel J. Bernstein DJB, author of the then popular djbdns security-aware DNS implementation, is applying basic math principles to raise awareness on what's to turn into the "sky is falling" critical Internet vulnerability in 2008, in...

Tags: DNS, Vulnerability, Anomaly, Attack, OpenDNS, MaraDNS, NSS, Domain Names, Networking, Internet, Dancho Danchev

Blog posts 2008-07-25

Offshore outsourcers likely to beef up security following Bangalore blasts

A series of bombs have exploded in Bangalore and companies that have technology operations in India are likely to need increased security precautions following what appears to be a terrorist attack. According to various reports from Reuters and Rediff.com, nine bomb blasts have rattled Bangalore, which hosts...

Tags: India, Bangalore, Rediff.com India Ltd., Sacchin Uppal, Outsourcing, Business Security, Security, It Operations, Business Operations, Outsourcing & Subcontracting, Larry Dignan

Blog posts 2008-07-25

'Branded community' leads to trademark morass

After publishing a guest blog on enterprise communities, I received what appeared to be a cross between a sales pitch and cease-and-desist email from a branding business. How is this approach good branding? by Jennifer Leggio

Tags: Community, Branding, Marketing, Jennifer Leggio

Blog posts 2008-07-25

Dell opts for performance with R5400 data center-hosted desktop

Dell unveiled its data center-hosted desktop product line on Tuesday. Unlike rivals Hewlett-Packard and IBM, Dell didn't build its solution on blade servers but instead opted for a high performance system using a 2U box called the Dell Precision R5400 Rack Workstation. "By not putting the solution...

Tags: Dell Computer Corp., Performance, R5400, Workstations, Desktops, Servers, Hardware, Jason Hiner

Blog posts 2008-07-24

Ready for real Indian medicine?

Ready for real Indian medicine?Reply from C.A. ChienDear Mr. Blankenhorn:Thanks for your note. To clarify: (1) I wanted to document my inventive system-design and inter-connection work on [i]Medical Onshoring[/i]; thus, the USPTO filing; (2) as to the "how," head to --http://tinyurl.com/6c4tj4" .. Covering the professional world (e.g., health care, computing),...

Tags: Vertical industries, Benefits, Medical Onshoring, health care

Discussion threads 2008-07-24

Kaminsky suggests long-term fix will still have to be determined, but patch now, or pay soon

Kaminsky suggests long-term fix will still have to be determined, but patch now, or pay soonTTLSomething I wish I'd asked during the webcast and which I can't quite get my head around:It was said that setting a long TTL doesn't help because of the way delegation works - has to...

Tags: Domain names, DNS server, TTL, server, Kaminsky

Discussion threads 2008-07-24

Kaminsky suggests long-term fix will still have to be determined, but patch now, or pay soon

I listened to the Black Hat webcast today to grab as much info as I could on this subject. The biggest thing that I heard from the whole talk is that the patch fixes things to a reasonable point, but that long-term, there will have to be more work...

Tags: CERT, DNS Server, Server, Kaminsky, Dan, Patches, Domain Names, Security, Internet, Nathan McFeters

Blog posts 2008-07-24

Sony Reader PRS-505 gets a major firmware upgrade

My Sony Reader is an excellent piece of hardware that I thoroughly enjoy using during my daily commute. I skipped the Amazon Kindle and bought the Sony Reader and have not been one bit sorry about this purchase I made last fall. I just saw on my favorite eBook site,...

Tags: Sony Corp., Firmware, Sony Reader, Firmware Upgrade, Sony Reader PRS-505, E-books, Personal Technology, Matthew Miller

Blog posts 2008-07-24

HTC Touch Diamond ROM update adds 850 MHz support and much more

I've written a few posts about the HTC Touch Diamond and my last one discussed some of the issues I was seeing with the device. I like to visit the XDA Developers site for the tweaking they do to the HTC devices, but it is kind of gray area when...

Tags: ROM, High Tech Computer Corp., HTC Touch, Matthew Miller

Blog posts 2008-07-24