Send bird reports to birdalert@ontbirds.ca For information about ONTBIRDS including how to unsubscribe visit http://www.ofo.ca/site/page/view/information.ontbirdssetup Posting guidelines can be found at http://www.ofo.ca/site/page/view/information.ontbirdsguide Visit the OFO Facebook page https://www.facebook.com/OntarioFieldOrnithologists _________________

To post to this group, send email to hamiltonbirds@googlegroups.com To unsubscribe from this group, send an email to hamiltonbirds+unsubscribe@googlegroups.com For more options, visit this group at http://groups.google.com/group/hamiltonbirds?hl=en?hl=en

To unsubscribe from this group, send an email to hamiltonbirds+unsubscribe@googlegroups.com For more options, visit this group at http://groups.google.com/group/hamiltonbirds?hl=en?hl=en

--- Hafez Kamal, HITB Conference Core Crew (.MY), Hack in The Box (M) Sdn. Bhd. 36th Floor, Menara Maxis, Kuala Lumpur City Centre, 50088 Kuala Lumpur, Malaysia Tel: +603-26157299 Fax: +603-26150088 PGP Key ID: 0xC0DC7DF8

HTTP header User-Agent often used by web applications and systems (for different purposes), so possibility of spoofing this header allows to conduct attacks. It can be as spoofing attacks (as against web applications, as web applications can use this header with purposes of cloaking), as for XSS attacks.

Please consider adding this config if you are running any Apache web server with ModSecurity installed. Thanks, Ryan

Download/Update ============== svn co http://host-extract.googlecode.com/svn/trunk/ host-extract Tutorial Wiki ========== Sebastien Damaye from aldeid.com has prepared a thorough host-extract tutorial with real-world famous web sites.

Paul This paper comes to mind: http://www.doc.ic.ac.uk/~maffeis/csf12.pdf Colin ----- Original Message ----- From: Paul Johnston [mailto:paul.johnston@pentest.co.uk] To: websecurity@lists.webappsec.org Sent: Mon, 15 Oct 2012 11:59:07 +0100 Subject: [WEB SECURITY] Social login / federated identity > Hi, > > I am updating some training course material

Hi Scott: I have uploaded the smallest one E1938_asdrawb.hpg at: http://www.prc68.com/I/pdf/E1938_asdrawb.hpg it's also linked on the E1938 web page under Theory of Operation. I have Autocad 14, but it did not want to load a .hpg file. Maybe I need a plug-in? Autocad can drive an HP pen plotter to create .hpg files, but don't know about loading them.

So email will be useless after that period in case the computer or user email is compromised >>>> Send a HTTPS link to user with the temp token. Avoid wire sniffing >>>> The end user will have answer a challenge question (one of at least 2 entered on registration) and then reset its password.