Today's MIT Technology Review reports an interesting demonstration of the ease of spoofing AIS data: http://www.technologyreview.com/news/520421/ship-tracking-hack-makes-tankers-vanish-from-view/ "One online service was fooled into showing a real tugboat disappearing from the Mississippi and reappearing on a Dallas lake, and depicting a fake vessel traveling

key1=value1&key2=value2&key3=value3 > HTTP/1.1 > .... > > > I got the the following response header: > > HTTP/1.1 302 Found > Date: xxxx > Server: xxxx > Location: https:// > /path/path-contd/resource.asp?

Matt, When looking at the threat classification glossary: http://projects.webappsec.org/Threat-Classification-Glossary the definitions are aligned with MITRE's. The definition you looked at are from the web hacking incident database. I wasn't aware that the projects used different terminology, but that's certainly something we would need to fix.

I am bringing this up, not to flog an already dead horse about the advantages of ENS. I want to reiterate to those who perhaps are not using ENS yet, or are looking at all the pros and cons. The peace of mind that a good ENS system can provide is its number one advantage.

That one, which was hacked last year. This is > social network and none of social networks are attending to security. It's > not the place for polls on web applications security topics ;-).

It is only old farts like myself > that still hack HTML by hand. > My webpages layout makes stone-age feel recent and as a fresh wind. Magnus, you are not the only one :-) www.ko4bb.com, all htmlized by hand... Pages load quickly even through a modem... Didier KO4BB

Screen shots will be of help. 2) Along with article send us your photograph and small intro. 3) Submissions due date - 24th of this month Send in your articles to abhijeet@clubhack.com Regards, Abhijeet Patil, Co-Founder, CHMag URL: http://chmag.in http://clubhack.com Cell: +91-9923800379

I fear that someone on this list may have been hacked. I am not smart enough to figure it out. I have deleted the email and then deleted it from my “deleted” mail box. Before I did that I called the credit card company and they instructed me to forward the offending email to their security department. I trust they will deal with it appropriately.

waf tester - http://ttlexpired.com/blog/?p=234 Cheers From: websecurity-bounces@lists.webappsec.org[mailto:websecurity-bounces@lists.webappsec.org] On Behalf Of RyanDewhurst Sent: Wednesday, February 02, 2011 1:37 PM To: websecurity@lists.webappsec.org Subject: [WEB SECURITY] WAF XSS Fuzzer?!

With ENS, you've got the best of all worlds. Cheers, Garrett