Hey there! jeremiahg is using Twitter.
Twitter is a free service that lets you keep in touch with people using the web, your phone, or IM. Join today to start receiving jeremiahg's updates.
|
|
@kuza55 Oh I definitely agree. Web security = broken. @jasonmoliver take up your video camera and disable your mic too.
|
|
|
|
|
|
RSnake has a good summary up.
|
|
|
Welp with Clickjacking + Flash, Web pages can see and hear you, among other things. http://doiop.com/gja804 Does it get much worse?
|
|
|
@synopsi I'll be giving on at HiTB on the 29th and RSnake will deliver one I believe in Taiwan on the 28th.
|
|
|
@roncharette Clickjacking is still technically possible to perform without the aid of JavaScript, just makes it a little harder.
|
|
|
@kuza55 either way its a pain. Everyone is going to have to add a snippet of JS to everyone of their pages, or maybe just the importants one
|
|
|
@synopsi See here. http://doiop.com/8k3rbs
|
|
|
@synopsi framebusting code is best. That coupled with important "buttons" utilizing JS. Scary and strange I know.
|
|
|
@synopsi NoScript is the best option right now. You meant protect the "user" right?
|
|
|
@op24 1 week away from my time off as well. Sand, surf, sleep here I come. :)
|
|
|
Whenever I'm asked how many hours a week I work, the normal answer is "all of them". ;)
|
|
|
@McGrewSecurity to make sure no one reads it I guess.
|
|
|
@sarapeters two of the better clickjacking articles http://doiop.com/qw51fl http://doiop.com/2f5c01
|
|
|
@dakami so if I deny all TCP packets to my powerbook, I'm safe!? ;)
|
|
|
sockstress, let the disclosure games begin! http://tinyurl.com/46qnux
|
|
|
@cykyc I won't pretend to understand the specifics, but that sounds about right to me. Robert E Lee could say for sure.
|
|
|
@cory_scott some of them kinda do have that power though. I'm thinking if confirmed by enough people, the TCP session exhaustion could do it
|
|
|
Generic TCP related, "new attacks that will render a remote system unavailable using a very low bandwidth attack stream."
|
|
|
I think @op24 is on the verge of disclosing another "break the internet" bug. http://doiop.com/ie8d5p
|
|
