August 2007 - Posts

Ajax Security Acceptance
30 August 07 12:45 PM | Billy | 3 Comments   
Its time again for AjaxWorld , the largest Ajax conference in the US. Bryan and I are thrilled. AjaxWorld offered us back -to- back sessions so we can do a 90+ minute workshop on how to break into Ajax applications. We will not only hit the major themes Read More...
The real reason for (JavaScript|JSON) Hijacking
27 August 07 01:59 PM | Billy | 1 Comments   
When JSON hijacking was first discussed and demonstrated in 2006 and 2007 by Whitehat, Fortify and others, all of the proof of concepts used Mozilla specific JavaScript extensions like setter or __defineSetter__ . This led many people to believe that Read More...
Filed under: , , ,