December 2008 - Following the White Rabbit Blog -

OT: ICANN Updates Whois Data Problem Reporting System

While not directly tied to Web Application Security this topic is interesting because it deals a blow to poorly-registered (and improperly setup) domains - possibly aiding in things like phishing and other criminal activities. ICANN has updated the WDPRS...

Published 12-23-2008 8:44 PM by RafalLos

Filed under: WDPRS, ICANN, phishing

Hacking: Next Up Movie Theaters

Reference: http://breachblog.com/2008/12/16/zyacorp.aspx In one of those " I bet they didn't see this coming " moments a CineMagic movie theater in Merrimack, NH has fallen victim to digital thieves (or hackers, if you prefer). What I see...

Published 12-18-2008 8:25 AM by RafalLos

Filed under: hacking, PCI Compliance, movie theater hacked

Failed - The 5 Reasons Why...

I'm thrilled to announce that my paper was published on InfoSecurityWriters.com on 12/15/2008. The abstract is copied from the site below, and link is included for your reading pleasure. I know many of you have asked for this and I finally have a...

Published 12-17-2008 7:19 PM by RafalLos

Filed under: Failed, information security

Want to know what I'm up to?

Click this! [And bookmark it!] This page is going to be a permanent " Current Projects " page... check back often and provide feedback on what you want to see from me next!

Published 12-17-2008 8:58 AM by RafalLos

Open or Closed? Which source is more secure?

"Is Open-Source software more secure than Closed-Source software?" Of all the questions I get asked on a regular basis on web application security - perhaps this is one of the toughest. The answer, quite simply, is no. There are arguments that...

Published 12-17-2008 5:14 AM by RafalLos

Filed under: OSS security, open-source software security, software security

Harsh Reality - Life in InfoSec

It's Monday again, and it's absolutely brain-numbingly cold here in Chicago... but I wanted to get these thoughts down before they fell out of my brain to make room for new stuff. Last week I had the pleasure of meeting with a group of guys that...

Published 12-08-2008 8:13 PM by RafalLos

Filed under: PCI DSS, application security, PCI Compliance, software quality

Thank you ViViT - Madison, WI!

Had a great time presenting, and talking with you all after. I know I painted a gloomy picture, but remember - you can succeed by taking that first step. Here's some key points: Don't let anyone tell you that it's all of nothing ... Risk-management...

Published 12-04-2008 5:42 PM by RafalLos

Filed under: web application security, ViViT

ViViT - Madison, Wisconsin

Those of you in or around Madison, WI ... come see me talk about Application Security Governance on Thursday, December 4th. If you need more information, contact me directly and I will send you the event invitation. This should be a great event and a...

Published 12-02-2008 10:02 PM by RafalLos

Filed under: application security, ViViT

A Perspective on "Dumbing Down" the Security Profession

Let me start off by reminding you that the main mission of this blog is to provide insight and perspective (from more than just the security angle) on web application security and risk management. Keep that in mind as you read on... I read an article...

Published 12-02-2008 4:41 AM by RafalLos

Filed under: web application security, security automation, security tools

December 2008 - Following the White Rabbit Blog

Syndication

Recent Posts

Tags

Archives