News for hackers. Stuff that matters.

A comment on Three vulnerabilities every web application developer should know about. Parent comment

Re:Three vulnerabilities every web application developer sho... by tptacek on Friday July 18, 2008 @11:55AM (#249852)
99.999% of the content of this submission is in a link from the article submitted itself, and the article itself has only the barest familiarity with the topic ("XSSI but no XSS?").

I'm glad it was submitted, but we should vote and comment on the Google TechTalk itself. I just submitted it.

[ Parent | on HN ]
Re:Three vulnerabilities every web application developer sho... by pkrumins on Friday July 18, 2008 @12:17PM (#249890)
I am glad to hear your opinion.

Not everyone has an hour to watch the lecture. I have been blogging about video lectures in this style for a while now, and I have received quite a few emails thanking me for providing sum-ups of the videos.

I was also very surprised at the time of submission that he talked about XSSI but did not cover XSS! Only later did I add a paragraph about XSS! Sorry about that.

[ Parent | on HN ]
Re:Three vulnerabilities every web application developer sho... by tptacek on Friday July 18, 2008 @12:47PM (#249915)
Ok, guy with the linkjacked summary of a Google TechTalk? XSSI is XSS.
[ Parent | on HN ]
Re:Three vulnerabilities every web application developer sho... by pkrumins on Friday July 18, 2008 @01:33PM (#249973)
Oh! I was talking about static XSS then! The example Neil gave in his talk was about dynamic XSS. I thought XSSI meant that and "XSS" meant this - http://www.cgisecurity.com/articles/xss-faq.shtml
[ Parent | on HN ]