Does this mean, Dave's age is inbetween 3 - 4 yrs ?? =) - D
-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Wednesday, February 15, 2006 4:07 AM To: Dave Korn Cc: [email protected] Subject: Re: [Full-disclosure] Re: Fun with Foundstone -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 what LOL ? what is surprising ? they are probably on FD b4 you were born :) Dave Korn wrote: > [EMAIL PROTECTED] wrote: >> Things for a security company not to do in a webapp: >> >> 1. Do not auto-populate form fields on the page with customer names. >> >> 2. If you ignore rule number 1, don't use a simple, predictable id >> for said auto-population. >> >> https://download.foundstone.com/?o=^2155 > > LOL, blocked already! > >> Rinse, increment, and repeat for a list of Foundstone customers...or >> at least a list of companies they've let download software. > > ... or at least a list of a million-and-one variants on "M. Mouse" and "Noah > Body" ... > > ... nearly _all_ of whom appear to live in Beverley Hills. > > cheers, > DaveK -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2 (MingW32) iQIVAwUBQ/Jbpq+LRXunxpxfAQKWChAAuI6lYd+q8u+AArtXL9uK6sdSyBN+IWbT o3v6SEGC1nzK8RVqMwQpSkaeD3D8UEDvdeywkLzbjdWsD2RGLrRYg1RXYBmqPNJj eya2G92f3kPy0uA3SX1Zw/ngpVvMYXO5qd4b6GkrMei05aSn4S2TqVpu3SMO6aC6 1fHdwYNe2lhCWDOP0MEW3Nrtr0F+W8dr08tSJ4AsVF8rzoRZQgY73eiIOkfdrbiG ec5yjmV4XZ61CbKakUMwoJlf+iU2FtsDaXj9p70jmlX+olwcjWa1f6KPOaRM0RRk c62TnDE4161/Y23LWiBCtX7/w7lXwvi1GoqogkX4qgxT7UEYheGeTeIHyVdeRXVo D2ba2sgWphB6gpA12LtOnvNipZP2GsHQMndrBfnVsZyIjePmpIRkojVS7xTL+77O kfyBEQKMA/2zQS7Y4Jiw5hC1rzPCHaNnh5VwyZBVP1s6tyvHcG/zXRSJaaQQQmt1 EGqxOlO9bdoYaxVbVgBeP/93hLqK+ccXjxLnL92+6EJFNfpy/jPRQqFn7MWA+Yn6 BXRLvArW4N6nOAowEWoFpb+kAxGdClY0U8FMro17v7YiNy6vE1fJfdqeOdbh3VI5 Vohg4TtWy3kCO4ub6VvrSk04zZPkdQmNmlzGc8eMG14I4cpFhQGeIWHoqwbxt4Sm uhPD1NxxAZY= =/7LA -----END PGP SIGNATURE----- _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/ _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
