Re: [Flashcoders] RIA Secure Coding

2010-06-03 Thread Henrik Andersson
It's just a decompiler that only does code and warns against a few tiny things that are largely irrelevant. ___ Flashcoders mailing list Flashcoders@chattyfig.figleaf.com http://chattyfig.figleaf.com/mailman/listinfo/flashcoders

RE: [Flashcoders] RIA Secure Coding

2010-06-03 Thread Boerner, Brian J
Thanks Dave, this is probably why my head hurts. I guess I'm pretty interested in security specific to flash player and how it can be attacked. Fully understand what you're saying though and luckily will not have to document anything for any of the server side web apps. Adobe does have brief

Re: [Flashcoders] RIA Secure Coding

2010-06-03 Thread Dave Watts
Thanks Dave, this is probably why my head hurts. I guess I'm pretty interested in security specific to flash player and how it can be attacked. Right, but for the most part this doesn't have anything to do with developers. As a developer, I can build applications that use the features of the

[Flashcoders] RIA Secure Coding

2010-06-02 Thread Boerner, Brian J
This one is for all the RIA developers on the list. I haven't really seen secure coding widely addressed here but was hoping someone had knowledge that could get me started. I'm leading effort to develop flash coding standards in corporate environment so there are fewer (or no) security risks

Re: [Flashcoders] RIA Secure Coding

2010-06-02 Thread Dave Watts
This one is for all the RIA developers on the list. I haven't really seen secure coding widely addressed here but was hoping someone had knowledge that could get me started. I'm leading effort to develop flash coding standards in corporate environment so there are fewer (or no) security

Re: [Flashcoders] RIA Secure Coding

2010-06-02 Thread Henrik Andersson
Rule one: do not allow people to upload flash movies. Rule two: do not allow people to upload flash movies to your main domain. Rule three: do not allow people to upload flash movies that can use javascript. ___ Flashcoders mailing list

RE: [Flashcoders] RIA Secure Coding

2010-06-02 Thread Chris Foster
-vulnerabilities-with-swfscan.aspx C: -Original Message- From: flashcoders-boun...@chattyfig.figleaf.com [mailto:flashcoders-boun...@chattyfig.figleaf.com] On Behalf Of Boerner, Brian J Sent: Thursday, 3 June 2010 6:55 AM To: Flash Coders List Subject: [Flashcoders] RIA Secure Coding This one