Re: [SC-L] Java DOS

2011-02-16 Thread Kevin W. Wall
On 02/15/2011 09:59 AM, Shanahan Pete wrote: All of the structures laying on top of the basic string-number parsing assume that the parsing works. If it's broken then repeatedly fixing the issue in frameworks is not going to address the issue, it is merely going to defer it. I completely

Re: [SC-L] Java DOS

2011-02-16 Thread Kevin W. Wall
On 02/15/2011 11:38 AM, Jim Manico wrote: [snip[ Ryan Barnett just spit out a new (impressive) mod security rule so you can tactically patch without touching code (see below). [snip] First step is to inspect the ARGS and REQUEST_HEADERS data using a regex to match on potential floating point

[SC-L] Call for Papers: CICE-2011

2011-02-16 Thread Call for papers
Apologies for cross-postings. Please send it to interested colleagues and students. Thanks! CALL FOR PAPERS Canada International Conference on Education (CICE-2011) April 4-7, 2011, Toronto, Canada (www.ciceducation.org)

[SC-L] Call for Papers: i-Society 2011!

2011-02-16 Thread Call for papers
Apologies for cross-postings. Please send it to interested colleagues and students. Thanks! CALL FOR PAPERS *** International Conference on Information Society (i-Society 2011), Technically Co-Sponsored by IEEE UK/RI Computer