Re: [SC-L] [Esapi-user] Recommending ESAPI?

2010-01-10 Thread Kevin W. Wall
. However just wanted to make people aware of this; if they Reply-All, they will need to be subscribed to both mailing lists from their sending email address.] -kevin -- Kevin W. Wall The most likely way for the world to be destroyed, most experts agree, is by accident. That's where we come

Re: [SC-L] What do you like better Web penetration testing or static code analysis?

2010-04-19 Thread Kevin W. Wall
to remediate the issue. -kevin -- Kevin W. Wall The most likely way for the world to be destroyed, most experts agree, is by accident. That's where we come in; we're computer professionals. We cause accidents.-- Nathaniel Borenstein, co-creator of MIME

Re: [SC-L] What do you like better Web penetration testing or static code analysis?

2010-04-24 Thread Kevin W. Wall
-- Kevin W. Wall The most likely way for the world to be destroyed, most experts agree, is by accident. That's where we come in; we're computer professionals. We cause accidents.-- Nathaniel Borenstein, co-creator of MIME ___ Secure Coding mailing list

Re: [SC-L] Java: the next platform-independent target

2010-10-26 Thread Kevin W. Wall
On 10/25/2010 04:26 AM, Martin Gilje Jaatun wrote: On 2010-10-22 04:51, Kevin W. Wall wrote: In a large part, I think that people fail to patch Flash or Acrobat Reader for the same reason they forget about Java...out of sight, out of mind.* I think they believe that Windows Update solves

Re: [SC-L] Java DOS

2011-02-16 Thread Kevin W. Wall
that these things can be dealt with is a function of size and bureaucracy. And then I get on to important things, like writing software ;) :) -kevin -- Kevin W. Wall The most likely way for the world to be destroyed, most experts agree, is by accident. That's where we come in; we're computer

Re: [SC-L] Java DOS

2011-02-16 Thread Kevin W. Wall
'e+2' if I wanted. But the approach is correct; only the regex needs work unless there's some other mod_security rule that would catch these things. -kevin -- Kevin W. Wall The most likely way for the world to be destroyed, most experts agree, is by accident. That's where we come in; we're

Re: [SC-L] informIT: Modern Malware

2011-03-26 Thread Kevin W. Wall
with ones pants down. -kevin -- Kevin W. Wall The most likely way for the world to be destroyed, most experts agree, is by accident. That's where we come in; we're computer professionals. We cause accidents.-- Nathaniel Borenstein, co-creator of MIME

Re: [SC-L] informIT: Building versus Breaking

2011-09-03 Thread Kevin W. Wall
On Fri, Sep 2, 2011 at 6:19 PM, Chris Schmidt chrisisb...@gmail.com wrote: On Sep 2, 2011, at 10:44 AM, Goertzel, Karen [USA] goertzel_ka...@bah.com wrote: What we need is to start building software that can fight back. Then we could become part of cyber warfare which is much sexier than

Re: [SC-L] BSIMM3 lives

2011-10-20 Thread Kevin W. Wall
On Tue, Oct 18, 2011 at 10:34 AM, Gary McGraw g...@cigital.com wrote: On 10/15/11 5:45 PM, Steven M. Christey co...@rcf-smtp.mitre.org wrote: 3) The wording about OWASP ESAPI in SFD2.1 is unclear: Generic open source software security architectures including OWASP ESAPI should not be

Re: [SC-L] informIT: BSIMM versus SAFECode

2012-01-02 Thread Kevin W. Wall
On Thu, Dec 29, 2011 at 10:32 AM, Gary McGraw g...@cigital.com wrote: hi sc-l, How about a little software security controversy for the tweener holiday week? On the last day of the BSIMM Conference in November, SAFECode unveiled a paper about the SAFECode Practices and their relationship to

Re: [SC-L] Silver Bullet 111: Marcus Ranum

2015-07-10 Thread Kevin W. Wall
Ah, I see...so the dirty trick is that you are finally doing reruns. Syndication can't be far behind. ;-) -kevin Sent from my Droid; please excuse typos. On Jul 7, 2015 12:07 PM, Gary McGraw g...@cigital.com wrote: hi sc-l, Silver Bullet episode 111 is a sneaky one based around a “dirty