Re: [SC-L] free scans from Google...

2010-03-22 Thread kowsik
Unlike other services from Google, you have the source so you can see if it calls home. BTW, Michal has done some great work in the past (TCP strange attractors being one of my favorite ones). The phase-space approach for sequence numbers is now used quite a bit in a number of web-app scanners for

[SC-L] Why NoSQL is bad for startups

2010-04-01 Thread kowsik
Blog on labs.mudynamics.com: http://bit.ly/aHFiFc K. --- http://labs.mudynamics.com http://www.pcapr.net http://twitter.com/pcapr ___ Secure Coding mailing list (SC-L) SC-L@securecoding.org List information, subscriptions, etc - http://krvw.com/mailman/l

[SC-L] DH exchange: conspiracy or ignorance?

2007-09-19 Thread Kowsik
http://labs.musecurity.com/2007/09/18/widespread-dh-implementation-weakness/ K. ps: I work for Mu. ___ Secure Coding mailing list (SC-L) SC-L@securecoding.org List information, subscriptions, etc - http://krvw.com/mailman/listinfo/sc-l List charter avai

Re: [SC-L] BSIMM: Confessions of a Software Security Alchemist (informIT)

2009-03-20 Thread kowsik
I have to post this blog in response. http://labs.mudynamics.com/2008/07/14/zen-and-the-art-of-fixing-p1-bugs Love the "security testing IS functional testing", BTW. K. --- http://www.pcapr.net On Thu, Mar 19, 2009 at 4:28 PM, Benjamin Tomhave wrote: > Why are we differentiating between "softw

[SC-L] Large scale development with Ruby

2009-07-23 Thread kowsik
Not so much about secure-coding, but more about how we take unit testing and TDD very seriously: http://labs.mudynamics.com/2009/07/23/large-scale-ruby-development-with-tdd/ Are there people on the sc-l that have a comparable large-scale ruby project? I would love to hear about the "gotchas" of u