Time to update your JRE again

| | Java, JNLP, JRE, SSV
[ Edit: Brian Krebs of the Washington Post's Security Fix blog spoke to me about Java security. You can read his column here. ] Sun have just released JRE Version 6 Update ...

And For My Next Trick…

One of the examples given in the "Attacking Application Logic" chapter of The Web Application Hacker's Handbook is entitled "Escaping from Escaping". The prelude to the attack is that the developer has ...
Repurposing Attacks Against Java Applets

Repurposing Attacks Against Java Applets

If you read my review of the Web Application Hacker's Handbook you may remember I made the following point:The authors talk about repurposing ActiveX controls but do not mention that this also ...