Ideally I would like to buy the DVDs (or other storage medium) with all my data.
I just asked this on DropBox contact us form :
A personal blog about: transforming Web Application Security into an 'Application Visibility' engine, the OWASP O2 Platform, Application/Data interoperability and a lot more
Showing posts with label Question. Show all posts
Showing posts with label Question. Show all posts
Friday, 17 May 2013
Tuesday, 8 January 2013
Anonymous Vulnerability Reporting Service
Is there an Anonymous Vulnerability Reporting Service out there?
Basically one where it is possible to report a vulnerability on a website without worrying about the other side throwing a tantrum and accusing the messenger with 'malicious hacking'?
It is a sad state of our industry that this is needed, but with the current computer criminal laws making all internet users a potential criminal, it is too risky to put a carrer in a the hands of the company that created the vulnerable product or service.
Ideally this service would allow:
Basically one where it is possible to report a vulnerability on a website without worrying about the other side throwing a tantrum and accusing the messenger with 'malicious hacking'?
It is a sad state of our industry that this is needed, but with the current computer criminal laws making all internet users a potential criminal, it is too risky to put a carrer in a the hands of the company that created the vulnerable product or service.
Ideally this service would allow:
Labels:
Question
Sunday, 4 November 2012
Website monitoring services?
I'm looking for a website monitoring service (for a couple TeamMentor live sites) that provides the following:
and http://www.alertra.com
- Uptime (site is up/down)
- Performance stats (page loads)
- Broken pages/links
- GUI still looks the same (this is a visual check, not a code one)
- Transaction checks (for example 'login sequence' and 'article viewing')
- Content changes (ideally with detection of injected malicious code)
- Web/SaaS based solution
- API to trigger and consume results
- Solution based on Unit tests (where the checks are scripted and easily modified/customized) - but I don't think such service exists today :)
Any recommendations or personal accounts/horror-stories?
A quick google search found:
and http://www.alertra.com
Saturday, 20 October 2012
Is there a way to get email alerts on Reddit activity
I really like reddit and its threaded discusion model, but what I'm really missing is an email alert every time there is a post or comment on a couple subreddits that I follow.
I know that there are a bunch of ways the reddit data can be consumed (for example http://www.reddit.com/r/owasp/.json ), but I find that at the moment I miss a number of threads and replies that I care about, due to the lack of an email alert (even if once a day)
For example, the GitHub issues is working really well for TeamMentor (https://github.com/TeamMentor/Master/issues) because:
I know that there are a bunch of ways the reddit data can be consumed (for example http://www.reddit.com/r/owasp/.json ), but I find that at the moment I miss a number of threads and replies that I care about, due to the lack of an email alert (even if once a day)
For example, the GitHub issues is working really well for TeamMentor (https://github.com/TeamMentor/Master/issues) because:
- I get an email on new issues or comments
- If I reply to the email, the message is posted to the correct issue and
- Users that add issues comments, receive the email updates on the issues submitted (if they 'watch' the thread)
- I can manage my emails faster than I can manage my reddit subscriptions
If only I could achieve the same with Redit, Reddit's value and usability (to me) would increase dramatically.
Btw, the reddit 'message' center is already a good help (although it only seems to show the comments on threads I start or comments I made), so maybe there is a way to expand its coverage and enable auto-emailing.
Labels:
Question
Wednesday, 2 May 2012
I'm looking for a C# Script that will find an open file handle in Windows
It's kinda crazy that in Windows 7, when I try to rename a folder I'm not told what process currently has an open handle to that folder (and is preventing the rename)
My current solution is to open SysInternals ProcessExplorer and do a search for that Handle via the folder anme (which is far to many steps and slow).
Now I know that this can be done in C# (via Com Interop) since I did it for Hackmebank (I bet nobody has found the vulnerability that that hack created :) ).
But before I dig that code and reimplement it in O2, I was wondering if there is already a better solution out there :)
My current solution is to open SysInternals ProcessExplorer and do a search for that Handle via the folder anme (which is far to many steps and slow).
Now I know that this can be done in C# (via Com Interop) since I did it for Hackmebank (I bet nobody has found the vulnerability that that hack created :) ).
But before I dig that code and reimplement it in O2, I was wondering if there is already a better solution out there :)
Labels:
Question
Subscribe to:
Posts (Atom)

