XSS=10000

[Dave Aitel <dave.aitel () gmail com>]

I have to admit this is in the top 10 "hacking contest" fails of all
time. It's just so great how the very idea of "hacking contest" means
a company is either snake oil or totally going to fail (c.f. LSD
owning that Solaris thing back in the day).

http://www.strongwebmail.com/news/secure-web-mail/break-into-my-email-get-10000-here-is-my-username-and-password/
http://twitpic.com/6ji72/full
http://blogs.zdnet.com/security/?p=3514

-dave
_______________________________________________
Dailydave mailing list
Dailydave () lists immunitysec com
http://lists.immunitysec.com/mailman/listinfo/dailydave