WebApp Sec mailing list archives

RE: Next Generation of Browsers


From: "Mark Curphey" <mark () curphey com>
Date: Thu, 1 Feb 2007 19:15:14 +0100

Monsieur Troup, good to hear from you again! I hope you are doing fine in
the chilly North....

XAML is the WinFX markup language so I could define my UI in XAML and render
it in IE or a Win32 client etc. Have .net 3.0 loaded and see this example.
http://www.mobiform.com/demos/avalonclock/publish.htm

What I was hoping for (and the article I reads intimated was happening) was
that the browser developers were working on a common way to take say
selected .NET assemblies offline and sync up data, state etc when they come
back online (my utopian dream). 


-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On
Behalf Of Henry Troup
Sent: Thursday, February 01, 2007 5:33 PM
To: webappsec () securityfocus com; 'Mark Curphey'
Subject: Re: Next Generation of Browsers

If I read MS's XAML stuff right, there is a possibility there.  AKA WPF/E -
see http://msdn2.microsoft.com/en-us/asp.net/bb187358.aspx and FAQ linked
from there:

[quote]

Microsoft "WPF/E" is the next-generation Web platform from Microsoft for
delivering visually stunning and interactive user experiences on the Web and
beyond. Supporting multiple operating systems (Windows and Macintosh),
Microsoft "WPF/E" combines 2D animation, video, and audio within a compact
yet flexible platform. By embracing XML-based presentation with in-line
XAML, AJAX-based applications such as those based on ASP.NET AJAX can be
organically upgraded to take advantage of "WPF/E" in a way that breaks rich
Web-based applications out of the proprietary "black box" they exist in
today.   
[/quote]

For "black box" read "sandbox"?  The distinction between "rich" and "risky"
could be hard to see ... for a security cynic, like myself.

Henry Troup
--
Henry Troup
htroup () acm org

 On Thu Feb  1 10:15 , "Mark Curphey"  sent:

I read an article in a business magazine about software as a service. I
forget the magazine or I would quote it. In the article the author spoke
about the next generation of browsers that would allow users to take web
applications and their data off-line. 

Is this a case of a business writer talking tech or does anyone have any
good articles / blogs / pointers to good material?

-------------------------------------------------------------------------
Sponsored by: Watchfire

Today's hackers exploit web applications to expose, embarrass and even 
steal. Firewalls and SSL may be commonplace but recent studies indicate 
3 out of 4 websites remain vulnerable to attack. Watchfire's "Addressing 
Challenges in Application Security" whitepaper, explains what to do and 
provides a guideline to improving your own application security. 
Download this whitepaper today!

https://www.watchfire.com/securearea/whitepapers.aspx?id=701500000008fHF
--------------------------------------------------------------------------


-------------------------------------------------------------------------
Sponsored by: Watchfire

Today's hackers exploit web applications to expose, embarrass and even 
steal. Firewalls and SSL may be commonplace but recent studies indicate 
3 out of 4 websites remain vulnerable to attack. Watchfire's "Addressing 
Challenges in Application Security" whitepaper, explains what to do and 
provides a guideline to improving your own application security. 
Download this whitepaper today!

https://www.watchfire.com/securearea/whitepapers.aspx?id=701500000008fHF
--------------------------------------------------------------------------


Current thread: