March 2006
Pharming on the Net
by Nilesh Chaudhari, CISSP
You must be well aware of phishing and its potential to cause damage. They bait bank customers with genuine looking emails and manage to usurp money or personal information from unsuspecting customers with reasonable success. Pharming is phishing on steroids.… more →
Security issues in 'Remember Me' feature
by Shah Nawaz
Most web sites that deal with sensitive personal information of users, require them to authenticate themselves with valid usernames and passwords. If the login credentials contain long digit card numbers or a series of complex passwords, users often find it difficult to remember the credentials. Thus they turn to the browser to help them remember login credentials. Let’s take the security issues that arise due to this feature.… more →
Thick Client Application Security - Attacks
by Balaji V
Traditional two-tier thick client applications are vulnerable to several attacks. This two part series will discuss the attacks and defenses for them. In this first part, we focus on the different attack techniques and tools.… more →
Quiz: Email Address Harvesting
Which is/are the secure methods, among given options, to prevent email addresses harvesting?
- Re-format/ munging address
- Substitute ASCII codes in address
- Obscure address through javascript
- Hide address in image
- Options 3 and 4