April 2009 - Posts
Hi, Michael here, The following article, ” Major software makers fail security transparency test ” caught my eye this morning, because it covers a topic of great interest to me ; : companies documenting their security and privacy-related software development
Read More...
Hello, Michael Weiss here. Nothing like having two Michaels around to confuse everyone. At least there are only two here. On a previous team, I was one of five Michaels. Over the next several weeks, I’ll be posting a series of entries to help explain
Read More...
[Bryan here. We have a guest blogger this week: Chris Weber of Casaba Security will be talking about his company’s new free web application security auditing tool, Watcher. We on the SDL team are pretty excited about it, especially because it verifies
Read More...
Hi everyone, Bryan here. Most web application security experts frown on the practice of passing session or authentication tokens in a URL through the use of URL rewriting. Usually these tokens are passed between the server and the browser through HTTP
Read More...
Michael here... Security is a never-ending game of leapfrog as attackers work out ways around our defenses and we defenders constantly update defenses. At Microsoft, we always try to chose the most appropriate way to place one or more defenses; some defenses
Read More...
