secprog 2003/01
By Thread

Starting: Thu Jan 02 2003 - 18:43:14 PST
Ending: Sat Feb 01 2003 - 14:09:10 PST

• Standards for developing secure software David Wheeler (Thu Jan 02 2003 - 08:02:30 PST)
  • Re: Standards for developing secure software Peter Gutmann (Thu Jan 02 2003 - 19:47:15 PST)
  • Re: Standards for developing secure software Steven M. Christey (Tue Jan 07 2003 - 13:49:03 PST)
    • Re: Standards for developing secure software Stefan Schildt (Tue Jan 07 2003 - 23:55:47 PST)
      • RE: Standards for developing secure software Witness (Mon Jan 20 2003 - 22:41:55 PST)
      • RE: Standards for developing secure software securityat_private (Thu Jan 23 2003 - 10:18:10 PST)
      • RE: Standards for developing secure software Witness (Thu Jan 23 2003 - 10:22:41 PST)
      • Re: Standards for developing secure software Alex Russell (Thu Jan 23 2003 - 13:52:10 PST)
      • Re: Standards for developing secure software Ed Carp (Thu Jan 23 2003 - 13:57:08 PST)
      • Re: Standards for developing secure software Alex Russell (Thu Jan 23 2003 - 15:24:15 PST)
      • Re: Standards for developing secure software Adrian Wiesmann (Fri Jan 24 2003 - 01:05:13 PST)
      • Re: Standards for developing secure software Valdis.Kletnieksat_private (Thu Jan 23 2003 - 11:52:00 PST)
      • RE: Standards for developing secure software Gustaf Bjorksten (Wed Jan 22 2003 - 22:55:44 PST)
      • RE: Standards for developing secure software Glynn Clements (Thu Jan 23 2003 - 19:42:44 PST)
      • Re: Standards for developing secure software Valdis.Kletnieksat_private (Fri Jan 24 2003 - 15:33:26 PST)
      • RE: Standards for developing secure software jasonk (Sat Jan 25 2003 - 04:48:29 PST)
      • Re: Standards for developing secure software Luciano Miguel Ferreira Rocha (Mon Jan 27 2003 - 12:01:15 PST)
      • Re: Standards for developing secure software Ben Pfaff (Sat Jan 25 2003 - 10:21:51 PST)
      • Re: Standards for developing secure software Pavel Kankovsky (Sat Jan 25 2003 - 14:07:03 PST)
      • Re: Standards for developing secure software George Dinwiddie (Sun Jan 26 2003 - 07:10:20 PST)
      • Re: Standards for developing secure software Pavel Kankovsky (Mon Jan 27 2003 - 02:17:05 PST)
      • Re: Standards for developing secure software Valdis.Kletnieksat_private (Mon Jan 27 2003 - 12:25:36 PST)
      • RE: Standards for developing secure software Stormwalker (Fri Jan 24 2003 - 06:02:41 PST)
  • Re: Standards for developing secure software dirk.dussartat_private (Thu Jan 09 2003 - 07:01:44 PST)
  • RE: Standards for developing secure software Ogle Ron (Rennes) (Fri Jan 24 2003 - 01:47:20 PST)
  • Re: Standards for developing secure software David Wheeler (Mon Jan 27 2003 - 08:04:59 PST)
• RE:Writing Secure code[update] charles lindsay (Wed Jan 01 2003 - 17:54:56 PST)
  • Re: Writing Secure code[update] Crispin Cowan (Wed Jan 01 2003 - 20:17:57 PST)
    • RE: Writing Secure code[update] Jeremy Epstein (Fri Jan 03 2003 - 07:29:27 PST)
  • RE:Writing Secure code[update] Pavel Kankovsky (Fri Jan 03 2003 - 11:00:26 PST)
  • RE:Writing Secure code[update] dirk.dussartat_private (Tue Jan 07 2003 - 08:22:51 PST)
• Re: Preventing ptrace() Timo Sirainen (Thu Jan 02 2003 - 20:38:18 PST)
  • Re: Preventing ptrace() Jason Lunz (Thu Jan 09 2003 - 13:15:06 PST)
    • Re: Preventing ptrace() Timo Sirainen (Thu Jan 09 2003 - 17:53:36 PST)
      • Re: Preventing ptrace() Glynn Clements (Fri Jan 10 2003 - 12:32:52 PST)
      • Re: Preventing ptrace() Steffen Dettmer (Mon Jan 13 2003 - 01:34:16 PST)
      • Re: Preventing ptrace() Glynn Clements (Mon Jan 13 2003 - 04:23:40 PST)
      • Re: Preventing ptrace() David Wagner (Mon Jan 13 2003 - 12:20:44 PST)
• RE: Writing Secure code Timo Sirainen (Thu Jan 02 2003 - 20:36:53 PST)
• PGP scripting... Andrew MacKenzie (Tue Jan 07 2003 - 09:02:13 PST)
  • Re: PGP scripting... Giorgio Zoppi (deneb) (Tue Jan 07 2003 - 13:58:01 PST)
  • Re: PGP scripting... Alex Russell (Tue Jan 07 2003 - 12:19:20 PST)
  • RE: PGP scripting... Michael McKay (Tue Jan 07 2003 - 11:16:13 PST)
  • RE: PGP scripting... Chris Matthews (Tue Jan 07 2003 - 10:38:16 PST)
    • Re: PGP scripting... John Hanna (Tue Jan 07 2003 - 14:38:15 PST)
  • Re: PGP scripting... Valdis.Kletnieksat_private (Tue Jan 07 2003 - 12:19:24 PST)
    • RE: PGP scripting... Keith Smith (Tue Jan 07 2003 - 15:29:08 PST)
      • Re: PGP scripting... Marcin Owsiany (Tue Jan 07 2003 - 17:30:29 PST)
      • RE: PGP scripting... Keith Smith (Wed Jan 08 2003 - 00:05:32 PST)
      • Re: PGP scripting... Andrew MacKenzie (Wed Jan 08 2003 - 11:08:10 PST)
    • Re: PGP scripting... Marcin Owsiany (Tue Jan 07 2003 - 15:00:58 PST)
    • Re: PGP scripting... Frank Knobbe (Tue Jan 07 2003 - 18:19:42 PST)
      • Re: PGP scripting... lsi (Wed Jan 08 2003 - 05:12:46 PST)
      • Re: PGP scripting... Andrew MacKenzie (Fri Jan 10 2003 - 10:45:07 PST)
      • Re: PGP scripting... Valdis.Kletnieksat_private (Fri Jan 10 2003 - 11:31:54 PST)
      • Re: PGP scripting... Valdis.Kletnieksat_private (Tue Jan 07 2003 - 20:17:07 PST)
      • Re: PGP scripting... Frank Knobbe (Tue Jan 07 2003 - 22:47:37 PST)
      • Re: PGP scripting... Valdis.Kletnieksat_private (Wed Jan 08 2003 - 07:56:40 PST)
      • RE: PGP scripting... Chris Matthews (Wed Jan 08 2003 - 06:13:55 PST)
      • Re: PGP scripting... Andrew MacKenzie (Wed Jan 08 2003 - 11:23:21 PST)
      • RE: PGP scripting... Jason Coombs (Wed Jan 08 2003 - 11:26:04 PST)
      • Re: PGP scripting... Valdis.Kletnieksat_private (Wed Jan 08 2003 - 15:00:53 PST)
      • Re: PGP scripting... John Viega (Wed Jan 08 2003 - 18:08:15 PST)
  • Re: PGP scripting... Mindaugas Zaksauskas (Tue Jan 07 2003 - 11:44:48 PST)
    • Re: PGP scripting... Mindaugas Zaksauskas (Tue Jan 07 2003 - 11:46:32 PST)
      • Re: PGP scripting... Andrew Steingruebl (Tue Jan 07 2003 - 13:58:55 PST)
      • Re: PGP scripting... Andrew MacKenzie (Tue Jan 07 2003 - 15:35:13 PST)
      • Re: PGP scripting... Brian Hatch (Tue Jan 07 2003 - 16:53:26 PST)
  • Re: PGP scripting... Andrew Steingruebl (Tue Jan 07 2003 - 14:10:28 PST)
  • Re: PGP scripting... lsi (Tue Jan 07 2003 - 16:38:42 PST)
    • Re: PGP scripting... Valdis.Kletnieksat_private (Tue Jan 07 2003 - 20:12:18 PST)
    • Re: PGP scripting... Darryl Luff (Wed Jan 08 2003 - 16:51:18 PST)
    • Re: PGP scripting... Peter Jeremy (Sat Jan 11 2003 - 14:31:49 PST)
      • RE: PGP scripting... Jason Coombs (Sun Jan 12 2003 - 22:42:57 PST)
  • RE: PGP scripting... Andres Palomares (Tue Jan 07 2003 - 16:50:48 PST)
  • Re: PGP scripting... Steffen Dettmer (Wed Jan 08 2003 - 00:26:07 PST)
    • Re: PGP scripting... Andrew MacKenzie (Wed Jan 08 2003 - 11:15:40 PST)
      • Re: PGP scripting... Steffen Dettmer (Wed Jan 08 2003 - 15:25:58 PST)
  • RE: PGP scripting... Ogle Ron (Rennes) (Wed Jan 08 2003 - 07:55:33 PST)
  • RE: PGP scripting... Glenn_Everhartat_private (Wed Jan 08 2003 - 11:39:30 PST)
  • Re: PGP scripting... David Wagner (Wed Jan 08 2003 - 14:32:11 PST)
    • Re: PGP scripting... Andrew MacKenzie (Wed Jan 08 2003 - 20:59:30 PST)
      • Re: PGP scripting... David Wagner (Sat Jan 11 2003 - 12:38:28 PST)
  • RE: PGP scripting... Tom Arseneault (Wed Jan 08 2003 - 16:27:38 PST)
    • Re: PGP scripting... Brian Hatch (Thu Jan 09 2003 - 07:57:19 PST)
    • Re: PGP scripting... Andre Mariën (Thu Jan 09 2003 - 01:47:55 PST)
      • RE: PGP scripting... Jason Coombs (Tue Jan 21 2003 - 10:20:01 PST)
  • RE: PGP scripting... Ogle Ron (Rennes) (Thu Jan 09 2003 - 01:02:46 PST)
  • RE: PGP scripting... Dawes, Rogan (ZA - Johannesburg) (Wed Jan 08 2003 - 23:31:36 PST)
    • RE: PGP scripting... Michael McKay (Sat Jan 11 2003 - 22:34:45 PST)
      • RE: PGP scripting... Michael McKay (Mon Jan 13 2003 - 10:46:34 PST)
  • RE: PGP scripting... Kenneth Buchanan (Thu Jan 09 2003 - 06:01:15 PST)
    • RE: PGP scripting... Jason Coombs (Fri Jan 10 2003 - 15:00:29 PST)
      • Re: PGP scripting... Elliott Mitchell (Fri Jan 10 2003 - 19:27:38 PST)
      • Re: PGP scripting... Crispin Cowan (Sat Jan 11 2003 - 00:56:35 PST)
      • RE: PGP scripting... Jason Coombs (Fri Jan 10 2003 - 17:46:02 PST)
      • Re: PGP scripting... Pavel Kankovsky (Sun Jan 12 2003 - 12:23:53 PST)
  • Re: PGP scripting... Craig Davison (Sun Jan 12 2003 - 15:58:30 PST)
  • RE: PGP scripting... Beatie, Breck (ISSMountain View) (Tue Jan 21 2003 - 09:13:08 PST)
    • RE: PGP scripting... Glynn Clements (Wed Jan 22 2003 - 12:06:05 PST)
      • RE: PGP scripting... Jason Coombs (Thu Jan 23 2003 - 16:22:18 PST)
      • Re: PGP scripting... Andre Mariën (Thu Jan 23 2003 - 23:04:41 PST)
      • RE: PGP scripting... Jason Coombs (Thu Jan 23 2003 - 23:35:57 PST)
      • Re: PGP scripting... Andre Mariën (Fri Jan 24 2003 - 01:54:40 PST)
      • Re: PGP scripting... Valdis.Kletnieksat_private (Fri Jan 24 2003 - 15:45:38 PST)
      • RE: PGP scripting... Michael McKay (Tue Jan 28 2003 - 13:25:14 PST)
      • Re: RE: PGP scripting... Mark Reardon (Wed Jan 08 2003 - 12:59:05 PST)
  • RE: PGP scripting... Beatie, Breck (ISSMountain View) (Wed Jan 22 2003 - 12:27:01 PST)
• Suggestions for third-party code review consultants? jet (Tue Jan 07 2003 - 11:11:35 PST)
  • Re: Suggestions for third-party code review consultants? Nicole Nicholson (Wed Jan 08 2003 - 08:49:38 PST)
  • RE: Suggestions for third-party code review consultants? Sinan Eren (Wed Jan 08 2003 - 16:29:50 PST)
• Writing Secure code David Wheeler (Mon Jan 13 2003 - 07:37:34 PST)
  • Re: Writing Secure code L. Adrian Griffis (Mon Jan 13 2003 - 09:27:38 PST)
    • Re: Writing Secure code David Wheeler (Mon Jan 13 2003 - 14:44:33 PST)
• PGP scripting (reprise) lsi (Sat Jan 18 2003 - 07:19:08 PST)
  • Re: PGP scripting (reprise) Jack Lloyd (Wed Jan 22 2003 - 11:09:05 PST)
  • RE: PGP scripting (reprise) Robert B. Morson (Wed Jan 22 2003 - 08:38:56 PST)
  • RE: PGP scripting (reprise) Peter Gutmann (Wed Jan 22 2003 - 18:43:44 PST)
    • RE: PGP scripting (reprise) lsi (Fri Jan 24 2003 - 03:15:35 PST)
• Can System() of Perl be bypassed? Sandeep Giri (Tue Jan 21 2003 - 23:03:27 PST)
  • RE: Can System() of Perl be bypassed? NESTING, DAVID M (SBCSI) (Wed Jan 22 2003 - 13:30:17 PST)
  • Re: Can System() of Perl be bypassed? Brian Hatch (Wed Jan 22 2003 - 13:58:01 PST)
  • Re: Can System() of Perl be bypassed? Ilya Martynov (Wed Jan 22 2003 - 14:09:56 PST)
  • Re: Can System() of Perl be bypassed? Glynn Clements (Wed Jan 22 2003 - 14:37:14 PST)
  • Re: Can System() of Perl be bypassed? Dana Epp (Wed Jan 22 2003 - 14:26:17 PST)
  • RE: Can System() of Perl be bypassed? Tom Arseneault (Wed Jan 22 2003 - 15:10:39 PST)
  • Re: Can System() of Perl be bypassed? FBO (Thu Jan 23 2003 - 01:32:27 PST)
  • Re: Can System() of Perl be bypassed? Ian Charnas (Wed Jan 22 2003 - 21:50:05 PST)
    • Re: Can System() of Perl be bypassed? Brian Hatch (Thu Jan 23 2003 - 10:44:29 PST)
      • RE: Can System() of Perl be bypassed? epicmcat_private (Fri Jan 24 2003 - 03:25:20 PST)
  • Re: Can System() of Perl be bypassed? Sandeep Giri (Wed Jan 22 2003 - 23:08:15 PST)
    • Re: Can System() of Perl be bypassed? Brian Hatch (Thu Jan 23 2003 - 14:15:43 PST)
      • Re: Can System() of Perl be bypassed? Luciano Miguel Ferreira Rocha (Thu Jan 23 2003 - 16:27:49 PST)
    • Re: Can System() of Perl be bypassed? Glynn Clements (Thu Jan 23 2003 - 15:00:40 PST)
  • RE: Can System() of Perl be bypassed? NESTING, DAVID M (SBCSI) (Tue Jan 28 2003 - 14:35:30 PST)
    • Re: Can System() of Perl be bypassed? Brian Reichert (Tue Jan 28 2003 - 14:58:24 PST)
• Secure programming FAQ? jeremydat_private (Thu Jan 23 2003 - 16:18:07 PST)
  • Re: Secure programming FAQ? Jose Nazario (Thu Jan 23 2003 - 17:03:42 PST)
    • RE: Secure programming FAQ? drG4nj[Bl4ck Tigerz] (Fri Jan 24 2003 - 01:10:54 PST)
    • webserver cgi question Rob McMillen (Sun Jan 26 2003 - 06:42:42 PST)
  • RE: Secure programming FAQ? Pete Herzog (Fri Jan 24 2003 - 02:43:35 PST)
• [Full-Disclosure] Re: New Web Vulnerability - Cross-Site Tracing Steven M. Christey (Thu Jan 23 2003 - 18:41:32 PST)
  • [Full-Disclosure] Re: New Web Vulnerability - Cross-Site Tracing xss-is-lameat_private (Thu Jan 23 2003 - 16:38:05 PST)
• protecting perl script source John Hanna (Fri Jan 24 2003 - 10:58:21 PST)
  • Re: protecting perl script source frank @ absoluta.org ( Frank Ned ) (Fri Jan 24 2003 - 10:44:56 PST)
    • Re: protecting perl script source John Hanna (Fri Jan 24 2003 - 12:01:20 PST)
  • Re: protecting perl script source Dr. Ernst Molitor (Sat Jan 25 2003 - 00:52:17 PST)
• Effective, Real and Group id switching for daemons John Hanna (Fri Jan 24 2003 - 14:19:22 PST)
  • Re: Effective, Real and Group id switching for daemons listsat_private (Sat Jan 25 2003 - 04:16:06 PST)
• malicious code Jeff Williams (Sat Jan 25 2003 - 11:13:49 PST)
  • Re: malicious code David Wagner (Mon Jan 27 2003 - 14:21:29 PST)
    • Re: malicious code Jeff Williams (Mon Jan 27 2003 - 18:34:48 PST)
      • Re: malicious code Crispin Cowan (Mon Jan 27 2003 - 21:31:59 PST)
  • Re: malicious code listsat_private (Mon Jan 27 2003 - 23:20:10 PST)
    • RE: malicious code Jason Coombs (Tue Jan 28 2003 - 00:07:16 PST)
  • RE: malicious code Steven M. Christey (Tue Jan 28 2003 - 13:30:18 PST)
• safe strcpy()? Ed Carp (Mon Jan 27 2003 - 22:56:13 PST)
  • Re: safe strcpy()? Crispin Cowan (Mon Jan 27 2003 - 23:57:37 PST)
  • Re: safe strcpy()? Michal Zalewski (Tue Jan 28 2003 - 01:14:37 PST)
    • Re: safe strcpy()? Ed Carp (Tue Jan 28 2003 - 01:44:24 PST)
      • Re: safe strcpy()? Michal Zalewski (Tue Jan 28 2003 - 02:09:08 PST)
      • Re: safe strcpy()? Crispin Cowan (Tue Jan 28 2003 - 14:49:45 PST)
      • Re: safe strcpy()? Steffen Dettmer (Tue Jan 28 2003 - 16:09:55 PST)
      • Re: safe strcpy()? Timo Sirainen (Tue Jan 28 2003 - 10:37:37 PST)
      • Re: safe strcpy()? mlhat_private (Tue Jan 28 2003 - 15:37:36 PST)
      • Re: safe strcpy()? Timo Sirainen (Tue Jan 28 2003 - 17:36:44 PST)
      • Re: safe strcpy()? mlhat_private (Tue Jan 28 2003 - 19:12:53 PST)
      • Re: safe strcpy()? Timo Sirainen (Tue Jan 28 2003 - 20:05:22 PST)
      • Re: safe strcpy()? Crispin Cowan (Wed Jan 29 2003 - 22:19:47 PST)
  • Re: safe strcpy()? Brandon Erhart (Tue Jan 28 2003 - 09:21:19 PST)
  • RE: safe strcpy()? Michael Howard (Tue Jan 28 2003 - 16:40:07 PST)
  • RE: safe strcpy()? Hall, Philip (Tue Jan 28 2003 - 20:00:33 PST)
    • RE: safe strcpy()? Daniel Reed (Wed Jan 29 2003 - 14:04:58 PST)
      • RE: safe strcpy()? Ed Carp (Wed Jan 29 2003 - 17:53:37 PST)
  • RE: safe strcpy()? Michael Howard (Wed Jan 29 2003 - 13:06:41 PST)
    • Re: safe strcpy()? Dave Aitel (Wed Jan 29 2003 - 13:25:02 PST)
      • Re: safe strcpy()? Crispin Cowan (Thu Jan 30 2003 - 11:08:58 PST)
      • Re: safe strcpy()? Dave Aitel (Thu Jan 30 2003 - 13:58:58 PST)
    • Re: safe strcpy()? Ben Pfaff (Wed Jan 29 2003 - 15:40:16 PST)
      • Re: safe strcpy()? Ed Carp (Wed Jan 29 2003 - 17:54:43 PST)
      • Re: safe strcpy()? Timo Sirainen (Wed Jan 29 2003 - 17:47:04 PST)
• Application to Application authentication models.... r s (Tue Jan 28 2003 - 12:46:09 PST)
  • RE: Application to Application authentication models.... NESTING, DAVID M (SBCSI) (Tue Jan 28 2003 - 14:12:25 PST)
  • Re: Application to Application authentication models.... r s (Fri Jan 31 2003 - 08:10:57 PST)
  • RE: Application to Application authentication models.... NESTING, DAVID M (SBCSI) (Fri Jan 31 2003 - 12:13:27 PST)
  • RE: Application to Application authentication models.... Glenn_Everhartat_private (Fri Jan 31 2003 - 13:32:16 PST)
• Security Auditing Report Conventions and Standards Sandeep Giri (Tue Jan 28 2003 - 23:00:07 PST)

Last message date: Sat Feb 01 2003 - 14:09:10 PST
Archived on: Sat Feb 01 2003 - 14:09:12 PST

This archive was generated by hypermail 2b30 : Sat Feb 01 2003 - 14:09:12 PST