-
Recent Posts
- One of the world’s most visited websites that nobody is aware of
- Security awareness sessie voor ambtenaren tijdens Zaakgericht Werken congres
- Nieuwsuur op bezoek: hackers hebben ingebroken in buitenlandse energiecentrales
- WiFi eavesdropping demonstration in Smell of Data documentary
- SHA2017 talk: How the Dutch elections could be hacked for the last 26 years
Recent Comments
- IT Security Weekend Catch Up – September 30, 2017 – BadCyber on One of the world’s most visited websites that nobody is aware of
- Russische whizzkid wordt rijk door jouw documentjes | STRBNDblog.nl on One of the world’s most visited websites that nobody is aware of
- Joris van de Vis (via Twitter) on Interview in het VNSG-magazine over SAP security
- Arnoud on Interview in het VNSG-magazine over SAP security
- Sijmen Ruwhof on How to hack the upcoming Dutch elections – and how hackers could have hacked all Dutch elections since 2009
Archives
- September 2017
- August 2017
- July 2017
- June 2017
- May 2017
- April 2017
- March 2017
- February 2017
- January 2017
- December 2016
- October 2016
- July 2016
- June 2016
- May 2016
- March 2016
- February 2016
- January 2016
- December 2015
- November 2015
- October 2015
- July 2015
- March 2015
- February 2015
- November 2014
- September 2014
- September 2012
- July 2012
- May 2012
- March 2012
- October 2011
- September 2011
- August 2011
- July 2011
- June 2011
- May 2011
- February 2011
- January 2011
- December 2010
- September 2010
- April 2010
- March 2010
- August 2006
- January 2005
- July 2004
- January 1970
Categories
- advertising
- analysis
- Apple
- article
- browser security
- bug
- computer worm
- copyright
- credit card
- cross site scripting
- cyber crime
- cyber terrorisme
- cyber warfare
- data leakage
- discussion
- drive-by
- e-voting
- hacking
- ICT
- interview
- jargon
- legal
- magazine
- media
- menu
- online banking
- password
- pentesting
- phishing
- PHP
- PHP security
- podcast
- presentation
- privacy
- process improvement
- radio
- ransomware
- responsible disclosure
- SAP
- scoping
- search engine optimization
- security
- security assessment
- security audit
- security awareness
- security vulnerability
- seo
- SNS Bank
- software development
- test
- tv
- Uncategorized
- vulnerability management
- w3c
- website
- website security
- WiFi
- wiretapping
- workshop
- zero day
Meta
Monthly Archives: November 2014
Cross-site scripting in millions of web sites
In August 2014 I found a severe cross-site scripting security vulnerability in the latest version (1.13.0) of the ‘jQuery Validation Plugin‘ during a security penetration test for a customer. This jQuery plugin which adds easy form validation functionality to a web site, is … Continue reading
Posted in cross site scripting, Google, PHP, responsible disclosure
62 Comments
2.364 Nederlandse bedrijfswebsites met ernstige beveiligingslekken
Toen ik in oktober 2012 op internet op zoek was naar een nieuwe auto, kwam ik een autobedrijf tegen waar ik een auto wou gaan kopen: (bovenstaande website is van een willekeurig bedrijf uit de lijst die ik later beschrijf) … Continue reading
Password hash disclosure in Linksys Smart WiFi routers
This is my tale about reporting a specific security vulnerability in a major product, just to give some insight in how responsible disclosures are handled by a security researcher (me) and various software companies (Cisco, Linksys and Belkin). On May … Continue reading
Posted in password, responsible disclosure
5 Comments