https://blog.jeremiahgrossman.com/2008/04/risky-business-interview-on-blackhat.html
Jeremiah Grossman: Risky Business interview on Blackhat CSRF
While at Hack in the Box (Dubai) I took some time out speak with Patrick Gray of Risky Business , the host of a nicely popular security pod...
jeremiah grossmanrisky businessinterviewblackhatcsrf
https://blog.jeremiahgrossman.com/2007/01/input-validation-or-output-filtering.html
Jeremiah Grossman: Input validation or output filtering, which is better?
This question is asked regularly with respect to solutions for Cross-Site Scripting (XSS). The answer is input validation and output filteri...
jeremiah grossmaninput validationwhich isoutputfiltering
https://blog.jeremiahgrossman.com/2010/05/
Jeremiah Grossman: 05/01/2010 - 06/01/2010
jeremiah grossman
https://blog.jeremiahgrossman.com/2007/03/anti-dns-pinning-in-news.html?showComment=1172846160000
Jeremiah Grossman: Anti-DNS Pinning in the News!
Second Google Desktop attack reported . Now I've seen everything. This is the first time I've seen the esoteric anti-DNS Pinning term actual...
jeremiah grossmanin theantidnspinning
https://blog.jeremiahgrossman.com/2007/09/business-logic-flaws-freshly-minted.html?showComment=1190868720000
Jeremiah Grossman: Business Logic Flaws, freshly minted White Paper
While the industry is buzzing with XSS, SQLi, CSRF, browser insecurities, etc., Business Logic Flaws (pdf) is the website security dark hors...
jeremiah grossmanbusiness logicfreshly mintedflawswhite
https://blog.jeremiahgrossman.com/2007/11/whole-lot-of-web-hacking-going-on.html
Jeremiah Grossman: A whole lot of WEB hacking going on
First there was the QVC and OpenSocial incidents that I blogged about, but there are others, many others. And a lot of the references can ...
jeremiah grossmanweb hackingwholelotgoing
https://blog.jeremiahgrossman.com/2006/09/how-to-get-linked-from-slashdot.html?showComment=1157424120000
Jeremiah Grossman: How to get linked from Slashdot
A 5 step process, making use of Slashdot's PreviewStory feature, to create URL's that link anywhere and say anything. 1) Go to Slashdot's st...
how to getjeremiah grossmanlinkedslashdot
https://blog.jeremiahgrossman.com/2006/01/
Jeremiah Grossman: 01/01/2006 - 02/01/2006
jeremiah grossman
https://blog.jeremiahgrossman.com/2007/11/what-should-i-blog-about.html?showComment=1195785720000
Jeremiah Grossman: What should I blog about?
RSnake introduced me to this blogging thing about a year and a half ago. At first I hated him for it because after trying it out it felt li...
jeremiah grossmanblog
https://blog.jeremiahgrossman.com/2007/10/web-application-security-professionals.html
Jeremiah Grossman: Web Application Security Professionals Survey (Oct 2007)
NOTICE : I strongly recommend scrolling down to the survey results below first and coming to your own conclusions before reading mine. Concl...
web application securityjeremiah grossmanprofessionalssurveyoct
https://blog.jeremiahgrossman.com/2005/03/brilliant-idea-links-no-really.html
Jeremiah Grossman: the brilliant idea links. No really!
I think this idea is simply brilliant! Now all someone has to do is create imaginary boyfriends. "The girls are real. The relationship is no...
jeremiah grossmanbrilliantidealinksreally
https://blog.jeremiahgrossman.com/2010/11/calling-all-security-researchers-submit.html?showComment=1292242076763
Jeremiah Grossman: Calling all security researchers! Submit your new 2010 Web Hacking Techniques
Update 01.03.2011 : Voting has begun! Update : Prize information Each year the web security community produces a stunning amount of new hack...
https://blog.jeremiahgrossman.com/2010/11/calling-all-security-researchers-submit.html?showComment=1291224637483
Jeremiah Grossman: Calling all security researchers! Submit your new 2010 Web Hacking Techniques
Update 01.03.2011 : Voting has begun! Update : Prize information Each year the web security community produces a stunning amount of new hack...