cross-site request forgery articles, videos, photos and opinions

Sort by Relevance | Date | Popularity

Facebook fixes hole that let in spam

...that made it possible for an application to bypass our normal CSRF (cross-site request forgery) protections through a complicated series of steps. We quickly... Read more

8 September, 2010 by Elinor Mills

Twitter users hit by 'WTF' viral message

...latest hack, which the social-media company fixed on Sunday, used a cross-site request forgery technique to automatically post from an infected user's... Read more

27 September, 2010 by Tom Espiner
Preventing <endeca_term>Cross Site Request Forgery</endeca_term> Attacks

Preventing Cross Site Request Forgery Attacks

...mitigation of Cross Site Scripting (XSS) and SQL injection attacks. In contrast, Cross Site Request Forgery (XSRF) attacks have not received much attention. In an... Read more

1 January, 2012

Mozilla puts out critical Firefox and Thunderbird fixes

...web browser, Firefox 3.6.14, fixes eight critical vulnerabilities, including a cross site request forgery risk and a memory corruption flaw. Firefox 3.6... Read more

2 March, 2011
ThreatSentry IIS Web Application Firewall (32-bit) 4.1.6

ThreatSentry IIS Web Application Firewall (32-bit) 4.1.6

...range of web application threats including Structured Query Language (SQL) Injection, DoS, Cross Site Request Forgery (CSRF/XSRF), Cross-Site Scripting (XSS) and other attack... Read more

18 May, 2012
ThreatSentry IIS Web Application Firewall (64-bit) 4.1.6

ThreatSentry IIS Web Application Firewall (64-bit) 4.1.6

...range of web application threats including Structured Query Language (SQL) Injection, DoS, Cross Site Request Forgery (CSRF/XSRF), Cross-Site Scripting (XSS) and other attack... Read more

18 May, 2012
Hacking: A Reference Guide 18

Hacking: A Reference Guide 18

...Sniffing the Wire--Cracking WEP/WPA(2) through WPS-Exploiting Web Applications:--Cross-Site-Request-Forgery How-To--SQL Injection How-To--Unrestricted URL references... Read more

13 March, 2012
CSRF Vulnerabilities and Defensive Techniques

CSRF Vulnerabilities and Defensive Techniques

...them and these threats are continuously growing, one of the threat is Cross Site Request Forgery(CSRF). CSRF attack is immerged as serious threat to... Read more

1 February, 2012
Enhancing Web Page Security With Security Style Sheets

Enhancing Web Page Security With Security Style Sheets

...developers to defend against common attacks such as cross-site scripting and cross-site request forgery, this work is not in a form suitable for... Read more

10 February, 2011
Symbolic Security Analysis of Ruby-on-Rails Web Applications

Symbolic Security Analysis of Ruby-on-Rails Web Applications

...to write Rubyx specifications to detect susceptibility to cross-site scripting and cross-site request forgery, insufficient authentication, leaks of secret information, insufficient access control... Read more

8 October, 2010
An Architecture for Enforcing End-to-End Access Control Over Web Applications

An Architecture for Enforcing End-to-End Access Control Over Web Applications

...the browser subject to a broad milieu of attacks (cross-site scripting, cross-site request forgery and others). The fundamental problem is that existing web... Read more

11 June, 2010

Flaw in O2 routers could lead to hijack

...routers' manufacturer Thomson, said they are working on a fix for the cross-site request forgery flaw. O2 refused to comment on the details of... Read more

3 September, 2009 by David Meyer

Four top sites vulnerable to attack, warn researchers

...While ING Direct, YouTube and Metafilter have taken action to address the cross-site-request-forgery (CSRF) vulnerabilities, the fourth site, belonging to The New... Read more

30 September, 2008 by Tom Espiner
Dynamic <endeca_term>Cross-Site Request Forgery</endeca_term>: A Per-Request Approach to Session Riding

Dynamic Cross-Site Request Forgery: A Per-Request Approach to Session Riding

Cross-Site Request Forgery ("CSRF") is typically described as a "replay" or static... Read more

24 July, 2009
Preventing Image Based <endeca_term>Cross Site Request Forgery</endeca_term> Attacks

Preventing Image Based Cross Site Request Forgery Attacks

Cross Site Request Forgery (CSRF) is an attack on web applications which exploits... Read more

8 July, 2009

Get ZDNet UK's daily newsletter

Enter your email address to sign up

ZDNet UK Live

Jack Strain

Just gimme a map to the fridge. :D

8 hours ago by Jack Strain via Facebook on Indoor navigation coming to a mobile near you soon
dede0202

Hello ALL USERS OF THE PIRATE BAY I WOULD PUT AN EXPLANATION ON PIRACY Story Idea ILLIGALE AND SHARING THOSE THAT NET Dissent NOT WELL BUT TO CA...

17 hours ago by dede0202 on The Pirate Bay infringes copyright, High Court decides
Sungwoo

do You know that? it can install 4G Ram. So i buy 4g and install It work! I can run call of duty 4,6,7 [Modern war... 1,2,3] Call of duty 1 was...

17 hours ago by Sungwoo on Loose Ends - Upgrading the Aspire One 522
itsajob

2. Bad idea. Making up patch cables loses you your commission from the cable supplier. 3. If you tidy up, other people can understand where the...

23 hours ago by itsajob on Ten IT jobs to save up for those rare lulls
Roberto_Store

Now On Sale, Unlocked iPhone 4S / Galaxy Note In Factory Box. Roberto-Techie(UK) ”Now on Sales” Smartphone, Android,Tablets,Gadget &...

1 day ago by Roberto_Store on Samsung Galaxy S III lined up for sale
Paul Smyth

Is this classic FUD? One thing I would definitely have notice is a Mozilla threat to stop supporting GNU/Linux.

1 day ago by Paul Smyth via Facebook on Firefox rapid release improves Fedora Linux
UnderINK

I agree with the previous commenter wholeheartedly. I couldn't say it better myself. This is very 'Big Brother'. And while I agree with protecting...

1 day ago by UnderINK on European e-identity plan to be unveiled this month
Simon Bisson and Mary Branscombe

Nice to see that Turing's idea of a general purpose computer doing once-hardware-powered tasks in software is now universal ;-) Mary

2 days ago by Simon Bisson and Mary Branscombe on Software with everything
Jason Burchell

seriously now. I've only bothered to read a small bit of the comments. do me and the rest of the world a favour. stop saying it does not work or...

2 days ago by Jason Burchell via Facebook on Music industry negotiating over 24-bit downloads
Philip Charles Cohen

Read about it and weep, John Donahoe ... In addition to Visa’s V.me, there is now MasterCard’s PayPass digital wallet soon to arrive; another...

2 days ago by Philip Charles Cohen via Facebook on PayPal takes phone-based payments to the high street
apexwm

Leslie Satenstein : Where have you ever seen Mozilla even mention this? Firefox is the most popular browser in the GNU/Linux OS, so I don't see...

2 days ago by apexwm on Firefox rapid release improves Fedora Linux
songmaster

SHleG: Do you remember building a clockwork scorpion kit (I'm pretty sure I have a photo of it somewhere) — I think it was called something like...

2 days ago by songmaster on Software with everything
Chris Wortman

Good I love Yahoo! Their search engine is getting better than Google as of late. I find more of what I want on the first page, and usually within...

2 days ago by Chris Wortman via Facebook on Linux Mint 13 ramps up for KDE release
PatrickG

openhgs has made the point for Windows 8 multiple monitors without realising it! With Windows 7 you have to switch the mouse and so your focus...

2 days ago by PatrickG on Windows 8 could speed multi-monitor uptake
Leslie Satenstein

Mozilla has threatened to stop supporting Linux. I guess that UBUNTU is going with another browser. I indicated that if Mozilla stops supporting...

2 days ago by Leslie Satenstein via Facebook on Firefox rapid release improves Fedora Linux
Andy Bolstridge

Much as I abhor Microsoft's licensing practices, this is almost certainly down to purchasing IT equipment via 3rd party consultants - you get the...

2 days ago by Andy Bolstridge via Facebook on 6 million wasted licences and £1,200 PCs: welcome to government IT
Jack Schofield

@openhgs Windows users have had multiple desktops since Linus started writing Linux. They just haven't shipped as standard because not enough...

3 days ago by Jack Schofield on Windows 8 could speed multi-monitor uptake
Jack Schofield

@Phil at Cloud4 What, Microsoft gets £1,200 per PC and £1,622 per server? Gosh, I'm amazed....

3 days ago by Jack Schofield on 6 million wasted licences and £1,200 PCs: welcome to government IT
craigsc

You guys have no idea what is going on at Autonomy. Autonomy could have been a much more profitable organization. The sales operations at Autonomy...

3 days ago by craigsc on HP cuts 27,000 staff as Autonomy chief Lynch leaves
Moley

How does this impact on dual or multi booting? Seems to me to more or less prohibit this, from Windows 8 anyway. Will Grub 2 recognise Windows 8,...

3 days ago by Moley on Windows 8 start-up speed forces USB boot workaround