Andrey Botalov

@RoryAlsop are talks from Securi-Tay available online?

How to be notified about new questions at followed tags at SO? Currently I use email notfications (once per 15 minutes) but by the time I get notification, question is already answered.

@LucasKauffman Could you put me in the list too?

How to subscribe to Imperial violet? I find this blog very useful. Does anyone know?

Yes, it is. But why it's not possible to open _blank in new tab if they are in iframe?

@RoryAlsop Why? Is sandboxing flawed?

I wrote a question but nobody answered it ((. Is there an answer to it? Is it so complex?

I'm interested in a couple of talks - yours and another Rory

@RoryAlsop Will screencasts/presentations be available after Securi-Tay 2?

@RoryAlsop Ruby page was an example

@RoryAlsop It's not possible to subscribe to specific product from page you linked. Only to all products

@RoryAlsop Regarding your edit in security.stackexchange.com/a/25571/5501. I meant not this form - cvedetails.com/vulnerability-feeds-form.php

50 is enough

It's good

Should it be edited?

Was my question badly formulated?

Yes

Answer "Use CVE details' Vulnerability Feeds & Widgets for product or vendor" looks good to me

I still think that my question isn't a shopping list and isn't a dup

Oh, I found it! CVE Details vendors and products contain Vulnerability Feeds & Widgets so I can subscribe to vulnerabilities only in those products

Why such service isn't written yet? Do you think it's not needed?

In my opinion it looks easy to write a service that will parse CVE db. Each entity contains "Vulnerable software and versions"

The options are free

This question is shopping recomendation too

What do you use to be alerted that about vulnerabilites in product XXX that is used in your organisation?

It doesn't become too localised. Exact products aren't specified in question

So I think my question isn't a dup.

But I don't want to see information about vulnerabilities in all products. I use only a subset of products and I want to see vulnerabilities only in those products. I don't want to be subscribed to vulnerabilities in service XXX if I don't use it.

My question was closed as exact duplicate. That another question advices to use securityfocus.com/bid, packetstormsecurity.org, cve.mitre.org/cve/data_updates.html, exploit-db.com. However mailing lists/RSS feeds that I found at those sites provide information about all vulnerabilities in all products.

@Iszi I saw it. It's the reason I decided to ask

Or is bad tone

Does anybody talk about security here?

But I still have non constructive question...

@Iszi RORY ALL THE RORYS. It's a bit higher priority I think

Some existing guides that I saw are very abstract (like OWASP testing guide), other one are too incomplete. Personally when I see something interesting, write it to my notes but I hope that someone saw guide/cheatsheat that is useful and isn't too abstract

What cheatsheets/testing guides do you consider useful when testing web applications?

from chat.stackexchange.com/transcript/message/6930325#6930325

@RoryMcCune I'd like to see them too

@RoryMcCune Thank you for response :) Is Dominator Pro better in finding DOM XSS than community version? At their site they tell about GUI, support and knowledge base but those things seem to be not of first importance

Previously I used DOM Snitch for finding DOM XSS vulnerbailities however it never found anything (and I don't know if they existed). Now I want to try something other. Will free version of Dominator be better?

Morning

received t-shirt for participation in competition))

xs-sniper.com/blog/2012/10/11/content-smuggling

Then, security.stackexchange.com/questions/11234/… also has different people giving different answers

Do you think security.stackexchange.com/questions/13570/… is better? It's for beginners too

If question will be asked in chat, it's not likely that someone else will be able to find answer. Nobody searches chat before asking question

So how should beginner ask this question if he doesn't know where to start? And he doesn't know any vulnerbailities of iOS application