Net copes with key character test
120786
Tests are carried out to see how the net's addressing system  copes with international character sets such as Chinese and Arabic.
517091
Fixes made for "critical" JavaScript vulnerability in the Firefox browser and the SeaMonkey application suite.
757749
On the PHPKitchen site today, Demian Turner looks at a handy utility to ensure that the coding standards in your documents are all passable - PHP_CodeSniffer.    There was a fantastic CS helper package released at PEAR this week, PHP_CodeSniffer. The package, which requires PHP5 and is nicely coded, puts a phpcs script in your path so you can pass files or directories to it to get your CS validated.   The results are detailed and processing is surprisingly fast considering how many tokens are being parsed.    Demian gives an example of what the validation process looks like and why he finds the entire package particularly useful.
648643
This article discusses current trends in penetration testing for web application security, and in particular discusses a framework for selecting the best tool or tools to use for these increasingly common type of application.
121787
A toolkit designed to exploit a recently-disclosed Microsoft JPEG vulnerability has been released onto the net.
107521
BO test bit whiffy Security firm Comodo, best known for its digital certificate business, has released a free diagnostic tool designed to identify buffer overflows in desktop security products. Our try-out, however, suggests that Comodo's BO Tester is principally designed to help poach users than provide a detailed breakdown of bugs.â¦
705765
Company launches free test version of service that fosters popular Internet activity.
336569
A security issue has been discovered in a common feature included in several Web browsers, including Mozilla, Firefox, Opera, Konqueror and Camino.
479839
Consistency, clarity and support for non-Latin characters are considered by Internet governance group.
276718
Khoo writes &quot;A sample program hit the Internet on Wednesday, showing by example how malicious coders could compromise Windows computers by using a flaw in the handling of a widespread graphics format by Microsoft&#39;s software.
181199
Interesting tidbit that was Slashdotted earlier - Netcraft has released an anti-phishing toolbar that leverages the enormous database of web sites the organization manages.
597105
Company says replicating network latency, bandwidth and packet loss problems enables better lab testing.
107697
Written by Net 4 Nowt EarthLink has announced plans to become the first major Internet service provider to test DomainKeys, a leading cryptographic e-mail authentication solution introduced by Yahoo!
634435
Andrei Zmievski has posted something new to his blog today about a feature of PHP6 that's finally been hammered down - HTTP input (request) decoding.   There have been no fewer than 4 different proposals floated before, but this one combines flexibility, performance, intuitiveness, and minimal architectural changes, and has only a couple of small drawbacks. Let's take a closer look.   He details the functionality - what it is, what's been decided on, and the advantages of the method. The basic approach is a "lazy" one where PHP will only store the request when it comes in, no filtering or anything, until you want to do something with it (i.e. get it via $_GET, $_POST, etc). When the request for data is made, PHP looks at the encoding settings and formats the data accordingly.   Advantages he mentions for this method include removing the guess-work on PHP's part for which encoding the request is and that it removes some of the overhead by not processing the data until it's actually needed.
148612
Attackers can trick browsers into releasing password information.
460038
In this post to his blog, Chris Shiflett talks about some issues surrounding character encoding and the cross-site scripting issues it can open up in your application.    In the post [on Good and Bad PHP Code], he provides a few useful PHP interview questions, including some questions from Yahoo. He explains that good PHP code should be Structured, Consistent, Portable and Secure   In the comments, many additional improvements have been suggested, but there's one that has yet to be mentioned. When using htmlspecialchars() without specifying the character encoding, XSS attacks that use UTF-7 are possible.    Included in the post is an example to illustrate the point as well as a solution, a simple one involving the header() function, to help correct the problem and prevent bad things from happening.   Be sure to check out http://shiflett.org/blog/2007/may/character-encoding-and-xss#comments">the comments for more great tips.
484739
By ANICK JESDANUN  NEW YORK - The Internet's key oversight agency sought Friday to identify policy disputes that might arise from the introduction of addresses that end in non-Latin scripts, marking one more step toward making the Internet truly global.