OpenID4 items tagged “chrisshiflett”
End of Life for PHP 4. Apparently 8/8/8 marks the end of the line for PHP 4—no new releases, no support, not even security patches. 
8th August 2008, 11:32 pm
CSRF Redirector. Smart tool for testing CSRF vulnerabilities, by Chris Shiflett. 
18th July 2007, 7:45 am
Chris Shiflett: My Amazon Anniversary. Chris Shiflett discloses an unfixed CSRF vulnerability in Amazon’s 1-Click feature that lets an attacker add items to your shopping basket—after reporting the vulnerability to Amazon a year ago! 
16th March 2007, 10:16 am
Chris Shiflett: Google XSS Example (via) UTF-7 is a nasty vector for XSS. 24th December 2005, 5:21 pm
