Category Archives: Security

How Bad Crossdomain Policies Expose Protected Data to Malicious Applications

By James Ward | Published: November 8, 2009

The web’s success has been partially due to the sandbox it provides users. Users do not generally have to entirely trust every website they visit because malicious web sites should be sandboxed from doing the user harm. One way that web sites are sandboxed is through a same-origin policy. By default any [...]

Also posted in Flash Player, Flex | 11 Comments

Mutual Authentication: Prevents Phishing Attacks?

By James Ward | Published: February 5, 2007

One of my credit card companies just implemented Mutual Authentication for their web site. I think this is a fantastic idea since it can help to protect users from phishing attacks. The hard part will be training users to not enter their credentials unless they see the tokens they selected. Continue reading to see [...]