July 13, 2007 4:10 PM PDT
Security Bites Podcast: Ajax insecurity
Listen Now
On this week's show, we talk with two SPI Labs researchers about Web 2.0 sites and Ajax insecurity.
Listen to more episodes of this podcast at the Security Bites podcast archive.
Subscribe to this podcast
Subscribe to the podcast rss feed,
This week CNET's Robert Vamosi talks with Bryan Sullivan, senior research engineer for SPI Labs, and Billy Hoffman, the company's lead researcher. They're putting together a presentation on Ajax security at this year's Black Hat USA security conference in Las Vegas later this month. In particular, the pair built an Ajax-enabled travel Web site using all the current site recommendations. During the presentation, they plan to poke holes in it, demonstrating how vulnerable some current implementations of Ajax are in this Web 2.0 world.
That's not to say they don't want sites to use Ajax. Hoffman and Sullivan provide insight into how to build a better Web 2.0 site.
Continue the discussion
