RKG Logo 434-978-4300
Alan Rimm-Kaufman

Is Your Online Store Vulnerable To CSRF and XSS Attacks?

Title: Is Your Online Store Vulnerable To CSRF and XSS Attacks?
URL: http://www.rimmkaufman.com/rkgblog/2008/11/07/csrf-and-xss/
Printed: March 17, 2010
Source: The Rimm-Kaufman Group Blog, info@rimmkaufman.com

Ing Direct. New York Times. YouTube. Digg. Google.

These (and many other well-engineered sites) have been compromised by XSS and CSRF attacks in the last 18 months.

Here’s an excellent technical powerpoint discussing these newer categories of security threats.

Web Security Horror Stories
View SlideShare presentation or Upload your own. (tags: webapps xss)

Whether you are running home-brew code or using a third party platform, your site faces these dangers.

Marketing folks, check with your technical teams to ensure your site is doing all it can to avoid these vulnerabilities.

Technorati Tags: ,

If you like this post, consider subscribing to our RSS feed. You can also have new posts sent to you via email.


Related Posts

    No related posts.

No Comments Yet

Your comment will be first!

Your Comment

Tags

RKG Tags: ,

Technorati Tags: ,

Trackback

http://www.rimmkaufman.com/rkgblog/2008/11/07/csrf-and-xss/trackback/

Email Updates

Categories

Recent Comments

  • George Michie: Kevin, Marc, thanks for your comments. Help is coming, but not the solution. There are a number of instances when the CTR on the...
  • Marc Adelman: George, You have been an advocate of “the advanced control option” for years now. Depressing right YEARS! Eh…listen...
  • Kevin Hill: Is what they really need is a fourth match type. Here’s google’s help documentation on broad match: This is the default...
  • Kevin Micalizzi, Dimdim Web Conferencing: Jim (& George)- We still offer a free version of Dimdim. Just click Sign Up Now at the top of the...
  • Tomas: indeed, i can’t talk about it either… :)
  • Philip Price: Thank you for the RegHack, it worked for me, tho at first when i made the reg file with the information i copied from above i also...
  • George Michie: Sorry Jim, this post was written in 2007. Apparently some of those products are gone.
  • Jim: Hey, I checked two products like dimdim and cutepdf but none is free. What are you talking about free and open source?
  • George Michie: If they keep hearing the same message, and seeing evidence in the data to back it up, something will have to give. There is hope on...
  • Tomas: I’ve been having the same argument with Google for months now and in the end there does seem to be a feature in the algorithm that...
  • George Michie: Doesn’t have to be, it can be intra-adgroup as well.
  • Josh: George – I take it you’re referencing a scenario where your exact-match keywords are not listed as negative exact match keywords...
  • George Michie: Melissa, you’re right, it’s always happened to varying degrees, particularly since the advent of extended broad match....
  • Mel66: I don’t think this is a bug. It’s been happening for years. It *is* impossible to manage, and I can’t help but wonder if...
  • George Michie: Thanks Matt, Sometimes humor serves a purpose.

Blog Stats

  • Posts: 948
  • Words: 451,089
  • Comments: 2,874

Administration