Re: [SC-L] Exploiting Online Games + Silver Bullet + Darkreading

2007-07-18 Thread Gary McGraw
hi sc-l, Sadly, Addison-Wesley screwed up the release date of the book and as a result (and as many of you have pointed out in private email) the book is not yet available from amazon. That situation will be remedied by the end of this week, but in the meantime you can order the book from thre

[SC-L] Resources to fix vulns

2007-07-18 Thread McCown, Christian M
What do you tell a C-level exec in terms of h/c and time it will take to fix web app vulnerabilities discovered in a website? X number of vulnerabilities = Y h/c and Z time. Of course there's a host of factors/variables involved that could wind up looking like actuarial tables or DNA sequ