Python XML RPC over HTTP proxy

Submitted by Paweł Krawczyk on śr., 2012-05-09 11:52

The XML-RPC over HTTP proxy given in Python documentation doesn't really work, so I've written a fixed XML-RPC transport for xmlrpclib that seems to work.

Python module for flexible SSL HTTP server handling

Submitted by Paweł Krawczyk on śr., 2012-04-25 01:59

This module allows flexible SSL certificate from a server. Unlike standard ssl module in Python, this function handles HTTP proxy and invalid certificates.

European personal data regexp patterns

Submitted by Paweł Krawczyk on pt., 2012-04-20 16:19

I've spent some time browsing through publicly available sources to find out what are various identification numbers across Europe, especially those that can be treated as "personal data". The numbers listed below include national identification, tax, health, social security and bank codes that I was able to identify.

Analiza stanu przygotowań dotyczących wprowadzenia nowych dowodów osobistych

Submitted by Paweł Krawczyk on pt., 2012-04-06 23:09

Niedawno złożyłem w MSW wniosek o udostępnienie wyników pracy zespołu do analizy stanu przygotowań dotyczących wprowadzenia nowych dowodów osobistych.

Testing X-Content-Security-Policy

Submitted by Paweł Krawczyk on pon., 2012-03-19 11:09

If you wondered how X-Content-Security-Policy works in real life here's an example.

Trusted timestamping example in Python

Submitted by Paweł Krawczyk on ndz., 2012-03-18 16:29

Here's a simple example on how to request a trusted timestamping service from a certificate authority using TSP (Time-Stamp Protocol). It's really simple if the server allows you to use standard HTTP interface instead of full TSP interface.

ISACA już oficjalnie w Katowicach

Submitted by Paweł Krawczyk on pt., 2012-03-16 18:44

Oddział ISACA w Katowicach został już oficjalnie wpisany na listę międzynarodowych chapterów tej organizacji.

Building a cost-benefit model for application security testing

Submitted by Paweł Krawczyk on pt., 2012-03-16 18:42

Is it possible to speak about application security testing in economic terms? My intuition and practice suggested that it's not only possible but necessary for security testing to really make sense.

Practical security of RSA keys over Internet

Submitted by Paweł Krawczyk on sob., 2012-02-18 10:39

A very important research paper has been just published on eprint — wide analysis of practical security of RSA keys found in the wild. It shows that implementation or usage issues resulting in weak keys are much more widespread than previously expected.

OWASP Kraków - 18 Jan 2012

Submitted by Paweł Krawczyk on czw., 2012-01-05 21:34

OWASP Poland meeting in Krakow on18 Jan 2012, time 18:00—20:00, location Technology Park (Czyżyny) (Al. Jana Pawła II 41 L), Krakow, Poland. More information as usual at www.owasp.org/index.php/Poland

Decision trees and expected value of perfect information (EVPI) calculations with MS Excel

Submitted by Paweł Krawczyk on pon., 2012-01-02 18:48

Here is a collection of Excel spreadsheets I have been using while studying decision trees and value of information concepts.

OWASP Warsaw - 15 December

Submitted by Paweł Krawczyk on pt., 2011-12-02 17:55

OWASP Poland meeting in Warsaw on15 Dec 2011, time 18:00—20:00, location Ernst & Young, Rondo ONZ 1, Warszawa, Room: 14-40 (floor 14). More information as usual at www.owasp.org/index.php/Poland

OWASP Warszawa - 15 grudnia

Submitted by Paweł Krawczyk on pt., 2011-12-02 17:53

Zaproszenie na kolejne spotkanie OWASP w Warszawie 15 grudnia w siedzibie E&Y. Tym razem prezentacje beda w języku angielskim

Pierwszy polski szyfrator na polu walki

Submitted by Paweł Krawczyk on pon., 2011-11-21 21:09

Firma Enigma Systemy Ochrony Informacji przedstawia pierwszy polski szyfrator, który spełnia rygorystyczne normy konstrukcyjne charakterystyczne dla pola walki (NO-06-A103).

Kraków - spotkanie OWASP 23 listopada

Submitted by Paweł Krawczyk on wt., 2011-11-15 12:35

Serdecznie zapraszamy wszystkich zainteresowanych na spotkanie OWASP Poland Local Chapter, poświęcone tematyce bezpieczeństwa aplikacji webowych.

Subskrybuj zawartość