<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: modsecurity hack</title>
	<atom:link href="http://michaeldaw.org/alerts/130307-2/feed" rel="self" type="application/rss+xml" />
	<link>http://michaeldaw.org/alerts/130307-2</link>
	<description>Weekly humour</description>
	<lastBuildDate>Thu, 07 May 2009 20:09:50 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=</generator>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
		<item>
		<title>By: david.kierznowski</title>
		<link>http://michaeldaw.org/alerts/130307-2/comment-page-1#comment-12624</link>
		<dc:creator>david.kierznowski</dc:creator>
		<pubDate>Tue, 13 Mar 2007 14:27:29 +0000</pubDate>
		<guid isPermaLink="false">http://michaeldaw.org/alerts/130307-2/#comment-12624</guid>
		<description>Ivan Ristic seems a little peeved in that blog entry that the vulnerability was not disclosed &quot;responsibly&quot;. I have noticed a movement toward full disclosure for web app vulnerabilities - see &lt;a href=&quot;http://sla.ckers.org&quot; rel=&quot;nofollow&quot;&gt;sla.ckers.org&lt;/a&gt;.</description>
		<content:encoded><![CDATA[<p>Ivan Ristic seems a little peeved in that blog entry that the vulnerability was not disclosed &#8220;responsibly&#8221;. I have noticed a movement toward full disclosure for web app vulnerabilities &#8211; see <a href="http://sla.ckers.org" rel="nofollow">sla.ckers.org</a>.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: David</title>
		<link>http://michaeldaw.org/alerts/130307-2/comment-page-1#comment-12621</link>
		<dc:creator>David</dc:creator>
		<pubDate>Tue, 13 Mar 2007 14:19:35 +0000</pubDate>
		<guid isPermaLink="false">http://michaeldaw.org/alerts/130307-2/#comment-12621</guid>
		<description>Ivan addressed this in the ModSec blog and presented a workaround on Sunday:
http://www.modsecurity.org/blog/archives/2007/03/modsecurity_asc.html</description>
		<content:encoded><![CDATA[<p>Ivan addressed this in the ModSec blog and presented a workaround on Sunday:<br />
<a href="http://www.modsecurity.org/blog/archives/2007/03/modsecurity_asc.html" rel="nofollow">http://www.modsecurity.org/blog/archives/2007/03/modsecurity_asc.html</a></p>
]]></content:encoded>
	</item>
</channel>
</rss>
