BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//talks.cam.ac.uk//v3//EN
BEGIN:VTIMEZONE
TZID:Europe/London
BEGIN:DAYLIGHT
TZOFFSETFROM:+0000
TZOFFSETTO:+0100
TZNAME:BST
DTSTART:19700329T010000
RRULE:FREQ=YEARLY;BYMONTH=3;BYDAY=-1SU
END:DAYLIGHT
BEGIN:STANDARD
TZOFFSETFROM:+0100
TZOFFSETTO:+0000
TZNAME:GMT
DTSTART:19701025T020000
RRULE:FREQ=YEARLY;BYMONTH=10;BYDAY=-1SU
END:STANDARD
END:VTIMEZONE
BEGIN:VEVENT
CATEGORIES:Computer Laboratory Security Seminar
SUMMARY:Protecting your website from hackers - Ben Mathews
 \, Facebook
DTSTART;TZID=Europe/London:20130115T161500
DTEND;TZID=Europe/London:20130115T171500
UID:TALK41602AThttp://talks.cam.ac.uk
URL:http://talks.cam.ac.uk/talk/index/41602
DESCRIPTION:I will give a modified version of the talk we give
  our new engineers on how not to write security ho
 les.\nThis may be a little bit closer to Zend's ta
 lk.  I will talk more openly about some of our sol
 utions to a variety of web security issues where a
 n outside hacker is typically trying to get contro
 l of your website.  Among other things\, I will co
 ver:\n	a.	XSS:  XHP\; Alternatives to innerHTML in
  JavaScript\; Automatic detection of XSS holes.\n	
 b.	SQL injection: Our abstracted graph data store 
 (which avoids the need for SQL)\; printf()-style S
 QL functions\n	c.	URL injection: Our URI class for
  building URLs\n	d.	Shell injection: Our printf()-
 style functions for running shell\ncommands\n	e.	C
 SRF: Generating CSRF tokens and checking them auto
 matically on all POST\nrequests\;  The importance 
 of a good crypto library\n	f.	Brute-force attacks:
  Also the importance of a good crypto library.
LOCATION:Lecture Theatre 2\, Computer Laboratory\, William 
 Gates Building
CONTACT:Laurent Simon
END:VEVENT
END:VCALENDAR
