2011 11 16 Manchester - Revision history

Psiinon at 13:30, 15 December 2011

2011-12-15T13:30:35Z

Psiinon at 13:27, 15 December 2011

2011-12-15T13:27:41Z

Psiinon at 13:25, 15 December 2011

2011-12-15T13:25:54Z

Psiinon at 13:24, 15 December 2011

2011-12-15T13:24:11Z

Psiinon: Created page with "== Manchester Chapter meeting 2011 November 16th== This was the second [https://www.owasp.org/index.php/Manchester Manchester Chapter] meeting, and was once again very kindly..."

2011-12-15T13:21:25Z

Created page with "== Manchester Chapter meeting 2011 November 16th== This was the second [https://www.owasp.org/index.php/Manchester Manchester Chapter] meeting, and was once again very kindly..."

New page

== Manchester Chapter meeting 2011 November 16th==

This was the second [https://www.owasp.org/index.php/Manchester Manchester Chapter] meeting, and was once again very kindly hosted by KPMG.

'''OWASP Chapter introduction. OWASP values and membership. Chapter information.'''

[[User:Simon Bennetts|Simon Bennetts]] OWASP Manchester board member

'''Slides: '''
* [[File:OWASP_Manchester_into_11_11_16.pps]] OK, so due to technical problems these didnt actually work on the night ;)

'''Talk: Policy is the best honesty'''

Technology is rapidly emerging and maturing to enable connectivity and interoperability of a panoply of devices. The right investment relies on addressing workable, realistic policies first.
Daniel will tell you about what NCC members are doing to allow staff to 'BYOD' and build pragmatic iPolicies.

'''Speaker: Dr Daniel Dresner, Head of Information Assurance Practice, [http://www.ncc.co.uk/ National Computing Centre]'''

'''Talk: Non-alphanumeric code in JavaScript and PHP'''

Understanding how to create non-alpha code leads to a deeper understanding on how the particular language works.

Gareth shall discuss the history of non-alpha JavaScript, the challenges and creativity behind it.

How can you decode:
<pre>
$=~[];$={___:++$,$$$$:(![]+"")[$],__$:++$,$_$_:(![]+"")[$],_$_:++$,$_$$:({}+"")[$],$$_$:($[$]+"")
[$],_$$:++$,$$$_:(!""+"")[$],$__:++$,$_$:++$,$$__:({}+"")[$],$$_:++$,$$$:++$,$___:++$,$__$:++$};
$.$_=($.$_=$+"")[$.$_$]+($._$=$.$_[$.__$])+($.$$=($.$+"")[$.__$])+((!$)+"")[$._$$]+($.__=$.$_[$.$$_])
+($.$=(!""+"")[$.__$])+($._=(!""+"")[$._$_])+$.$_[$.$_$]+$.__+$._$+$.$;$.$$=$.$+(!""+"")[$._$$]+
$.__+$._+$.$+$.$$;$.$=($.___)[$.$_][$.$_];$.$($.$($.$$+"\""+$.$_$_+(![]+"")[$._$_]+$.$$$_+"\\"+
$.__$+$.$$_+$._$_+$.__+"("+$.__$+")"+"\"")())();
</pre>
Gareth will explain.

Gareth shall also cover how to create this in PHP and what techniques are involved.

'''Speaker: Gareth Heyes is an independent security researcher who specializes in browser and JavaScript research. He has authored many free online tools and sandboxes including Hackvertor and JSReg.'''

@@ Line 9: / Line 9: @@
 '''Slides: '''
-* [[File:OWASP_Manchester_into_11_11_16.ppt]] OK, so due to technical problems these didnt actually work on the night ;)
+* [[File:OWASP_Manchester_into_11_11_16.pdf]] OK, so due to technical problems these didnt actually work on the night ;)
 '''Talk: Policy is the best honesty'''

← Older revision		Revision as of 13:27, 15 December 2011
Line 23:		Line 23:

	'''Talk: Non-alphanumeric code in JavaScript and PHP'''		'''Talk: Non-alphanumeric code in JavaScript and PHP'''
		+
		+	'''Slides: '''
		+	* [[File:OWASP_Manchester_Nonalpha.pdf]]

	Understanding how to create non-alpha code leads to a deeper understanding on how the particular language works.		Understanding how to create non-alpha code leads to a deeper understanding on how the particular language works.

← Older revision		Revision as of 13:24, 15 December 2011
Line 12:		Line 12:

	'''Talk: Policy is the best honesty'''		'''Talk: Policy is the best honesty'''
		+
		+	'''Slides: '''
		+	* [[File:OWASP_Manchester_HonestyIsTheBestPolicy.pps]]

	Technology is rapidly emerging and maturing to enable connectivity and interoperability of a panoply of devices. The right investment relies on addressing workable, realistic policies first.		Technology is rapidly emerging and maturing to enable connectivity and interoperability of a panoply of devices. The right investment relies on addressing workable, realistic policies first.