<html><head><meta http-equiv="Content-Type" content="text/html charset=iso-8859-1"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><div><div>On 9 Apr 2013, at 09:45, Najaf Ali <<a href="mailto:ali@happybearsoftware.com">ali@happybearsoftware.com</a>> wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><div style="font-family: Helvetica; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; ">For those of you that could make it, thanks for listening. You can find the content and links for the talk here:</div><div style="font-family: Helvetica; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><br></div><div style="font-family: Helvetica; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><a href="http://happybearsoftware.com/lrug-web-app-security-talk.html">http://happybearsoftware.com/lrug-web-app-security-talk.html</a><br></div><div style="font-family: Helvetica; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><br></div></blockquote><div><br></div><div>Enjoyed it, thanks! Good to catch up in the bar after too.</div><br><blockquote type="cite"><div style="font-family: Helvetica; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; ">I didn't get a chance to talk much about further reading:</div><div style="font-family: Helvetica; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><br></div><div style="font-family: Helvetica; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; ">*<span class="Apple-converted-space"> </span><a href="http://www.amazon.co.uk/The-Web-Application-Hackers-Handbook/dp/1118026470/ref=sr_1_1?ie=UTF8&qid=1365354051&sr=8-1&keywords=web+application+hackers+handbook">Web Application Hackers Handbook</a><span class="Apple-converted-space"> </span>- As a web developer, you should probably read the first half and flick through the rest.</div><div style="font-family: Helvetica; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; ">*<span class="Apple-converted-space"> </span><a href="http://www.amazon.co.uk/Cryptography-Engineering-Principles-Practical-Applications/dp/0470474246">Cryptography Engineering</a><span class="Apple-converted-space"> </span>- Explains a lot of cryptography stuff but I found it better for the mindset side of things. Very short and readable.</div></blockquote><div><br></div><div>The WAHHv2 book is *the* bible as far as web app security testing is concerned. I highly recommend it (along with the Tangled Web book also mentioned on the list). The online labs which were talked about last night are at <a href="http://mdsec.net/">http://mdsec.net/</a> and again, they are very good but not very specific to Rails/Ruby.</div><div><br></div><div>I mentioned to a few of you but I'm working on a project which might be of interest when it comes to ruby/rails/sinatra security and testing and I hope to deliver a talk on it at LRUG in the near future.</div><br></div><div>Marc</div><br></body></html>