Virginia

Local News
We were blessed with a couple of good presentations from Cigital on 15 February. I'm waiting for Mark's presentation. Younus/Doug's presentation on the Universal PDF XSS vulnerability is here

Meeting Times and Location
Our next meeting will be on 15 February, at 6pm. We are moving the meeting to the 3rd Thursday since the 2nd week of February is the RSA conference. The topics will be:

"Add & Edit Cookies Firefox plugin", Ben Walther from Cigital. This plugin allows someone to see what cookies are set in their browser, modify them, delete them, etc. Ben will demonstrate the plugin and cover some common session-related security issues like session stealing, session fixation, and tampering with cookies.

"A Closer Look at Identity Theft Through Peer-to-Peer Networks", Paco Hope from Cigital. Paco will raise awareness of: (a) how p2p networks can disclose information you don't intend, and what that means to you or your employer or your client; (b) how p2p networks can threaten your web app (yep, ties it right back to OWASP); (c) what you should do, if you use p2p networks at all. We will meet at the Booz Allen building in Herndon in room 2208. You may park in any visitor or non-reserved parking spaces. Enter the building and check in with Booz Allen security at the Lobby Reception Desk and go to the 2nd floor.

Pizza will be provided for a small fee.

8 March will have:

TBD topic, Adam Vincent from Layer 7. Prior to joining Layer 7, Adam testing XML firewalls at Mitre and has extensive experience with these types of products.

TBD topic, Bruce Potter from Booz Allen.

Directions
13200 Woodland Park Road Herndon, VA 20171

From Tyson's Corner:

1. Take LEESBURG PIKE / VA-7 WEST 2. Merge onto VA-267 WEST / DULLES TOLL ROAD (Portions Toll) 3. Take the VA-657 Exit (Exit Number 10 towards Herndon / Chantilly) 4. Take the ramp toward CHANTILLY 5. Turn Left onto CENTERVILLE ROAD (at end of ramp) 6. Turn Left onto WOODLAND PARK ROAD (less than 1⁄2 mile) 7. End at 13200 WOODLAND PARK ROAD