“security” Archive (2)

Entry (Sources) and Other Related Topics	Date	#
It’s Beginning to Look a Lot Like XSSmas (24w)	Dec 17, 2018	140
vulnerabilities, csrf, xss	Dec 17, 2018	140
Protecting Your Site With Feature Policy (rac/sma)	Dec 12, 2018	139
http-headers, http	Dec 12, 2018	139
AWS Security Guide: 7 Best Practices to Avoid Security Risks	Oct 31, 2018	138
guides, aws, best-practices	Oct 31, 2018	138
WebAuthn, FIDO2 Infuse Browsers, Platforms With Strong Authentication (dar)	Sep 19, 2018	137
w3c, fido, authentication, webauthn, browsers	Sep 19, 2018	137
In Your Face, Passwords: Big Three Browsers All Adopt Authentication API	Aug 1, 2018	136
authentication, webauthn, apis, edge, microsoft, chrome, google, firefox, mozilla, browsers	Aug 1, 2018	136
HTTPS Is Easy (tro)	Jun 27, 2018	135
websites, http	Jun 27, 2018	135
WordPress Security as a Process (sma)	Jun 21, 2018	134
wordpress, processes	Jun 21, 2018	134
Making Your Website Faster and Safer With Cloudflare	Jun 12, 2018	133
performance, caching, cloudflare	Jun 12, 2018	133
Validating Dependencies in the Project With npm-check and depcheck	Jun 1, 2018	132
dependencies, maintenance, auditing, tooling, npm	Jun 1, 2018	132
Third Party CSS Is Not Safe (jaf)	Feb 27, 2018	131
html, css, embed-code	Feb 27, 2018	131
Attackers Can Steal Sensitive Data by Abusing CSS—CSS Exfil Vulnerability	Feb 7, 2018	130
css, csp	Feb 7, 2018	130
Building Secure JavaScript Applications	Jan 18, 2018	129
javascript, xss, csrf, json-web-tokens, passwords	Jan 18, 2018	129
Creating Secure Password Resets With JSON Web Tokens (sma)	Nov 9, 2017	128
passwords, json-web-tokens, nodejs	Nov 9, 2017	128
The Complete Guide to Switching From HTTP to HTTPS (sma)	Jun 12, 2017	127
guides, http	Jun 12, 2017	127
How (Not) to Control Your CDN (mno)	Jun 7, 2017	126
content-delivery, caching, http	Jun 7, 2017	126
How to Secure WordPress With SSL	May 10, 2017	125
how-tos, wordpress, ssl	May 10, 2017	125
Encrypting IP Addresses (ber)	May 7, 2017	124
ip, network, privacy, encryption	May 7, 2017	124
How to Secure Your Web App With HTTP Headers (sma)	Apr 3, 2017	123
how-tos, web-apps, http, http-headers, csp	Apr 3, 2017	123
Just Another HTTPS Nudge (chr/css)	Mar 3, 2017	122
http	Mar 3, 2017	122
On EME in HTML5 (tim/w3c)	Feb 28, 2017	121
eme, drm, html, legal, standards, w3c	Feb 28, 2017	121
Using SSH Securely (ann)	Jan 24, 2017	120
ssh	Jan 24, 2017	120
More Than 300 Federal Gov Websites Fail to Meet Domain Encryption Deadline	Jan 4, 2017	119
http, tls, protocols, encryption	Jan 4, 2017	119
Content Security Policy Level 2 (mik+/w3c)	Dec 15, 2016	118
standards, csp	Dec 15, 2016	118
Content Security Policy, Your Future Best Friend (sma)	Sep 12, 2016	117
csp, link-lists	Sep 12, 2016	117
A Refined Content Security Policy (web)	Aug 5, 2016	116
html, csp, webkit, safari, apple, browsers	Aug 5, 2016	116
The Performance Benefits of “rel=noopener” (jaf)	Jul 21, 2016	115
html, links, performance	Jul 21, 2016	115
Web Platform Security Boundaries (ann)	Jun 24, 2016	114
web-platform	Jun 24, 2016	114
Subresource Integrity (dev+/w3c)	Jun 23, 2016	113
hashing, html, standards	Jun 23, 2016	113
W3C Looks to Secure the Web (sdt)	Feb 17, 2016	112
w3c, authentication	Feb 17, 2016	112
Distribution Packages Considered Insecure	Feb 13, 2016	111
dependencies, unix-like	Feb 13, 2016	111
The Current State of Web Security (An Interview With Anselm Hannemann) (hel+/css)	Jan 18, 2016	110
interviews, http, ssl, tls, encryption, cloudflare	Jan 18, 2016	110
Eliminating Known Vulnerabilities With Snyk (sma)	Jan 13, 2016	109
vulnerabilities, tooling	Jan 13, 2016	109
10 Web Predictions for 2016 (cra)	Jan 6, 2016	108
web, outlooks, site-generators, browsers, css, mobile, performance, webassembly, seo	Jan 6, 2016	108
HSTS and “Let’s Encrypt” (tka)	Jan 4, 2016	107
http, http-headers, ssl	Jan 4, 2016	107
An in-Depth Look at CORS	Dec 17, 2015	106
cors, javascript, php	Dec 17, 2015	106
Why Passwordless Authentication Works (cra)	Nov 10, 2015	105
authentication, passwords	Nov 10, 2015	105
A Simple Developer Error Is Exposing Private Information on Thousands of Websites (owe)	Jul 27, 2015	104
version-control, git, mistakes, vulnerabilities	Jul 27, 2015	104
More Tips to Further Secure WordPress (eli)	Jul 9, 2015	103
wordpress, tips-and-tricks, plugins	Jul 9, 2015	103
Improving Web Security With the Content Security Policy	Jun 24, 2015	102
csp, http	Jun 24, 2015	102
Deprecating HTTP (yoa)	May 11, 2015	101
http, protocols	May 11, 2015	101
Mozilla Wants to Deprecate Non-Secure HTTP, Will Make Proposals to W3C “Soon” (epr/ven)	Apr 30, 2015	100
mozilla, http	Apr 30, 2015	100
Want Fancy Firefox Features? Secure Your Website (sts/cne)	Apr 14, 2015	99
firefox, mozilla, browsers, http	Apr 14, 2015	99
WordPress Front End Security: CSRF and Nonces (css)	Mar 24, 2015	98
wordpress, csrf	Mar 24, 2015	98
Introduction to WordPress Front End Security: Escaping the Things (css)	Mar 23, 2015	97
introductions, wordpress, escaping	Mar 23, 2015	97
What Are the Security Risks of HTML5 Apps?	Mar 18, 2015	96
web-apps, sanitization	Mar 18, 2015	96
Moving to HTTPS on WordPress (chr/css)	Mar 6, 2015	95
wordpress, http	Mar 6, 2015	95
Same-Origin Policy (ann)	Feb 23, 2015	94
cors, web-platform	Feb 23, 2015	94
Securing the Web (w3c)	Jan 23, 2015	93
web-platform	Jan 23, 2015	93
It’s Time to Encrypt the Entire Internet (kli/wir)	Apr 17, 2014	92
web, http, ssl, encryption	Apr 17, 2014	92
Cross-Origin Resource Sharing (ann/w3c)	Jan 16, 2014	91
cors, standards	Jan 16, 2014	91
Despite Automatic Updates, Old Browsers Are Still a Problem (edb/zdn)	Jan 6, 2014	90
browsers, web-platform, chrome, google, firefox, mozilla, internet-explorer, microsoft, safari, apple	Jan 6, 2014	90
Cross-Origin Resource Sharing on Track to Become a W3C Recommendation (sdt)	Jan 3, 2014	89
w3c, cors, standards	Jan 3, 2014	89
Bid to Kill CAPTCHA Security Test Gains Momentum	Aug 5, 2013	88
captcha, accessibility	Aug 5, 2013	88
We Should All Have Something to Hide	Jun 12, 2013	87
privacy	Jun 12, 2013	87
Mobile Website Security	May 14, 2013	86
mobile, hosting, policies	May 14, 2013	86
WordPress Security Tips	Apr 17, 2013	85
wordpress, tips-and-tricks	Apr 17, 2013	85
Brad Hill: “HTML5 Security Realities” (chr/css)	Feb 22, 2013	84
slides, xss, html	Feb 22, 2013	84
Bulletproof Your Drupal Website	Jan 21, 2013	83
drupal	Jan 21, 2013	83
Top 10 PHP Security Vulnerabilities	Oct 15, 2012	82
php, vulnerabilities	Oct 15, 2012	82
A Front End Engineer’s Manifesto (zac)	Aug 24, 2012	81
websites, manifestos, user-experience, progressive-enhancement, simplicity, foss, accessibility, community, learning	Aug 24, 2012	81
A JavaScript Security Flaw	Aug 9, 2012	80
javascript	Aug 9, 2012	80
The Secure Programmer’s Pledge	Jul 16, 2012	79
manifestos	Jul 16, 2012	79
An Introduction to Content Security Policy (mik/dev)	Jun 15, 2012	78
introductions, csp	Jun 15, 2012	78
Cross-Site Scripting Attacks (XSS)	Apr 30, 2012	77
xss, examples	Apr 30, 2012	77
How to Secure Your WordPress Website (sma)	Nov 10, 2011	76
how-tos, wordpress, link-lists	Nov 10, 2011	76
Using CORS (dev)	Oct 26, 2011	75
cors	Oct 26, 2011	75
XML Encryption Flaw Leaves Web Services Vulnerable (eur)	Oct 24, 2011	74
web-services, xml, encryption	Oct 24, 2011	74
Some Notes on the Recent XML Encryption Attack (w3c)	Oct 24, 2011	73
xml, encryption	Oct 24, 2011	73
HTTPS Is More Secure, So Why Isn’t the Web Using It? (ars)	Mar 20, 2011	72
http, protocols, web	Mar 20, 2011	72
Web Cryptography: Salted Hash and Other Tasty Dishes (ali)	Feb 22, 2011	71
cryptography	Feb 22, 2011	71
What Are the JSON Security Concerns in Web Development? (sim)	Jan 6, 2011	70
json	Jan 6, 2011	70
What Is Cross Site Scripting or XSS? (chr/css)	Nov 19, 2010	69
xss, javascript, concepts	Nov 19, 2010	69
Web Developers Accountable for HTML 5 Security	Oct 5, 2010	68
html	Oct 5, 2010	68
HTML5 Raises New Security Issues	Aug 20, 2010	67
html, browsers	Aug 20, 2010	67
10 Useful WordPress Security Tweaks (sma)	Jul 1, 2010	66
wordpress	Jul 1, 2010	66
Web Security: Are You Part of the Problem? (cod/sma)	Jan 14, 2010	65
vulnerabilities, php, javascript	Jan 14, 2010	65
The Internet Is Closing to Innovation (zit/new)	Nov 28, 2008	64
web	Nov 28, 2008	64
You Could Be Getting Clickjacked (tec)	Nov 21, 2008	63
vulnerabilities, frames, w3c	Nov 21, 2008	63
Dumb Security Tips: Think Before You Follow Online Guides (tan)	Oct 26, 2008	62
tips-and-tricks	Oct 26, 2008	62
Internet Explorer 8 Promises Better Standards Compliance… and a Whole Lot More (est/cio)	Mar 6, 2008	61
internet-explorer, microsoft, browsers, standards	Mar 6, 2008	61
JavaScript Security Experiments (mar)	Feb 7, 2007	60
javascript, experiments	Feb 7, 2007	60
DOM vs. Web (mno)	Apr 20, 2006	59
http, dom	Apr 20, 2006	59
Top 7 PHP Security Blunders	Dec 21, 2005	58
php, databases, sql	Dec 21, 2005	58
Validate Your Input!	May 9, 2005	57
validation	May 9, 2005	57
JavaScript Security	Oct 4, 2004	56
javascript	Oct 4, 2004	56
File Upload Security (lac)	Sep 8, 2004	55
html, file-handling	Sep 8, 2004	55
Spot the Security Hole	Jul 3, 2004	54
php	Jul 3, 2004	54
JavaScript and Security (sim)	Apr 19, 2004	53
javascript	Apr 19, 2004	53
Handling Content From Strangers	Mar 26, 2004	52
content	Mar 26, 2004	52
Web Services Security Gets Serious	Apr 23, 2003	51
web-services	Apr 23, 2003	51
Getting Started With XML Security	Nov 28, 2002	50
introductions, xml	Nov 28, 2002	50
Sorting Out the Web Services Security Landscape	Aug 28, 2002	49
web-services, ssl, w3c	Aug 28, 2002	49
SSL Checker (EXPERTE.com)		48
tools, analysis, ssl		48
ASCII to Unicode Encoder and Decoder		47
tools, exploration, conversion, unicode, encoding		47
security.txt Generator		46
tools, exploration, content		46
WebRTC and IP Address Leak Checker		45
tools, exploration, network, webrtc, ip, protocols		45
Website Headers Analyzer (Dries Buytaert) (dri)		44
tools, analysis, http, http-headers		44
User Identity Generator		43
tools, exploration, placeholders, randomness		43
Subresource Integrity Hash Generator (moz)		42
tools, exploration, hashing		42
SSL Client Checker		41
tools, exploration, ssl		41
SPF Record Generator		40
tools, exploration, dns, domains		40
SHA-512 Hash Generator		39
tools, exploration, hashing		39
Security Leak Victim Checker		38
tools, exploration		38
Password Security Checker		37
tools, exploration, passwords		37
Password Security Checker and Generator		36
tools, exploration, passwords		36
Password Generator (Gibson Research Corporation)		35
tools, exploration, passwords		35
Password Generator (Frontend Dogma) (fro)		34
tools, exploration, frontend-dogma, passwords		34
Password Generator (Arantius.com)		33
tools, exploration, passwords		33
MD5 Hash Generator		32
tools, exploration, hashing		32
HMAC Checker		31
tools, exploration		31
Hash Generator		30
tools, exploration, hashing		30
Executable File Analyzer		29
tools, exploration		29
Device Vulnerability Checker		28
tools, exploration, vulnerabilities		28
CSR Decoder		27
tools, exploration		27
“chmod” Calculator		26
tools, exploration, permissions		26
Browser Fingerprint Checker		25
tools, exploration, browsers		25
Blowfish Hash Generator		24
tools, exploration, hashing		24
AES Encrypter and Decrypter		23
tools, exploration, encryption		23
Website Security Checker (Norton)		22
tools, analysis		22
Website Security Checker (Google)		21
tools, analysis		21
Website Scam Checker		20
tools, analysis		20
Website Headers Analyzer (Security Headers)		19
tools, analysis, http, http-headers		19
Website Headers Analyzer (Mozilla) (moz)		18
tools, analysis, http, http-headers		18
Website Certificate Fingerprint Checker		17
tools, analysis		17
Virus Scanner		16
tools, analysis		16
SSL Checker (SSL Shopper)		15
tools, analysis, ssl		15
SSL Checker (Qualys)		14
tools, analysis, ssl		14
SPF Record Checker		13
tools, analysis, dns, domains		13
Site and Origin Comparer		12
tools, analysis, comparisons		12
Malware and Security Scanner		11
tools, analysis		11
Email Blacklist Checker		10
tools, analysis, email		10
Domain or IP Spam Checker		9
tools, analysis, domains		9
DNSSEC Checker		8
tools, analysis, dns		8
Cross-Site WebSocket Hijacking Tester		7
tools, analysis		7
Cookie Use Checker		6
tools, analysis, cookies		6
Content Security Policy Validator (Google)		5
tools, analysis, csp, conformance		5
Content Security Policy Validator (CSP Validator)		4
tools, analysis, csp, conformance		4
Abuse Contact Lookup		3
tools, analysis, policies		3
Server Port Scanner		2
tools, analysis, network, servers		2
Website Experience Analyzer		1
tools, analysis, performance, user-experience		1