Bookmarks tagged “security”
51 bookmarks tagged “security”
The Potentially Dangerous Non-Accessibility Of Cookie Notices — Smashing Ma
In this piece, a Web Content Accessibility Guidelines (WCAG) auditor shares some cookie banner error patterns that can massively hurt a page’s overall conformance. Let’s explore what to look out for with this omnipresent piece of the web interface.
How I Broke Into a Bank Account With an AI-Generated Voice
Banks in the U.S. and Europe tout voice ID as a secure way to log into your account. I proved it's possible to trick such systems with free or cheap AI-generated voices.
Continuous delivery, meet continuous security - Stack Overflow Blog
Why the number input is the worst input - Stack Overflow Blog
The many problems with implementing Single Sign-On - Stack Overflow Blog
Can you stop your open-source project from being used for evil? - Stack Ove
Stack under attack: what we learned about handling DDoS attacks - Stack Ove
The complete guide to protecting your APIs with OAuth2 (part 1) - Stack Ove
Anatomy of a JWT - FusionAuth
Technical article explains JSON Web Tokens (JWT), their component parts, and how they are used for authentication.
Signal Blog Exploiting vulnerabilities in Cellebrite UFED and Physica
Cellebrite makes software to automate physically extracting and indexing data from mobile devices. They exist within the grey – where enterprise branding joins together with the larcenous to be called “digital intelligence.” Their customer list has included authoritarian regimes
New campaign targeting security researchers
Details on an ongoing campaign, which we attribute to a government-backed entity based in North Korea, targeting security researchers working on vulnerability research and development.
A deeper dive into our May 2019 security incident - Stack Overflow Blog
Meet Face ID and Touch ID for the Web | WebKit
People often see passwords are the original sin of authentication on the web.
Apple's T2 Security Chip Has an Unfixable Flaw | WIRED
The Checkm8 vulnerability that exposed years of iPhones to jailbreaking has finally been exploited in Macs as well.
New Chrome 0-day Under Active Attacks – Update Your Browser Now
Chrome version 86.0.4240.111 released to patch several security high-severity issues, including a zero-day vulnerability.
Adblockers installed 300,000 times are malicious and should be removed now
If you have Chromium versions of Nano Adblocker or Nano Defender, pay attention.
Security September: Escaping CodeBuild - The compromise that wasn't – One C
Aidan pushes the boundaries of CodeBuild and comes away pleasantly surprised. This is the second of a 5-part series on AWS exploits and similar findings discovered through the course of 2020.
How the CIA used Crypto AG encryption devices to spy on countries for decades
U.S. and German intelligence agencies partnered on a scheme to dupe dozens of nations into buying rigged encryption systems — taking their money and stealing their secrets.
Announcing the Bytecode Alliance: Building a secure by default, composable
Lin Clark introduces the Bytecode Alliance, and uses Code Cartoon illustrations to share their vision of a WebAssembly ecosystem that is secure by default, fixing cracks in today’s software foundations. ...
Troy Hunt: Secret iOS business; what you don’t know about your apps
In the beginning, there was the web and you accessed it though the browser and all was good. Stuff didn’t download until you clicked on something; you expected cookies to be tracking you and you always knew if HTTPS was being used. In general, the casual observer had a pretty goo
The Secret Life of Passwords - NYTimes.com
We despise them – yet we imbue them with our hopes and dreams, our dearest memories, our deepest meanings. They unlock much more than our accounts.
SQL SERVER – Introduction to SQL Server Encryption and Symmetric Key Encryp
SQL Server 2005 and SQL Server 2008 provide encryption as a new feature to protect data against hackers’ attacks. Hackers might be able to penetrate the database or tables, but owing to encryption they would not be able to understand the data or make use of it. Nowadays, it has b