{{< bookmark-card image="/bookmarks/page/23/images/1055999419.jpg" title="The Potentially Dangerous Non-Accessibility Of Cookie Notices — Smashing Ma" link="https://www.smashingmagazine.com/2023/04/potentially-dangerous-non-accessibility-cookie-notices" domain="smashingmagazine.com" date="2023-05-05" tags="javascript, security, tech" excerpt="In this piece, a Web Content Accessibility Guidelines (WCAG) auditor shares some cookie banner error patterns that can massively hurt a page’s overall conformance. Let’s explore what to look out for with this omnipresent piece of the web interface." >}} {{< bookmark-card image="/bookmarks/page/24/images/1055999384.jpg" title="How I Broke Into a Bank Account With an AI-Generated Voice" link="https://www.vice.com/en/article/dy7axa/how-i-broke-into-a-bank-account-with-an-ai-generated-voice" domain="vice.com" date="2023-03-05" tags="security" excerpt="Banks in the U.S. and Europe tout voice ID as a secure way to log into your account. I proved it's possible to trick such systems with free or cheap AI-generated voices." >}} {{< bookmark-card image="/bookmarks/page/25/images/1055999377.png" title="Three layers to secure a software development organization - Stack Overflow" link="https://stackoverflow.blog/2023/02/09/three-layers-to-secure-a-software-development-organization" domain="stackoverflow.blog" date="2023-02-20" tags="programming, security" excerpt="" >}} {{< bookmark-card image="/bookmarks/page/26/images/1055999342.png" title="Continuous delivery, meet continuous security - Stack Overflow Blog" link="https://stackoverflow.blog/2022/11/30/continuous-delivery-meet-continuous-security" domain="stackoverflow.blog" date="2022-12-19" tags="devops, security" excerpt="" >}} {{< bookmark-card image="/bookmarks/page/27/images/1055999331.png" title="You can add biometric authentication to your webpage. Here's how. - Stack O" link="https://stackoverflow.blog/2022/11/16/biometric-authentication-for-web-devs" domain="stackoverflow.blog" date="2022-11-27" tags="code, programming, security" excerpt="" >}} {{< bookmark-card image="/bookmarks/page/28/images/1055999312.png" title="Why the number input is the worst input - Stack Overflow Blog" link="https://stackoverflow.blog/2022/09/15/why-the-number-input-is-the-worst-input" domain="stackoverflow.blog" date="2022-11-13" tags="design, security, tech" excerpt="" >}} {{< bookmark-card image="/bookmarks/page/28/images/1055999313.png" title="The many problems with implementing Single Sign-On - Stack Overflow Blog" link="https://stackoverflow.blog/2022/09/12/the-many-problems-with-implementing-single-sign-on" domain="stackoverflow.blog" date="2022-11-13" tags="security, tech" excerpt="" >}} {{< bookmark-card image="/bookmarks/page/28/images/1055999284.png" title="Can you stop your open-source project from being used for evil? - Stack Ove" link="https://stackoverflow.blog/2022/08/08/can-you-stop-your-open-source-project-from-being-used-for-evil" domain="stackoverflow.blog" date="2022-11-13" tags="security, tech" excerpt="" >}} {{< bookmark-card image="/bookmarks/page/29/images/1055999257.png" title="Stack under attack: what we learned about handling DDoS attacks - Stack Ove" link="https://stackoverflow.blog/2022/05/16/stack-under-attack-what-we-learned-about-handling-ddos-attacks" domain="stackoverflow.blog" date="2022-11-13" tags="security, tech" excerpt="" >}} {{< bookmark-card image="/bookmarks/page/29/images/1055999249.png" title="The complete guide to protecting your APIs with OAuth2 (part 1) - Stack Ove" link="https://stackoverflow.blog/2022/04/11/the-complete-guide-to-protecting-your-apis-with-oauth2" domain="stackoverflow.blog" date="2022-11-13" tags="security, tech" excerpt="" >}} {{< bookmark-card image="/bookmarks/page/30/images/1055999240.png" title="Anatomy of a JWT - FusionAuth" link="https://fusionauth.io/learn/expert-advice/tokens/anatomy-of-jwt" domain="fusionauth.io" date="2022-11-13" tags="security, tech" excerpt="Technical article explains JSON Web Tokens (JWT), their component parts, and how they are used for authentication." >}} {{< bookmark-card image="/bookmarks/page/35/images/1055999153.png" title="Signal Blog Exploiting vulnerabilities in Cellebrite UFED and Physica" link="https://signal.org/blog/cellebrite-vulnerabilities" domain="signal.org" date="2021-04-27" tags="security, tech" excerpt="Cellebrite makes software to automate physically extracting and indexing data from mobile devices. They exist within the grey – where enterprise branding joins together with the larcenous to be called “digital intelligence.” Their customer list has included authoritarian regimes " >}} {{< bookmark-card image="/bookmarks/page/36/images/1055999095.png" title="New campaign targeting security researchers" link="https://blog.google/threat-analysis-group/new-campaign-targeting-security-researchers" domain="blog.google" date="2021-02-01" tags="google, security, tech" excerpt="Details on an ongoing campaign, which we attribute to a government-backed entity based in North Korea, targeting security researchers working on vulnerability research and development." >}} {{< bookmark-card image="/bookmarks/page/36/images/1055999094.png" title="A deeper dive into our May 2019 security incident - Stack Overflow Blog" link="https://stackoverflow.blog/2021/01/25/a-deeper-dive-into-our-may-2019-security-incident" domain="stackoverflow.blog" date="2021-02-01" tags="security, tech" excerpt="" >}} {{< bookmark-card image="/bookmarks/page/37/images/1055999018.png" title="Meet Face ID and Touch ID for the Web | WebKit" link="https://webkit.org/blog/11312/meet-face-id-and-touch-id-for-the-web" domain="webkit.org" date="2021-01-17" tags="apple, code, javascript, security, tech" excerpt="People often see passwords are the original sin of authentication on the web." >}} {{< bookmark-card image="/bookmarks/page/39/images/1055999007.jpg" title="Apple's T2 Security Chip Has an Unfixable Flaw | WIRED" link="https://www.wired.com/story/apple-t2-chip-unfixable-flaw-jailbreak-mac" domain="wired.com" date="2020-10-27" tags="apple, security, tech" excerpt="The Checkm8 vulnerability that exposed years of iPhones to jailbreaking has finally been exploited in Macs as well." >}} {{< bookmark-card image="/bookmarks/page/39/images/1055999025.webp" title="New Chrome 0-day Under Active Attacks – Update Your Browser Now" link="https://thehackernews.com/2020/10/chrome-zeroday-attacks.html" domain="thehackernews.com" date="2020-10-27" tags="google, security, tech" excerpt="Chrome version 86.0.4240.111 released to patch several security high-severity issues, including a zero-day vulnerability." >}} {{< bookmark-card image="/bookmarks/page/39/images/1055999021.jpg" title="Adblockers installed 300,000 times are malicious and should be removed now" link="https://arstechnica.com/information-technology/2020/10/popular-chromium-ad-blockers-caught-stealing-user-data-and-accessing-accounts" domain="arstechnica.com" date="2020-10-27" tags="google, security, tech" excerpt="If you have Chromium versions of Nano Adblocker or Nano Defender, pay attention." >}} {{< bookmark-card image="/bookmarks/page/41/images/1055998984.jpg" title="Security September: Escaping CodeBuild - The compromise that wasn't – One C" link="https://onecloudplease.com/blog/security-september-escaping-codebuild" domain="onecloudplease.com" date="2020-09-11" tags="aws, code, security, tech" excerpt="Aidan pushes the boundaries of CodeBuild and comes away pleasantly surprised. This is the second of a 5-part series on AWS exploits and similar findings discovered through the course of 2020." >}} {{< bookmark-card image="/bookmarks/page/44/images/1055997904.webp" title="Maersk, me & notPetya - gvnshtn" link="https://gvnshtn.com/posts/maersk-me-notpetya/" domain="gvnshtn.com" date="2020-06-23" tags="politics, security, tech" excerpt="" >}} {{< bookmark-card image="/bookmarks/page/45/images/1055997861.jpg" title="How the CIA used Crypto AG encryption devices to spy on countries for decades" link="https://www.washingtonpost.com/graphics/2020/world/national-security/cia-crypto-encryption-machines-espionage" domain="washingtonpost.com" date="2020-02-13" tags="history, politics, security, tech" excerpt="U.S. and German intelligence agencies partnered on a scheme to dupe dozens of nations into buying rigged encryption systems — taking their money and stealing their secrets." >}} {{< bookmark-card image="/bookmarks/page/46/images/1055997844.png" title="Announcing the Bytecode Alliance: Building a secure by default, composable" link="https://hacks.mozilla.org/2019/11/announcing-the-bytecode-alliance" domain="hacks.mozilla.org" date="2019-11-13" tags="javascript, programming, security, tech" excerpt="Lin Clark introduces the Bytecode Alliance, and uses Code Cartoon illustrations to share their vision of a WebAssembly ecosystem that is secure by default, fixing cracks in today’s software foundations. ..." >}} {{< bookmark-card image="/bookmarks/page/53/images/1055997500.png" title="Troy Hunt: Secret iOS business; what you don’t know about your apps" link="http://www.troyhunt.com/2011/10/secret-ios-business-what-you-dont-know.html" domain="troyhunt.com" date="2015-05-26" tags="security, tech" excerpt="In the beginning, there was the web and you accessed it though the browser and all was good. Stuff didn’t download until you clicked on something; you expected cookies to be tracking you and you always knew if HTTPS was being used. In general, the casual observer had a pretty goo" >}} {{< bookmark-card image="/bookmarks/page/54/images/1055997540.jpg" title="The Secret Life of Passwords - NYTimes.com" link="http://www.nytimes.com/2014/11/19/magazine/the-secret-life-of-passwords.html" domain="nytimes.com" date="2014-12-10" tags="security, tech" excerpt="We despise them – yet we imbue them with our hopes and dreams, our dearest memories, our deepest meanings. They unlock much more than our accounts." >}} {{< bookmark-card image="/bookmarks/page/55/images/1055997453.gif" title="SQL SERVER – Introduction to SQL Server Encryption and Symmetric Key Encryp" link="http://blog.sqlauthority.com/2009/04/28/sql-server-introduction-to-sql-server-encryption-and-symmetric-key-encryption-tutorial-with-script" domain="blog.sqlauthority.com" date="2011-10-21" tags="database, security, tech" excerpt="SQL Server 2005 and SQL Server 2008 provide encryption as a new feature to protect data against hackers’ attacks. Hackers might be able to penetrate the database or tables, but owing to encryption they would not be able to understand the data or make use of it. Nowadays, it has b" >}}