Diffie-Hellman for the Layman
Whitfield Diffie and Martin Hellman are researchers who invented a safe method to communicate a password. Their 1976 paper opens with the…
security
CSRF, CORS, and HTTP Security Headers Demystified
Phishing Tests Are Necessary. But They Don’t Need to Be Evil.
Although phishing tests can be helpful to protect users, using questionable tactics has the potential for harming relationships between a company and its employees. The authors suggest that managers avoid this damage by employing phishing tests with three criteria: Test teams…
APT Encounters of the Third Kind - Igor’s Blog
A few weeks ago an ordinary security assessment turned into an incident response whirlwind. It was definitely a first for me, and I was kindly granted permission to outline the events in this blog post. This investigation started scary but turned out be quite fun, and I hope…
Linux Hardening Guide | Madaidan's Insecurities
Top 10 Web Hacking Techniques of 2017 | Blog
The verdict is in! Following 37 nominations whittled down to a shortlist of 15 by a community vote, our panel of experts has conferred and selected the top 10 web hacking techniques of 2017 (and 2016)
My Bodyguard, My Self
The author spent a day with three men in a high-end security detail to find out how it feels to be safe.
Obtaining an Elliptic Curve certificate from Let's Encrypt
Let's Encrypt does not currently generate Elliptic Curve certificates. Here's how to obtain one.
Forget the new iPhones, Apple's best product is now privacy
Forget the new iPhones, Apple best product is now privacy.
Certificates for localhost
Sometimes people want to get a certificate for the hostname “localhost”, either for use in local development, or for distribution with a native application that needs to communicate with a web application. Let’s Encrypt can’t provide certificates for…