2015
2014
-
Layers of Security
Dec 29
There are many layers to any notion of security. How well do you understand each?
-
The Sony Precedent
Dec 18
I can’t stand bullies, and I won’t let fear instilled by others dictate how I live my life.
-
Debit Card (Lack of) Security
Nov 28
Debit card numbers have certain features to make them easy to produce. It also makes them easy to predict, allowing determined thieves to easily steal your money if you’re not careful.
-
Professional Paranoia
Nov 24
If you can get in, someone else can (and will) find a way to get in without your permission. If your software and systems can be used for good, someone can (and will) find a way to exploit the same for ill.
-
WordPress 4.1 Includes a Session UI
Nov 14
My attempts to build a session UI over the weekend failed. My attempt to build one during a team hackathon was sidelined so we could focus on, what seemed at the time, far more interesting code. Now, though, I can jump on board with the new session UI being merged into WordPress 4.1!
-
WordPress, Security, and Member Management
Oct 15
If you’re logging in to WordPress as an administrator just to write a post, you’re doing it wrong.
-
jQuery and Cross-site Scripting
Oct 2
Never trust user input, even if it’s coming from an allegedly trustworthy source.
-
Security, Legal Bypass, Warrants, and Apple
Sept 21
Apple has announced they won’t be unlocking iOS 8 phones in response to warrants, not as a point of policy, but because the system they’ve built won’t allow it.
-
DNS and Cross-Site Scripting
Sept 19
One of the first things on any security auditor’s list is checking to see if a site is vulnerable to cross-site scripting (XSS).