Skip to content

Tag

threat modeling

Thinking like an attacker: risk, obscurity and the security mindset.

2014

Why Showing The WordPress Username Is A Security Risk

Apr 4

There have been a handful of discussions lately surrounding WordPress and usernames – particularly whether or not exposing usernames is a security risk. The consensus appears to be “no.” I beg to differ.

5 min · authentication · threat modeling
How Secure is the Internet of Things?

Feb 22

How secure are you? Really?

5 min · threat modeling · vulnerabilities

2013

2010

Consider the Source

Dec 10

Someone was distributing Chip Bennett’s WordPress themes with a worm hidden in screenshot.png that installs a PHP backdoor. How it works, and why, free or paid, you should always consider where your download comes from.

3 min · open source · threat modeling

2009

Security

Apr 3

Nothing can ever be truly secure. Think of your website as a building with a locked back door: window security lets people look through the glass, brickwall security hides everything. Each has its trade-offs.

4 min · threat modeling