Contents tagged “security”

There are 15 contents with this tag:

1. 

   Elias Taylor

   There isn't an easy exploit for this PHP vulnerability

   • Nicolas Hoizey
   • 23 October 2026
   • PHP, AI, security
   • 4 reactions

   The strangest thing is that so many people have independently made this extraordinarily weird defect in judgement. That is because they haven't independently…

2. Note from 26 January 2023

   • Nicolas Hoizey
   • 26 January 2023
   • IntersectionObserver, JavaScript, security

   TIL IntersectionObserver's rootMargin only works if the observer is in the same origin, because of privacy concerns:

   There is a risk that the API may be used to probe for information about the geometry of the global viewport itself, which may be used to deduce the user’s hardware configuration.

   That's why this demo of a sticky navigation doesn't work in CodePen's default view… 😞

   https://codepen.io/nhoizey/pen/QWBrrKB

3. 

   DNSimple

   How HTTPS works

   • Nicolas Hoizey
   • 4 December 2022
   • security, HTTPS, TLS
   • 5 reactions

   This is a nice little comic to understand HTTPS. Have you ever wondered why a green lock icon appears on your browser URL bar? And why is it important?…

4. Note from 3 July 2020

   • Nicolas Hoizey
   • 3 July 2020
   • CSP, security, Service Worker, TIL
   • 9 reactions

   TIL: if you cache images with a Service Worker, and you have a Content Security Policy, the image's origin should be in both the img-src and connect-src directives.

   Details from @qubyte: https://qubyte.codes/blog/content-security-policy-and-service-workers

5. 

   Katharine Schwab

   Google’s new reCAPTCHA has a dark side

   • Nicolas Hoizey
   • 25 February 2020
   • privacy, security, Google
   • 1 reaction

   Because reCaptcha v3 is likely to be on every page of a website, if you’re signed into your Google account there’s a chance Google is getting data…

6. 

   Jake Archibald and Surma

   Humans can't read URLs. How can we fix it?

   • Nicolas Hoizey
   • 29 January 2020
   • Web, URL, browser, security
   • 17 reactions

   Jake leads this HTTP 203 episode with his reflexions about current URL display practice in browsers, and how it could be improved, at least for security.…

7. 

   Boris Schapira

   Trackers on Your Domain, Revenue Risk

   • Nicolas Hoizey
   • 14 November 2019
   • WebPerf, privacy, security, ethics

   In this article, Boris shows how new practices around third party trackers hidden as first party assets, to "escape" GDPR and trackers blockers, can…

8. 

   Sebastian Hermida

   How HTTPS works… in a comic!

   • Nicolas Hoizey
   • 30 August 2019
   • HTTP, security

   Follow the adventures of Certificat, Browserbird, and Compugter as they explain why HTTPS is crucial for the future of the web and how it all works…

9. 

   Troy Hunt

   Passwords Evolved: Authentication Guidance for the Modern Era

   • Nicolas Hoizey
   • 3 January 2019
   • security, password
   • 2 reactions

   Great read about security and passwords, summarizing bet practices we've known for a while now, but unfortunately too few enterprises already follow.…

10. 

    Hidde de Vries

    Making password managers play ball with your login form

    • Nicolas Hoizey
    • 10 December 2018
    • security, UX, password
    • 1 reaction

    Password managers are essential to secure internet usage, so making our login fields work with them is extremely important. This will mostly happen…

11. The treasure behind the castle walls

    • Nicolas Hoizey
    • 2 October 2018
    • security, quote, Pinboard

    Pile up enough treasure behind the castle walls and you'll eventually attract someone who can climb them.

12. C’est une activité belle et absurde de parler à un abruti aussi absolu que l’ordinateur

    • Nicolas Hoizey
    • 28 August 2015
    • computer, bug, security

    Le titre de ce billet est tiré de la toute dernière réplique d'une interview absolument fabuleuse de Gérard Berry par Rue 89. Je vous invite à la…

13. Virer le .pac pour que le proxy soit un peu moins PALC

    • Nicolas Hoizey
    • 15 November 2013
    • security

    Quand les clients ne nous imposent pas de travailler sur leurs propres machines —heureusement pas trop souvent—, ils nous imposent souvent un proxy…

14. Faut-il généraliser le HTTPS ?

    • Nicolas Hoizey
    • 2 May 2013
    • security, HTTP
    • 8 reactions

    J'ai vu ces derniers jours un blog passer à TLS par défaut, et je me demandais justement s'il n'était pas possible maintenant de le faire sur tous…

15. Surveillez vos erreurs 404, elles peuvent être très instructives

    • Nicolas Hoizey
    • 2 June 2008
    • 404, SEO, security, WebPerf
    • 7 reactions

    A l’heure où tout le monde ne jure que par l’optimisation du référencement — on dit Search Engine Optimization, ou SEO, pour faire branché — afin…

See all tags.