Tag

#websecurity

408 posts35 followers

Explore Hashnode

Alternatives

vidit1d ago · 8 min read

The eMudhra Certificate Compromise: The Internet Trusted a Private Key That Was Literally the Number 4

Eight intermediate CA keys. A key-generation failure. And a reminder that strong cryptography means nothing if the secret is predictable. That is not a test fixture from a cryptography tutorial. That

viditp.hashnode.dev

Deep Patel3d ago · 4 min read

How I Deployed a Laravel + React Application to Production on AWS

Getting an application “working on my machine” is one milestone. Getting it safely into production is a different job. This summer, I took on a project where a development team had finished their Lara

2 pdeep1506.hashnode.dev

Doogal SimpsonOct 10 · 5 min read

Preventing Timing Attacks with Constant-Time Comparisons

TL;DR: Using standard comparison operators like == to validate API keys or cryptographic signatures leaks secrets byte-by-byte. Because standard operators return early upon encountering a mismatch, at

doogal.dev

Doogal SimpsonOct 5 · 5 min read

How Java HashMap Prevents Hash Collision DoS Attacks

Java's HashMap mitigates Hash Collision Denial of Service (DoS) attacks by automatically converting congested linked list buckets into Red-Black trees once a bucket exceeds 8 entries and the total map

doogal.dev

Lewis GilchristOct 1 · 7 min read

The bot problem that CAPTCHA can't solve, and proof of human can

reCAPTCHA and proof of human are both described as ways to keep bots out. They are solving different problems. That sounds like a minor distinction. It is not. The problem reCAPTCHA cannot solve is th

devabkk.hashnode.dev

JebitokSep 22 · 20 min read

HTTP Request Smuggling (TryHackMe)

Link to the challenge on TryHackMe: HTTP Request Smuggling Introduction Introduction HTTP Request Smuggling is a vulnerability that arises when there are mismatches in different web infrastructure com

sharonjebitok.com

Jayesh SojitraSep 19 · 4 min read

5 Frontend Security Mistakes That Are Easy to Miss

Frontend security doesn't get the same review scrutiny backend security does, partly because the consequences aren't always obvious immediately. Here are five mistakes that show up constantly, and why

jayesh-sojitra.hashnode.dev

Megha VarshiniSep 14 · 3 min read

HTTP vs HTTPS: What’s the Difference?

Introduction Whenever we visit a website, our browser needs a way to communicate with the website's server. This communication happens using certain protocols, and two of the most common ones are HTTP

megha-blogs.hashnode.dev

JebitokSep 6 · 20 min read

Challenges: Grep (TryHackMe)

Challenge on TryHackMe: Grep Introduction TryHackMe's Grep room bills itself as an OSINT challenge under the Red Teaming path, and that framing turned out to be the whole point. Coming into this box e

sharonjebitok.com

Pred GrayAug 30 · 22 min read

IPQS False Positive: How a Legitimate New Domain Got a 95 Risk Score

A little over two months ago, I registered a domain for personal use. The plan was simple. I wanted a permanent email address based on my last name, something like first@lastname.me. I registered the