Hi everyone, I often talk about how to write secure code and how to prevent common vulnerabilities so I have decided to cover something slightly different in this blog post. The ability to identify vulnerabilities in code is an important skill for security professionals and developers to learn because if you don’t find the flaws someone else will do. This blog post includes five examples of insecure code which you should try to analyse and … Read more >

Hi everyone, I saw a tweet from Robert “RSnake” Hansen this morning which explained that the Mozilla Content Security Policy has now moved to Beta status! I was very excited to see that update, so excited I thought I would blog about it and hopefully spread the excitement! I first came across the Content Security Policy a while ago and I hoped that it would finally see the light of day because it is a … Read more >

Hi everyone, I announced a while back on this blog that I was going to be speaking at the Epicenter conference in Dublin this August. I’m happy that I can now tell you more about my presentations at this conference. I will be presenting twice on the 26th August covering the Security Risks of Web 2.0 and The Principles of Secure Development. Both presentations can be seen individually and both will deliver valuable web application … Read more >