The Orphaned Internet – Taking Over 120K Domains via a DNS Vulnerability in AWS, Google Cloud, Rackspace and Digital Ocean | The Hacker Blog
Security
Rolling Your Own Crypto
Stop Buying Bad Security Prescriptions – Justin Schuh – Medium
GitHub - duffn/dumb-password-rules: Shaming sites with dumb password rules.
4 fatal flaws in deterministic password managers
The psychological reasons behind risky password practices - Help Net Security
On Phone Numbers and Identity – Stories From Coinbase
Hardening a Unix application server
It's the Year of Application Layer Security in Public Clouds | Cohesive Networks
CloudFlare, SSL and unhealthy security absolutism
Schlomo Schapiro: Lifting the Curse of Static Credentials
Target=”_blank” — the most underestimated vulnerability ever
Detecting the use of "curl | bash" server side | Application Security
GitHub’s CSP journey - GitHub Engineering
What Werewolf teaches us about Trust & Security
securitychecklist.org
Diplomat: Using Delegations to Protect Community Repositories
How to rethink security risk analysis
How Early-Stage Startups Can Enlist The Right Amount of Security As They Grow | First Round Review
It All Started With a Wager About System Upgrades
The Rehabilitated Security SDLC — Signal Sciences Labs
Security Design Principles for Digital Services | CESG Site
A Few Thoughts on Cryptographic Engineering: Attack of the week: DROWN
Distribution packages considered insecure