Hey #infosec / #cybersecurity fediverse!
I'm looking for resources on writing secure code, or security best practices for software development, etc. Anything specifically for #javascript / #typescript / #web is a plus!
Please #boost for reach! Thanks!
@taelur Oooo good call. I think I actually have a copy somewhere
I actually was thinking more along the lines of newer web APIs and how to securely handle all these new interfaces with the OS and users' hardware, etc in my last post, but now I'm wondering about how the usual stuff when securing REST / GraphQL APIs applies to frameworks like remix.run
*hits blunt*
@taelur i actually got to thinking about it while i was using the #grapheneos web based installer. It literally flashes your phone from a web browser!
There are huge implications with all these new APIs and I'm sure someone smarter than me has written about
“There are a number of secure programming books on the market, but none that go as deep as this one. The depth and detail exceeds all books that I know … - Selection from The Art of Software Security Assessment: Identifying and Preventing Software Vulnerabilities [Book]
@xyhhx I have used Secure code warrior before https://www.securecodewarrior.com/ which shows fake code reviews with vulnerable code and you have to find it and fix it.
I know a lot of people (myself included) that have found it useful to learn via this method!
Hope it helps! #securecode #securecodewarrior
@xyhhx The stating page is https://developer.mozilla.org/en-US/docs/Web/Security
If there’s only one thing you’ll read this morning, start with OWASP: https://owasp.org/
Websites contain several different types of information. Some of it is non-sensitive, for example the copy shown on the public pages. Some of it is sensitive, for example customer usernames, passwords, and banking information, or internal algorithms and private product information.
@adamshostack @SheHacksPurple Woah thanks for all those! I'd only discovered the last one thanks to my searches when I posted it.
I'm gonna scoop them all next week I think
@adamshostack @SheHacksPurple @xyhhx I have two accounts.
#security and #professional (especially #swsec and #MLsec): @cigitalgem
Life, #music, #art, #food, #hiking, #animals, etc: @noplasticshower
Blog feed for NPS: @noplasticshower
xyhhx
Tae’lur Alexis
Nick Lupien
Juanlu Sanz
ArneBab
Adam Shostack 
seniorfrosk
THIS ACCOUNT HAS MOVED