Outer Web | Explore

/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.

You are here		www.sjoerdlangkemper.nl Preventing CSRF with the same-site cookie attribute
\|	\|	tom.vg Timing Attacks in the Modern Web - tom.vg	3.9 parsecs away Travel
\|	\|	[AI summary] This article explains cross-site and browser-based timing attacks that allow attackers to infer sensitive information from response sizes using side-channel leaks in web browsers.	3.9 parsecs away Travel
\|	\|	blog.plataformatec.com.br Improve remember me cookie expiration in Devise (CVE-2015-8314) « Plataformatec Blog	3.1 parsecs away Travel
\|	\|	A security bug (CVE-2015-8314) has been reported in Devise's remember me system. Devise implements the "Remember me" functionality by using cookies. While this functionality works across multiple devices, Devise ended-up generating the same cookie for all devices. Consequently, if a malicious user was able to steal a remember me cookie, the cookie could be used	3.1 parsecs away Travel
\|	\|	timtech.blog CSRF When You Least Expect It.	2.4 parsecs away Travel
\|	\|	Fun with Cross-Site Request Forgery (CSRF) in a creative Web Timing Attack scenario, highlighting the risks inherent to SameSite=None session cookies.	2.4 parsecs away Travel
\|	\|	plasma-umass.org GitHub - plasma-umass/doppio-demo: Demo of the Doppio Runtime System. · GitHub	18.8 parsecs away Travel
\|		Demo of the Doppio Runtime System. Contribute to plasma-umass/doppio-demo development by creating an account on GitHub.	18.8 parsecs away Travel