/explore
|
You are here 
|
www.sjoerdlangkemper.nl | ||
| | | | |
blog.plataformatec.com.br
A security bug (CVE-2015-8314) has been reported in Devise's remember me system. Devise implements the "Remember me" functionality by using cookies. While this functionality works across multiple devices, Devise ended-up generating the same cookie for all devices. Consequently, if a malicious user was able to steal a remember me cookie, the cookie could be used |
|
| | | | | ||
| | | | |
tom.vg
[AI summary] This article explains cross-site and browser-based timing attacks that allow attackers to infer sensitive information from response sizes using side-channel leaks in web browsers. |
|
| | | | | ||
| | | | |
attilaolah.eu
This is intended to be a short list of things to check before you go publish awebsite or web app (or really, anything that interacts with a browser). Itstarts with... |
|
| | | | | ||
| | | | |
notes.elmiko.dev
|
|
| | | |||
