3 ms·
Ask HN: Which are the best books for security conscious full stack web devs?
So many different things that can go wrong. So many information in different places. Any really good books or sites for security conscious full stack web developers? Hopefully, easy to read :)
- ratchetratchet 10y agoWeb Application Hackers Handbook https://www.amazon.co.uk/Web-Application-Hackers-Handbook-Exploiting/dp/1118026470 https://www.amazon.co.uk/Web-Application-Hackers-Handbook-Ex...
- twunde 10y agoI'll second this. This book hits upon most common security vectors. It's amazing how few developers know what csrf is and how to defend against it even now. If you're not ready to invest money yet, check out the owasp top 10 and make sure you know how to defend against them in your preferred language/framework.
- J-dawg 10y agoTroy Hunt's Pluralsight course seems to come highly recommended [0]. I haven't got around to doing it myself yet, but it's on my list! [0] https://www.pluralsight.com/courses/hack-yourself-first https://www.pluralsight.com/courses/hack-yourself-first
- CiPHPerCoder 10y agohttps://github.com/paragonie/awesome-appsec https://github.com/paragonie/awesome-appsec We've been trying to maintain an up-to-date list.