jbaviat

21 ms·

1. 61.▲
   Ask HN: As a developer, what are your pains regarding security?

   2 points by jbaviat 9y ago|2 comments
2. 62.▲
   by jbaviat 9y ago

   This book has a clever approach to explaining what's at stake regarding web app security, in particular the browser security model. That's how I would have structured my book if I had written some regarding web app security.
3. 63.▲
   In ICO, the S stands for security(blog.sqreen.io)

   3 points by jbaviat 9y ago|0 comments
4. 64.▲
   by jbaviat 9y ago

   Sqreen - https://www.sqreen.io | Full-time Onsite engineers | Engineering team in Paris (France) Sqreen is a security tool built with developers in mind (we are like New Relic, but for security). We develop solutions that combin
5. 65.▲
   by jbaviat 9y ago

   So actually I've asked WebAppSec about any similar project, let's see how it goes ( http://lists.w3.org/Archives/Public/public-webappsec/2017Nov... ).
6. 66.▲
   by jbaviat 9y ago

   Very nice idea behind this project, that's something that could be generalized to offer vendors a nice API way to share their recommended CSP policies to their users. For as much as I know, segment.io or intercom.io are still very pain
7. 67.▲
   Content Security Policy by API(npmjs.com)

   2 points by jbaviat 9y ago|3 comments
8. 68.▲
   by jbaviat 9y ago

   Interesting, that's the generalization of a use case we solved for a very specific case (nicely embedding V8 into a Python wheel): https://speakerdeck.com/pycon2017/jean-baptiste-aviat-writin...
9. 69.▲
   Evolving Our Rust with Milksnake(blog.sentry.io)

   2 points by jbaviat 9y ago|1 comments
10. 70.▲
    by jbaviat 9y ago

    Sqreen - https://www.sqreen.io | Full-time Onsite developers | Engineering team in Paris (France) Sqreen is like New Relic, but for security. We develop solutions that combine instrumentation, defensive algorithms and machine le
11. 71.▲
    by jbaviat 9y ago

    Sqreen - https://www.sqreen.io | Full-time Onsite developers | Engineering team in Paris (France) Sqreen is like New Relic, but for security. We develop solutions that combine instrumentation, defensive algorithms and machine le
12. 72.▲
    Docker Security Best Practices(blog.sqreen.io)

    1 points by jbaviat 9y ago|0 comments
13. 73.▲
    Pictures of infrastructures taken down by Petya ransomware(twitter.com)

    3 points by jbaviat 9y ago|0 comments
14. 74.▲
    Block SQL injections, not your customers(blog.sqreen.io)

    1 points by jbaviat 10y ago|0 comments
15. 75.▲
    OWASP Top 2017 RC1 [pdf](github.com)

    1 points by jbaviat 10y ago|0 comments
16. 76.▲
    Arachni scanner: new engine(arachni-scanner.com)

    1 points by jbaviat 10y ago|0 comments
17. 77.▲
    by jbaviat 10y ago

    Saying "less than 8 chars is close to no password" is stupid. It just means, if your service provider hosting your short password get hacked, if they store their users password in a crappy format, then your password is gonna be re
18. 78.▲
    by jbaviat 10y ago

    For a more checklist oriented approach you might also find this other list helpful. It is a reminder of all measures you could take, at a higher level, about technical as well as cultural things you need to do about security. https:/&
19. 79.▲
    Anatomy of Cloudflare’s CloudBleed: what you need to know and fix(blog.sqreen.io)

    1 points by jbaviat 10y ago|0 comments
20. 80.▲
    by jbaviat 10y ago

    Let's test: this is really awesome ;)
21. 81.▲
    Lowering the Libv8 MacOS Gem Size from 147MB to 2.4MB(github.com)

    4 points by jbaviat 10y ago|0 comments
22. 82.▲
    by jbaviat 10y ago

    Sqreen - https://www.sqreen.io | Full-time Onsite developers | Engineering team in Paris (France) Sqreen is like New Relic, but for security. We develop solutions that combine instrumentation, defensive algorithms and machine le
23. 83.▲
    Behind the Scenes: Building a Dynamic Instrumentation Agent for Ruby(blog.sqreen.io)

    1 points by jbaviat 10y ago|0 comments
24. 84.▲
    Pip 9.0.1 release notes(pip.pypa.io)

    2 points by jbaviat 10y ago|0 comments
25. 85.▲
    Tor – the good, the bad, and the ugly(blog.sqreen.io)

    4 points by jbaviat 10y ago|0 comments
26. 86.▲
    by jbaviat 10y ago

    Actually we needed such a list and we asked people about it, with close to zero answers: https://news.ycombinator.com/item?id=12786982 After looking arround for a while, we decided to make what we found public.
27. 87.▲
    by jbaviat 10y ago

    We also found this: - Habitica ( https://github.com/HabitRPG/habitica )
28. 88.▲
    by jbaviat 10y ago

    Thanks @blobman but this is not that much curated ;)
29. 89.▲
    Ask HN: What real world open source Node.js applications?

    2 points by jbaviat 10y ago|8 comments
30. 90.▲
    Show HN: The SaaS CTO Security Checklist(cto-security-checklist.sqreen.io)

    34 points by jbaviat 10y ago|1 comments