shehackspurple

4 ms·

1.
(Gated) Secure Coding AI Prompt Library(newsletter.shehackspurple.ca)
1 points by shehackspurple 6mo ago|1 comments
2.
by shehackspurple 6mo ago
Free AI prompt library, gated though
3.
The Psychology of Bad Code Part 3 – Vibe Coding(shehackspurple.ca)
1 points by shehackspurple 8mo ago|1 comments
4.
by shehackspurple 8mo ago
This seems like rational behavior for a high-pressure situation. You might do this. I might do this too. But it causes risk.
5.
Secure Coding Peitition for the Government of Canada(ourcommons.ca)
1 points by shehackspurple 8mo ago|1 comments
6.
by shehackspurple 8mo ago
Tanya Janca | Shehackspurple @shehackspurple · Jan 27 I’ve been working toward this for years, and it finally happened. Canada now has a parliamentary petition to require secure coding in federal software. If you care about cybersecurity, p
7.
The Psychology of Bad Code Part 2 – Building Systems That Support Secure Devs(shehackspurple.ca)
1 points by shehackspurple 9mo ago|1 comments
8.
by shehackspurple 9mo ago
Why can’t people just “do the right thing” all the time? Can’t they just try hard, have some willpower, and behave perfectly? I don’t know about you, but I am certainly not perfect all the time. I’m in a rush. I skip steps. It compiles, so
9.
by shehackspurple 10mo ago
What if insecure code is not a result of laziness, a lack of knowledge, or malice? What if software developers are doing their best, but they have been set up to fail?
10.
"It Works on My Machine": The Psychology of Bad Code(shehackspurple.ca)
5 points by shehackspurple 10mo ago|1 comments
11.
The New 2025 OWASP Top Ten(owasp.org)
16 points by shehackspurple 11mo ago|1 comments
12.
Malicious packages in NPM evade dependency detection through invisible URL links(csoonline.com)
2 points by shehackspurple 11mo ago|2 comments
13.
by shehackspurple 11mo ago
More terrifying supply chain attacks against developers
14.
Secure Coding in JavaScript(stackoverflow.blog)
2 points by shehackspurple 11mo ago|1 comments
15.
by shehackspurple 11mo ago
Over 30 practical tips for writing more secure JavaScript!
16.
What Is Threat Modeling?(shehackspurple.ca)
1 points by shehackspurple 1y ago|1 comments
17.
by shehackspurple 1y ago
Threat modeling is really just a fancy way of saying: “Let’s think about what could go wrong with our software in advance, so we can stop it before it happens.”
18.
A brief intro to threat modeling(shehackspurple.ca)
1 points by shehackspurple 1y ago|0 comments
19.
Petition to Adopt a Federal Secure Coding Policy for Canada(ipetitions.com)
2 points by shehackspurple 1y ago|2 comments
20.
by shehackspurple 1y ago
Canada’s digital software is critical infrastructure. It runs our country, and we depend upon it. Let's protect it with a secure coding policy, now.
21.
Petition for a secure coding policy for Canada(ipetitions.com)
1 points by shehackspurple 1y ago|1 comments
22.
by shehackspurple 1y ago
I've created a petition to try to get Canada to adopt a government-wide secure coding policy. If you are Canadian, please consider signing.
23.
An Application Security Survey to improve your program
1 points by shehackspurple 1y ago|0 comments
24.
Free Secure Coding Guidelines (Language-Agnostic, Actionable, Achievable(securecodingguideline.com)
3 points by shehackspurple 1y ago|1 comments
25.
by shehackspurple 1y ago
I just published a 9-page secure coding guideline that’s free to download when you join my newsletter. It’s based on my book Alice and Bob Learn Secure Coding, but distilled down into practical, achievable advice. Language and framework agn
26.
Free Course on Security Headers, for Developers(academy.semgrep.dev)
12 points by shehackspurple 1y ago|3 comments
27.
by shehackspurple 1y ago
This is a free course about how to implement security headers in Web Apps and why they are so incredibly important!
28.
by shehackspurple 5y ago
Thanks for all the details! Anyone else?
29.
by shehackspurple 5y ago
Congratulations 1Password! AMAZING
30.
Ask HN: What is the best DAST/web app scanner for single page web apps?
5 points by shehackspurple 5y ago|2 comments

More ›