Lukas Weichselbaum

@we1x

Security Researcher Opinions are my own.

weichselbaum.biz
Tilmeldt januar 2011
7 billeder og videoer Billeder og videoer

Tweets

@we1x er blokeret

Er du sikker på, at du vil vise disse tweets? At vise tweets vil ikke fjerne blokering af @we1x.

  1. Fastgjort tweet
    26. sep. 2016

    CSP-Evaluator () got released today! Find out if your is among the 95% that can be trivially bypassed!

    11 svar 191 retweets 246 likes
  2. 19. jan.

    Wrote up a summary of some of the content security policy related work we have been up to on

    12 svar 138 retweets 177 likes
  3. 11. jan.

    Edge now fully supports version 2 (incl. nonces). is on their radar.

    8 retweets 10 likes
  4. 28. nov. 2016

    Glad to present at in Zürich "Breaking Bad Content Security Policies" with tomorrow, at 9:15, CAB G 61 –

    3 retweets 13 likes
  5. 25. nov. 2016

    Goodbye ! GAE Scaffold now supports Closure Templates (strict autoescape!) with auto-noncing and nonce-based with .

    Thanks to , and others, now supports Soy's Python backend - strict autoescape + CSP nonce propagation
    6 retweets 18 likes
  6. 11. nov. 2016

    Thx everyone for joining my talk at You can read up everything about strict csp here:

    3 retweets 5 likes
  7. 10. nov. 2016

    strict-dynamic support for landed in Firefox (nightly now, stable in FF52)! Kudos to the FF team

    1 svar 23 retweets 30 likes
  8. 7. nov. 2016

    Our ( ) research paper just got published by

    2 retweets 6 likes
  9. 4. nov. 2016

    Join my + 's tutorial on Adopting Strict Content Security Policy for XSS Protection

    1 retweet 3 likes
  10. 27. okt. 2016

    Great work on CSP. Evaluation and defense proposal. by

    1 svar 10 retweets 15 likes
  11. 25. okt. 2016

    picked a particular nice place for dinner this year!

    1 svar 4 likes
  12. 19. okt. 2016

    list of common whitelisted CSP domains that allow to bypass CSP now available as json:

    I just pushed our open source version of CSP-Evaluator to github. Feel free to reuse checks & whitelist bypass list!
    1 svar 11 retweets 20 likes
  13. 18. okt. 2016

    I just pushed our open source version of CSP-Evaluator to github. Feel free to reuse checks & whitelist bypass list!

    1 svar 34 retweets 46 likes
  14. 26. sep. 2016

    We just released a blog post, docs and a couple of tools (Evaluator, Mitigator) to help adopting a secure

    2 retweets 2 likes
  15. 2. sep. 2016

    This is one of the most important web sec papers in recent history: (section 3.4 is where the juicy bits are)

    4 svar 110 retweets 220 likes
  16. 2. sep. 2016

    Most offer no XSS protection and are based on whitelists(median 12) helps

    2 svar 38 retweets 31 likes
  17. 1. sep. 2016

    Our ( ) paper is out. 95% bypassable, whitelisting is doomed, helps.

    6 svar 108 retweets 136 likes
  18. 1. sep. 2016

    Our ( ) research paper (ACM CSS) is public now. It's time to drop whitelists!

    1 svar 19 retweets 18 likes
  19. 4. aug. 2016

    Want to learn how to adopt strict ? Drop by our ( ) tutorial for in Boston organized by !

    4 retweets 3 likes
  20. Lukas Weichselbaum fulgte , , and 70 others

@we1x har ikke tweetet endnu.

Indlæsning ser ud til at tage noget tid.

Twitter kan være overbelastet eller have en midlertidig forstyrrelse. Prøv igen, eller se flere oplysninger på Twitter Status.

    Du vil måske også kunne lide

    ·