Lukas Weichselbaum

@we1x

Security Researcher Opinions are my own.

weichselbaum.biz
Ocak 2011 tarihinde katıldı
7 Fotoğraf ve video Fotoğraflar ve videolar

Tweetler

@we1x engellendi

Bu Tweetleri görüntülemek istediğinden emin misin? Tweetleri görüntülemek @we1x adlı kişinin engelini kaldırmaz.

  1. Sabitlenmiş Tweet
    26 Eyl 2016

    CSP-Evaluator () got released today! Find out if your is among the 95% that can be trivially bypassed!

    11 yanıt 191 retweet 246 beğenme
  2. 19 Oca

    Wrote up a summary of some of the content security policy related work we have been up to on

    12 yanıt 138 retweet 177 beğenme
  3. 11 Oca

    Edge now fully supports version 2 (incl. nonces). is on their radar.

    8 retweet 10 beğenme
  4. 28 Kas 2016

    Glad to present at in Zürich "Breaking Bad Content Security Policies" with tomorrow, at 9:15, CAB G 61 –

    3 retweet 13 beğenme
  5. 25 Kas 2016

    Goodbye ! GAE Scaffold now supports Closure Templates (strict autoescape!) with auto-noncing and nonce-based with .

    Thanks to , and others, now supports Soy's Python backend - strict autoescape + CSP nonce propagation
    6 retweet 18 beğenme
  6. 11 Kas 2016

    Thx everyone for joining my talk at You can read up everything about strict csp here:

    3 retweet 5 beğenme
  7. 10 Kas 2016

    strict-dynamic support for landed in Firefox (nightly now, stable in FF52)! Kudos to the FF team

    23 retweet 30 beğenme
  8. 07 Kas 2016

    Our ( ) research paper just got published by

    2 retweet 6 beğenme
  9. 04 Kas 2016

    Join my + 's tutorial on Adopting Strict Content Security Policy for XSS Protection

    3 beğenme
  10. 27 Eki 2016

    Great work on CSP. Evaluation and defense proposal. by

    10 retweet 15 beğenme
  11. 25 Eki 2016

    picked a particular nice place for dinner this year!

    4 beğenme
  12. 19 Eki 2016

    list of common whitelisted CSP domains that allow to bypass CSP now available as json:

    I just pushed our open source version of CSP-Evaluator to github. Feel free to reuse checks & whitelist bypass list!
    11 retweet 20 beğenme
  13. 18 Eki 2016

    I just pushed our open source version of CSP-Evaluator to github. Feel free to reuse checks & whitelist bypass list!

    34 retweet 46 beğenme
  14. 26 Eyl 2016

    We just released a blog post, docs and a couple of tools (Evaluator, Mitigator) to help adopting a secure

    2 retweet 2 beğenme
  15. 02 Eyl 2016

    This is one of the most important web sec papers in recent history: (section 3.4 is where the juicy bits are)

    4 yanıt 110 retweet 220 beğenme
  16. 02 Eyl 2016

    Most offer no XSS protection and are based on whitelists(median 12) helps

    2 yanıt 38 retweet 31 beğenme
  17. 01 Eyl 2016

    Our ( ) paper is out. 95% bypassable, whitelisting is doomed, helps.

    6 yanıt 108 retweet 136 beğenme
  18. 01 Eyl 2016

    Our ( ) research paper (ACM CSS) is public now. It's time to drop whitelists!

    19 retweet 18 beğenme
  19. 04 Ağu 2016

    Want to learn how to adopt strict ? Drop by our ( ) tutorial for in Boston organized by !

    4 retweet 3 beğenme
  20. Lukas Weichselbaum takip etti , , and 70 others

@we1x henüz hiç Tweetlemedi.

Yükleme biraz zaman alacak gibi görünüyor.

Twitter aşırı kapasiteyle çalışıyor ya da anlık sorunlar yaşıyor olabilir. Yeniden dene ya da daha fazla bilgi almak için Twitter Durumu sayfasını ziyaret et.

    Şunları da beğenebilirsin

    ·