Lukas Weichselbaum

@we1x

Security Researcher Opinions are my own.

weichselbaum.biz
Clárú: Eanáir 2011
7 bPictiúr nó físeán Pictiúir agus físeáin

Tweetanna

Tá @we1x coiscthe agat

An bhfuil tú cinnte gur mhaith leat breathnú ar na Tweetanna seo? Ní bhainfear an cosc de @we1x má bhreathnaír.

  1. Tweet Greamaithe
    26 MFómh 2016

    CSP-Evaluator () got released today! Find out if your is among the 95% that can be trivially bypassed!

    11 freagra 191 d’atweetálacha 246 croí
  2. 19 Ean

    Wrote up a summary of some of the content security policy related work we have been up to on

    12 freagra 138 d’atweetálacha 177 croí
  3. 11 Ean

    Edge now fully supports version 2 (incl. nonces). is on their radar.

    8 n-atweetáil 10 gcroí
  4. 28 Samh 2016

    Glad to present at in Zürich "Breaking Bad Content Security Policies" with tomorrow, at 9:15, CAB G 61 –

    3 atweetáil 13 croí
  5. 25 Samh 2016

    Goodbye ! GAE Scaffold now supports Closure Templates (strict autoescape!) with auto-noncing and nonce-based with .

    Thanks to , and others, now supports Soy's Python backend - strict autoescape + CSP nonce propagation
    6 atweetáil 18 croí
  6. 11 Samh 2016

    Thx everyone for joining my talk at You can read up everything about strict csp here:

    3 atweetáil 5 chroí
  7. 10 Samh 2016

    strict-dynamic support for landed in Firefox (nightly now, stable in FF52)! Kudos to the FF team

    1 fhreagra amháin 23 d’atweetálacha 30 croí
  8. 7 Samh 2016

    Our ( ) research paper just got published by

    2 atweetáil 6 chroí
  9. 4 Samh 2016

    Join my + 's tutorial on Adopting Strict Content Security Policy for XSS Protection

    1 atweetáil amháin 3 chroí
  10. 27 DFómh 2016

    Great work on CSP. Evaluation and defense proposal. by

    1 fhreagra amháin 10 n-atweetáil 15 croí
  11. 25 DFómh 2016

    picked a particular nice place for dinner this year!

    1 fhreagra amháin 4 chroí
  12. 19 DFómh 2016

    list of common whitelisted CSP domains that allow to bypass CSP now available as json:

    I just pushed our open source version of CSP-Evaluator to github. Feel free to reuse checks & whitelist bypass list!
    1 fhreagra amháin 11 d’atweetálacha 20 croí
  13. 18 DFómh 2016

    I just pushed our open source version of CSP-Evaluator to github. Feel free to reuse checks & whitelist bypass list!

    1 fhreagra amháin 34 d’atweetálacha 46 croí
  14. 26 MFómh 2016

    We just released a blog post, docs and a couple of tools (Evaluator, Mitigator) to help adopting a secure

    2 atweetáil 2 chroí
  15. 2 MFómh 2016

    This is one of the most important web sec papers in recent history: (section 3.4 is where the juicy bits are)

    4 fhreagra 110 d’atweetálacha 220 croí
  16. 2 MFómh 2016

    Most offer no XSS protection and are based on whitelists(median 12) helps

    2 fhreagra 38 d’atweetálacha 31 croí
  17. 1 MFómh 2016

    Our ( ) paper is out. 95% bypassable, whitelisting is doomed, helps.

    6 fhreagra 108 d’atweetálacha 136 croí
  18. 1 MFómh 2016

    Our ( ) research paper (ACM CSS) is public now. It's time to drop whitelists!

    1 fhreagra amháin 19 d’atweetálacha 18 croí
  19. 4 Lún 2016

    Want to learn how to adopt strict ? Drop by our ( ) tutorial for in Boston organized by !

    4 atweetáil 3 chroí
  20. Lukas Weichselbaum followed , , and 70 others

@we1x hasn't Tweeted yet.

Tá moill ar an lódáil, is cosúil.

Tá Twitter ag cur thar maoil le gníomhaíocht nó tá fadhb eile ann. Bain triail eile as nó tabhair cuairt ar Stádas Twitter chun tuilleadh eolais a fháil.

    Seans, leis, go dtaitneodh seo leat

    ·