Lukas Weichselbaum

@we1x

Security Researcher Opinions are my own.

weichselbaum.biz
Participa desde janeiro de 2011
7 Fotos e vídeos Fotos e vídeos

Tweets

@we1x está bloqueado

Tem certeza de que deseja ver estes Tweets? Visualizar os Tweets não desbloqueará @we1x.

  1. Tweet Fixado
    26 de set de 2016

    CSP-Evaluator () got released today! Find out if your is among the 95% that can be trivially bypassed!

    11 respostas 191 retweets 246 curtiram
  2. 19 de jan

    Wrote up a summary of some of the content security policy related work we have been up to on

    12 respostas 138 retweets 177 curtiram
  3. 11 de jan

    Edge now fully supports version 2 (incl. nonces). is on their radar.

    8 retweets 10 curtiram
  4. 28 de nov de 2016

    Glad to present at in Zürich "Breaking Bad Content Security Policies" with tomorrow, at 9:15, CAB G 61 –

    3 retweets 13 curtiram
  5. 25 de nov de 2016

    Goodbye ! GAE Scaffold now supports Closure Templates (strict autoescape!) with auto-noncing and nonce-based with .

    Thanks to , and others, now supports Soy's Python backend - strict autoescape + CSP nonce propagation
    6 retweets 18 curtiram
  6. 11 de nov de 2016

    Thx everyone for joining my talk at You can read up everything about strict csp here:

    3 retweets 5 curtiram
  7. 10 de nov de 2016

    strict-dynamic support for landed in Firefox (nightly now, stable in FF52)! Kudos to the FF team

    1 resposta 23 retweets 30 curtiram
  8. 7 de nov de 2016

    Our ( ) research paper just got published by

    2 retweets 6 curtiram
  9. 4 de nov de 2016

    Join my + 's tutorial on Adopting Strict Content Security Policy for XSS Protection

    1 retweet 3 curtiram
  10. 27 de out de 2016

    Great work on CSP. Evaluation and defense proposal. by

    1 resposta 10 retweets 15 curtiram
  11. 25 de out de 2016

    picked a particular nice place for dinner this year!

    1 resposta 4 curtiram
  12. 19 de out de 2016

    list of common whitelisted CSP domains that allow to bypass CSP now available as json:

    I just pushed our open source version of CSP-Evaluator to github. Feel free to reuse checks & whitelist bypass list!
    1 resposta 11 retweets 20 curtiram
  13. 18 de out de 2016

    I just pushed our open source version of CSP-Evaluator to github. Feel free to reuse checks & whitelist bypass list!

    1 resposta 34 retweets 46 curtiram
  14. 26 de set de 2016

    We just released a blog post, docs and a couple of tools (Evaluator, Mitigator) to help adopting a secure

    2 retweets 2 curtiram
  15. 2 de set de 2016

    This is one of the most important web sec papers in recent history: (section 3.4 is where the juicy bits are)

    4 respostas 110 retweets 220 curtiram
  16. 2 de set de 2016

    Most offer no XSS protection and are based on whitelists(median 12) helps

    2 respostas 38 retweets 31 curtiram
  17. 1 de set de 2016

    Our ( ) paper is out. 95% bypassable, whitelisting is doomed, helps.

    6 respostas 108 retweets 136 curtiram
  18. 1 de set de 2016

    Our ( ) research paper (ACM CSS) is public now. It's time to drop whitelists!

    1 resposta 19 retweets 18 curtiram
  19. 4 de ago de 2016

    Want to learn how to adopt strict ? Drop by our ( ) tutorial for in Boston organized by !

    4 retweets 3 curtiram
  20. Lukas Weichselbaum seguiu , , and 70 others

@we1x ainda não tweetou.

O carregamento parece estar demorando.

O Twitter deve estar sobrecarregado ou passando por algum problema momentâneo. Tente novamente ou acesse o Status do Twitterpara obter mais informações.

    Você também pode gostar

    ·