Lukas Weichselbaum

@we1x

Security Researcher Opinions are my own.

weichselbaum.biz
S-a alăturat în ianuarie 2011
7 fotografii și videoclipuri Fotografii și videoclipuri

Tweeturi

@we1x este blocat

Ești sigur că vrei să vezi aceste Tweeturi? Vizualizarea Tweeturilor nu va debloca pe @we1x.

  1. Tweet fixat
    26 sept. 2016

    CSP-Evaluator () got released today! Find out if your is among the 95% that can be trivially bypassed!

    191 de redistribuiri 246 de aprecieri
  2. 19 ian.

    Wrote up a summary of some of the content security policy related work we have been up to on

    138 de redistribuiri 177 de aprecieri
  3. 11 ian.

    Edge now fully supports version 2 (incl. nonces). is on their radar.

    8 redistribuiri 10 aprecieri
  4. 28 nov. 2016

    Glad to present at in Zürich "Breaking Bad Content Security Policies" with tomorrow, at 9:15, CAB G 61 –

    3 redistribuiri 13 aprecieri
  5. 25 nov. 2016

    Goodbye ! GAE Scaffold now supports Closure Templates (strict autoescape!) with auto-noncing and nonce-based with .

    Thanks to , and others, now supports Soy's Python backend - strict autoescape + CSP nonce propagation
    6 redistribuiri 18 aprecieri
  6. 11 nov. 2016

    Thx everyone for joining my talk at You can read up everything about strict csp here:

    3 redistribuiri 5 aprecieri
  7. 10 nov. 2016

    strict-dynamic support for landed in Firefox (nightly now, stable in FF52)! Kudos to the FF team

    1 reply 23 de redistribuiri 30 de aprecieri
  8. 7 nov. 2016

    Our ( ) research paper just got published by

    2 redistribuiri 6 aprecieri
  9. 4 nov. 2016

    Join my + 's tutorial on Adopting Strict Content Security Policy for XSS Protection

    1 redistribuire 3 aprecieri
  10. 27 oct. 2016

    Great work on CSP. Evaluation and defense proposal. by

    1 reply 10 redistribuiri 15 aprecieri
  11. 25 oct. 2016

    picked a particular nice place for dinner this year!

    1 reply 4 aprecieri
  12. 19 oct. 2016

    list of common whitelisted CSP domains that allow to bypass CSP now available as json:

    I just pushed our open source version of CSP-Evaluator to github. Feel free to reuse checks & whitelist bypass list!
    1 reply 11 redistribuiri 20 de aprecieri
  13. 18 oct. 2016

    I just pushed our open source version of CSP-Evaluator to github. Feel free to reuse checks & whitelist bypass list!

    1 reply 34 de redistribuiri 46 de aprecieri
  14. 26 sept. 2016

    We just released a blog post, docs and a couple of tools (Evaluator, Mitigator) to help adopting a secure

    2 redistribuiri 2 aprecieri
  15. 2 sept. 2016

    This is one of the most important web sec papers in recent history: (section 3.4 is where the juicy bits are)

    110 redistribuiri 220 de aprecieri
  16. 2 sept. 2016

    Most offer no XSS protection and are based on whitelists(median 12) helps

    38 de redistribuiri 31 de aprecieri
  17. 1 sept. 2016

    Our ( ) paper is out. 95% bypassable, whitelisting is doomed, helps.

    108 redistribuiri 136 de aprecieri
  18. 1 sept. 2016

    Our ( ) research paper (ACM CSS) is public now. It's time to drop whitelists!

    1 reply 19 redistribuiri 18 aprecieri
  19. 4 aug. 2016

    Want to learn how to adopt strict ? Drop by our ( ) tutorial for in Boston organized by !

    4 redistribuiri 3 aprecieri
  20. Lukas Weichselbaum a urmărit pe , , and 70 others

@we1x nu a dat niciun Tweet încă.

Încărcarea pare că durează ceva timp.

Este posibil ca Twitter să fie suprasolicitat momentan sau să întâmpine mici probleme. Încearcă din nou sau vizitează Starea Twitter pentru mai multe informații.

    S-ar putea să-ți placă și

    ·