Bookmarks tagged 'security'

How to remove secrets from log with monolog | Parthenon The Symfony SaaS Boilerplate

Logging is a very important part of operating an application if you're unaware of what happened in your system you're unable to quickly and efficiently identify the issue. However, logging can open up some potential pitfalls.

A good example of using a log processor to filter out items from log processing (using PHP’s Monolog). One possible improvement, depending on the use case, would be to check the values against patterns that shouldn’t be logged, like GitHub tokens.

Security Tip: A Well-Known URL for Changing Passwords

Password managers will check the `/.well-known/change-password`, and if it returns a 2xx or 3xx, the password manager will send the user there to change their password.

Troy Hunt: Thanks FedEx, This is Why we Keep Getting Phished

I looked through attacks in my access logs. Here's what I found

Gravitational Teleport

very slick ssh management tool for clusters

security - The definitive guide to form-based website authentication - Stack Overflow

useful resource on handling authentication

Sift Science

fraud detection for ecommerce

SourceForge.net: Project Info - kses - PHP HTML/XHTML filter

strip_tags() on steroids

The Six Dumbest Ideas in Computer Security

great article about some ideas not have about computer security

Boing Boing: Opening a pricey bike lock with a plastic ball point pen

the videos are great

Password generator bookmarklet

generate unique passwords for sites based on one master password (via joshua)