Being Cellfish

Since I stumbled over a pretty good introduction to what CSRF is I figured it was worth a few lines.

You might have heard the recommendation that your web server should not return the Server header to reveal exactly what software is being us...

When you are working on services that need to scale to millions of users you typically come to the conclusion that you will never be able to...

So when a web service is getting too much traffic it starts returning the 503 status code. Well written services also return the Retry-After...

I'm not going to explain it all myself since it was explained in an excellent way here . However below is the executive summary.

I think it is safe to say that anybody who is serious about security will tell you that security through obscurity is no security . Yet a l...

A while back I was involved in a discussion around using 429 instead of 503 in order to tell clients they should back off a little. And ther...