Being Cellfish

With the recent explanation of how math/rand evolved into math/rand/v2 I got reminded why I first fell in love with Go . Design decisions ...

When you develop a service you will probably run into a situation where you want to put in some arbitrary large limit on something to preven...

For whatever reason I needed some data on what the most vulnerable operating system was and instead I stumbled over some questionable use of...

A couple of months before I left my previous job I received a suspicious email - apparently I've received a fax and it was inside a link...

Since I stumbled over a pretty good introduction to what CSRF is I figured it was worth a few lines.

Well sometimes I'm lucky and somebody else writes something so I don't have to. Since you should assume that your system will be bre...

A couple of years ago it was very easy to DoS attack .Net web services as the headers were added to a dictionary. Back then the hash of the ...

You might have heard the recommendation that your web server should not return the Server header to reveal exactly what software is being us...

When you are working on services that need to scale to millions of users you typically come to the conclusion that you will never be able to...

So when a web service is getting too much traffic it starts returning the 503 status code. Well written services also return the Retry-After...

If you are using IIS as a webserver you are probably interested making sure the service is configured to be as secure as possible.

I'm not going to explain it all myself since it was explained in an excellent way here . However below is the executive summary.

Last week I told you about my training experience at Black Hat 2015. Now it is time to talk to you about the briefings and the business hal...

I'm attending Black Hat 2015 USA. This is my first time at Black Hat or any other security related conference and here are my first impr...

I think it is safe to say that anybody who is serious about security will tell you that security through obscurity is no security . Yet a l...

A lot of people these days rely on some (software) password manager to keep track of all different passwords you need. Obviously there are t...