- URL filtering vulnerabilities in lxml
- Preventing (and fixing) parser mismatch vulnerabilities
- What is a parser mismatch vulnerability?
- The surprising complexity of interpreting X-Forwarded-For safely
- An informal security assessment of Imzy (part 2)
- An informal security assessment of Imzy (part 1)
- Curl, unquoted URLs, and LANGSEC
- Securing my Clojure photo gallery: Let’s Encrypt certs on NFSN
- Of LED art, suspicion, and a girl named Star
- When torrents bite back
- Open surveillance to the public
- Using Tor correctly: Anonymous browsing edition
- Upgrade Tor to TRUE latest version (in Ubuntu)
- Use your home computer from work (VNC over SSH)
- Why not to click on links in unexpected email
- Because even terrorists blog, apparently
- Anti-filming system will fail
- Arbitrary code execution – why?
- Of security seals and window screens
- Google redirection on public WiFi