New

The latest blog posts to take off on Hacker News. 2,668 posts.

Any topic
2019
844

CSRF is really dead

A little while back I wrote a blog post about how "CSRF is dead". It focused on SameSite cookies, a powerful yet simple feature to protect your website against CSRF attacks. As powerful as it was, and as much as it will kill CSRF, you had to enable it on

850

Origin Sells Out

One day in early June of 1992, a group of executives from Electronic Arts visited Origin Systems’s headquarters in Austin, Texas. If they had come from any other company, the rank and file at Origin might not have paid them much attention. As it was, though, the visit felt a bit like Saddam Hussein dropping in at…

869

RSA: Theory and Implementation

RSA has been a staple of public key cryptography for over 40 years, and is still being used today for some tasks in the newest TLS 1.3 standard. This post describes the theory behind RSA - the math that makes it work, as well as some practical considerations; it also presents a complete implementation of RSA key…