TE
科技回声
首页24小时热榜最新最佳问答展示工作
GitHubTwitter
首页

科技回声

基于 Next.js 构建的科技新闻平台,提供全球科技新闻和讨论内容。

GitHubTwitter

首页

首页最新最佳问答展示工作

资源链接

HackerNews API原版 HackerNewsNext.js

© 2025 科技回声. 版权所有。

Ask HN: Is there any site outlining the key security concerns for web apps?

15 点作者 eelliott大约 8 年前
Reading the while(1) thread I got wondering if there is any reliable site that outlines the key security issues web developers should know about?

3 条评论

amk_大约 8 年前
- <a href="https:&#x2F;&#x2F;cto-security-checklist.sqreen.io&#x2F;" rel="nofollow">https:&#x2F;&#x2F;cto-security-checklist.sqreen.io&#x2F;</a><p>- <a href="https:&#x2F;&#x2F;github.com&#x2F;FallibleInc&#x2F;security-guide-for-developers&#x2F;blob&#x2F;master&#x2F;security-checklist.md" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;FallibleInc&#x2F;security-guide-for-developers...</a><p>And there are more that have been posted here: <a href="https:&#x2F;&#x2F;hn.algolia.com&#x2F;?query=security%20checklist&amp;sort=byPopularity&amp;prefix&amp;page=0&amp;dateRange=all&amp;type=story" rel="nofollow">https:&#x2F;&#x2F;hn.algolia.com&#x2F;?query=security%20checklist&amp;sort=byPo...</a>
detaro大约 8 年前
<a href="https:&#x2F;&#x2F;www.owasp.org" rel="nofollow">https:&#x2F;&#x2F;www.owasp.org</a>
评论 #14282882 未加载
sharmi大约 8 年前
A practical security guide for web developers | Hacker News <a href="https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=12140477" rel="nofollow">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=12140477</a> DevGuide&#x2F;02-Policies, Standards and Guidelines.md at master · OWASP&#x2F;DevGuide <a href="https:&#x2F;&#x2F;github.com&#x2F;OWASP&#x2F;DevGuide&#x2F;blob&#x2F;master&#x2F;01-Foundations&#x2F;02-Policies%2C%20Standards%20and%20Guidelines.md" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;OWASP&#x2F;DevGuide&#x2F;blob&#x2F;master&#x2F;01-Foundations...</a> Security Engineering - A Guide to Building Dependable Distributed Systems <a href="http:&#x2F;&#x2F;www.cl.cam.ac.uk&#x2F;~rja14&#x2F;book.html" rel="nofollow">http:&#x2F;&#x2F;www.cl.cam.ac.uk&#x2F;~rja14&#x2F;book.html</a> Wiley: The Web Application Hacker&#x27;s Handbook: Finding and Exploiting Security Flaws, 2nd Edition - Dafydd Stuttard, Marcus Pinto <a href="http:&#x2F;&#x2F;as.wiley.com&#x2F;WileyCDA&#x2F;WileyTitle&#x2F;productCd-1118026470.html" rel="nofollow">http:&#x2F;&#x2F;as.wiley.com&#x2F;WileyCDA&#x2F;WileyTitle&#x2F;productCd-1118026470...</a> LastPass Security Notice | Hacker News <a href="https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=9721212" rel="nofollow">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=9721212</a> LastPass Security Notice | The LastPass Blog <a href="https:&#x2F;&#x2F;blog.lastpass.com&#x2F;2015&#x2F;06&#x2F;lastpass-security-notice.html&#x2F;" rel="nofollow">https:&#x2F;&#x2F;blog.lastpass.com&#x2F;2015&#x2F;06&#x2F;lastpass-security-notice.h...</a> Linux workstation security checklist | Hacker News <a href="https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=10134009" rel="nofollow">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=10134009</a> KeePass – questionable security | Hacker News <a href="https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=9727297" rel="nofollow">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=9727297</a> SJCL – Stanford JavaScript Crypto Library | Hacker News <a href="https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=13820722" rel="nofollow">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=13820722</a> System design primer <a href="https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=13823979" rel="nofollow">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=13823979</a> wordpress stripe plugins. how secure are they? The Netflix Tech Blog: Netflix Security Monkey on Google Cloud Platform <a href="http:&#x2F;&#x2F;techblog.netflix.com&#x2F;2017&#x2F;03&#x2F;netflix-security-monkey-on-google-cloud.html" rel="nofollow">http:&#x2F;&#x2F;techblog.netflix.com&#x2F;2017&#x2F;03&#x2F;netflix-security-monkey-...</a> Quick Start Guide — security_monkey 0.6.0 documentation <a href="https:&#x2F;&#x2F;securitymonkey.readthedocs.io&#x2F;en&#x2F;latest&#x2F;quickstart.html#gcp-configuration" rel="nofollow">https:&#x2F;&#x2F;securitymonkey.readthedocs.io&#x2F;en&#x2F;latest&#x2F;quickstart.h...</a> <a href="https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=13862253" rel="nofollow">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=13862253</a> Try to get CS 161 University of Berkerly - Highly recommended esp Prof Wagnor or Prof Weaver <a href="http:&#x2F;&#x2F;www-inst.cs.berkeley.edu&#x2F;~cs161&#x2F;sp16&#x2F;" rel="nofollow">http:&#x2F;&#x2F;www-inst.cs.berkeley.edu&#x2F;~cs161&#x2F;sp16&#x2F;</a> Laptop security <a href="https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=13854625" rel="nofollow">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=13854625</a> <a href="https:&#x2F;&#x2F;www.oreilly.com&#x2F;ideas&#x2F;jessy-irwin-on-making-security-understandable-for-everyone" rel="nofollow">https:&#x2F;&#x2F;www.oreilly.com&#x2F;ideas&#x2F;jessy-irwin-on-making-security...</a><p>I am sick today. So I couldn&#x27;t sort the links or format them. Hope it helps you.