Let me start by saying I've been writing Javascript on and off since the early 2000s but I definitely don't consider myself an expert in it, particularly given the rapid iteration of JS best practices and uses.Somewhere between the end of 2020 and mid 2021 I started building an intentionally awful...
Not every company is lucky enough to have enough appsec or even infosec folks that a security staffer can threat model everything. You're on an engineering team who own some services and you've been told by security that you should threat model your system; now what?Since obviously the folks who...
CreditKelly Kaoudis twitter, github John Jackson twitter Sick Codes twitter, github Robert Willis twitterAffected application versions (known as of 6/4/21)5.13.0 and below (iOS)5.3.0 and below (macOS)5.3.0 and below (Windows)5.10.8 and below (Android)5.3.0 and below (Linux)Initial test versions...