Link List

Vel­lumproof cre­ates tam­per-evi­dent records of man­u­script drafts with cryp­to­graph­ic seals and time­stamp­ing to prove human author­ship and writ­ing pro­gres­sion. Writ­ers upload files as they work; each ver­sion is chained to the pre­vi­ous one, pre­vent­ing back­dat­ing or alter­ation. The ser­vice gen­er­ates ver­i­fi­able proof pages for pub­lish­ers and con­tests while keep­ing man­u­scripts pri­vate and nev­er using them to train AI mod­els.

Open-source tool to remove AI water­marks, meta­da­ta, and prove­nance marks (C2PA, EXIF, XMP) from text and files includ­ing PNG, JPEG, PDF, DOCX, and HTML. Han­dles invis­i­ble Uni­code, sta­tis­ti­cal text water­marks, and marks from Claude, Gemini/​SynthID, and Ope­nAI. Avail­able as Python scripts or Grok agent skill.

It is one of the first pub­licly dis­closed cyber-attacks car­ried out by AI with­out direct human involve­ment.

Hon­da Radar Shield by Miller CAT pro­tects the front radar dis­tance sen­sor behind your Hon­da’s grille emblem from theft. Made from USA-man­u­fac­tured 16-gauge stain­less steel, it safe­guards adap­tive cruise con­trol and col­li­sion mit­i­ga­tion sys­tems with­out obstruct­ing radar per­for­mance.

Here’s how to eas­i­ly move your pass­words from 1Password to iCloud Key­chain

Explore Lasso’s prompt injec­tion tax­on­o­my, dis­tin­guish­ing text-based tech­niques from attack­er intent to stan­dard­ize AI secu­ri­ty defens­es.

Pre­vents brute force pass­word attacks on the Craft CMS con­trol pan­el by track­ing failed login attempts per IP address and block­ing access after a con­fig­urable thresh­old.

Craft CMS’s secu­ri­ty overview details their com­mit­ment to time­ly updates. It out­lines the process for report­ing, triag­ing, and dis­clos­ing vul­ner­a­bil­i­ties.

A secu­ri­ty-focused npm installer that pro­tects your projects from new­ly com­pro­mised pack­ages.

Inter­nal secu­ri­ty has always been a NATO pri­or­i­ty. Over the years, the posters, cards, and cal­en­dars below have adorned the walls and the desks inside the Head­quar­ters, remind­ing NATO employ­ees of the impor­tance of dis­cre­tion. These cul­tur­al arti­facts are tes­ti­mo­ni­als to the pre­oc­cu­pa­tions of our times.

Gen­er­ate strong and secure pass­words by col­lect­ing let­ters, num­bers, and sym­bols in a bas­ket

A deep dive into the tech­ni­cal world of zip bombs, explor­ing how a minus­cule com­pressed file can be weaponized to over­whelm and crash sys­tems by expand­ing to gigan­tic pro­por­tions.

Pro­vides secu­ri­ty patch­es for out-of-date Craft CMS installs — craftcm­s/se­cu­ri­ty-patch­es

HTTP Secu­ri­ty Head­ers are essen­tial to any web­site. Learn about the HSTS head­er, Con­tent Secu­ri­ty Pol­i­cy head­er CSP, XSS pro­tec­tion, cache con­trol, strict trans­port secu­ri­ty, set-cook­ie head­er, and many more http head­ers in this com­pre­hen­sive guide with exam­ples and take your web­site secu­ri­ty head­er game to the next lev­el with Dark­re­lay.

HTML Forms have pow­er­ful val­i­da­tion mech­a­nisms, but they are heav­i­ly under­used. In fact, not many peo­ple even know much about them. Is this because of some flaw in their design? Let’s explore.

In this paper I’ll show you how to com­pro­mise web­sites by using eso­teric web fea­tures to turn their caches into exploit deliv­ery sys­tems

Pass­word gen­er­a­tor

Tips for Keep­ing All Fron­tend Appli­ca­tions Secure

A resource when you don’t have a good back up plan after a hack. A ser­vice that promised to clean mal­ware and virus­es from a web­site.

Learn and Test DMARC

Learn and Test DMARC

The Ter­rapin attack is a pre­fix trun­ca­tion attack tar­get­ing the SSH pro­to­col, where the integri­ty of SSH’s secure chan­nel is com­pro­mised by manip­u­lat­ing sequence num­bers dur­ing the hand­shake, allow­ing an attack­er to remove mes­sages from the secure chan­nel with­out detec­tion.

The OWASP Top 10 is the ref­er­ence stan­dard for the most crit­i­cal web appli­ca­tion secu­ri­ty risks. Adopt­ing the OWASP Top 10 is per­haps the most effec­tive first step towards chang­ing your soft­ware devel­op­ment cul­ture focused on pro­duc­ing secure code.

A small gist with Javascript to try to pre­vent iframe embed­ding of your con­tent.

Web­site with the col­lec­tion of all the cheat sheets of the project.

OWASP Top 10 mod­ule that adds a few secu­ri­ty improve­ments in form of a cus­tomiz­able serv­er mid­dle­wares to your Nuxt appli­ca­tion. All mid­dle­wares can be mod­i­fied or dis­abled if need­ed. They can also be con­fig­ured to work only on cer­tain routes. By default all mid­dle­wares are con­fig­ured to work glob­al­ly.