Ask HN: Which are the best books for security conscious full stack web devs?

Posted by rreyes1979 on Wednesday June 01, 2016 @01:53PM
from the ask-hn dept.

So many different things that can go wrong. So many information in different places. Any really good books or sites for security conscious full stack web developers? Hopefully, easy to read :)

( 4 comments | 6 points | on HN )

Re:Ask HN: Which are the best books for security conscious f... by J-dawg on Thursday June 02, 2016 @03:19AM (#11820887)

Troy Hunt's Pluralsight course seems to come highly recommended [0]. I haven't got around to doing it myself yet, but it's on my list!

[0] https://www.pluralsight.com/courses/hack-yourself-first

[ Parent | on HN ]

Re:Ask HN: Which are the best books for security conscious f... by CiPHPerCoder on Friday June 03, 2016 @03:19PM (#11832540)

https://github.com/paragonie/awesome-appsec

We've been trying to maintain an up-to-date list.

[ Parent | on HN ]

Re:Ask HN: Which are the best books for security conscious f... by ratchetratchet on Wednesday June 01, 2016 @04:46PM (#11818011)

Web Application Hackers Handbook https://www.amazon.co.uk/Web-Application-Hackers-Handbook-Ex...

[ Parent | on HN ]

Re:Ask HN: Which are the best books for security conscious f... by twunde on Thursday June 02, 2016 @02:23AM (#11820726)

I'll second this. This book hits upon most common security vectors. It's amazing how few developers know what csrf is and how to defend against it even now. If you're not ready to invest money yet, check out the owasp top 10 and make sure you know how to defend against them in your preferred language/framework.

[ Parent | on HN ]