The Tangled Web: A Guide to Securing Modern Web Applications

Re:The Tangled Web: A Guide to Securing Modern Web Applications by _djo_ on Monday January 26, 2015 @06:12AM (#8946456)

What are the other books, if you don't mind me asking?

[ Parent | on HN ]

Re:The Tangled Web: A Guide to Securing Modern Web Applications by Tomte on Monday January 26, 2015 @11:48AM (#8947952)

I think 'tptacek wrote in some other thread about WAAH and Cryptography Engineering being two of the others.

[ Parent | on HN ]

Re:The Tangled Web: A Guide to Securing Modern Web Applications by tptacek on Monday January 26, 2015 @12:19PM (#8948191)

WAHH and The Art Of Software Security Assessment (TAOSSA) were the other two. We didn't grill candidates on crypto or have work-sample tests that involved crypto. Sadly: you'd be discarding 95% of the candidate pool, and particularly and paradoxically the experienced candidate pool, if you screened for crypto ability. The software security field is just awful at crypto.

[ Parent | on HN ]

Re:The Tangled Web: A Guide to Securing Modern Web Applications by _djo_ on Tuesday January 27, 2015 @10:24AM (#8953435)

Thank you, much appreciated.

[ Parent | on HN ]