News for hackers. Stuff that matters.

757362

Four key considerations to logging approach in PHP, Python, or Ruby https://www.loggly.com/blog/four-key-considerations-guide-lo...

Symfony is a PHP framework https://github.com/symfony/symfony

Symfony Using the Logger https://symfony.com/doc/current/components/console/logger.ht...

YII 2.0 LOGGING AND PSR-3 https://en.rmcreative.ru/blog/yii-2.0-logging-and-psr-3/

Yii 2.0 log target that is able to write messages to PSR-3 compatible logger https://github.com/samdark/yii2-psr-log-target

APIx Log, very thin PSR-3 logger https://github.com/apix/log

4 Node.js Logging libraries which make sophisticated logging simpler https://www.loggly.com/blog/node-js-libraries-make-sophistic...

Github: psr-3 https://github.com/topics/psr-3

cutelog – GUI for Python's logging module https://github.com/Busimus/cutelog

Python Logging Cookbook https://docs.python.org/3/howto/logging-cookbook.html

Re:100% CPU usage in Chrome 67 on Friday June 01, 2018 @07:29AM (#17204334)
HiddenChrome: Secret Settings & Tools (chrome://flags/) https://chrome.google.com/webstore/detail/hiddenchrome-secre...

url: (chrome://flags/)

Simple Cache for HTTP (Enabled) Throttle Expensive (Background Timers Enabled) No-State Prefetch (Enabled No-State Prefetch)

Worth A Try!

Re:Ask HN: Secure Webassembly crypto? on Friday June 01, 2018 @03:20AM (#17203276)
The Side Channel Attack?

JavaScript Zero: real JavaScript, and zero side-channel attacks https://blog.acolyer.org/2018/03/13/javascript-zero-real-jav...

Side-Channel Attacks on Everyday Applications https://github.com/defuse/flush-reload-attacks

The DrK (De-randomizing Kernel ASLR) attack https://github.com/sslab-gatech/DrK

Cache Template Attacks https://github.com/IAIK/cache_template_attacks

Using Node.js Event Loop for Timing Attacks https://snyk.io/blog/node-js-timing-attack-ccc-ctf/

Cross Frame Scripting https://www.owasp.org/index.php/Cross_Frame_Scripting

Cross Frame Scripting (XFS) Cheat Sheet, Attack Examples & Protection https://www.checkmarx.com/knowledge/knowledgebase/XFS

Testing for CSS Injection (OTG-CLIENT-005) https://www.owasp.org/index.php/Testing_for_CSS_Injection_(O...

Stealing CSRF tokens with CSS injection (without iFrames) https://github.com/dxa4481/cssInjection

Stealing Data With CSS: Attack and Defense https://www.mike-gualtieri.com/posts/stealing-data-with-css-...

Reading Data via CSS Injection https://curesec.com/blog/article/blog/Reading-Data-via-CSS-I...

Re:Ask HN: Secure Webassembly crypto? on Friday June 01, 2018 @02:56AM (#17203153)
Here is some information that mey be of use on the secure channel encryption?

End-to-end encryption https://en.wikipedia.org/wiki/End-to-end_encryption

End-To-End is a crypto library to encrypt, decrypt, digital sign, and verify signed messages (implementing OpenPGP and OTR) https://github.com/google/end-to-end

(Auth) So you want to build a decentralized Twitter with end-to-end encryption, that works right in the browser? All with MIT licensed Open Source code? https://github.com/amark/gun/wiki/auth

P2P Authenticated Encryption https://github.com/tendermint/tendermint/wiki/P2P-Authentica...

GNUnet is an alternative network stack for building secure, decentralized and privacy-preserving distributed applications. https://gnunet.org

A decentralized, peer-to-peer, encrypted chat in PHP. https://github.com/TheFox/phpchat

Top 5 Most Rated Node.js Frameworks for End-to-End Web Testing https://medium.com/@adrian_lewis/top-5-most-rated-node-js-fr...

Re:Ask HN: SSL inspection needed to comply with GDPR? on Wednesday May 30, 2018 @05:56PM (#17192244)
I apologize for not researching the topic properly. :(

Here is an update for discussion Spooky23!

GDPR Controversial Topics https://www.eugdpr.org/controversial-topics.html

There was a post asking about SSL necessity for GDPR and I didn't research the question properly.

If a website isn't payment orientated or doesn't hold sensitive information (Ex. email, credit cards, addresses, forum etc.) Why would you need to invest in SSL? Another?

How is the site coded? Ex. XHTML/HTML/CSS || Or CMS, PHP, JavaScript

Any feedback would greatly be appreciated!

Re:Show HN: Epic levels of tracking from a website on Tuesday May 29, 2018 @09:24PM (#17184261)
How to Set Up Gmail in Outlook https://www.makeuseof.com/tag/gmail-outlook-settings/

Import Gmail to Outlook https://support.office.com/en-us/article/import-gmail-to-out...

Google Chrome Browser Security by usb http://www.gbotstudent.com/chrome.html

Gmail Use a Security Key for 2-Step Verification https://support.google.com/accounts/answer/6103523?hl=en

How To Make your Gmail Account More Secure http://www.tomsguide.com/faq/id-3704782/make-gmail-account-s...

Windows 10 Configuration Tutorial by usb http://www.gbotstudent.com/win10.html

Developer certifications: If you can code, do you really need them? https://techbeacon.com/developer-certifications-friend-or-fo...

The 4 most in-demand programming languages https://www.creativebloq.com/advice/the-4-most-in-demand-pro...

15 Top-Paying IT Certifications for 2018 https://www.globalknowledge.com/us-en/content/articles/top-p...

Re:Ask HN: SSL inspection needed to comply with GDPR? on Sunday May 27, 2018 @04:30PM (#17168958)
7 common misunderstandings about SSL encryption: separating fact from fiction https://gdpr.report/news/2017/07/11/7-common-misunderstandin...

SSL Inspection is Imperative Under GDPR https://www.a10networks.com/blog/ssl-inspection-imperative-u...

Re:Ask HN: Resources for Updating JavaScript Skills? on Saturday May 26, 2018 @02:27PM (#17163543)
Top JavaScript Libraries & Tech to Learn in 2018 https://medium.com/javascript-scene/top-javascript-libraries...

SEARCH RESULTS FOR REACT JS https://www.creativebloq.com/search?searchTerm=react+js

Fullstack React: The Complete Guide to ReactJS and Friends https://coderprog.com/fullstack-react/

Re:Ask HN: Resources for Updating JavaScript Skills? on Saturday May 26, 2018 @01:34PM (#17163225)
5 of the best JavaScript frameworks https://www.creativebloq.com/features/best-javascript-framew...

AngularJS is a structural framework for dynamic web apps. https://docs.angularjs.org/guide/introduction

SEARCH RESULTS FOR ANGULAR https://www.creativebloq.com/search?searchTerm=angular