fmavituna

We need to kill the cliche that language/framework doesn't matter but we also need to understand, it still won't solve all problems.

I wrote about a similar topic from a web application security point of view: Why Framework Choice Matters in Web Application Security* ( https://www.netsparker.com/blog/web-security/why-framework-c... )

Also today there is enough data in the industry to prove this argument beyond any doubt for web applications.

* original article is written about 11 years ago or something this is a republished version

It's a nice mix of issues. Web security (client/server-side) is a big field, and keep changing. We need a lot of awareness.

If you like this kind of web security focused articles, our security researchers publish (almost weekly) very basic to advanced web security topics in our blog : https://www.netsparker.com/blog/web-security/ Some of them are very specific like;

PHP Type Juggling Vulnerabilities: https://www.netsparker.com/blog/web-security/php-type-juggli...

and some of them are 101 kind of coverage such as HTTP Response Splitting: https://www.netsparker.com/blog/web-security/crlf-http-heade...

I think overpowered is the right word for office. When used it doesn't feel bloated or cluttered, it's the pinnacle of Desktop Computing UX.

Whenever I hear about wealth inequality, I think of Zakat ( http://www.bbc.co.uk/religion/religions/islam/practices/zaka... ).

It's one of the 5 pillars of Islam. One has to give 2.5% of their wealth to poor. It's compulsory unlike Sadaqah - Charity ( https://en.wikipedia.org/wiki/Sadaqah ).

I guess if everyone followed just this 2.5% rule, there wouldn't be any poor left in the world (I didn't do the math though).

P.S. When I say poor, I'm not referring to people who cannot afford the new iPhone.

It's interesting that static or dynamic automated security testing don't exist in their process.

We are developing a web application security scanner [1] and we indeed use max length setting and also detect binary responses, just tested this and as expected it worked fine.

I'm actually surprised that many other scanners failed to do this.

[1] https://www.netsparker.com

You can read this one from Muhammad Asad, it's very good. http://muhammad-asad.com/Message-of-Quran.pdf

> I've asked Muslim friends but they seem adamant that it must be read in Arabic

Not sure if these are practicing Muslims but that's simply wrong.