paragon_init - Hackdot

Promoting Misuse-Resistance in Paseto Libraries

Posted by paragon_init on Thursday September 16, 2021 @08:58PM
from the paragonie.com dept.

https://paragonie.com/blog/2021/09/promoting-misuse-resistance-in-paseto-libraries

( Read More... | no comments | 2 points | on HN )

Firebase/PHP-JWT: New Risk of HS256/RSA256 Algorithm Confusion

Posted by paragon_init on Wednesday August 04, 2021 @01:34PM
from the github.com dept.

https://github.com/firebase/php-jwt/issues/351

( Read More... | no comments | 4 points | on HN )

Paseto Is an Even More Secure Alternative to the JOSE Standards (JWT, etc.)

Posted by paragon_init on Tuesday August 03, 2021 @10:53AM
from the paragonie.com dept.

https://paragonie.com/blog/2021/08/paseto-is-even-more-secure-alternative-jose-standards-jwt-etc

( Read More... | no comments | 16 points | on HN )

Ristretto255 for the PHP Community

Posted by paragon_init on Thursday May 13, 2021 @11:34PM
from the paragonie.com dept.

https://paragonie.com/blog/2021/05/ristretto255-for-php-community

( Read More... | no comments | 3 points | on HN )

Securing Your Business's Online Presence – A Guide for Non-Experts

Posted by paragon_init on Friday January 15, 2016 @02:12PM
from the appsec.solutions dept.

https://appsec.solutions/blog/2015/06/guide-securing-your-business-s-online-presence-for-non-experts

( Read More... | no comments | 2 points | on HN )

Which PHP Cryptography Libraries Are Actually Secure?

Posted by paragon_init on Friday January 15, 2016 @02:10PM
from the paragonie.com dept.

https://paragonie.com/blog/2015/11/choosing-right-cryptography-library-for-your-php-project-guide

( Read More... | 2 comments | 3 points | on HN )

On the Design and Implementation of a Stealth Backdoor for Web Applications

Posted by paragon_init on Sunday January 10, 2016 @03:53PM
from the paragonie.com dept.

https://paragonie.com/blog/2016/01/on-design-and-implementation-stealth-backdoor-for-web-applications

( Read More... | no comments | 2 points | on HN )

How We Designed Our (DEFCON 23 Contest Winning) Password Authentication Backdoor

Posted by paragon_init on Wednesday January 06, 2016 @04:46AM
from the paragonie.com dept.

https://paragonie.com/blog/2016/01/on-design-and-implementation-stealth-backdoor-for-web-applications

( Read More... | no comments | 2 points | on HN )

On the Design and Implementation of a Stealth Backdoor for Web Applications

Posted by paragon_init on Tuesday January 05, 2016 @03:40PM
from the paragonie.com dept.

https://paragonie.com/blog/2016/01/on-design-and-implementation-stealth-backdoor-for-web-applications#resubmit

( Read More... | no comments | 3 points | on HN )

On the Design and Implementation of a Stealth Backdoor for Web Applications

Posted by paragon_init on Monday January 04, 2016 @01:38AM
from the paragonie.com dept.

https://paragonie.com/blog/2016/01/on-design-and-implementation-stealth-backdoor-for-web-applications

( Read More... | no comments | 4 points | on HN )

Show HN: CSP-Builder makes Content-Security-Policy headers a breeze (1.1.0)

Posted by paragon_init on Sunday January 03, 2016 @01:57AM
from the show-hn dept.

https://github.com/paragonie/csp-builder/releases/tag/v1.1.0

( Read More... | no comments | on HN )

Show HN: Pharaoh – Reproducible Phar Verification for PHP Projects

Posted by paragon_init on Thursday December 31, 2015 @01:55PM
from the show-hn dept.

https://github.com/paragonie/pharaoh

( Read More... | no comments | 4 points | on HN )

ZF2015-10: Padding Oracle Vulnerability in Zend\Crypt (CVE-2015-7503)

Posted by paragon_init on Tuesday December 29, 2015 @03:00PM
from the framework.zend.com dept.

http://framework.zend.com/security/advisory/ZF2015-10

( Read More... | no comments | on HN )

Roughly 30% of the Internet benefits from our security research in 2015

Posted by paragon_init on Tuesday December 29, 2015 @02:29PM
from the paragonie.com dept.

https://paragonie.com/blog/2015/12/year-2015-in-review

( Read More... | no comments | 2 points | on HN )

Don't Fear the Hacker

Posted by paragon_init on Sunday December 20, 2015 @12:32PM
from the paragonie.com dept.

https://paragonie.com/blog/2015/12/don-t-fear-hacker-missing-first-step-in-cybersecurity-plans#resubmit

( Read More... | no comments | on HN )

PHP Cryptography Libraries That Don't Suck

Posted by paragon_init on Wednesday December 09, 2015 @02:49PM
from the paragonie.com dept.

https://paragonie.com/blog/2015/11/choosing-right-cryptography-library-for-your-php-project-guide#resubmit

( Read More... | 2 comments | 2 points | on HN )

5 PHP Libraries That Got Cryptography Right So You Don't Have To

Posted by paragon_init on Wednesday December 09, 2015 @02:02AM
from the paragonie.com dept.

https://paragonie.com/blog/2015/11/choosing-right-cryptography-library-for-your-php-project-guide

( Read More... | no comments | on HN )

“Remember Me” Cookies and Secure User Authentication in a Nutshell

Posted by paragon_init on Wednesday December 09, 2015 @01:59AM
from the paragonie.com dept.

https://paragonie.com/blog/2015/04/secure-authentication-php-with-long-term-persistence

( Read More... | no comments | on HN )

The Most Secure PHP Cryptography Libraries

Posted by paragon_init on Tuesday December 01, 2015 @10:47AM
from the paragonie.com dept.

https://paragonie.com/blog/2015/11/choosing-right-cryptography-library-for-your-php-project-guide

( Read More... | no comments | on HN )

How to Choose the Right Cryptography Library for Your PHP Project

Posted by paragon_init on Saturday November 28, 2015 @04:14AM
from the paragonie.com dept.

https://paragonie.com/blog/2015/11/choosing-right-cryptography-library-for-your-php-project-guide

( Read More... | no comments | 2 points | on HN )

Show HN: EasyRSA – Simple and secure RSA encryption and signatures in PHP

Posted by paragon_init on Thursday November 19, 2015 @11:48AM
from the show-hn dept.

https://github.com/paragonie/EasyRSA

( Read More... | no comments | on HN )

A Guide to Choosing Cryptography Libraries for PHP Developers

Posted by paragon_init on Wednesday November 18, 2015 @04:22PM
from the paragonie.com dept.

https://paragonie.com/blog/2015/11/choosing-right-cryptography-library-for-your-php-project-guide#resubmit

( Read More... | no comments | on HN )

Secure PHP Cryptography Library Recommendations

Posted by paragon_init on Tuesday November 17, 2015 @03:17PM
from the paragonie.com dept.

https://paragonie.com/blog/2015/11/choosing-right-cryptography-library-for-your-php-project-guide

( Read More... | no comments | on HN )

How to Securely Allow Users to Upload Files (PHP)

Posted by paragon_init on Wednesday October 28, 2015 @01:18PM
from the paragonie.com dept.

https://paragonie.com/blog/2015/10/how-securely-allow-users-upload-files

( Read More... | 2 comments | 3 points | on HN )

How to Securely Allow Users to Upload Files (PHP)

Posted by paragon_init on Tuesday October 27, 2015 @09:41PM
from the paragonie.com dept.

https://paragonie.com/blog/2015/10/how-securely-allow-users-upload-files

( Read More... | no comments | on HN )

Good news for WordPress 4.4: wp_rand() will be cryptographically secure

Posted by paragon_init on Friday October 23, 2015 @03:28PM
from the paragonie.com dept.

https://paragonie.com/blog/2015/10/coming-wordpress-4-4-csprng

( Read More... | no comments | 6 points | on HN )

How to Securely Generate Random Strings (Passwords) and Integers in PHP

Posted by paragon_init on Wednesday October 21, 2015 @12:47PM
from the paragonie.com dept.

https://paragonie.com/blog/2015/07/how-safely-generate-random-strings-and-integers-in-php

( Read More... | no comments | on HN )

Why Encrypting URL Parameters Is a Bad Idea (and What to Do Instead)

Posted by paragon_init on Tuesday October 20, 2015 @12:58PM
from the paragonie.com dept.

https://paragonie.com/blog/2015/09/comprehensive-guide-url-parameter-encryption-in-php

( Read More... | no comments | 2 points | on HN )

The Road Towards Cryptographically Secure Random Numbers in PHP and WordPress

Posted by paragon_init on Friday October 09, 2015 @03:48PM
from the appsec.solutions dept.

https://appsec.solutions/blog/2015/10/coming-wordpress-4-4-csprng

( Read More... | no comments | 3 points | on HN )