simon_tabor
X-Powered-By and Server Headers: Disable or What? Are They Harmless?
Reporting Security Vulnerabilities: Making It Easy (Avoiding Early Disclosure)
Re:API Errors – The Good, the Bad and the Ugly
on Thursday March 24, 2016 @10:06AM (#11352846)
Errors are often not given the attention that they deserve in APIs. In this post we take a look at API errors and what makes a good error response. I'd love to hear HN's thoughts on what makes a good API error (and what makes a bad one)!
API Errors – The Good, the Bad and the Ugly
CSRF Protection – What, Why, How?
Why your API should use Strict Parameters
How we built our API Docs
The Evolution of Password Security
Re:Real-Time Web Analytics and Complying with EU Cookie Laws
on Wednesday May 30, 2012 @11:34AM (#4043270)
A lot of research went into this post. It should help clear up a fair amount for website owners - especially those using GoSquared. As the cookies are only Category 2, compliance is relatively easy compared to other services where there may well have to be a notice for the user to opt-in to the cookies.
Re:Superior Support
on Monday May 28, 2012 @08:39AM (#4033049)
Fantastic post, I recommend printing this out and putting it right next to your monitor so it's always there to remind you.