PUBLIC MARKS from ghis with tag security

Explication d'un problème de sécurité : un CA racine peut distribuer des certificats intermédiaires permettant aux organisations de substituer les certificats et déchiffrer le traffic HTTPS. La solution pour le détecter : utiliser des extensions comme CertPatrol.

A site full of resources about security in Python programming, for the language and for the frameworks/template engines.

An SQL injection scanner, using blind SQL injection techniques to extract information from a target database.

Two things have really changed the face of independent backpacker travel in the last decade: digital cameras and—even more so—the internet. While some people can afford the luxury of traveling with a laptop or even a netbook, a real backpacker doesn't want to have to carry the extra weight nor the responsibility of carrying expensive equipment that would be difficult to lug around, relatively easy to steal, and expensive to replace.

If you allow applications to save your passwords, anyone with physical access to your PC can decode them unless you're properly encrypting them—and chances are pretty good you're not. Let's walk through the right and wrong ways to store your passwords.

Comment supprimer de manière efficace des fichiers grâce aux outils Shred et du paquet secure-delete sous Linux.

Security companies and IT people constantly tells us that we should use complex and difficult passwords. This is bad advice, because you can actually make usable, easy to remember and highly secure passwords. In fact, usable passwords are often far better than complex ones. So let's dive into the world of passwords, and look at what makes a password secure in practical terms.