Sitting here on a cold, snowy day thinking about secure design principles. These are key to think about during the design phase of a feature/project?
Total Mediation – every access to every resource must be validated every time
Economy of Mechanism – keep it as simple as possible
Fail-Safe – in case of failure, default to a secure state
Defense in Depth – layer security
Open Design – the security of a system should not be dependent on secrecy of its design or implementation
PwnedCheck
PwnedCheck is a gem that checks http://haveibeenpwned.com to see if an email address or user handle has been involved in a breach.
How to Install
How to Use
Jekyll-Clicky
Jekyll-clicky is a gem to add clicky analytics to a site generated with Jekyll.
Installation
Add this line to your application’s Gemfile:
And then execute:
Or install it yourself as:
### Usage Add-
to _config.yml in your jekyll site directory. Replace ### with the id of your clicky site.
Just finished my talk about extending Burp at Derbycon VII. Thanks to everyone that attended! I’m really thankful for the opportunity to present on the topic.
The Details-
Slides –
Video in Slides (Slide 14)
Source Code – https://github.com/sampsonc/searchplusplus
Video of the Presentation
I’d love to hear any comments/questions.