Articles tagged "security"
2019
A proposal for the web: improving security with versioned baseline defaults
A proposal for versioned web-platform defaults that make secure behaviour easier to adopt.
To secure systems of the future, we must rethink our notions of "Environment" and "Operating System"
How operating systems, language runtimes, and user environments could divide security responsibilities.
Skipping expensive security checks with JIT compilation
How trusted compilation of memory-safe code could avoid duplicated runtime security checks.
2018
Your CI pipeline has the skeleton key to your infrastructure
Why continuous integration systems are high-value infrastructure targets for adversaries and must be secured accordingly.
WebAssembly: a security engineer's review
A security review of WebAssembly's execution model, memory design, portability, and browser risks.
Syntax highlighting and remote code execution: why developers are an easy target
Why developer tools, plugins, and package ecosystems make development environments attractive targets for adversaries.
Timing attacks: why being efficient can leak information
How execution time can leak sensitive information and when constant-time operations matter.