Show HN: Security Training for Developers
hacksplaining.com
Show HN: Security Training for Developers
1–10 of 37 posts
Re: Show HN: Security Training for Developers
#2Awesome! This is great!
Re: Show HN: Security Training for Developers
#3[deleted]
Re: Show HN: Security Training for Developers
#4Awesome! This is great!
I second this. Best website I've seen for something like this. This is exactly how I learn.
Re: Show HN: Security Training for Developers
#5Signed up, got https://www.hacksplaining.com/profile.json
Re: Show HN: Security Training for Developers
#6very well put together
Re: Show HN: Security Training for Developers
#7Any comments on who put this together, or their long term goals?
Re: Show HN: Security Training for Developers
#8Went through the SQL injection demo, and it recommends parametrized queries. Excellent.
EDIT:
Joined with Github, went through the password handling section, then saw this:
http://i.imgur.com/H4h5FUY.png
No no no no NO! Do NOT use SHA256 for passwords.
https://paragonie.com/blog/2016/02/how-safely-store-password...
https://codahale.com/how-to-safely-store-a-password/
PBKDF2-SHA256 with 100k or more iterations? Okay, fine.
SHA256 the cryptographic hash function not designed for password storage? Bad advice.
Re: Show HN: Security Training for Developers
#9I like Troy Hunt's web security stuff - I'd gotten into it on Pluralsight, but then moved jobs and don't have access. I did find a free course (With SQL Injection, etc.) of his here: https://info.varonis.com/web-security-fundamentals
Re: Show HN: Security Training for Developers
#10I'm enjoying this a lot. The explanations are straightforward and the writing and animation style is entertaining. I'm liking the website parodies and the puns in the alt texts. I'm learning new things and the linked resources are good for going in-depth. I'd probably pay for advanced lessons in this style. I'll be recommending to friends!