Top all-time · #16128
Dawn Technology
Company blog · ibuildings.nl/blogprogrammingwebsecurity
Dawn Technology is the company blog at ibuildings.nl, writing about programming, web and security. Since 2013, 4 different Hacker News readers have linked it 15 times, most often “HTTP Security headers you should be using”. No feed was found, so read it on the site itself.
Too few sampled comments (3) to say how often HN recommends it.?
Why HN links it
HN readers link this blog's post on HTTP security headers. Comments cite it as a source on Content-Security-Policy and X-Content-Type-Options, and debate Drupal security.
Summarised by Claude from a sample of 3 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Ibuildings en Dawn Technology bundelen hun krachten. Ontdek hoe onze gecombineerde expertise jouw digitale ambities helpt realiseren.
Most-linked posts?
- HTTP Security headers you should be using3 people · 3 mentions · first linked 2014-01-23
What Hacker News says?
The directory entries at http://ibuildings.nl/robots.txt suggest that they're hosting much more than a blog on that domain. Edit: As others pointed it out, it's a Drupal installation. Trusting Drupal to be 100% safe in regards to malicious attacks is not a good idea. I know this is nitpicking, it is however still ironic. http://www.cvedetails.com/vulnerability-list/vendor_id-1367/...
Comment linking /robots.txt
on “HTTP Security headers you should be using”Submitted HTTP Security headers you should be using as a story · 278 points
HN discussionUm, the "people writing HTML" have done a lot of work to prevent XSS, by introducing Content-Security-Policy and other HTTP headers: http://ibuildings.nl/blog/2013/03/4-http-security-headers-yo... The main problem is backwards compatibility, as older browsers don't support them, but the idea that people have their head in the sand re. XSS is complete nonsense.
Comment linking /blog/2013/03/4-http-security-headers-you-should-always-be-using
on “JavaScript Cryptography Considered Harmful”Submitted Hidden in plain sight: Brute-forcing Slack private files as a story · 146 points
HN discussionWould this be blocked by the X-CONTENT-TYPE-OPTIONS header? (source: http://ibuildings.nl/blog/2013/03/4-http-security-headers-yo... )
Comment linking /blog/2013/03/4-http-security-headers-you-should-always-be-using
on “When GIFs serve JavaScript”Submitted Getting rid of NULL as a story · 27 points
HN discussionSubmitted Programming guidelines (for PHP developers) – Part 1: Reducing complexity as a story · 3 points
HN discussionSubmitted Back to the Future: JavaScript Best Practices as a story · 2 points
HN discussionSubmitted Programming guidelines – Part 4: Messages as a story · 2 points
HN discussionSubmitted Secure Development Anti-Pattern: Failure to separate resource from user as a story · 1 points
HN discussionSubmitted JavaScript, the Universe and Everything – Part 3: Comparing Node to PHP as a story · 1 points
HN discussionSubmitted JavaScript in a PHP World as a story · 1 points
HN discussionSubmitted JavaScript, the Universe and Everything – Part 1: What Is JavaScript? as a story · 1 points
HN discussionSubmitted A PHP Developers look back at OWASP AppSec.eu 2013 as a story · 1 points
HN discussionSubmitted Secure your REST API with OAuth2 Implicit Grant as a story · 1 points
HN discussion