New posts in Appsec

Does X-Content-Type-Options really prevent content sniffing attacks?

Should I store my intellectual property / code online?

Benefits to Arch Linux over Kali Linux

Where can I find exploit code?

How to inject executable, malicious code into PDF, JPEG, MP3, etc.?

Is there any way to use Nuget securely?

What risks should I be aware of before allowing advertisements being placed on my website?

Criteria for Evaluating Static Analysis Tools

How should web app developers defend against JSON hijacking?

Should I have a maximum password length?