After last post on browser based security, a few people asked how CSP works. Basically, it is a contract between a web server and the client (i.e. the browser). The browser (being a client) is basically executing everything send to it by the web server. This is very risky when the web server is comprised (that is what happen …
Since I moved from an internal IT Risk manager to a security consulting firm, I have been involving in different discussions on web application security. These experiences made me think that browsers are not a security software and its design has little security consideration. Missing security features in browser is one of the root cause …
An interesting article: http://www.computerworlduk.com/news/security/3406221/dutch-government-let-law-enforcement-hack-foreign-computers/ Dutch Minister of Security and Justice Ivo Opstelten outlined the government’s plan to draft a bill in upcoming months that would provide law enforcement authorities with new investigative powers on the internet. The proposed legislation would create an incentive for governments to keep software vulnerabilities secret because they would need to exploit …
Dutch Minister of Security’s plan starts digital arms race Read More »