CSS-Tricks

security

Just Another HTTPS Nudge

# By Chris Coyier

I was strongly reminded about the scariness of non-secure websites the other day.

I'm using Xfinity as an internet service provider, and they give you a device that is both a cable modem and a router.

Here's a tiny bit of backstory. I use a VPN, and I discovered that in using their modem directly, the VPN wouldn't work. I'm not sure why. I didn't dig into it very far, because I have a modem of my own I'd prefer to use. So I plugged that in, which worked... but not particularly well. The connection was spotty and slow, even right in my own house.

(more…)

ShopTalk 250: Web Security

# By Chris Coyier

For all y'all that want to understand the potential attacks, and potential defenses, of front-end web development.

It's pretty wild. The dangers are big, real, and many. But the tools we have to fight back are up to the job, we just need to know about them and use them.

The Line of Death

# By Robin Rendle

Eric Lawrence has written a pretty scary post about browser security and malicious websites that hope to trick us:

When building applications that display untrusted content, security designers have a major problem— if an attacker has full control of a block of pixels, he can make those pixels look like anything he wants, including the UI of the application itself. He can then induce the user to undertake an unsafe action, and a user will be none-the-wiser.

And the problem is even worse on mobile:

Virtually all mobile operating systems suffer from the same issue– due to UI space constraints, there are no trustworthy pixels, allowing any application to spoof another application or the operating system itself

icon-anchoricon-closeicon-emailicon-linkicon-logo-staricon-menuicon-nav-guideicon-searchicon-staricon-tag