Ask HN: Is there any site outlining the key security concerns for web apps?

[eelliott]

Reading the while(1) thread I got wondering if there is any reliable site that outlines the key security issues web developers should know about?

[amk_]

- https://cto-security-checklist.sqreen.io/

- https://github.com/FallibleInc/security-guide-for-developers...

And there are more that have been posted here: https://hn.algolia.com/?query=security%20checklist&sort=byPo...

[detaro]

https://www.owasp.org

[eelliott]

Thanks but that doesn't really cut through the noise. It's not really for dummies, it would be nice if there was a good UI site with simple explanations and solutions. I'm sure this will be decried as trying to simplify something which can't/shouldn't be simplified but it seems otherwise web developers largely stay ignorant

[sharmi]

A practical security guide for web developers | Hacker News https://news.ycombinator.com/item?id=12140477 DevGuide/02-Policies, Standards and Guidelines.md at master · OWASP/DevGuide https://github.com/OWASP/DevGuide/blob/master/01-Foundations... Security Engineering - A Guide to Building Dependable Distributed Systems http://www.cl.cam.ac.uk/~rja14/book.html Wiley: The Web Application Hacker's Handbook: Finding and Exploiting Security Flaws, 2nd Edition - Dafydd Stuttard, Marcus Pinto http://as.wiley.com/WileyCDA/WileyTitle/productCd-1118026470... LastPass Security Notice | Hacker News https://news.ycombinator.com/item?id=9721212 LastPass Security Notice | The LastPass Blog https://blog.lastpass.com/2015/06/lastpass-security-notice.h... Linux workstation security checklist | Hacker News https://news.ycombinator.com/item?id=10134009 KeePass – questionable security | Hacker News https://news.ycombinator.com/item?id=9727297 SJCL – Stanford JavaScript Crypto Library | Hacker News https://news.ycombinator.com/item?id=13820722 System design primer https://news.ycombinator.com/item?id=13823979 wordpress stripe plugins. how secure are they? The Netflix Tech Blog: Netflix Security Monkey on Google Cloud Platform http://techblog.netflix.com/2017/03/netflix-security-monkey-... Quick Start Guide — security_monkey 0.6.0 documentation https://securitymonkey.readthedocs.io/en/latest/quickstart.h... https://news.ycombinator.com/item?id=13862253 Try to get CS 161 University of Berkerly - Highly recommended esp Prof Wagnor or Prof Weaver http://www-inst.cs.berkeley.edu/~cs161/sp16/ Laptop security https://news.ycombinator.com/item?id=13854625 https://www.oreilly.com/ideas/jessy-irwin-on-making-security...

I am sick today. So I couldn't sort the links or format them. Hope it helps you.