└── README.md /README.md: -------------------------------------------------------------------------------- 1 | # Security Resources 2 | 3 | ## [Talk Slides](https://drive.google.com/file/d/0Bx6MRn1n3ykwRHk2d0JaVnlObEE/view?usp=sharing) 4 | 5 | ## Links from talk 6 | 7 | * **[RIP LivingSocial: The fast rise and slow demise of a daily deals company (The Washington Post)](https://www.washingtonpost.com/news/innovations/wp/2017/02/25/rip-livingsocial-the-fast-rise-and-slow-demise-of-a-daily-deals-company)** 8 | 9 | * **[No Business Too Small to Be Hacked (The New York Times)](https://www.nytimes.com/2016/01/14/business/smallbusiness/no-business-too-small-to-be-hacked.html)** 10 | 11 | * **[Strong Parameters](https://github.com/rails/strong_parameters)** 12 | 13 | * **[Mass assignment in Django](https://gist.github.com/jsocol/3217262)** 14 | 15 | ## General Information 16 | 17 | * **[Open Web Application Security Project](https://www.owasp.org/index.php/Main_Page)** 18 | A non-profit organization dedicated to improving software security. Their page has lots of information on different types of vulnerabilities and exploits. 19 | 20 | * **[Krebs on Security](https://krebsonsecurity.com/)** 21 | Blog on Internet security. 22 | 23 | * **[Have I Been Pwned?](https://haveibeenpwned.com/)** 24 | Searchable database where you can enter an email and see what hacks have affected it. Also includes an API for getting information on breached accounts and sites. 25 | 26 | * **[Wireshark](https://www.wireshark.org/)** 27 | An analysis tool for seeing what information is being sent on your computer's network. 28 | 29 | ## Tools for Developers 30 | 31 | * **[How to Deploy HTTPS Correctly](https://www.eff.org/https-everywhere/deploying-https)** 32 | Electronic Frontier Foundation's guide for website operators on how to properly implement HTTPS (the secured version of HTTP) on their sites 33 | 34 | * **[Brakeman](http://brakemanscanner.org/)** 35 | A vulnerability scanner for Rails applications 36 | 37 | * **[bcrypt-ruby gem](https://github.com/codahale/bcrypt-ruby)** 38 | Ruby gem for encrypting passwords 39 | 40 | * **[OWASP Python Security Project](http://www.pythonsecurity.org/)** 41 | Project devoted to make Python more resilient to possible security exploits 42 | 43 | * **[Django documentation on cryptographic signing](https://docs.djangoproject.com/en/1.10/topics/signing/)** 44 | 45 | * **[Ruby on Rails Security Guide](http://guides.rubyonrails.org/security.html)** 46 | 47 | * **[Security in Django](https://docs.djangoproject.com/en/1.11/topics/security/)** 48 | --------------------------------------------------------------------------------