2017
How to perform and mitigate a WordPress session donation attack
WordPress doesn’t use a nonce for the login form, which opens up for you to perform a WordPress session donation attack.
Section
Posts
-
-
2017
Immutable assets with unique URLs in WordPress for enqueued JS and CSS files
If you’re utilizing the browser cache correctly, you’ll gain huge performance benefits for your users, as well as save bandwidth and server capacity which equals to saving money. To do this right, you must create unique URLs for all versions of your resources, and tell them to never ask for the content again by telling the browsers that the assets are immutable resources.
-
2017
Secure messaging on your phone with the Signal app
I’m running a series of posts on some of the tools I use to stay a little safer and protect my privacy online. Here’s how you can get much better secure messaging on your phone using the Signal app.
-
2017
How CloudFlare handled CloudBleed
Tavis Ormandy from Google’s Project Zero contacted Cloudflare to report a security problem with their service. It turned out that in some unusual circumstances, they would bleed memory that contained private information.
-
2017
Giving users a helping hand when authorizing them in WordPress
Inspired by how Facebook assists their users when they log in, I decided to implement something like the same for WordPress.
-
2017
Tracking visitors with adblockers
More and more users are using adblockers or surfing the web via private browsing with tracking protection. But this also affects your web analytics, as the blockers also will block analytics tracking – not only third party services like Google Analytics, but also self-hosted solutions like Piwik.
-
2017
Move your WordPress site from non-www to www domain
So, you’ve launched your WordPress site on a non-www domain, like example.com, but since then found out that running it on on www, like www.example.com, is better and want to move? You’re in luck, because it is really easy.
-
2017
To www or not to www – Should you use www or not in your domain?
For 20 years or so, there has been the debate over whether you should use www or not in your web site’s canonical hostname. So should you use www or not?
-
2017
Keep the internet healthy – Internet for people, not profit.
“ [A healthy Internet needs all of us](https://www.mozilla.org/en-US/internet-health/)”, Mozilla states. And they’re right.
-
2017
Encrypt and decrypt a file using SSH keys
If you have someone’s public SSH key, you can use OpenSSL to safely encrypt a file and send it to them over an insecure connection (i.e. the internet). They can then use their private key to decrypt the file you sent.