Threat Modelling
Threat Modelling
The basics of a threat model, with fun.
Security concepts, hand-drawn on one page each. JWT, CORS, OAuth, XSS and 65+ more, free to read.
Rohit moved on X: @sec_r0 is now @who_rsehgal
Multi-page deep dives you keep. Buy one, or get them all with the membership.
The basics of a threat model, with fun.
The most notorious security issue, and how the bait works.
The stack behind modern application runtimes.
The browser's security model, origin by origin.
Cross-site request forgery, end to end.
The language of the web.
Security Assertion Markup Language.
Never trust user data.
Cross-site scripting.
New posters land in the Security Zines newsletter on Substack. Free, no spam.