Want More Secure Software? Start Recognizing Security-Skilled Developers | Read breaking news and high quality articles on cyber security, hacking, information security, computer security, cybercrime, ethical hacking and technology.

Obfuscated code tricks in JS and CSS

Obfuscated code tricks in Javascript

Use Unicode and bidi to create lookalike function names.

Written and performed by Forrest Brazeal (x3)

New tech songs drop first on Twitter: https://twitter.com/forrestbrazeal

Lyrics:
VERSE 1
My day was going great;
Just pushed a code update;
But then the pagers started humming:
Oops, did I just delete
Half the production fleet?
That sinking feeling's coming, from deep within my plumbing

PRECHORUS
Now my life is flashin',
Hope my boss will show compassion
And I really, really need someone to say...

CHORUS
Hey hey hey, it's gonna be okay.
You didn't just set fire to your resume.
This happens to the best,
Try not to get too stressed,
It'll be an awesome story someday.

VERSE 2

I tweaked a small config,
Turns out that it was big
And now my app has been beheaded;
When I do something wrong,
I fear I don't belong,
How can the world forget it, we're trending now on Reddit.

PRECHORUS 2
Oh, mistakes will find you
But you've got a team behind you
So fix the process, yes, but don't dismay:

CHORUS 2
Hey hey hey, it's gonna be okay.
We'll do a full postmortem some other day.
It was a swing and miss,
We're gonna learn from this
And we'll all be better engineers, like,
 
BREAK
Look, here's what you need to know when something gets destroyed
If there's negligence or malice then you shouldn't be employed
But if a human is assumin' then the problem is the system;
It's gut-wrenching, butt-clenching, but you work with 'em.
It can happen to a junior, happen to a senior.
Just because you caused a little pause doesn't mean you're
Incompetent, it means you're doing work with real effect.
It's a scar of battle, baby. That'll earn you some respect.

PRECHORUS 3
And we all have been there
Made a slip or two or ten there;
So we try to do a blameless RCA...

CHORUS 3
Hey hey hey, it's gonna be okay.
You will still be here when this blows away.
We've all screwed something up,
So welcome to the club.
We would love to hear your story someday.

Tink is a multi-language, cross-platform, open source library that provides cryptographic APIs that are secure, easy to use correctly, and hard(er) to misuse. - GitHub - google/tink: Tink is a mult...

Rust developers have repeatedly raised concerned about a privacy issue over the last few years. Rust has rapidly gained momentum among developers, for its focus on performance, safety, safe concurrency, and for having a similar syntax to C++. However, developers have been bothered by their Rust production binaries leaking usernames.

Connects to a talk video at https://vimeo.com/71278954 Uncaptioned, unfortunately.

Code depends on English—for reasons that are entirely unnecessary at a technical level.

The Center for Data Innovation spoke with Chris Mentzel, program director for the Data-Driven Discovery Initiative at the Gordon and Betty Moore Foundation [...]

A recent study shows that if you aren’t prepared to ask or pay for security, you probably won’t get it.

At the end of this post is an audacious idea about the present and future of software development. In the middle are points about mental models: how important and how difficult they are. But first, a story of the origins of Opera.

If you write code for a living, there’s a chance that at some point in your career, someone will ask you to code something a little deceitful – if not outright unethical. This happened to me back in the year 2000. And it’s something I’ll never be able