Tech News
Passkeys criticised for user control limitations in FIDO Alliance standard
A report argues that the passkey authentication mechanism restricts user agency compared to traditional passwords or physical security keys.
web security
Everything Vector Bulletin has reported about web security: 5 stories, newest first. Part of our Vulnerabilities coverage.
Privacy & Policy
HTTP vs HTTPS: How to Choose the Right Protocol for Your Data
Using HTTP for simple requests can reduce server load, but mixing protocols exposes session tokens to interception by network-level adversaries.
Vulnerabilities
How Web Application Firewalls Work: The Inspection Pipeline
Web application firewalls inspect traffic at the application layer, allowing them to block logic-based attacks that network devices miss entirely.
Vulnerabilities
Insecure Direct Object References (IDOR): Fixing Broken Access Control
IDOR persists not because developers ignore access rules, but because they assume the user interface hides the underlying data structure from the client.
Vulnerabilities
Early Warning Signs of Cross-Site Scripting in Web Apps
Script execution errors and subtle UI shifts often precede data loss, revealing cross-site scripting flaws before external scanners detect them.