WebCookies.org @webcookies@botsin.space

Trusted Types are an emerging DOM API specification that attempt to prevent a whole range of attacks resulting from web browsers being tricked into execution of untrusted content, for example XSS.

https://webcookies.org/articles/88/practical-trusted-types-implementation

Kudos to Disqus for actually respecting DNT signal from browser

Experiencing issues with the scanner workers - all tasks are scheduled but not actually executed. Should be resolved in the next 30 mins.

Migrating your PostgreSQL to SCRAM-SHA-256 authentication

https://webcookies.org/articles/85/migrating-your-postgresql-to-scram-sha-256-authentication?1

#postgresql #security #authentication

We have just completed migration of the whole service to a new server in Manchester hosted by @faelix Both servers are operational as long as DNS does not propagate fully, please ping us if you notice any issues https://webcookies.org/contact/

Using Wazuh for DNS and DNSSEC checks

https://webcookies.org/articles/52/using-wazuh-for-dns-and-dnssec-checks?c

Our experience with less popular #Django exceptions caused by database index corruption

https://webcookies.org/articles/51/django-get_or_create-integrity-or-duplicate-entry-errors

We had a bit of an issue with the database integrity which resulted in many new scans getting queued rather than immediately passed for scanning. We identified the cause of the problem and working on fixing it. No scan data will be lost and all queued scans were eventually restarted.

Using Wazuh for website availability alerts

https://webcookies.org/articles/49/using-wazuh-for-website-availability-alerts

#wazuh #security

Easy nonce-based Content-Security-Policy with Nginx

https://webcookies.org/articles/48/easy-nonce-based-content-security-policy-with-nginx?c

#nginx #security

We have partnered with Colony.io, a platform for community collaboration, to allow our community not only contribute to the knowledge base but also get rewarded for it.

https://webcookies.org/articles/47/webcookiesorg-partners-with-colonyio #Ethereum #privacy #dweb

Preparing for a major upgrade this weekend. The service may go offline at moments or experience delays in scans.

A new Internet draft by Google's security architect Mike West proposes to replace current HTTP cookies RFC 6295 with a new state mechanism that can be only described as "return to the roots. https://webcookies.org/articles/43/http-state-tokens #privacy #http #cookies

What exactly is a "permanent cookie"? https://webcookies.org/articles/41/what-exactly-is-a-permanent-cookie #http #cookie #privacy #gdpr