Ask HN: Is there a good security primer for a non-security programmer?

22 points by daveed 4y ago ↗ HN

^ Basically, I didn't take any security-adjacent classes in school, and never had to consider these things for my previous work. I've heard about things like web cache poisoning but never thought closely about them. Is there a good place for me to get a primer?

7 comments

[ 3.1 ms ] story [ 32.7 ms ] thread

ericalexander0 4y ago ↗

https://securecodingdojo.owasp.org/public/index.html

joshcanhelp 4y ago ↗

I’ve scanned this and have it in my reading list:

https://github.com/veeral-patel/how-to-secure-anything

I’ve been working with a very competent security team for several years and there were a lot of familiar terms and techniques.

giantg2 4y ago ↗

NIST has a bunch of resources. Just search "NIST intro to security".

greenie_beans 4y ago ↗

good course for web developers: https://www.pluralsight.com/courses/hack-yourself-first

mooreds 4y ago ↗

If you're into dead tree formats, I suggest this book: https://www.cl.cam.ac.uk/~rja14/book.html

It's big but covers a lot of things and is pretty accessible.

gabrielsroka 4y ago ↗

https://web.stanford.edu/class/cs253/ by @feross

absove 4y ago ↗

Thanks this looks interesting, there is a youtube playlist with recordings of the lecture too https://www.youtube.com/playlist?list=PL1y1iaEtjSYiiSGVlL1cH...