Grant Watson’s links for 2008-09-25

by grant on September 25, 2008

Coding Horror: Cross-Site Request Forgeries and You

understand how cross-site request forgery, also known as XSRF or CSRF, works. It's not complicated, necessarily, but it's more.. subtle.. than XSS.

(tags: security programming software development web)

Leave a Comment

Previous post: Grant Watson’s links for 2008-09-24

Next post: Grant Watson’s links for 2008-10-15

Bookmarks
- Tiny apartment shows the value of a good fit
  "I tend to like things in their place."
- Radical Opacity
  Christopher Poole created 4chan, an online community where people are free to be wrong. Now big investors want a piece of his ideas.
- Arithmetic and Butter
  Perhaps all scientists hope for accidental discoveries. I seem to be the first to use a research strategy that relies on accidental discoveries.
- SWFTOOLS
  SWFTools is a collection of utilities for working with Adobe Flash files (SWF files). The tool collection includes programs for reading SWF files, combining them, and creating them from other content (like images, sound files, videos or sourcecode). SWFTools is released under the GPL.
- Getting in (and Out of) Line - NYTimes.com
  As with lines over scrums, markets have much to offer over lines. They are more efficient. They work well for those fortunate enough to have more disposable money than free time. They mop up much of the daily agony of waiting.