August 7, 2015 by P.I.E. Staff

A human-readable overview of commonly misused cryptography terms and fundamental concepts.

July 19, 2015 by P.I.E. Staff

Some useful things that can be built with a CSPRNG.

July 6, 2015 by P.I.E. Staff

A lesson on cryptographically secure pseudorandom number generators in PHP, and how to generate random integers and strings from a high quality entropy source like /dev/urandom to generate secure random passwords in PHP.

June 27, 2015 by P.I.E. Staff

What is the potential impact of a given vulnerability? This isn't easy to answer.

June 16, 2015 by P.I.E. Staff

Although Cross-Site Scripting is one of the most common vulnerabilities on the Internet, it remains an unsolved problem (unlike SQL Injection).

June 15, 2015 by P.I.E. Staff

There are a lot of ways having an online presence can be used against you, and the most basic security decisions are not technical.

May 26, 2015 by P.I.E. Staff

It's 2015; there's no excuse for writing code vulnerable to SQL Injection any more

May 14, 2015 by P.I.E. Staff

Alternative title: "Libmcrypt considered harmful." You should use libsodium if you can, or OpenSSL if you can't.

May 12, 2015 by P.I.E. Staff

We're maintaining a curated appsec reading list on Github -- check it out.

May 5, 2015 by P.I.E. Staff

A developer's short guide to encryption, authentication, and authenticated encryption with examples in PHP