Hacksplaining
Learning and science
security training
SHOW HN2016
How HN took it
6 positive, 7 neutral or asking, 2 mixed, 8 critical, out of 23 comments about the project. Thread score -0.05.
Docs: 0 for, 5 againstIdea: 3 for, 1 againstExecution: 0 for, 2 againstDesign: 2 for, 0 against
The thread, comment by comment
Each row is a top-level comment and its replies, in HN's order. Select a cell to open that comment on HN.
positive neutral or mixed critical about another commenter or something else the maker
What HN said
What people liked
Well-designed, entertaining lessons with straightforward explanations
From 3 comments
I'm enjoying this a lot. The explanations are straightforward and the writing and animation style is entertaining. I'm liking the website parodies and the puns in the alt texts.…
cpcarey on HNvery well put together
cphoover on HNI second this. Best website I've seen for something like this. This is exactly how I learn.
cmdrfred on HN
Useful starting point for learning security
From 2 comments
Enjoyed this a lot. Great starting point for anyone interested.
zmitri on HNAwesome! This is great!
SandersAK on HN
Objections
Some security advice is wrong, such as SHA-256 for passwords
From 2 comments
Went through the SQL injection demo, and it recommends parametrized queries. Excellent. EDIT: Joined with Github, went through the password handling section, then saw this:…
CiPHPerCoder on HNThis is so beautiful that I wish it was good advice, but it's not. Some of these examples actually introduce problems. SHA-256? Really?
greggh on HN
Lacks author credentials and About Us section
From 1 comment
You should add some sort of About Us section because for this type of lessons I really need to know who is behind the site, what are his/her references & experience. Bad advice…
ivanhoe on HN
Covers only basics that experienced developers know
From 1 comment
seems like it only explains the very basics that anyone who has been a developer for at least a year would already know.
amgin3 on HN
Requests
Add HSTS discussion to unencrypted communication lesson
From 1 comment
The bit on unencrypted communication should really mention HSTS. If you're connected to a network controlled by an attacker, using TLS on its own doesn't help you. HSTS doesn't…
michaelmior on HN
Add screenshots to explain the product
From 1 comment
Interesting site, never seen that before. It's kind of hard to get a feel for what the product does, though, without any screenshots.
malcolmhere on HN
Remove Chase logo from SQL injection examples
From 1 comment
@malcolmhere keep up the great work. I have always found the current resources to be lacking especially in terms of implementation examples. One suggestion would be to remove the…
HoyaSaxa on HN
Questions
Is it relevant for native mobile developers?
From 1 comment
At a glance this seems to be aimed mostly at web developers. How much of this would be relevant for a native mobile developer like myself?
barbs on HN
Who is behind the project and what are the long-term goals?
From 1 comment
Any comments on who put this together, or their long term goals?
bsrx on HN
Alternatives named
Secure Code Warrior
From 1 comment
I feel like Secure Code Warrior has solved this problem much better with gamification. https://www.securecodewarrior.com/
dagrz on HN
Troy Hunt's web security courses
From 1 comment
I like Troy Hunt's web security stuff - I'd gotten into it on Pluralsight, but then moved jobs and don't have access. I did find a free course (With SQL Injection, etc.) of his…
michaelbuckbee on HN
OWASP wiki
From 1 comment
Author here! I put this together because I was bit frustrated with the quality of teaching resources for my development team. (And I find the OWASP wiki a bit of a mess.) Not…
malcolmhere on HN