[{"data":1,"prerenderedAt":326},["ShallowReactive",2],{"project-11256364":3},{"id":4,"name":5,"line":6,"line_source":7,"title":8,"url":9,"domain":10,"maker":11,"posted_at":12,"year":13,"points":14,"comments":15,"rank_in_year":16,"shown_in_year":17,"top":18,"tier":19,"category":20,"subcategory":21,"format":22,"keywords":23,"reception":28,"sentiment":29,"stance_mix":30,"scored_comments":35,"aspects":36,"strip":45,"post_text":46,"what":47,"said":77,"maker_in_thread":183,"shape":193,"grid":197,"attempts":288,"same_week":289,"maker_shows":43,"maker_hidden":318,"reader_version":319,"card":320},"11256364","Hacksplaining","Security Training for Developers","title","Show HN: Security Training for Developers","http:\u002F\u002Fhacksplaining.com\u002F","hacksplaining.com","malcolmhere",1457565294,2016,128,35,279,2264,13,"notable","learning_science","security training","web_app",[21,24,25,26,27],"web security","owasp","sql injection","xss","debated",-0.049,{"positive":31,"neutral":32,"mixed":33,"critical":34},6,7,2,8,23,{"execution":37,"docs":39,"idea":41,"design":44},{"positive":38,"critical":33},0,{"positive":38,"critical":40},5,{"positive":42,"critical":43},3,1,{"positive":33,"critical":38},[42,43,38,42,42,43,42,38,43,38,43,42,43,38,38,40,38,38,43,38,38,42,38,40,42,42,38,43,43,42,38,40,40,40,40],null,{"problem":48,"audience":55,"pricing":66,"motivation":70,"time_to_build":46,"stack":74,"openness":75,"stage":76,"team_size":75},{"value":49,"source":50,"evidence":51},"Developers lack quality teaching resources on web security","maker",[52],{"id":53,"by":11,"text":54},"11257400","Author here! I put this together because I was bit frustrated with the quality of teaching resources for my development team. (And I find the OWASP wiki a bit of a mess.) Not…",{"value":56,"source":57,"evidence":58},"Developers, especially web developers","commenter",[59,63],{"id":60,"by":61,"text":62},"11257300","barbs","At a glance this seems to be aimed mostly at web developers. How much of this would be relevant for a native mobile developer like myself?",{"id":64,"by":11,"text":65},"11257403","Give it a try, it's free! We don't cover mobile specifically, but if you are building APIs, much of the advise is useful. And thinks like password management are useful for every…",{"value":67,"source":50,"evidence":68},"Free to try",[69],{"id":64,"by":11,"text":65},{"value":71,"source":50,"evidence":72},"Frustration with quality of teaching resources for their development team",[73],{"id":53,"by":11,"text":54},[],"unknown","launched",{"praise":78,"objections":105,"requests":131,"questions":152,"alternatives":164},[79,94],{"value":80,"source":57,"evidence":81},"Well-designed, entertaining lessons with straightforward explanations",[82,86,90],{"id":83,"by":84,"text":85},"11257087","cpcarey","I'm enjoying this a lot. The explanations are straightforward and the writing and animation style is entertaining. I'm liking the website parodies and the puns in the alt texts.…",{"id":87,"by":88,"text":89},"11256914","cphoover","very well put together",{"id":91,"by":92,"text":93},"11256899","cmdrfred","I second this. Best website I've seen for something like this. This is exactly how I learn.",{"value":95,"source":57,"evidence":96},"Useful starting point for learning security",[97,101],{"id":98,"by":99,"text":100},"11257228","zmitri","Enjoyed this a lot. Great starting point for anyone interested.",{"id":102,"by":103,"text":104},"11256781","SandersAK","Awesome! This is great!",[106,117,124],{"value":107,"source":57,"evidence":108},"Some security advice is wrong, such as SHA-256 for passwords",[109,113],{"id":110,"by":111,"text":112},"11256929","CiPHPerCoder","Went through the SQL injection demo, and it recommends parametrized queries. Excellent. EDIT: Joined with Github, went through the password handling section, then saw this:…",{"id":114,"by":115,"text":116},"11257373","greggh","This is so beautiful that I wish it was good advice, but it's not. Some of these examples actually introduce problems. SHA-256? Really?",{"value":118,"source":57,"evidence":119},"Lacks author credentials and About Us section",[120],{"id":121,"by":122,"text":123},"11258214","ivanhoe","You should add some sort of About Us section because for this type of lessons I really need to know who is behind the site, what are his\u002Fher references & experience. Bad advice…",{"value":125,"source":57,"evidence":126},"Covers only basics that experienced developers know",[127],{"id":128,"by":129,"text":130},"11258284","amgin3","seems like it only explains the very basics that anyone who has been a developer for at least a year would already know.",[132,139,145],{"value":133,"source":57,"evidence":134},"Add HSTS discussion to unencrypted communication lesson",[135],{"id":136,"by":137,"text":138},"11257877","michaelmior","The bit on unencrypted communication should really mention HSTS. If you're connected to a network controlled by an attacker, using TLS on its own doesn't help you. HSTS doesn't…",{"value":140,"source":57,"evidence":141},"Add screenshots to explain the product",[142],{"id":143,"by":11,"text":144},"11260088","Interesting site, never seen that before. It's kind of hard to get a feel for what the product does, though, without any screenshots.",{"value":146,"source":57,"evidence":147},"Remove Chase logo from SQL injection examples",[148],{"id":149,"by":150,"text":151},"11278200","HoyaSaxa","@malcolmhere keep up the great work. I have always found the current resources to be lacking especially in terms of implementation examples. One suggestion would be to remove the…",[153,157],{"value":154,"source":57,"evidence":155},"Is it relevant for native mobile developers?",[156],{"id":60,"by":61,"text":62},{"value":158,"source":57,"evidence":159},"Who is behind the project and what are the long-term goals?",[160],{"id":161,"by":162,"text":163},"11256926","bsrx","Any comments on who put this together, or their long term goals?",[165,172,179],{"value":166,"source":57,"evidence":167},"Secure Code Warrior",[168],{"id":169,"by":170,"text":171},"11258045","dagrz","I feel like Secure Code Warrior has solved this problem much better with gamification. https:\u002F\u002Fwww.securecodewarrior.com\u002F",{"value":173,"source":57,"evidence":174},"Troy Hunt's web security courses",[175],{"id":176,"by":177,"text":178},"11257009","michaelbuckbee","I like Troy Hunt's web security stuff - I'd gotten into it on Pluralsight, but then moved jobs and don't have access. I did find a free course (With SQL Injection, etc.) of his…",{"value":180,"source":50,"evidence":181},"OWASP wiki",[182],{"id":53,"by":11,"text":54},{"comments":31,"answered":184,"key":185},4,[186,189,192],{"id":187,"text":188},"11257526","Oh wow. Would love to know you did that. :-o",{"id":190,"text":191},"11257404","My bad, I've removed the reference to outdated password schemes. :-o",{"id":143,"text":144},{"commenters":194,"max_depth":42,"maker_replies":31,"first_comment_mins":195,"lifespan_hours":196},25,106,89,[198,200,204,206,210,212,215,217,221,223,225,226,228,231,234,238,241,243,245,247,250,252,255,257,260,264,267,269,272,276,278,280,282,284,287],[110,38,42,199,111,38],"project\u002Fmixed\u002Fexecution",[201,43,43,202,203,38],"11257454","project\u002Fcritical\u002Fexecution","TACIXAT",[187,43,38,205,11,43],"maker\u002Fneutral\u002Fnone",[207,43,42,208,209,38],"11257646","maker\u002Fneutral\u002Fexecution","Chris_Newton",[211,43,42,208,203,38],"11259193",[213,43,43,202,214,38],"11257606","johnsonjo",[216,43,42,208,203,38],"11259175",[218,43,38,219,220,38],"11259178","commenter\u002Fneutral\u002Fnone","mason55",[114,33,43,222,115,38],"project\u002Fcritical\u002Fdocs",[190,33,38,224,11,43],"maker\u002Fneutral\u002Fdocs",[121,42,43,222,122,38],[136,184,42,227,137,38],"project\u002Fneutral\u002Fdocs",[229,40,43,222,230,38],"11257244","billyhoffman",[232,40,38,219,233,38],"11258272","Dowwie",[235,40,38,236,237,38],"11258705","commenter\u002Fneutral\u002Fdocs","laumars",[239,31,40,240,233,38],"11258283","project\u002Fpositive\u002Fidea",[169,32,38,242,170,38],"other\u002Fneutral\u002Fidea",[143,32,38,244,11,43],"project\u002Fcritical\u002Fdesign",[246,34,43,222,137,38],"11257903",[248,34,38,219,249,38],"11258326","garrettgrimsley",[251,34,38,224,11,43],"11260112",[60,253,42,254,61,38],9,"project\u002Fneutral\u002Fidea",[64,253,38,256,11,43],"maker\u002Fpositive\u002Fidea",[83,258,40,259,84,38],10,"project\u002Fpositive\u002Fdesign",[261,262,42,263,162,38],"11256905",11,"project\u002Fneutral\u002Fnone",[149,265,42,266,150,38],12,"project\u002Fmixed\u002Fdesign",[176,18,38,268,177,38],"other\u002Fneutral\u002Fnone",[128,270,43,271,129,38],14,"project\u002Fcritical\u002Fidea",[273,274,43,222,275,38],"11261322",15,"reledi",[161,277,42,205,162,38],16,[53,277,38,279,11,43],"maker\u002Fneutral\u002Fidea",[98,281,40,240,99,38],17,[87,283,40,259,88,38],18,[102,285,40,286,103,38],19,"project\u002Fpositive\u002Fnone",[91,285,40,240,92,38],[],[290,295,300,304,309,313],{"id":291,"name":292,"points":293,"category":294},"11238099","status page",248,"infrastructure",{"id":296,"name":297,"points":298,"category":299},"11218844","Flat",207,"creative",{"id":301,"name":302,"points":303,"category":294},"11224608","Sway",163,{"id":305,"name":306,"points":307,"category":308},"11228443","CodeCoach",131,"dev_tools",{"id":310,"name":311,"points":312,"category":308},"11252253","Marginotes",111,{"id":314,"name":315,"points":316,"category":317},"11234702","SSHTron",104,"games",false,"v2",{"id":321,"name":5,"line":6,"ai":318,"cat":20,"year":13,"points":14,"comments":15,"rec":28,"s":322,"top":18,"kw":323,"maker":11,"domain":10,"tier":19,"attempts":38,"strip":324,"url":9,"mix":325,"praise":80,"objection":107,"sub":21},11256364,-0.05,[21,24,25,26,27],"31033130101310050010030533011305555",[31,32,33,34],1794036541930]