New answers tagged software
Personally, I found OpenSAMM to be a good resource, but only after you have something setup. It is a maturity model, which is basically a tool used to determine how well you do something. In other words, it has a focus on metrics and reporting. Don't get me wrong, I think there is a lot of good information in that document, but more of a phase 2. I have ...
The idea behind Secure Development methodologies are, that you think about and address security concerns earlier in the project life-cycle I would recommend using CLASP (Comprehensive, Lightweight Application Security Process) to get started on your current development methodology.
OpenSAMM with goals set to acheive certain ASVS levels per project. Then, give back to the OWASP community.
With old Square readers that's rather trivial: Weekend Project: Hacking the Square Reader - you would still need an intermediary app to grab the data before forwarding it to a web form, tho, or try to perform the same kind of audio capture and processing within a browser using getUserMedia or Web Audio API. The new ones, until somebody manages to snatch the ...
Of course it is. I have no doubt that there are vulnerabilities in Steam. Why would you think game developers are magically capable of writing secure C/C++ code, when no mainstream OS developers have been able to do so, despite that they are largely security focused? I used to make cheats for Crysis, and accidentally stumbled across a format string ...
Top 50 recent answers are included