Security

Building AstonCV: A Full-Stack CV Database with PHP, MySQL and Zero Frameworks

How I built a full-stack CV database website from scratch using pure PHP 8.2 and MySQL for a university module, with eleven security measures, PDF export via mPDF and a complete UI redesign across four versions.

Security Gaps in Consumer IoT: A Survey of Common Attack Vectors

A technical review of the most common vulnerabilities in consumer IoT devices: hardcoded credentials, unencrypted traffic, insufficient update mechanisms and insecure interfaces, with reference to real incidents, CVEs and regulatory standards.

Security

TLS 1.3 completes a handshake in one round trip instead of two

Security

CSRF protection with a double-submit cookie does not require server-side session storage

Security

AES-GCM is authenticated encryption; AES-CBC is not: using CBC without a MAC is dangerous

C

A format string vulnerability in C lets an attacker read or write arbitrary memory