<?xml version="1.0" encoding="utf-8"?>
<feed xml:lang="en-us" xmlns="http://www.w3.org/2005/Atom"><title>Simon Willison's Weblog: rsa2008</title><link href="http://simonwillison.net/" rel="alternate"/><link href="http://simonwillison.net/tags/rsa2008.atom" rel="self"/><id>http://simonwillison.net/</id><updated>2008-04-12T10:52:46+00:00</updated><author><name>Simon Willison</name></author><entry><title>CSRF presentation at RSA 2008</title><link href="https://simonwillison.net/2008/Apr/12/jeremiah/#atom-tag" rel="alternate"/><published>2008-04-12T10:52:46+00:00</published><updated>2008-04-12T10:52:46+00:00</updated><id>https://simonwillison.net/2008/Apr/12/jeremiah/#atom-tag</id><summary type="html">
    
&lt;p&gt;&lt;strong&gt;&lt;a href="http://jeremiahgrossman.blogspot.com/2008/04/csrf-presentation-at-rsa-2008.html"&gt;CSRF presentation at RSA 2008&lt;/a&gt;&lt;/strong&gt;&lt;/p&gt;
It terrifies me how few people understand CSRF, years after it was discovered. I’ll say it again: if you’re a web developer and you don’t know what that acronym means, go spend an hour reading about it—because the chances are your applications are vulnerable.


    &lt;p&gt;Tags: &lt;a href="https://simonwillison.net/tags/csrf"&gt;csrf&lt;/a&gt;, &lt;a href="https://simonwillison.net/tags/jeremiah-grossman"&gt;jeremiah-grossman&lt;/a&gt;, &lt;a href="https://simonwillison.net/tags/rsa"&gt;rsa&lt;/a&gt;, &lt;a href="https://simonwillison.net/tags/rsa2008"&gt;rsa2008&lt;/a&gt;, &lt;a href="https://simonwillison.net/tags/security"&gt;security&lt;/a&gt;&lt;/p&gt;



</summary><category term="csrf"/><category term="jeremiah-grossman"/><category term="rsa"/><category term="rsa2008"/><category term="security"/></entry></feed>