Simon Willison’s Weblog

Designing for a security breach

User account breaches are inevitable. We should take that in to account when designing our applications. [... 545 words]

9:29 pm / 30th September 2007 / / accounts, csrf, designingforabreach, openid, phishing, privacy, security, xss