Get the latest tech news
Nontraditional Red Teams
Written pieces, talks, and other bits by Zach Holman.
If I recall, the GitHub thread on it was a couple weeks old, and Cameron McEfee put out a final “I’m going to send this to the printers at the end of the day, so speak now or forever hold your peace!” Some few-dozen people had seen it at this point so it probably was fine. Look: I have a lot to say about sessions and signing in to a product, but suffice to say: there will be password managers for the foreseeable future and holy shit how do you all get the simplest sign-in form so wrong all the time? The main problem is that when you’re building a new feature you have so many other things to worry about… which is why having a kind of “red team” can be so helpful, to come at it with fresh, antagonistic eyes.
Or read this on Hacker News