Hacker News Reader

shehackspurpleon (Gated) Secure Coding AI Prompt Library

Free AI prompt library, gated though

shehackspurpleon The Psychology of Bad Code Part 3 – Vibe Coding

This seems like rational behavior for a high-pressure situation. You might do this. I might do this too. But it causes risk.

shehackspurpleon Secure Coding Peitition for the Government of Canada

Tanya Janca | Shehackspurple @shehackspurple · Jan 27 I’ve been working toward this for years, and it finally happened.

Canada now has a parliamentary petition to require secure coding in federal software. If you care about cybersecurity, public safety, and better government tech, please sign.

shehackspurpleon The Psychology of Bad Code Part 2 – Building Systems That Support Secure Devs

Why can’t people just “do the right thing” all the time? Can’t they just try hard, have some willpower, and behave perfectly? I don’t know about you, but I am certainly not perfect all the time. I’m in a rush. I skip steps. It compiles, so I commit. We are not robots, we are human beings, and we have a lot going on. But…. There’s more.

shehackspurpleon "It Works on My Machine": The Psychology of Bad Code

What if insecure code is not a result of laziness, a lack of knowledge, or malice? What if software developers are doing their best, but they have been set up to fail?

shehackspurpleon Malicious packages in NPM evade dependency detection through invisible URL links

More terrifying supply chain attacks against developers

shehackspurpleon Secure Coding in JavaScript

Over 30 practical tips for writing more secure JavaScript!

shehackspurpleon What Is Threat Modeling?

Threat modeling is really just a fancy way of saying: “Let’s think about what could go wrong with our software in advance, so we can stop it before it happens.”

shehackspurpleon Petition to Adopt a Federal Secure Coding Policy for Canada

Canada’s digital software is critical infrastructure. It runs our country, and we depend upon it. Let's protect it with a secure coding policy, now.

shehackspurpleon Petition for a secure coding policy for Canada

I've created a petition to try to get Canada to adopt a government-wide secure coding policy. If you are Canadian, please consider signing.

shehackspurpleon Free Secure Coding Guidelines (Language-Agnostic, Actionable, Achievable

I just published a 9-page secure coding guideline that’s free to download when you join my newsletter. It’s based on my book Alice and Bob Learn Secure Coding, but distilled down into practical, achievable advice.

Language and framework agnostic

Focused on real-world, actionable practices

Designed to be clear, not overwhelming

My goal was to make something that developers can actually use, not just read once and forget. I’d love feedback from the HN community—what's missing? What’s useful?

shehackspurpleon Free Course on Security Headers, for Developers

This is a free course about how to implement security headers in Web Apps and why they are so incredibly important!

shehackspurpleon Ask HN: What is the best DAST/web app scanner for single page web apps?

Thanks for all the details! Anyone else?

shehackspurpleon 1Password Has Raised $620M

Congratulations 1Password! AMAZING