The parfait approach to cyber defense: It's all about the layers | VentureBeat | Security | by Israel Levy, Bufferzone: "And as security consulting firm Security Compass wrote in early 2014, for all of its advantages, HTML5 isn’t bulletproof and shouldn’t be viewed as such: ‘HTML5 applications regardless of deployment can still be plagued with the same vulnerabilities as web applications (SQL injection, cross-site scripting, weak encryption, business logic attacks, etc.).’"

The secure web browser of the future will have no JavaScript and no Flash. I use Little Snitch extensively and it's amazing how many web pages (read: advertisements) open raw socket connections to remote servers.

Labels: security flaw