SAsarciszewski·Oct 7, 2015
I maintain (curate, really) a list of resources on Github. Most of the content on the list was suggested by other folks in the community: https://github.com/paragonie/awesome-appsec
In Ask HN: Get into computer securityparagonie
awesome-appsec
PHP2015–2020
paragonie / awesome-appsec
awesome-appsec
A curated list of resources for learning about application security
8Distinct people
22Mentions
0Explicit recommenders
7.1KGitHub stars
What to know before exploring
What it is
A curated list of resources for learning about application security
GitHub
Where it is used
No documented product use has been verified yet.
What people are saying
No recommendation phrase was found in the indexed comments.
No classified warning is attached to this page. Read the discussions before treating silence as approval.
Also in these discussions
No other repository is repeatedly linked in the same discussions.
This week on Hacker News
Nov 8–Nov 15 UTC · Direct repository links and separately labeled related project stories. Indexed through 11/15/2026, 9:01:12 PM UTC.
No direct repository links were found in the indexed HN discussions over the past seven days. Older discussions are available below.
Mentions over time
HN mentions by year22 dated mentions
Observed mentions: 2015-05-02 14:44:27 UTC to 2020-07-23 05:45:13 UTC.
Counts come from the repository’s dated source evidence. Index cutoff: 2026-11-02 08:16:59 UTC.
View mention counts and date ranges
| Period | Start (UTC) | End (exclusive, UTC) | Mentions | Submissions | Comments |
|---|---|---|---|---|---|
| 2015 | 2015-01-01 00:00:00 UTC | 2016-01-01 00:00:00 UTC | 14 | 4 | 10 |
| 2016 | 2016-01-01 00:00:00 UTC | 2017-01-01 00:00:00 UTC | 7 | 1 | 6 |
| 2017 | 2017-01-01 00:00:00 UTC | 2018-01-01 00:00:00 UTC | 0 | 0 | 0 |
| 2018 | 2018-01-01 00:00:00 UTC | 2019-01-01 00:00:00 UTC | 0 | 0 | 0 |
| 2019 | 2019-01-01 00:00:00 UTC | 2020-01-01 00:00:00 UTC | 0 | 0 | 0 |
| 2020 | 2020-01-01 00:00:00 UTC | 2021-01-01 00:00:00 UTC | 1 | 0 | 1 |
What Hacker News says
14 sourcesWhoa, awesome! And it's online for free too.
I've looked at the first chapter so far and I'm hooked.
I'm adding this to https://github.com/paragonie/awesome-appsec :D
In Basic Cryptography Concepts for DevelopersShow HN: Learn how to develop secure software (Curated List)
1 points · Open discussionStart here for some reading material: https://github.com/paragonie/awesome-appsec
Get to know the static analysis tools out there, check out OWASP (for web apps), and learn threat modeling. Application security isn't a one-time thing, it's something that is constantly evolving and changing. Learn the processes, then go into the details from there into your chosen technology stack.
I've also read this book, which is good but doesn't go very in deep with the technical stuff: http://www.amazon.com/Enterprise-Software-Security-Disciplin...
Application security isn't just about programming either. It entails elements of risk management, architecture security, configuration management and many other disciplines to be performed effectively.
In How do you program securely?Curated Application Security Reading List
6 points · Open discussionAwesome! At the end of the document there is a very interesting link with a lots of security resources: https://github.com/paragonie/awesome-appsec
In A Gentle Introduction to Application Securityhttps://github.com/paragonie/awesome-appsec#c
https://www.cs.fsu.edu/~redwood/OffensiveComputerSecurity/
Not many.
If anyone has any resources to suggest, we'd like to increase our section in the Awesome Appsec list for C programming too. :)
In Ask HN: Resources on secure coding in C?We have a curated list here, which has all you want to know and then some:
https://github.com/paragonie/awesome-appsec
Our blog also have a bunch of posts about building secure web applications in PHP:
https://paragonie.com/blog/category/security-engineering
I hope either one helps.
In Ask HN: Best resources on webapp security?If you are a business, then definitely yes. But the average self-taught developer will not have the resources available to hire a security consultant.
Instead of throwing money at the problem, you can instead choose to teach yourself more about the subject. We maintain a curated list on Github for people interested in learning about application security for this very reason.
https://github.com/paragonie/awesome-appsec
But if you're a company and your operating budget is in the millions of dollars hire a security consultant!
In Things to Know When Making a Web Application in 2015Yeah, tptacek's Amazon recommended reading list was merged in last month: https://github.com/paragonie/awesome-appsec/commit/097a1ddba...
In Show HN: A Curated List for Application SecurityShow HN: A Curated List for Application Security
21 points · Open discussionhttp://cryptopals.com - This is probably the best place to start.
For general application and network security (not specifically crypto), we (the company I work for) are trying to make this a great resource for self-education:
https://github.com/paragonie/awesome-appsec
In Ask HN: Build a curriculum to meet current US govt threat against cryptoAre we allowed to suggest our own blogs? ;)
Either way:
https://github.com/paragonie/awesome-appsec - Everything on this list is at least worth consideration
In Ask HN: What programming blogs do you recommend to read regularly and why?Show HN: A curated list for learning about application security
7 points · Open discussion