CICiPHPerCoder·Feb 1, 2017
SEEKING WORK | REMOTE | Orlando, FL
Need to shore up the security of your web-based software? Need someone who can work within real-world security requirements?
PHP powers over 82% of websites on the Internet today, though it's often shunned by other information security professionals. For most companies, rewriting everything from scratch in a different language is not a viable strategy for minimizing the risk to themselves or their customers.
Is it possible for software written in PHP to be secure (in spite of what other security experts say)? Yes. If you still have doubts, get in touch.
My research and professional background mostly consists of software development, web application security, applied cryptography, code auditing, and penetration testing.
You may find much of my recent open source security research here: https://paragonie.
Read the rest
com/security/advisories
A sample of PHP projects I've developed or contributed to significantly:
- random_compat - PHP 5 polyfill for the CSPRNG functions introduced in PHP 7; this security library has over 19 million installs according to Packagist - https://github.com/paragonie/random_compat
- sodium_compat - A pure-PHP implementation of much of modern elliptic curve cryptography and (AEAD) symmetric encryption - https://github.com/paragonie/sodium_compat
- CMS Airship - A secure-by-default content management system - https://paragonie.com/project/airship
- CSP-Builder - A developer utility to promote the adoption of Content-Security-Policy headers - https://github.com/paragonie/csp-builder
I can be reached via https://paragonie.com/contact or email: security@paragonie.com