new security resource

mattmakai · mattmakai · commit a79429670855 · 2015-11-08T11:25:44.000-08:00
diff --git a/all.html b/all.html
@@ -2981,6 +2981,12 @@ <h2>General security resources</h2>
 <p><a href="https://www.moses.io/2015/09/tls-and-server-hardening-post-nginx/">TLS and Nginx Web Server Hardening</a>
   explains a secure server configuration for the Nginx web server.</p>
 </li>
+<li>
+<p><a href="http://arstechnica.com/security/2015/10/new-attacks-on-network-time-protocol-can-defeat-https-and-create-chaos/">Timing attacks are one form of vulnerability</a> 
+  that can be used to defeat HTTPS in certain configurations. Understanding
+  how those attacks work is important in keeping your users' connections
+  secure.</p>
+</li>
 </ul>
 <h2>Web security learning checklist</h2>
 <ol>
diff --git a/feeds/all.atom.xml b/feeds/all.atom.xml
@@ -1,2 +1,2 @@
 <?xml version="1.0" encoding="utf-8"?>
-<feed xmlns="http://www.w3.org/2005/Atom"><title>Matt Makai</title><link href="http://www.fullstackpython.com/" rel="alternate"></link><link href="http://www.fullstackpython.com/feeds/all.atom.xml" rel="self"></link><id>http://www.fullstackpython.com/</id><updated>2015-11-07T15:14:47Z</updated></feed>
+<feed xmlns="http://www.w3.org/2005/Atom"><title>Matt Makai</title><link href="http://www.fullstackpython.com/" rel="alternate"></link><link href="http://www.fullstackpython.com/feeds/all.atom.xml" rel="self"></link><id>http://www.fullstackpython.com/</id><updated>2015-11-08T11:25:12Z</updated></feed>
diff --git a/source/content/pages/04-web-development/15-web-app-security.markdown b/source/content/pages/04-web-development/15-web-app-security.markdown
@@ -129,6 +129,11 @@ securing Linux distributions.
 * [TLS and Nginx Web Server Hardening](https://www.moses.io/2015/09/tls-and-server-hardening-post-nginx/)
   explains a secure server configuration for the Nginx web server.
 
+* [Timing attacks are one form of vulnerability](http://arstechnica.com/security/2015/10/new-attacks-on-network-time-protocol-can-defeat-https-and-create-chaos/) 
+  that can be used to defeat HTTPS in certain configurations. Understanding
+  how those attacks work is important in keeping your users' connections
+  secure.
+
 
 ## Web security learning checklist
 1. Read and understand the major web application security flaws that are
diff --git a/web-application-security.html b/web-application-security.html
@@ -185,6 +185,12 @@ <h2>General security resources</h2>
 <p><a href="https://www.moses.io/2015/09/tls-and-server-hardening-post-nginx/">TLS and Nginx Web Server Hardening</a>
   explains a secure server configuration for the Nginx web server.</p>
 </li>
+<li>
+<p><a href="http://arstechnica.com/security/2015/10/new-attacks-on-network-time-protocol-can-defeat-https-and-create-chaos/">Timing attacks are one form of vulnerability</a> 
+  that can be used to defeat HTTPS in certain configurations. Understanding
+  how those attacks work is important in keeping your users' connections
+  secure.</p>
+</li>
 </ul>
 <h2>Web security learning checklist</h2>
 <ol>

Original file line number	Diff line number	Diff line change
`@@ -1,2 +1,2 @@`
`1`	`1`	`<?xml version="1.0" encoding="utf-8"?>`
`2`		`-<feed xmlns="http://www.w3.org/2005/Atom"><title>Matt Makai</title><link href="http://www.fullstackpython.com/" rel="alternate"></link><link href="http://www.fullstackpython.com/feeds/all.atom.xml" rel="self"></link><id>http://www.fullstackpython.com/</id><updated>2015-11-07T15:14:47Z</updated></feed>`
	`2`	`+<feed xmlns="http://www.w3.org/2005/Atom"><title>Matt Makai</title><link href="http://www.fullstackpython.com/" rel="alternate"></link><link href="http://www.fullstackpython.com/feeds/all.atom.xml" rel="self"></link><id>http://www.fullstackpython.com/</id><updated>2015-11-08T11:25:12Z</updated></feed>`