Hacker GitHub

← All repos

OWASP/ASVS

View on GitHub ↗ ★ 3,743 HTML

Application Security Verification Standard

10 mentions on Hacker News by 7 people: 2 stories, 8 comments · first 2015-07-03 · latest 2025-10-22

Mentions per year 10 mentions · busiest year 2015 (2)
20082026
AllStoriesComments NewestTopOldest
  1. …itself which is a lot more high level about how to properly implement cryptography in software: https://github.com/OWASP/ASVS/blob/master/5.0/en/0x20-V11-Cr... For the most common use-cases of cryptography like authentication and secure…
    comment by rubendev · 2025-10-22 · in Evaluating Argon2 adoption and effectiveness in real-world software
  2. …appendix on Cryptography is one of the best and concise resources I know for this kind of thing: https://github.com/OWASP/ASVS/blob/master/5.0/en/0x92-Append...
    comment by rubendev · 2025-10-22 · in Evaluating Argon2 adoption and effectiveness in real-world software
  3. …https://owasp.org/www-project-application-security-verificat... https://github.com/OWASP/ASVS/raw/v4.0.3/4.0/OWASP%20Applica... - "adequately secure" as in NIST SP 800-160 Vol. 1 Rev. 1, 3. System Security Concepts, 3.2. T
    comment by will1james · 2024-09-08 · in The "email is authentication" pattern
  4. …the check. 1. https://twitter.com/troyhunt/status/1674132801837477888 2. See OWASP ASVS 4.0 2.1.7 https://github.com/OWASP/ASVS/blob/master/4.0/en/0x11-V2-Aut...
    comment by adameasterling · 2023-12-04 · in A decade of Have I Been Pwned
  5. …this does not look like the right CWE, but OWASP ASVP 2.2.2 points to this CWE. OWASP ASVP 2.2.2 < https://github.com/OWASP/ASVS/blob/v4.0.3_release/4.0/en/0x1... > 2.2.2 Verify that the use of weak authenticators (such as SMS and email)…
    comment by alipitch · 2022-06-01 · in Dozens of high-traffic websites vulnerable to ‘account pre-hijacking’, study
  6. …this does not look like the right CWE, but OWASP ASVP 3.7.1 points to this CWE. OWASP ASVP 3.7.1 < https://github.com/OWASP/ASVS/blob/v4.0.3_release/4.0/en/0x1... > 3.7.1 Verify the application ensures a full, valid login session or…
    comment by alipitch · 2022-06-01 · in Dozens of high-traffic websites vulnerable to ‘account pre-hijacking’, study
  7. Also in the pages that he links, they explicitly warn against password rotation. >> https://github.com/OWASP/ASVS/blob/master/4.0/en/0x11-V2-Aut... >> Note: Passwords are not to have a maximum lifetime or be subject to password rotation.…
    comment by dikei · 2021-12-16 · in Crypto wallet security as seen by security engineers
  8. ▲ 1
    Ask HN: How do you “verify” app security?
    story by linsomniac · 2019-08-09 · 1 comment
  9. …developer, developer, tester, pen tester, code reviewer, or auditor, please review the draft here: https://github.com/OWASP/ASVS/blob/master/OWASP%20Applicatio... We would also appreciate if you could pass this draft onto software…
    comment by armab · 2015-07-03 · in OWASP Application Security Verification Standard 3.0
  10. ▲ 5
    OWASP Application Security Verification Standard 3.0
    story by armab · 2015-07-03 · 1 comment