The Tangled Web

Modern web applications are built on a tangle of technologies that have been developed over time and then haphazardly pieced together. Every piece of the web application stack, from HTTP requests to browser-side scripts, comes with important yet subtle security consequences. To keep users safe, it is essential for developers to confidently navigate this landscape. In The Tangled Web, Michal Zalewski, one of the world’s top browser security experts, offers a compelling narrative that explains exactly how browsers work and why they’re fundamentally insecure. Rather than dispense simplistic advice on vulnerabilities, Zalewski examines the entire browser security model, revealing weak points and providing crucial information for shoring up web application security. You’ll learn how to: –Perform common but surprisingly complex tasks such as URL parsing and HTML sanitization –Use modern security features like Strict Transport Security, Content Security Policy, and Cross-Origin Resource Sharing –Leverage many variants of the same-origin policy to safely compartmentalize complex web applications and protect user credentials in case of XSS bugs –Build mashups and embed gadgets without getting stung by the tricky frame navigation policy –Embed or host user-supplied content without running into the trap of content sniffing For quick reference, "Security Engineering Cheat Sheets" at the end of each chapter offer ready solutions to problems you’re most likely to encounter. With coverage extending as far as planned HTML5 features, The Tangled Web will help you create secure web applications that stand the test of time.

In the tradition of her acclaimed mother, Ann Rule, author of The Stranger Beside Me, bestselling author Leslie Rule exposes the trail of a sadistic sociopath, identity thief, and killer . . . It was a bleak November in 2012 when Cari Farver, thirty-seven, vanished from Omaha, Nebraska. Texts sent indicated that the hardworking mother had quit her job, abandoned her son, and cut ties with everyone. Cari’s boyfriend, Dave Kroupa, accepted the breakup at face value. Her mother, Nancy Raney, however, had doubts. “I need to hear your voice,” Nancy begged. When the texter refused to speak, Nancy reported Cari missing. While no one saw or spoke to Cari, more than 12,000 sinister emails and texts were sent in her name over the next years. Police believed Dave and his girlfriend, Shanna “Liz” Golyar, when they reported that the missing woman was cyberstalking them. The tormentor was eerily aware of Dave’s every move, knew when Liz visited and threatened the couple. It never occurred to Dave that Cari was a victim—that the real stalker had killed before, and was planning to kill again. Leslie Rule tracks the heart-pounding path to long-awaited justice—from a twisted past to the deadly deception and the high-tech forensics that condemned the killer to prison. “Rule's first true crime book hits the mark.” —Katherine Ramsland, author of Confession of a Serial Killer: The Untold Story of Dennis Rader the BTK Killer “A deft, fascinating true crime story of obsession.” —Library Journal (Starred Review) With a New Update by the Author Includes Reading Group Guide

We all see what the internet does and increasingly don't like it, but do we know how and more importantly who makes it work that way? That's where the real power lays... The internet was supposed to be a thing of revolutions. As that dream curdles, there is no shortage of villains to blame--from tech giants to Russian bot farms. But what if the problem is not an issue of bad actors ruining a good thing? What if the hazards of the internet are built into the system itself? That's what journalist James Ball argues as he takes us to the root of the problem, from the very establishment of the internet's earliest protocols to the cables that wire it together. He shows us how the seemingly abstract and pervasive phenomenon is built on a very real set of materials and rules that are owned, financed, designed and regulated by very real people. In this urgent and necessary book, Ball reveals that the internet is not a neutral force but a massive infrastructure that reflects the society that created it. And making it work for--and not against--us must be an endeavor of the people as well.

Bestselling author James B. Stewart's newsbreaking investigation of our era's most high-profile perjurers, revealing the alarming extent of this national epidemic. Our system of justice rests on a simple proposition: that witnesses will raise their hands and tell the truth. In Tangled Webs, James B. Stewart reveals in vivid detail the consequences of the perjury epidemic that has swept our country, undermining the very foundation of our courts. With many prosecutors, investigators, and participants speaking for the first time, Tangled Webs goes behind the scene of the trials of media and homemaking entrepreneur Martha Stewart; top White House political adviser Lewis "Scooter" Libby; home-run king Barry Bonds; and Wall Street money manager Bernard Madoff. The saga of Martha Stewart's conviction captured the nation, but until now no one has answered the most basic question: Why would Stewart risk prison, put her entire empire in jeopardy, and lie repeatedly to government investigators to save a few hundred thousand dollars in stock gains? Moreover, how exactly was the notoriously meticulous Stewart brought down? Drawing on the accounts of then-deputy attorney general James Comey and U.S. Attorney Patrick Fitzgerald, Stewart sheds new light on the Libby investigation, making clear how far into the White House the Valerie Plame CIA scandal extended, and why Libby took the fall. In San Francisco, Giants home-run king Barry Bonds faces trial due to his testimony before a grand jury investigating the use of illegal steroids in sports. Bonds was warned explicitly that the only crime he faced was perjury. Stewart unlocks the story behind the mounting evidence that he nonetheless lied under oath. Bernie Madoff's Ponzi scheme is infamous, but less well known is how he eluded detection for so long in the face of repeated investigations. Of the four he is the only one who has admitted to lying. The perjury outbreak is symptomatic of a broader breakdown of ethics in American life. It isn't just the judicial system that relies on an honor code: Academia, business, medicine, and government all depend on it. Tangled Webs explores the age-old tensions between greed and justice, self-interest and public interest, loyalty and duty. At a time when Americans seem hungry for moral leadership and clarity, Tangled Webs reaffirms the importance of truth.

As winemaker at Tangle Valley Vineyard, Madison LeGrange relies on science and logic to make the best vintage possible. It’s also how she manages her life. But with her career in its prime, her accountant thinks it’s time she diversifies her income. Not a problem because her favorite café, the Bacon and Biscuit, is up for sale. What she didn’t plan on was the time she’d spend with Clementine, who has her feeling anything but logical. Clementine Monroe loves her job managing the Bacon and Biscuit Café. In fact, after escaping a difficult past, it’s all she has. When Clementine is offered the opportunity to step out from behind the counter and buy the place, her longtime dream is about to come true. That is until it’s snatched out from under her by the very same girl she crushed on in high school. Old habits are hard to break, but Clementine has no plans to forgive Madison anytime soon.

Follow the tangled web of relationships and emotions of the Dark and Penhallow families in this endearing classic, from the author of Anne of Green Gables Aunt Becky's will is proving problematic. She has left the most precious of her possessions, an antique jug, to one of her beneficiaries—but has stipulated that the person may only be identified after a year has elapsed, once all of the family members have striven to live up to Aunt Becky's ideals. But the Dark and the Penhallow families are complex and numerous indeed—over three generations, 60 members of the Penhallow family have married 60 members of the Dark family, creating a tangled web of relationships and emotions. What lengths will family members go to to win the heirloom, and can anyone live up to what Aunt Becky would have wanted? The tumultuous and intertwined personal and love lives of the Penhallows and Darks makes makes for entertaining reading in this cleverly crafted novel, characterized by Montgomery's piercing evaluations of character and skill of description.

Exiled from her home, the beautiful dark elf Liriel Baenre wanders to the surface world with her companion Fyodor. But even far from the dark haunts of Menzoberranzan, she is not safe from the vengeance of her arch-enemy. Even as she and her friend sail the dangerous seas of the Sword Coast, a drow priestess plots a terrible fate for them. And in the depths of the earth, the spider queen Lolth weaves her own webs of terror and treachery. “Elaine is one of my favorite authors. Nobody sets a mood like she does, and her characters never fail to delight.” –Troy Denning, New York Times best-selling author of Star Wars: Fate of the Jedi: Apocalypse

Lady A is the most notorious blackmailer in the city. With just a mask and a gown to disguise her, she sweeps into lavish balls and exclusive events collecting the most valuable currency in 1725 London-secrets. But leading a double life isn't easy. By day Lady A is just a seventeen-year-old girl named Arista who lives in fear of her abusive master, Bones, and passes herself off as a boy to move safely through the squalor of London's slums. When Bones attempts to dispose of his pawn forever, Arista is rescued by the last person she expects: Jonathan Wild, an infamous thief who moves seamlessly between the city's criminal underworld and its most elite circles. Arista partners with Wild on her own terms in order to save enough money to buy passage out of London. Everything changes when she meets Grae Sinclair, the son of a wealthy merchant. Grae has traveled the world, seen the exotic lands Arista has longed to escape to her whole life, and he loves Arista for who she is-not for what she can do for him. Being with Grae gives something Arista something precious that she swore off long ago: hope. He has promised to help Arista escape the life of crime that has claimed her since she was a child. But can you ever truly escape the past?