Will Habr be interested in post(s) about web vulnerabilities?

Question

Information Security

Greetings! If you write not about new attack vectors, as they usually do, but about real cases of various vulnerabilities in different companies, including large ones, sometimes even with little information about how everything is arranged inside them.
The goal is to pay attention to common errors and in what situations they appear'
In general, recommendations / advice for developers, but not in the style of "what is an injection and how can it be filtered", but in the style of "one of the most popular vulnerabilities on websites is a form of recovery password" or, for example, how financial losses are caused due to a simple SMS notification, a description with examples. The PL and the database will be different in the examples, there are many examples.

Answer 1

As a web developer, it's always interesting for me to read about vulnerabilities so that I don't make such mistakes myself.

Answer 2

habrahabr.ru/qa/32857/

Answer 3

A touchy subject, never write about vulnerabilities 0day, until the developer fixes or vulnerabilities that can lead to total hacks and thereby bring losses to many. And so this topic is certainly interesting.

Answer 4

A UFO will come and strongly recommend to rub everything nafig.
So it was with me, after removing the details I was simply downvoted.

Answer 5

If you write not about new attack vectors, as they usually do, but about real cases

It would be interesting to read about new and atypical errors.
It is absolutely not interesting to read about another SQL injection or a missed permission check, which is usually written about.

Answer 6

Although I am not a developer, I have to do pin-testing of servers, it will be very interesting, I fully support it. As already said above, only not SQL injection and XSS.

Answer 7

Yes