Tech article
Security headers on 4,688 small-business websites: 49.7% met none of 7 criteria
No preview is available. Read the original article for the full story.
Hacker News | Sep 24, 2026 | terrybyte
Automated excerpt
For 27 sites, the only leak was an ASP. NET version header. Files inside the reproduction pack. gitignore 1 KB, SHA-256 862263fa1f46c20f0d1e4dac5ffcc75abd55c08211b2c3864c5f8764b9d87793README. md 5 KB, SHA-256 952d56c177116154b3a33c2ee622402c8fc2bc80663868e7a86e7676c9b194edcsp3. py 10 KB, SHA-256 253713b8ec414ce9d93e6e180254d67c3409ffae5e94d5675315ff0e52eadb1fdata-dictionary. md 5 KB, SHA-256 505a93b21da29b205714bc26ac8b6f654c0eb4bfde2de50509fbbcd53dabe2f2data/scan2-2026-09-24-deidentified. jsonl 4. 1 MB, SHA-256 329a1a910b4ae4b005fdd864fe9b5370df7e30bf01fc14b790baf7664d00428ddata/state-counts-2026-09-24. tsv 2 KB, SHA-256 f757ac8d93c5f3c51060202ce51393315f5cb1b8e65fb209d6da899b2d16b03ffinal-tables. md 19 KB, SHA-256 aa71f7dd928b6fbdb02a5ae9f85273f33bb3eb723c1f34ead41858199b2fd25freanalysis4. py 27 KB, SHA-256 06716133a48bb50f860b29644bfc9a7abf1faa2ac0c88530227490b6a0276589requirements. txt 1 KB, SHA-256 7d5f5a94ac1690db632a2f6b2e51aaf74a8ba332ee248aa6299ec6e713120946rubric3. py 7 KB, SHA-256 3bc61fc02e75e45a96147907cfc604579c461bc74dadc6e597b13823cf025517scripts/build-deidentified-dataset. py 5 KB, SHA-256 2e527b7ed3c90acaa0c94d526615200bd67330b06d1f7e9600a30b166c9ece03scripts/sample-from-curlie. py 3 KB, SHA-256 2c19a1af2c5b1dcb94bb897d28937f1f3c3807b2efae584eae47e5444c60ae16scripts/scan. py 9 KB, SHA-256 7ea184650c9373829c51f59bd0144a4f916b33e5f33eb65d5d7c5996d41ed206scripts/scan2. py 9 KB, SHA-256 657b04b409926eb1a4f26829e10174927c31be93ef34ae3f60e1a70542bea711test_csp3. py 7 KB, SHA-256 f0f94db40395f76460616de801d67f1e852ea67da38a63265d0d1ae80cfc0d4btest_golden. py 29 KB, SHA-256 c873c177d04a54485863c998bc3706324058c2da7b4f22eeddaa20f45aa32a26MANIFEST.
Selected automatically from source text; not independently written or fact-checked. Read the original for full context.