How I Created a Security Advisory with GitHub
A few years back, I created portable-color for adding color to shell scripts. Then I deprecated it in favor of a new library, dye, that fixed a number of things that bothered me about portable-color....
View ArticleKeep Your Workflow Safe with MCP
The recent rise of AI agents has been accelerated by the use of model context protocol (MCP) servers. MCP has enabled complex integrations into AI workflows. It feels like every major service provider...
View ArticleUse These Security, Privacy, and Safety Essentials for LLM Integration
Demand for AI integration is growing at an incredible pace. Large Language Models (LLMs) like GPT-4, ChatGPT, or other AI tools promise faster workflows, more insights, and improved user experiences....
View ArticleEncryption for Your App – Best Practices for Getting Started
Adding data protection to a project can be a daunting task. An ocean of information goes to every level of depth, and it can be tough even to know where to start. While I’m not an expert on security or...
View Article3 Simple Security Tips for Your Web App
Are you building your web applications with security in mind? I know that with all the things developers have to juggle, it’s easy to overlook security features. For one, web security is a whole...
View ArticleThink Like a Hacker: Pitfalls to Avoid When Writing an API
APIs are the backbone of modern applications, enabling seamless communication between different software systems. However, they also present attractive targets for malicious actors. It’s essential to...
View ArticleClik here to view.
Passkeys and the Future of Web Authentication
Over the years, web authentication has undergone many evolutions. From the days of HTTP basic auth to the modern practices of multi-factor authentication and OAuth, software professionals are...
View ArticleUse Docker Scout to Identify Security Vulnerabilities
Docker recently released Docker Scout, a tool for scanning images for security vulnerabilities. I tried it out while working on a task to improve my project’s security score and found it very useful....
View ArticleFree Ways to Protect Your Personal Data on the Web
With the ever-expanding state of the internet, it can be hard for the average person to track and prevent personal data breaches. A technical knowledge barrier shouldn’t prevent someone from keeping...
View ArticleHow to Add Basic Security Checks to Your Application
The security of an application is a highly important aspect of software development. But, sometimes it gets buried as more urgent (or just flashy and user-facing, if we’re being honest) tasks come up....
View ArticleSecuring an API Gateway Using AWS IAM
AWS API Gateway provides a convenient “front door” to other services, which can be accessed directly by users or by other parts of your own infrastructure. For user access, AWS Cognito is a good choice...
View ArticleAttach Elastic Beanstalk to a Route 53 Subdomain Securely with ACM
In this post, I’ll show you how to securely route traffic to an Elastic Beanstalk environment with a subdomain. For the sake of streamlining things, I’ll be explaining the whole process via the AWS...
View ArticleClik here to view.
Securely Erase Hard Drives in 6 Easy Steps with nwipe
Recently, I had a drive failure on my ZFS pool. Thankfully no data was lost because I am using two parity drives. The drive is still under warranty, and I will be sending it back to the manufacturer...
View ArticleLearn the Fascinating History and Uses of the Public Suffix List
I recently worked on a feature that led me to learn about an interesting piece of the modern internet backbone — the Public Suffix List (PSL). Knowing more about the PSL isn’t going to make you a 10x...
View ArticleClik here to view.
Send Secure Emails with Gmail’s Confidential Mode
Earlier this year I switched jobs. After the interview process was over, I needed to send over my personal information for a background check. After that, I’d be all set! Sweet! Wait… how DO I send my...
View ArticleYou Should Be Using a Reentrancy Guard in Your Smart Contracts
A reentrancy attack capitalizes on unprotected external calls and can be a particularly devastating exploit that drains all of the funds in your contract if not handled properly. At its simplest,...
View ArticleNot Your Keys, Not Your Crypto
So, you’re seriously thinking about buying some cryptocurrency. Great! Maybe you haven’t pulled the trigger yet because you have security concerns due to events like Mt. Gox. This post will explain...
View Article
![[QLD, NSW, VIC] Samsung 65](http://files.ozbargain.com.au/n/31/978831l.jpg?h=8d64f0c6)
