Common API Security Pitfalls
Explore common API security pitfalls, their root causes, and best practices to protect your APIs. Learn to assess and improve API security for better data protection and user account safety.
Authentication and Authorization in Blazor
Explore Blazor's security model, integrating with Identity Server 4, implementing roles and policies, and adapting for PWA offline mode in this deep dive into authentication and authorization for .NET developers.
Blazor - A New Framework for Browser-Based .NET Apps
Explore Blazor, a framework for building browser-based .NET apps using WebAssembly. Learn its component-based architecture, routing, DI system, and JavaScript interop to create responsive client-side UIs.
Hadoop Safari - Hunting for Vulnerabilities
Explore Hadoop security vulnerabilities and attack vectors in Big Data environments. Learn practical techniques to access data lakes and exploit weaknesses in cluster infrastructures.
Building Identity for an Open Perimeter
Explore Netflix's cloud-first security approach, focusing on identity as the new perimeter through SSO, MFA, and adaptive authentication for a location-independent strategy.
The Secure Metamorphosis - Streaming Logs with Kafka and TLS
Explore Kafka's TLS configuration for secure, high-performance log streaming. Learn best practices, authentication methods, and troubleshooting techniques for a robust messaging system.
Exploiting CSP in WebKit to Break Authentication and Authorization
Uncover a critical WebKit vulnerability that compromises authentication and authorization in web applications, exposing weaknesses in browser security features and their implementation.
Going Auth The Rails On A Crazy Train
Explore common authentication and authorization pitfalls in Rails applications, and learn about a new dynamic analysis tool for penetration testing and securing large-scale Rails projects.
Enforcing Authorization with Cryptography
Cryptographic techniques for secure object referencing: balancing security and performance in authorization systems. Explores alternatives to common solutions, providing benchmarks and practical guidance for developers.
Embrace the Interface
Explore powerful abstraction techniques in Go using interfaces to create modular, lean, and clean code. Learn practical patterns for software craftsmanship and sane abstraction.
Keyhouse - Production-ready Key Management Service in Rust
Explore ByteDance's Keyhouse: a Rust-based key management system using Spire for mutual trust, offering improved performance and security for large-scale data protection.
Build RESTful APIs Easily with Symfony
Learn to build robust RESTful APIs using Symfony, exploring key concepts and tools like FOSRestBundle, JMS serializer, HATEOAS, and Guzzle for efficient API development and communication.
JWT - To Authentication & Beyond
Explore JSON Web Tokens for smart, self-contained authentication in distributed systems. Learn claims, use cases, and best practices for secure and efficient token management.
Ways to Die in Mobile OAuth
Comprehensive analysis of OAuth vulnerabilities in mobile apps, revealing widespread implementation flaws and security risks. Offers insights for developers to enhance mobile OAuth security.
Your GraphQL Field Guide
Comprehensive guide to GraphQL development in Java using GraphQL SPQR, covering types, introspection, optimization, and advanced features like data loaders and schema stitching.
Do You Really Want to Go Fully Micro
Explore the balanced approach to microservices using API gateways, weighing benefits and challenges while showcasing Apache Sling for practical implementation in web development.
Easily Secure Your Front and Back Applications with KeyCloak
Comprehensive guide to implementing robust security across various applications using KeyCloak. Learn to secure Java EE, Node.js, Angular, and mobile apps with features like social login and Single Sign-On.
Authentication and Authorization in a Cloud and Microservice World
Explore single sign-on solutions for cloud and microservice architectures, focusing on SAML and OpenID Connect for Java-based applications. Learn to implement unified authentication across systems.
Insecure Transit - Microservice Security Challenges and Solutions
Explore microservice security challenges and solutions, covering data breaches, risk assessment, credential management, and network communication. Learn practical strategies for building robust, secure architectures.
Building Layers of Defense with Spring Security
Comprehensive guide to implementing multi-layered security in Spring applications, covering authentication, authorization, protection against common web vulnerabilities, and custom security configurations.
Going AUTH the Rails on a Crazy Train
Explore common authentication and authorization pitfalls in Rails applications, and learn about a new dynamic analysis tool for security researchers and developers.