Race Conditions in JavaScript Apps
Explore common race conditions in JavaScript and learn strategies to prevent them in real-time collaborative applications, based on practical experience.
Container Networking Untangling Services Meshes and SDNs
Explore service meshes and SDNs in container networking, comparing Istio, Linkerd, Conduit, and OpenContrail for Kubernetes integration, scalability, routing, and security policy enforcement.
Dishonest Software - Fighting Back Against the Industry Norms
Explore ethical software development, combating industry norms that compromise data privacy. Learn to advocate for user rights and build honest tools with compelling arguments for product leadership.
OAuth 2.0 Deconstructed
Comprehensive deconstruction of OAuth 2.0, exploring its intricacies, implementation strategies, and best practices for secure authentication in modern web applications.
Open the Gate a Little - Strategies to Protect and Share Data
Strategies for balancing data protection and sharing in software development, focusing on HIPAA compliance, data anonymization techniques, and secure access methods.
Who Are You? Delegation, Federation, Assertions and Claims
Explore protocols for delegating identity management, including SAML, OAuth, and OpenID Connect. Learn about single sign-on, authentication issues, and considerations for implementing these solutions.
Parsec - A New Platform Abstraction for Security
Explore Parsec, an open-source platform for standardized security interfaces. Learn about its API, architecture, and integration with hardware-backed security features across platforms.
Keyhouse - Production-ready Key Management Service in Rust
Explore ByteDance's Keyhouse: a Rust-based key management system using Spire for mutual trust, offering improved performance and security for large-scale data protection.
DevSecOps in the US Air Force
Explore how the US Air Force leverages DevSecOps, Kubernetes, and Istio for digital modernization and rapid innovation, demonstrating value delivery strategies applicable to any organization.
Apache Teaclave - An Open Source Universal Secure Computing Platform in Rust
Explore Apache Teaclave, a Rust-based secure computing platform using Intel SGX for privacy-sensitive data processing, supporting various tasks like machine learning and multi-party computation.
Securing the Software Supply Chain with the In-toto and SPIRE Projects
Explore securing software supply chains using in-toto and SPIRE projects. Learn about cryptographic attestation, automated certificate issuance, and building trust in software releases.
Outgrowing Terraform
Explore Crossplane as an alternative to Terraform, addressing challenges in scaling, drift, versioning, access control, and discoverability for large-scale infrastructure management.
Crawl, Walk, Run, Fly - Introduction to Adopting a Service Mesh in Your Organization
Learn practical guidance for adopting service mesh technology in your organization, exploring top use cases, understanding value/complexity tradeoffs, and gaining insights for successful implementation.
Service Identity - The Key to Zero Trust with Service Mesh
Explore service identity in Zero Trust security with service mesh, covering SPIFFE, mTLS, and enterprise PKI integration for enhanced workload protection and seamless communication.
Service Mesh Extensibility Explained
Explore service mesh extensibility, focusing on enhancing sidecars, gateways, control planes, and integrating external systems. Learn to leverage Istio for advanced mesh capabilities.
Multicluster Service Mesh
Explore multicluster service mesh complexities, solutions for managing hundreds of clusters, and the role of management planes in cloud-native architectures and microservices.
Securing Content Distribution with The Update Framework - TUF
Explore The Update Framework (TUF) for securing content distribution. Learn about its architecture, attack prevention, and real-world applications in cloud ecosystems and software supply chains.
Compliance the Easy Way - Zero-conf mTLS for Dev and Smooth Day-2 for Ops
Explore zero-conf mTLS implementation with Linkerd for secure, observable, and reliable application infrastructure in financial contexts, including insights on integration and long-term operations.
How People Got Caught
Explore real-world cybersecurity incidents and the mistakes that led to perpetrators being caught, offering valuable insights for both defenders and ethical hackers.
The Fox is in the Henhouse - Detecting a Breach Before the Damage is Done
Detect network breaches early using visibility tools, data analysis, and real-time decision-making. Learn to choose and integrate security solutions for proactive threat response.
Parasyste - In Search of a Host
Explore USB gadget emulation for penetration testing, including setup, internet connection sharing, file hiding, and SSH scripting techniques.